$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft File: i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft (raw, json) Hash identifier: n3DKB7lvhfIkRb6mkCif5BF2XC/Dmyy8dyN4qVWlZoY= Subject key identifier: 09:39:BF:AA:CB:56:B3:1E:C6:0A:0E:84:90:37:77:EA:47:64:D6:16 Authority key identifier: 8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90 Certificate issuer: /CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290 Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft Manifest number: 14EC Signing time: Fri 22 Aug 2025 18:43:24 +0000 Manifest this update: Fri 22 Aug 2025 18:43:24 +0000 Manifest next update: Fri 29 Aug 2025 18:43:24 +0000 Files and hashes: 1: i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl (hash: 1UlTHejeY2/iIjXz1LZKie2oMrLEYNEoZxelnOLKwSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD04, serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290 Validity Not Before: Aug 22 18:43:24 2025 GMT Not After : Aug 29 18:43:24 2025 GMT Subject: CN=68a8ba4c-6680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:1b:3b:24:99:a7:fd:f8:22:c3:9e:e5:ed: 67:0c:51:27:6c:36:65:ee:6b:dc:65:5c:fa:2f:0b: 6a:5a:f0:f8:36:48:ec:88:3e:16:af:b1:87:ae:da: d7:14:ca:f8:a2:40:db:df:1d:1c:58:60:57:26:88: ab:f9:37:c2:e9:10:3d:5f:e8:bd:4e:d1:67:bf:92: 8a:ec:88:9f:02:73:71:9f:71:3f:35:fa:bf:44:7a: 26:48:24:84:ca:ae:37:ee:59:11:6f:29:a3:50:1a: d6:d6:61:16:ea:64:81:15:8d:f7:dc:eb:60:0f:52: 5b:77:cc:69:e0:0a:db:67:aa:71:cd:30:b9:af:bb: ed:e4:48:e2:b1:79:4f:2d:46:bf:67:d6:8b:6a:31: 61:68:20:b4:2a:74:5d:fd:1c:91:3e:b3:5c:77:3f: 98:6d:a9:30:b1:1c:fb:9e:0d:7b:97:77:96:5c:2a: 81:26:7a:63:4c:c7:51:5f:f3:9e:c7:d1:9e:94:9a: 38:28:8e:45:45:a6:11:b6:e6:a0:0f:9a:c0:9c:c8: 7a:49:ca:25:0b:a1:85:84:ba:f1:6b:95:10:40:7a: 33:55:d8:9f:80:9f:a6:a8:4d:7e:8c:40:55:12:71: b4:45:c3:ea:2d:82:95:90:1d:20:8e:3c:61:88:31: 2e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:39:BF:AA:CB:56:B3:1E:C6:0A:0E:84:90:37:77:EA:47:64:D6:16 X509v3 Authority Key Identifier: keyid:8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:08:2d:8b:ca:a4:d4:2b:70:d7:4e:b3:3c:82:97:0d:89:48: fa:9e:be:0c:3a:a0:d4:28:7c:41:d0:b8:cf:d3:03:65:9e:b2: 61:63:4e:01:fd:5b:2d:62:f9:90:c5:5a:e5:7f:51:d8:c6:36: ac:e7:76:89:f7:4d:18:f9:e9:85:7a:fc:91:cb:89:d6:1e:3b: e7:35:60:72:d4:55:a2:6f:c9:6d:92:ec:1f:02:70:7b:67:37: 94:82:1a:43:56:f7:91:a9:8c:dc:fd:80:a2:26:2c:f2:73:f1: 96:fb:ba:be:7e:7d:93:d9:05:af:d2:54:da:f3:db:12:66:84: 2d:2b:6e:fd:03:01:a0:9b:13:31:35:b2:00:28:aa:b5:da:32: 31:aa:fc:d8:3d:c5:cf:03:3b:10:71:e1:9b:64:e3:77:8e:aa: 50:40:8e:a0:3b:4b:c9:82:31:b3:e2:21:f7:2a:84:f2:ef:2d: 33:c1:af:a4:43:eb:a5:10:da:fd:14:24:94:e6:39:ca:08:94: b7:41:ae:83:2f:ee:99:cd:3f:f8:0f:1d:c8:6b:c6:ff:a8:96: 62:f6:cb:dc:88:e2:c3:5c:35:cf:f0:71:b2:39:88:2d:d6:66: 4b:ba:0d:a2:ce:8c:56:ae:cd:9c:7d:c5:a9:95:b9:c7:8b:fb: 0d:36:4a:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEMDQxMTAvBgNVBAUTKDhCRTlEOTJFM0IzMUQ0MENBMzNCM0JCNjI5NDc0MzJF ODQ1NkQyOTAwHhcNMjUwODIyMTg0MzI0WhcNMjUwODI5MTg0MzI0WjAYMRYwFAYD VQQDEw02OGE4YmE0Yy02NjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXcbOySZp/34IsOe5e1nDFEnbDZl7mvcZVz6LwtqWvD4NkjsiD4Wr7GHrtrX FMr4okDb3x0cWGBXJoir+TfC6RA9X+i9TtFnv5KK7IifAnNxn3E/Nfq/RHomSCSE yq437lkRbymjUBrW1mEW6mSBFY333OtgD1Jbd8xp4ArbZ6pxzTC5r7vt5EjisXlP LUa/Z9aLajFhaCC0KnRd/RyRPrNcdz+YbakwsRz7ng17l3eWXCqBJnpjTMdRX/Oe x9GelJo4KI5FRaYRtuagD5rAnMh6ScolC6GFhLrxa5UQQHozVdifgJ+mqE1+jEBV EnG0RcPqLYKVkB0gjjxhiDEuuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAk5v6rL VrMexgoOhJA3d+pHZNYWMB8GA1UdIwQYMBaAFIvp2S47MdQMozs7tilHQy6EVtKQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQwNC8wQUJCRjQ3MjBE RjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFBeWpPenUyS1VkRExvUlcw cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktblpManN4MUF5ak96dTJLVWRETG9SVzBwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQwNC8wQUJCRjQ3MjBERjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFB eWpPenUyS1VkRExvUlcwcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiCC2LyqTUK3DXTrM8gpcNiUj6nr4MOqDUKHxB0LjP0wNlnrJhY04B /VstYvmQxVrlf1HYxjas53aJ900Y+emFevyRy4nWHjvnNWBy1FWib8ltkuwfAnB7 ZzeUghpDVveRqYzc/YCiJizyc/GW+7q+fn2T2QWv0lTa89sSZoQtK279AwGgmxMx NbIAKKq12jIxqvzYPcXPAzsQceGbZON3jqpQQI6gO0vJgjGz4iH3KoTy7y0zwa+k Q+ulENr9FCSU5jnKCJS3Qa6DL+6ZzT/4Dx3Ia8b/qJZi9svciOLDXDXP8HGyOYgt 1mZLug2izoxWrs2cfcWplbnHi/sNNkqr -----END CERTIFICATE-----Generated at Sun Aug 24 02:34:35 2025 by rpki-client