$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: KNiX6uw2EAQ5asydCcwt/8y3V0kzG67oMwwH7jqHoW4= Subject key identifier: 7E:F6:5C:CC:AB:BA:15:78:4F:FF:12:60:F4:1E:FE:67:AF:F3:52:52 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0E2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0E15 Signing time: Fri 22 Aug 2025 17:58:14 +0000 Manifest this update: Fri 22 Aug 2025 17:58:13 +0000 Manifest next update: Fri 29 Aug 2025 17:58:13 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: a+mMVLzk+hMElDcCKgbS4ou0TUg6IKaE8gCGiwUq0j4=) 2: 6523917E508911F0A97F9A28C4F9AE02.roa (hash: K4wA0GoKvzqerl9jOReA1zKoYkvfC5BqWgsjQH9G7Wo=) 3: B2A2CFCEF56C11EE90E38718C4F9AE02.roa (hash: kkPAtmDoelVoYFE7Hbje8wUj2mrPDtwi5yj75S4iHxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3627 (0xe2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Aug 22 17:58:13 2025 GMT Not After : Aug 29 17:58:13 2025 GMT Subject: CN=68a8afb5-ed07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:4e:d5:88:1a:3b:b2:e0:ca:20:ac:a3:00: f7:64:70:db:27:51:16:4e:0e:7f:7f:81:d8:af:2c: a4:88:d5:06:f2:2d:1c:6f:e0:ee:40:73:07:77:f2: b7:7c:2d:b7:33:e2:18:8c:52:58:bc:bc:20:57:6a: ce:c2:99:72:97:c5:b4:18:42:1b:8f:cd:c6:1b:6e: d2:5c:36:20:d6:a3:df:66:83:e4:25:cc:55:5c:dd: 33:29:13:17:75:61:2c:c6:c3:5b:ed:d0:f6:a1:5e: 07:5e:f1:93:b9:09:48:a5:75:30:d6:a1:ee:3d:ae: 1c:cf:15:d9:9d:48:85:46:36:ea:0d:a8:c1:0f:ad: 31:35:b2:fd:93:a7:2a:3e:29:20:a1:02:85:04:78: b7:dc:35:26:2c:5c:14:59:54:14:f6:57:eb:21:48: 0c:63:06:01:01:5a:4e:87:a7:a5:80:20:90:6a:2b: b1:27:b0:1d:7e:f3:e1:dd:bf:e3:b5:79:bc:9c:97: 46:5d:48:e0:5c:c0:50:df:7d:23:d2:0e:f9:0d:e0: ea:23:e7:90:6f:5e:cb:07:62:9b:29:e3:b5:df:bf: 46:7c:06:0e:7f:1a:9a:7c:82:a3:3e:d7:8b:be:ba: 12:30:66:eb:55:70:83:dd:ed:7f:07:35:a4:f4:8e: d3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F6:5C:CC:AB:BA:15:78:4F:FF:12:60:F4:1E:FE:67:AF:F3:52:52 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:57:15:51:be:49:e7:a1:73:db:c3:5f:97:ba:7c:09:ab:7e: 6e:fd:32:3c:a5:73:21:0b:7f:f7:91:4d:e2:9d:68:d1:39:3d: a3:33:a1:59:1d:e0:22:6b:29:e2:9c:73:0e:20:4d:a6:60:6f: 95:e6:c6:99:ae:6d:82:cc:8a:07:4c:1f:5a:d3:42:96:fc:34: 31:9a:b8:e0:8c:e8:e8:58:f3:5f:d4:60:37:11:80:99:bf:4f: 0e:fd:ba:63:ae:52:5f:00:ec:2f:4a:b9:5a:e9:9e:ef:c4:78: bd:c2:d4:32:f5:a1:f7:08:78:5d:ef:f9:d1:38:35:df:29:52: d9:e8:f8:43:fe:8f:9e:f7:61:b3:80:de:4f:3c:46:dc:5b:50: 4c:a5:a9:e0:41:e3:8f:ba:fc:56:bc:2a:c2:42:75:9b:de:7f: 56:2a:94:96:90:e7:ac:9f:3d:70:23:65:ee:79:85:22:a2:d8: 1b:ee:06:d1:6d:48:ae:e0:80:8c:11:b9:f3:86:9e:22:f9:21: c4:b7:04:6c:4e:aa:83:71:0c:20:81:8e:50:b8:8e:05:5f:88: de:65:72:ea:e5:de:0d:fb:b3:be:b4:71:20:21:1b:7c:a3:e4: 0c:46:21:58:70:bd:94:f9:72:c5:7c:74:24:04:a6:4d:31:24: cb:61:0a:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUwODIyMTc1ODEzWhcNMjUwODI5MTc1ODEzWjAYMRYwFAYD VQQDEw02OGE4YWZiNS1lZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtP1O1YgaO7LgyiCsowD3ZHDbJ1EWTg5/f4HYryykiNUG8i0cb+DuQHMHd/K3 fC23M+IYjFJYvLwgV2rOwplyl8W0GEIbj83GG27SXDYg1qPfZoPkJcxVXN0zKRMX dWEsxsNb7dD2oV4HXvGTuQlIpXUw1qHuPa4czxXZnUiFRjbqDajBD60xNbL9k6cq PikgoQKFBHi33DUmLFwUWVQU9lfrIUgMYwYBAVpOh6elgCCQaiuxJ7AdfvPh3b/j tXm8nJdGXUjgXMBQ330j0g75DeDqI+eQb17LB2KbKeO1379GfAYOfxqafIKjPteL vroSMGbrVXCD3e1/BzWk9I7TyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH72XMyr uhV4T/8SYPQe/mev81JSMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiVxVRvknnoXPbw1+XunwJq35u/TI8pXMhC3/3kU3inWjROT2jM6FZ HeAiayninHMOIE2mYG+V5saZrm2CzIoHTB9a00KW/DQxmrjgjOjoWPNf1GA3EYCZ v08O/bpjrlJfAOwvSrla6Z7vxHi9wtQy9aH3CHhd7/nRODXfKVLZ6PhD/o+e92Gz gN5PPEbcW1BMpangQeOPuvxWvCrCQnWb3n9WKpSWkOesnz1wI2XueYUiotgb7gbR bUiu4ICMEbnzhp4i+SHEtwRsTqqDcQwggY5QuI4FX4jeZXLq5d4N+7O+tHEgIRt8 o+QMRiFYcL2U+XLFfHQkBKZNMSTLYQpU -----END CERTIFICATE-----Generated at Sat Aug 23 09:33:11 2025 by rpki-client