$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json) Hash identifier: gTTaLqUbHTlFFodsA8OuDc3AvxiWxPGVHmJG1Y1Kwmc= Subject key identifier: 46:96:65:EB:D1:F2:AF:9F:25:D2:EC:D9:89:FC:7E:CE:02:36:07:05 Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft Manifest number: 018D Signing time: Sat 23 Aug 2025 03:41:16 +0000 Manifest this update: Sat 23 Aug 2025 03:41:15 +0000 Manifest next update: Sat 30 Aug 2025 03:41:15 +0000 Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: 4/t1g0b7xG3ype+M/P3jgjVvoiOkYxDTzqzjA4epSz0=) 2: D7B77EDA319411F08F477C2AC4F9AE02.roa (hash: C5cqhk4TJTYY2C3i+V15FW2BpXNmnBODb2L/J1hOJq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Validity Not Before: Aug 23 03:41:15 2025 GMT Not After : Aug 30 03:41:15 2025 GMT Subject: CN=68a9385c-fd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:37:b4:7c:9b:aa:b5:7a:94:84:66:fa:d6:bc: 04:54:a5:6f:93:92:d7:a9:a6:97:8e:2d:f8:66:52: b3:e2:62:02:16:5e:b1:e4:28:ed:54:a8:3b:09:61: 7e:0a:82:49:30:92:dc:d4:6a:42:13:aa:af:96:52: 24:71:ac:57:7d:7c:a0:63:59:93:7d:f9:10:5f:fe: 5b:20:92:9c:05:82:f2:4a:18:6e:cf:ec:37:c0:1a: bd:06:8e:31:c9:41:8a:0c:19:8c:f3:67:8c:4d:c6: f8:df:6b:dc:c6:c5:30:0c:7c:0a:4f:05:c3:3d:ce: 24:96:4a:d7:b8:aa:51:88:7d:82:85:42:2a:03:37: 2a:94:73:30:3d:44:3d:6d:7f:c7:94:47:08:71:a2: f2:c6:ca:7a:bc:65:56:f5:0d:05:22:c5:37:0d:d1: 22:58:e1:aa:53:19:37:4f:40:86:55:dc:89:86:b4: e4:d0:95:3e:6a:59:60:b1:1d:d3:66:94:d6:87:63: 14:73:58:69:c6:dc:08:c1:4c:36:4e:9d:30:f8:95: c2:aa:e0:8e:4e:61:ed:a1:46:54:3f:4c:f1:b1:b7: 5b:e2:f6:2b:5d:60:f3:e2:d7:2e:22:fe:b9:89:a2: 60:29:9b:0e:f4:b9:ee:b9:78:37:25:7b:7c:f0:82: 9c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:96:65:EB:D1:F2:AF:9F:25:D2:EC:D9:89:FC:7E:CE:02:36:07:05 X509v3 Authority Key Identifier: keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:9a:b9:87:1d:e2:c6:35:9c:2f:28:1a:e1:10:c8:b9:20:0c: e4:0c:2f:f0:f9:1b:02:01:ce:ec:6c:f6:07:8b:1f:a7:97:65: b6:b0:36:48:76:47:6c:7c:61:49:81:bd:01:1a:c2:88:4d:d4: 33:68:0d:40:fa:db:32:3a:40:fe:e0:3b:62:e0:bb:07:c2:a2: 9e:c3:fa:8d:75:4f:ce:cb:72:24:37:dd:19:da:b6:a5:87:4c: df:4b:5a:45:eb:96:6a:ad:76:7b:e2:e6:a7:14:08:5a:57:2a: ae:16:62:f1:cc:57:dc:7e:a2:29:fc:5c:10:a8:56:ad:f8:e8: 76:b3:f9:6b:1b:5d:86:24:04:fe:81:cf:29:90:52:10:cc:3b: 99:78:03:18:62:3c:7a:54:38:bd:a5:43:fd:ed:44:09:53:92: 2a:ec:4e:9f:88:f0:77:8d:44:c5:a5:b6:3f:e7:47:4e:dd:75: e0:27:da:2b:68:a0:00:60:25:c8:2c:72:64:1b:ed:e8:d5:7f: 63:48:6d:e2:82:18:c0:5e:ce:6c:6c:5c:c6:08:67:52:0d:cf: 07:1b:87:bd:0c:48:f5:eb:ab:20:f0:60:19:3f:44:f0:6a:6d: a5:e4:27:01:73:e7:85:bb:bf:09:a4:ae:29:ad:45:eb:35:5a: 2c:2b:86:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzRjAxMTAvBgNVBAUTKEZFMDVFRkI3MDEyNUQ1MjA0NzZGNjNCQzYwOUY1NTRE QzQ5QUM1OUMwHhcNMjUwODIzMDM0MTE1WhcNMjUwODMwMDM0MTE1WjAYMRYwFAYD VQQDEw02OGE5Mzg1Yy1mZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4je0fJuqtXqUhGb61rwEVKVvk5LXqaaXji34ZlKz4mICFl6x5CjtVKg7CWF+ CoJJMJLc1GpCE6qvllIkcaxXfXygY1mTffkQX/5bIJKcBYLyShhuz+w3wBq9Bo4x yUGKDBmM82eMTcb432vcxsUwDHwKTwXDPc4klkrXuKpRiH2ChUIqAzcqlHMwPUQ9 bX/HlEcIcaLyxsp6vGVW9Q0FIsU3DdEiWOGqUxk3T0CGVdyJhrTk0JU+allgsR3T ZpTWh2MUc1hpxtwIwUw2Tp0w+JXCquCOTmHtoUZUP0zxsbdb4vYrXWDz4tcuIv65 iaJgKZsO9LnuuXg3JXt88IKc0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaWZevR 8q+fJdLs2Yn8fs4CNgcFMB8GA1UdIwQYMBaAFP4F77cBJdUgR29jvGCfVU3EmsWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNGMC9GM0MyQTkyMjJC OEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFTQkhiMk84WUo5VlRjU2F4 WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nWHZ0d0VsMVNCSGIyTzhZSjlWVGNTYXhady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNGMC9GM0MyQTkyMjJCOEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFT QkhiMk84WUo5VlRjU2F4WncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrmrmHHeLGNZwvKBrhEMi5IAzkDC/w+RsCAc7sbPYHix+nl2W2sDZI dkdsfGFJgb0BGsKITdQzaA1A+tsyOkD+4Dti4LsHwqKew/qNdU/Oy3IkN90Z2ral h0zfS1pF65ZqrXZ74uanFAhaVyquFmLxzFfcfqIp/FwQqFat+Oh2s/lrG12GJAT+ gc8pkFIQzDuZeAMYYjx6VDi9pUP97UQJU5Iq7E6fiPB3jUTFpbY/50dO3XXgJ9or aKAAYCXILHJkG+3o1X9jSG3ighjAXs5sbFzGCGdSDc8HG4e9DEj166sg8GAZP0Tw am2l5CcBc+eFu78JpK4prUXrNVosK4Yk -----END CERTIFICATE-----Generated at Sat Aug 23 10:41:25 2025 by rpki-client