$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: g8enY77HCmbtXTEISan8lrZaAryLLJgZrlbBOuQWgPU= Subject key identifier: BB:E6:43:3B:55:CF:66:4F:88:D0:1A:C1:2C:5B:27:EC:1B:F8:18:AF Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 020E Signing time: Sat 09 Aug 2025 02:36:48 +0000 Manifest this update: Sat 09 Aug 2025 02:36:47 +0000 Manifest next update: Sat 16 Aug 2025 02:36:47 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: fRouDnGPUP3cToLkrqVMWfcgNFmtwQlLKYRA4G8LFlg=) 2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: uRdIMNdIglfdteGkf069/isP402avOmjbNb7y/lUw5k=) 3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: N73Qn6fYVAUW9KUPlhOzNYAivlJPaPply2UAI5lOlWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: Aug 9 02:36:47 2025 GMT Not After : Aug 16 02:36:47 2025 GMT Subject: CN=6896b43f-442d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:8e:46:41:c3:8e:b4:9d:02:30:0e:05:2f: 5b:8c:88:b7:e8:5a:c2:37:c1:7c:c5:d8:15:b4:e2: 18:56:a9:ea:7f:21:f4:bd:3c:8e:8b:2b:b5:27:57: 1e:a8:ec:2a:e6:8e:c9:c4:62:a7:d0:f5:fd:4f:76: 96:9e:8b:06:05:ce:ff:13:89:87:79:b6:83:81:b7: cf:f2:26:f8:c4:cf:9b:39:a0:d6:93:60:41:81:65: bc:18:6f:20:33:fe:ef:c3:ea:ce:22:af:f3:37:cd: 4a:4b:31:9d:3f:07:e4:68:a2:d6:51:af:1b:3a:72: 1d:ca:c8:38:70:df:13:ae:31:27:8a:da:e6:9c:7f: aa:fd:dc:02:5a:a3:8c:6a:8a:e7:a7:65:68:73:74: 2d:cb:e2:88:12:c7:64:a6:b7:ed:a0:c3:ea:50:d2: 89:1e:77:1b:e8:e0:60:90:08:90:f8:dc:a8:e3:12: 96:41:0f:f1:95:57:1d:d8:c7:8e:a3:83:89:69:d6: cc:45:f4:d1:80:dd:f3:0a:c5:21:b4:af:56:6f:4e: ce:82:a2:15:b9:4a:b6:93:14:47:61:e3:93:4d:53: 6f:19:85:79:46:fd:0d:ce:d4:95:ab:e0:94:84:db: b6:62:9a:05:4a:29:0b:da:c8:ed:ba:01:68:93:3b: 60:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E6:43:3B:55:CF:66:4F:88:D0:1A:C1:2C:5B:27:EC:1B:F8:18:AF X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:5d:2e:75:d5:24:1f:b5:55:e6:e9:a1:2f:42:70:5e:76:b7: 51:16:7c:51:22:4a:fc:2d:03:37:68:8b:6c:44:be:7b:a7:ae: d8:db:6e:68:ca:75:a8:95:e9:01:63:92:5d:6a:f3:ed:4e:aa: b8:a8:f7:9f:52:bc:ca:35:16:61:0b:07:04:05:94:71:ba:d4: f2:e2:c2:c3:f5:4f:be:86:22:af:53:94:66:e2:50:78:19:e1: 0f:be:cb:a5:a4:f3:23:3f:37:f1:0a:f1:5f:a1:2d:ff:cc:ee: 18:d9:43:bc:7c:d7:fb:37:39:d3:d4:ea:af:1b:05:fd:21:f0: 33:49:a9:b5:bc:fc:58:a5:96:9a:64:c7:80:a6:43:9c:a8:ec: f9:34:74:7e:44:36:9b:7c:5d:1c:4d:40:03:47:5a:99:ec:68: 92:b5:16:24:8e:9a:ae:a9:52:dd:d4:ab:b0:59:44:2f:df:1a: 55:42:d4:3f:42:62:52:fb:9b:d1:79:d6:e5:9e:df:0e:ef:9f: 3c:e2:32:3b:20:ec:2a:80:48:c2:53:3d:85:bd:cb:8b:23:45: a1:0b:ef:81:43:35:22:ce:bd:65:09:6f:cb:1f:09:de:e1:84: 65:6a:b9:9d:e2:54:7a:47:77:12:12:ee:91:14:2f:68:fd:fe: e8:3a:7e:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjUwODA5MDIzNjQ3WhcNMjUwODE2MDIzNjQ3WjAYMRYwFAYD VQQDEw02ODk2YjQzZi00NDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4qORkHDjrSdAjAOBS9bjIi36FrCN8F8xdgVtOIYVqnqfyH0vTyOiyu1J1ce qOwq5o7JxGKn0PX9T3aWnosGBc7/E4mHebaDgbfP8ib4xM+bOaDWk2BBgWW8GG8g M/7vw+rOIq/zN81KSzGdPwfkaKLWUa8bOnIdysg4cN8TrjEnitrmnH+q/dwCWqOM aornp2Voc3Qty+KIEsdkprftoMPqUNKJHncb6OBgkAiQ+Nyo4xKWQQ/xlVcd2MeO o4OJadbMRfTRgN3zCsUhtK9Wb07OgqIVuUq2kxRHYeOTTVNvGYV5Rv0NztSVq+CU hNu2YpoFSikL2sjtugFokztg6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvmQztV z2ZPiNAawSxbJ+wb+BivMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAXS511SQftVXm6aEvQnBedrdRFnxRIkr8LQM3aItsRL57p67Y225o ynWolekBY5JdavPtTqq4qPefUrzKNRZhCwcEBZRxutTy4sLD9U++hiKvU5Rm4lB4 GeEPvsulpPMjPzfxCvFfoS3/zO4Y2UO8fNf7NznT1OqvGwX9IfAzSam1vPxYpZaa ZMeApkOcqOz5NHR+RDabfF0cTUADR1qZ7GiStRYkjpquqVLd1KuwWUQv3xpVQtQ/ QmJS+5vRedblnt8O75884jI7IOwqgEjCUz2FvcuLI0WhC++BQzUizr1lCW/LHwne 4YRlarmd4lR6R3cSEu6RFC9o/f7oOn6O -----END CERTIFICATE-----Generated at Sat Aug 9 22:48:15 2025 by rpki-client