$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json) Hash identifier: wgznPvg+B5bIVSebtB6BfzGUZAKCYK66JDrSR1ravDI= Subject key identifier: 8B:6C:F8:58:4D:37:49:81:43:3B:47:82:D4:D4:DD:93:44:6E:C1:1C Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft Manifest number: 2F Signing time: Sat 09 Aug 2025 08:13:33 +0000 Manifest this update: Sat 09 Aug 2025 08:13:33 +0000 Manifest next update: Sat 16 Aug 2025 08:13:33 +0000 Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: G7X/Gxv+8BrmBD92/C1qBPxFsKNERYkzJsmDB61j18k=) 2: C100F8FE385D11F0B165166CC4F9AE02.roa (hash: X4yO+2uZWy3hhNHPg2Botaoo1uuwNwgNw2Z5oY+nYVw=) 3: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: Q/Q2sUKmgFU8L5pYFoikcLW7y4sJztj/yUCaAVnv9mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Validity Not Before: Aug 9 08:13:33 2025 GMT Not After : Aug 16 08:13:33 2025 GMT Subject: CN=6897032d-f516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:d9:6f:ed:5f:2c:60:34:ac:cc:92:52:9f: 18:92:07:62:0e:e3:f8:13:fe:58:c7:98:4c:da:de: 9c:ef:86:e7:fb:1a:2d:4d:61:5a:97:2e:e9:f3:da: 46:41:60:fe:8f:9f:e9:7d:dd:be:f4:a9:44:b7:76: fa:69:58:56:42:e3:71:1a:aa:76:7f:4b:4b:a9:37: 32:51:23:ac:c3:ff:50:6b:f0:d1:24:51:dd:d7:7c: 2e:53:c9:b4:a6:4a:70:15:4d:e7:c8:69:e5:7d:01: d9:e2:24:81:b3:71:8c:45:9d:ae:fe:3c:ae:45:9d: 80:f9:ce:1c:4d:a4:6a:58:4d:c2:95:c3:59:8e:b0: 3d:fb:97:b4:bd:b3:58:2b:58:d2:27:b2:9c:3e:ad: dd:66:62:ec:b8:f3:f2:23:db:9b:10:97:8f:bd:29: 1f:c8:4e:aa:e4:52:88:76:33:72:18:fe:6a:6a:35: 7e:54:66:de:2a:00:af:ec:4c:5c:1a:f8:93:e8:9e: 90:e2:b5:54:67:20:07:d4:be:cd:2f:59:38:ac:05: 58:44:85:f9:2f:dd:e3:a6:2f:cb:03:92:0a:4d:43: c1:8f:36:9a:a0:0c:f9:c0:38:e1:f3:87:2a:dc:21: a2:33:18:7d:13:6e:6c:0e:1b:4f:df:53:48:1d:3b: aa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6C:F8:58:4D:37:49:81:43:3B:47:82:D4:D4:DD:93:44:6E:C1:1C X509v3 Authority Key Identifier: keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:40:54:b9:6d:78:0b:40:0b:d4:13:4d:9a:71:21:4f:65:62: 79:92:1d:f1:55:5f:d9:e6:10:d6:a2:bb:dd:5e:0a:91:bd:57: 69:d8:28:d5:a3:8b:e0:b0:79:bd:fd:36:48:0b:67:9e:40:46: 12:88:20:0f:6d:2d:c2:4b:c1:67:6a:8b:e5:12:4d:f4:bf:aa: 5d:6f:bc:c6:2a:99:4e:8f:f3:5f:98:30:bc:8c:d2:96:43:db: 8f:17:79:f0:ba:69:f4:37:12:21:ce:bb:17:2d:20:09:15:3d: a4:10:24:87:57:93:4b:71:b3:a3:20:32:71:97:f3:de:e0:43: 94:10:1b:54:24:26:41:9d:74:6c:b4:f5:4d:f0:69:98:9c:e0: 3d:3a:7f:b1:39:c3:6a:9e:7d:c4:f3:fa:70:c9:a3:ab:4f:60: c4:9b:67:aa:36:93:55:05:0c:17:32:8e:24:5d:ee:98:9f:07: a6:02:5a:ee:79:c6:71:3c:f4:27:96:a3:0e:ef:2d:5e:b3:3f: 75:e7:b9:f0:42:43:5f:2e:92:d1:3a:f2:b6:45:f7:37:74:46: d1:be:bd:6e:96:1a:a6:55:c4:24:7d:e2:dd:2b:76:c2:8d:bc: 40:fa:ef:5a:cb:6f:4f:48:52:18:55:9f:9a:0f:36:e7:b3:cc: 23:0f:fe:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0JCMDExMC8GA1UEBRMoNDVCMThFMjA5RUNGRERBNUNFRDc4Q0Y5RDk4MTBENjEx RTZENDEyNDAeFw0yNTA4MDkwODEzMzNaFw0yNTA4MTYwODEzMzNaMBgxFjAUBgNV BAMTDTY4OTcwMzJkLWY1MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Dtlv7V8sYDSszJJSnxiSB2IO4/gT/ljHmEza3pzvhuf7Gi1NYVqXLunz2kZB YP6Pn+l93b70qUS3dvppWFZC43EaqnZ/S0upNzJRI6zD/1Br8NEkUd3XfC5TybSm SnAVTefIaeV9AdniJIGzcYxFna7+PK5FnYD5zhxNpGpYTcKVw1mOsD37l7S9s1gr WNInspw+rd1mYuy48/Ij25sQl4+9KR/ITqrkUoh2M3IY/mpqNX5UZt4qAK/sTFwa +JPonpDitVRnIAfUvs0vWTisBVhEhfkv3eOmL8sDkgpNQ8GPNpqgDPnAOOHzhyrc IaIzGH0TbmwOG0/fU0gdO6oPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi2z4WE03 SYFDO0eC1NTdk0RuwRwwHwYDVR0jBBgwFoAURbGOIJ7P3aXO14z52YENYR5tQSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwLzlGRkRBQjc2MzIz QTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FYTzE0ejUyWUVOWVI1dFFT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUmJHT0lKN1AzYVhPMTR6NTJZRU5ZUjV0UVNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QkIwLzlGRkRBQjc2MzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FY TzE0ejUyWUVOWVI1dFFTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAFAVLlteAtAC9QTTZpxIU9lYnmSHfFVX9nmENaiu91eCpG9V2nYKNWj i+Cweb39NkgLZ55ARhKIIA9tLcJLwWdqi+USTfS/ql1vvMYqmU6P81+YMLyM0pZD 248XefC6afQ3EiHOuxctIAkVPaQQJIdXk0txs6MgMnGX897gQ5QQG1QkJkGddGy0 9U3waZic4D06f7E5w2qefcTz+nDJo6tPYMSbZ6o2k1UFDBcyjiRd7pifB6YCWu55 xnE89CeWow7vLV6zP3XnufBCQ18uktE68rZF9zd0RtG+vW6WGqZVxCR94t0rdsKN vED671rLb09IUhhVn5oPNuezzCMP/pw= -----END CERTIFICATE-----Generated at Sun Aug 10 18:29:31 2025 by rpki-client