$ rpki-client -vvf rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft File: AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft (raw, json) Hash identifier: 7QEhTk0QE/BuhTdk+VJmXjrNP+4E1Fqq2V85bMscBfk= Subject key identifier: 02:A7:F7:AA:C1:8E:26:56:A4:55:50:23:40:F7:F1:87:D9:CC:4C:71 Authority key identifier: 02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12 Certificate issuer: /CN=A919188A/serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft Manifest number: 01DC Signing time: Sat 23 Aug 2025 02:49:44 +0000 Manifest this update: Sat 23 Aug 2025 02:49:43 +0000 Manifest next update: Sat 30 Aug 2025 02:49:43 +0000 Files and hashes: 1: AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl (hash: NPLbRFlzEasQAnj2dvPE4ocsV+MLEaEo2+PvuMaqb5w=) 2: 12AE9E92AA9711EDAAEB8345C4F9AE02.roa (hash: k3NlozvnlaqSreMbUh2TfHEQDX5Xr4Ukgk/pUkd38rY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919188A, serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12 Validity Not Before: Aug 23 02:49:43 2025 GMT Not After : Aug 30 02:49:43 2025 GMT Subject: CN=68a92c47-d99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:93:00:c5:a2:5d:6d:88:96:8e:0f:31:97:be: eb:11:5d:01:b6:3b:e9:24:ef:2a:4f:f6:4f:be:21: 62:df:ea:87:1d:fd:92:ad:e7:c5:a7:bf:7e:20:cc: 99:de:dc:c2:db:d1:5b:f3:fe:06:59:84:3f:d4:e7: 11:c9:d6:50:a6:33:09:6b:e4:d0:f8:f1:2c:6d:c5: b1:7d:67:a4:c4:1e:62:1d:a7:a9:37:93:26:0b:1b: df:53:0b:c9:07:96:09:55:11:db:15:4c:7a:2a:e6: 38:17:00:9e:96:4f:c5:73:89:e0:7d:fc:40:59:ed: c4:57:d0:2e:9f:cf:fa:b1:05:3a:47:91:8c:00:d7: 0e:b8:22:94:f8:73:0c:bb:5b:ee:da:b7:4c:9e:cf: e9:c0:dd:8a:2c:0e:a1:28:96:03:ea:c7:f7:0c:10: 02:ac:d0:ea:4e:e3:35:83:1d:80:ec:55:88:e5:a9: 27:f4:09:65:d3:c3:b0:27:82:b1:b8:75:41:03:db: 76:4d:c0:37:06:6e:85:f5:1a:57:ad:a3:7f:66:23: 08:c0:d9:ae:77:9e:1a:0c:06:e7:a4:9e:07:c3:fa: 8a:1c:fa:d1:c6:9d:d2:33:9b:0c:b9:cc:d3:f0:96: 56:8e:9c:df:4c:5d:ab:68:fb:16:96:06:73:81:ce: 47:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A7:F7:AA:C1:8E:26:56:A4:55:50:23:40:F7:F1:87:D9:CC:4C:71 X509v3 Authority Key Identifier: keyid:02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:61:f0:6b:c5:51:4b:97:5a:d4:f4:21:4e:a1:b7:92:40:23: 7e:80:15:78:dd:5e:2d:1a:30:34:b4:df:1e:43:9a:6a:64:95: 76:32:81:dd:31:c5:45:35:24:82:52:fb:e3:77:f9:12:63:0e: 41:1c:04:16:09:b4:e4:21:61:ea:c5:08:63:cc:7a:3d:69:25: 88:a4:c4:8b:57:12:55:f4:0a:a5:4e:c9:46:05:00:ef:a9:28: f8:99:57:a4:a3:8f:ee:87:3d:92:b3:59:75:49:cd:de:85:bb: 90:bd:6e:71:fc:57:86:3b:4c:4f:86:38:79:a5:06:98:8b:77: 5a:0a:ba:c4:af:32:49:69:f7:d1:3e:b5:bb:3c:3f:ba:ec:23: c8:fc:56:a1:81:9f:0e:d6:d3:ba:ef:4e:7a:4a:cb:bf:e6:26: 28:1d:92:42:d3:48:be:f7:26:40:07:01:3f:47:6d:8b:61:4c: f8:e5:b6:e9:b4:ea:e6:64:51:4c:18:d1:d9:1c:b8:33:ab:60: 70:3e:6b:c1:5e:23:14:6a:cf:23:35:c4:cb:ea:d9:d3:d9:17: c6:63:cf:62:3a:fe:16:1f:34:fb:4f:43:2f:f9:b7:01:d1:16: df:17:ba:72:dd:64:cc:0a:4f:35:b0:8f:f4:c2:6a:2b:30:68: df:e5:13:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4OEExMTAvBgNVBAUTKDAyODExQzMxRDUwQzkxRkZGRDVFREE2OEI5RUY4MUMz RjlFOUZCMTIwHhcNMjUwODIzMDI0OTQzWhcNMjUwODMwMDI0OTQzWjAYMRYwFAYD VQQDEw02OGE5MmM0Ny1kOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pMAxaJdbYiWjg8xl77rEV0BtjvpJO8qT/ZPviFi3+qHHf2SrefFp79+IMyZ 3tzC29Fb8/4GWYQ/1OcRydZQpjMJa+TQ+PEsbcWxfWekxB5iHaepN5MmCxvfUwvJ B5YJVRHbFUx6KuY4FwCelk/Fc4ngffxAWe3EV9Aun8/6sQU6R5GMANcOuCKU+HMM u1vu2rdMns/pwN2KLA6hKJYD6sf3DBACrNDqTuM1gx2A7FWI5akn9All08OwJ4Kx uHVBA9t2TcA3Bm6F9RpXraN/ZiMIwNmud54aDAbnpJ4Hw/qKHPrRxp3SM5sMuczT 8JZWjpzfTF2raPsWlgZzgc5H8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKn96rB jiZWpFVQI0D38YfZzExxMB8GA1UdIwQYMBaAFAKBHDHVDJH//V7aaLnvgcP56fsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4QS9DOTYzNTdDQUFB OTQxMUVEQjA3NzRGNDVDNEY5QUUwMi9Bb0VjTWRVTWtmXzlYdHBvdWUtQndfbnAt eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FvRWNNZFVNa2ZfOVh0cG91ZS1Cd19ucC14SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4QS9DOTYzNTdDQUFBOTQxMUVEQjA3NzRGNDVDNEY5QUUwMi9Bb0VjTWRVTWtm XzlYdHBvdWUtQndfbnAteEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7YfBrxVFLl1rU9CFOobeSQCN+gBV43V4tGjA0tN8eQ5pqZJV2MoHd McVFNSSCUvvjd/kSYw5BHAQWCbTkIWHqxQhjzHo9aSWIpMSLVxJV9AqlTslGBQDv qSj4mVeko4/uhz2Ss1l1Sc3ehbuQvW5x/FeGO0xPhjh5pQaYi3daCrrErzJJaffR PrW7PD+67CPI/FahgZ8O1tO67056Ssu/5iYoHZJC00i+9yZABwE/R22LYUz45bbp tOrmZFFMGNHZHLgzq2BwPmvBXiMUas8jNcTL6tnT2RfGY89iOv4WHzT7T0Mv+bcB 0RbfF7py3WTMCk81sI/0wmorMGjf5RNG -----END CERTIFICATE-----Generated at Sat Aug 23 15:52:14 2025 by rpki-client