$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json) Hash identifier: KTH6QQixDq7hd7fIYih15wp4Ijf9bALQsHySvVzug8Q= Subject key identifier: 87:C2:29:41:20:59:23:4B:39:D7:D5:76:41:BF:3D:55:55:9D:F6:47 Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft Manifest number: BA Signing time: Sat 09 Aug 2025 06:21:46 +0000 Manifest this update: Sat 09 Aug 2025 06:21:46 +0000 Manifest next update: Sat 16 Aug 2025 06:21:46 +0000 Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: BCt7taP1iJ+VyQTonOFaENHWSNMCYXvdh/vSRdsoE9o=) 2: 444375E25B9C11EFA181A044C4F9AE02.roa (hash: Yhh6V+gIv+Ld1DK0VM67Fxc3c5mvFHS895j33+/A8nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Validity Not Before: Aug 9 06:21:46 2025 GMT Not After : Aug 16 06:21:46 2025 GMT Subject: CN=6896e8fa-9662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:bd:d2:8a:40:68:cf:ea:14:c5:8c:89:0e:12: 64:65:71:e0:6b:2e:e8:1f:98:09:d2:cf:78:12:e6: 3f:ae:96:ba:4b:19:4d:6e:b9:11:45:b3:55:41:8d: 4c:73:71:19:c6:5c:06:bb:9f:5e:31:fc:5b:1d:52: e4:87:51:04:9c:91:ad:3b:13:e9:a1:8c:bd:19:4c: 8d:a4:da:d0:3b:b4:8e:d3:7f:dc:9c:26:13:61:b1: 7d:80:32:40:6d:32:dc:54:ba:66:d8:da:a0:f5:1d: 20:ae:69:80:8f:cf:ba:b9:9d:22:a1:13:29:a0:09: cb:5d:9c:9e:56:cf:0e:e2:c2:88:69:67:b4:8a:68: 71:3a:d9:dc:c6:d5:2e:da:c0:86:16:1c:2f:79:ec: e4:9b:7e:76:f5:36:4e:cf:b2:fb:a1:d3:a2:09:e7: dc:0d:c0:77:7c:0f:45:4e:b0:52:e6:74:7a:5f:75: 08:cc:11:42:2c:23:81:31:d6:4a:5f:d4:05:c9:2c: 6c:05:b5:bb:98:cc:97:75:1e:ba:6d:21:0c:9e:1e: 75:98:92:1b:50:1d:17:01:c7:70:4a:b0:dc:7a:61: 4d:66:b9:e6:c3:1c:ed:27:1c:40:0b:ac:83:3f:18: 34:2a:5e:fb:b2:06:e5:38:5b:39:ba:66:3b:81:1d: 78:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C2:29:41:20:59:23:4B:39:D7:D5:76:41:BF:3D:55:55:9D:F6:47 X509v3 Authority Key Identifier: keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:4f:03:f6:f2:c7:c7:43:df:a4:dd:a6:6c:28:50:0a:08:e0: 4e:13:aa:e5:df:b6:81:c8:f7:b9:64:0b:a1:00:11:a2:06:4a: a2:af:ce:b1:89:53:e7:c4:a6:1f:b5:e7:fb:f7:a4:39:a8:7f: a3:af:d4:9b:40:e3:7a:e4:51:51:fb:e2:c2:c5:ea:0f:e8:6b: f7:60:d8:cf:59:9f:1f:7a:f1:fb:e9:6d:bc:20:79:61:46:5b: da:d1:af:d2:34:45:3e:97:12:0d:85:86:83:af:14:b1:f0:b7: c9:d4:44:d0:94:cb:f2:30:8b:d6:f2:86:88:d2:bd:88:32:83: 21:f4:94:19:c9:dd:d7:28:49:94:99:e0:ed:f9:e2:4e:69:e3: ec:83:b0:10:03:b8:eb:5a:fc:42:76:d8:e5:5b:c2:df:6c:5d: d9:08:9d:50:70:41:91:02:cf:a1:36:eb:4f:13:e2:37:1a:5e: e9:7a:bd:5f:cb:d9:ce:e3:b4:ec:ae:9d:ab:6f:34:0c:06:af: 39:f9:31:17:87:0d:39:70:ea:35:86:04:04:49:71:8f:0d:bb: cc:e9:4a:82:78:57:f0:13:82:d0:f4:21:67:1f:13:8b:d7:84: 0e:f9:79:e6:60:54:e3:aa:37:a9:73:3b:d5:95:29:44:e2:33: f2:05:2f:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRENEYxMTAvBgNVBAUTKDY4Nzc0MURFMTVDRDg4M0MxMEREQkM0RkMzQTJEQ0Y1 NDg1RTdERjMwHhcNMjUwODA5MDYyMTQ2WhcNMjUwODE2MDYyMTQ2WjAYMRYwFAYD VQQDEw02ODk2ZThmYS05NjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+r3SikBoz+oUxYyJDhJkZXHgay7oH5gJ0s94EuY/rpa6SxlNbrkRRbNVQY1M c3EZxlwGu59eMfxbHVLkh1EEnJGtOxPpoYy9GUyNpNrQO7SO03/cnCYTYbF9gDJA bTLcVLpm2Nqg9R0grmmAj8+6uZ0ioRMpoAnLXZyeVs8O4sKIaWe0imhxOtncxtUu 2sCGFhwveezkm3529TZOz7L7odOiCefcDcB3fA9FTrBS5nR6X3UIzBFCLCOBMdZK X9QFySxsBbW7mMyXdR66bSEMnh51mJIbUB0XAcdwSrDcemFNZrnmwxztJxxAC6yD Pxg0Kl77sgblOFs5umY7gR14hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfCKUEg WSNLOdfVdkG/PVVVnfZHMB8GA1UdIwQYMBaAFGh3Qd4VzYg8EN28T8Oi3PVIXn3z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQ0Ri8wRTNBQ0NGQzVC OUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlEd1EzYnhQdzZMYzlVaGVm Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIZEIzaFhOaUR3UTNieFB3NkxjOVVoZWZmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQ0Ri8wRTNBQ0NGQzVCOUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlE d1EzYnhQdzZMYzlVaGVmZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkTwP28sfHQ9+k3aZsKFAKCOBOE6rl37aByPe5ZAuhABGiBkqir86x iVPnxKYftef796Q5qH+jr9SbQON65FFR++LCxeoP6Gv3YNjPWZ8fevH76W28IHlh Rlva0a/SNEU+lxINhYaDrxSx8LfJ1ETQlMvyMIvW8oaI0r2IMoMh9JQZyd3XKEmU meDt+eJOaePsg7AQA7jrWvxCdtjlW8LfbF3ZCJ1QcEGRAs+hNutPE+I3Gl7per1f y9nO47Tsrp2rbzQMBq85+TEXhw05cOo1hgQESXGPDbvM6UqCeFfwE4LQ9CFnHxOL 14QO+XnmYFTjqjepczvVlSlE4jPyBS9v -----END CERTIFICATE-----Generated at Sun Aug 10 04:57:53 2025 by rpki-client