$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json) Hash identifier: pV3ZYvqRXXB2TCELW9fR6gkUA3NtZyKXuvIPffUvoDc= Subject key identifier: 63:7E:99:70:7E:5E:86:37:A2:26:EB:D9:B9:8C:01:21:48:5D:1C:1E Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Certificate serial: 046B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft Manifest number: 0464 Signing time: Mon 11 Aug 2025 00:20:25 +0000 Manifest this update: Mon 11 Aug 2025 00:20:24 +0000 Manifest next update: Mon 18 Aug 2025 00:20:24 +0000 Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: Y73glN9KGb/FbkMQ3xK5ZCMFm96fU8rM4UUIpvvW/EU=) 2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: 252kB+fX+BBhzn4gsCNSBIXgmIL37+s/mdPS5IK/AQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1131 (0x46b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Validity Not Before: Aug 11 00:20:24 2025 GMT Not After : Aug 18 00:20:24 2025 GMT Subject: CN=68993749-b00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:86:29:36:80:f3:08:84:aa:bc:0c:13:5f:35: 14:30:51:4b:01:fa:10:bb:32:9b:78:00:65:8a:83: 74:eb:9e:d2:f2:c2:56:a4:35:b7:35:3d:bf:5c:d2: 45:ed:8f:9e:45:a4:1c:79:da:46:85:e7:60:4a:b0: a3:57:7c:a3:f2:1d:3e:97:82:66:52:c9:14:60:38: a3:12:ea:98:15:ce:8f:60:44:de:9c:57:06:48:5a: f4:ba:6e:73:7b:9f:68:c7:97:d8:34:df:d2:ff:d2: d9:70:ff:32:9c:46:71:e6:f1:bf:bf:7e:17:fb:e6: b9:70:23:a6:6a:93:3a:41:ff:f7:68:a7:a5:d9:9f: 03:57:53:97:fa:79:15:a2:d0:3f:c1:0d:21:d4:2f: 51:7b:e4:a5:02:f5:fd:65:8a:08:f4:74:a8:ef:72: 6e:dc:a8:c2:be:cf:a1:cb:df:95:cb:2e:f8:47:ea: f7:e4:22:36:6b:e4:20:2c:b7:f1:fa:52:17:43:16: f4:a3:1d:81:d6:bb:2b:1f:0a:de:bd:61:9b:00:d5: 14:bc:cd:9a:35:fc:28:e7:7c:35:8f:71:3b:f9:ae: 62:26:fc:6b:21:93:d1:97:48:ed:b6:00:1a:99:6b: 3c:c2:10:a8:cb:98:e5:ab:96:2b:03:7c:19:fb:7d: 18:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7E:99:70:7E:5E:86:37:A2:26:EB:D9:B9:8C:01:21:48:5D:1C:1E X509v3 Authority Key Identifier: keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:b3:52:c0:a1:18:64:b3:c8:a0:b5:92:44:7d:72:70:26:03: 5a:d4:03:d1:c9:60:bc:e9:9e:c5:db:c4:52:6c:0c:78:19:a8: ee:58:6d:6b:b8:c5:57:d3:ff:4a:86:c3:d8:c3:aa:fd:00:3f: b1:c3:74:70:04:79:cf:cc:3e:4c:de:f2:a9:f8:35:24:70:01: eb:7a:03:a3:d8:fe:c6:71:d5:14:5b:1d:a8:9f:a6:ce:85:b9: 47:6a:be:92:75:c1:cb:ce:c9:6f:8a:84:16:7e:87:48:59:36: 17:a8:a6:72:76:1c:c3:cf:38:81:cc:0e:30:29:41:70:23:75: a0:30:3a:74:6a:42:43:4c:c4:21:72:67:a0:dc:3f:62:57:da: 14:0b:25:12:c3:07:27:3c:b8:56:14:84:12:44:9c:e5:b8:29: 31:a9:56:46:05:13:c6:af:94:8f:58:1a:51:3d:97:fd:87:54: 27:42:f4:e7:ca:b5:d8:e2:c5:2d:85:ad:3e:28:26:86:41:39: 2e:d7:74:cf:43:41:20:28:b8:80:55:37:3c:06:81:4f:e5:c8: a8:ab:47:bc:ca:76:3c:e0:5d:cb:9b:32:63:18:8b:f8:d4:34: 33:d5:b4:32:70:96:29:61:24:82:07:39:73:8e:ec:4b:22:ad: 09:b0:67:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz NEZGREYzNUMwHhcNMjUwODExMDAyMDI0WhcNMjUwODE4MDAyMDI0WjAYMRYwFAYD VQQDEw02ODk5Mzc0OS1iMDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoYpNoDzCISqvAwTXzUUMFFLAfoQuzKbeABlioN0657S8sJWpDW3NT2/XNJF 7Y+eRaQcedpGhedgSrCjV3yj8h0+l4JmUskUYDijEuqYFc6PYETenFcGSFr0um5z e59ox5fYNN/S/9LZcP8ynEZx5vG/v34X++a5cCOmapM6Qf/3aKel2Z8DV1OX+nkV otA/wQ0h1C9Re+SlAvX9ZYoI9HSo73Ju3KjCvs+hy9+Vyy74R+r35CI2a+QgLLfx +lIXQxb0ox2B1rsrHwrevWGbANUUvM2aNfwo53w1j3E7+a5iJvxrIZPRl0jttgAa mWs8whCoy5jlq5YrA3wZ+30YqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGN+mXB+ XoY3oibr2bmMASFIXRweMB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhDOS80QjRENzEyQTVDREIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2 TkxBM1BkSDNmdEkwXzk4MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRs1LAoRhks8igtZJEfXJwJgNa1APRyWC86Z7F28RSbAx4GajuWG1r uMVX0/9KhsPYw6r9AD+xw3RwBHnPzD5M3vKp+DUkcAHregOj2P7GcdUUWx2on6bO hblHar6SdcHLzslvioQWfodIWTYXqKZydhzDzziBzA4wKUFwI3WgMDp0akJDTMQh cmeg3D9iV9oUCyUSwwcnPLhWFIQSRJzluCkxqVZGBRPGr5SPWBpRPZf9h1QnQvTn yrXY4sUtha0+KCaGQTku13TPQ0EgKLiAVTc8BoFP5cioq0e8ynY84F3LmzJjGIv4 1DQz1bQycJYpYSSCBzlzjuxLIq0JsGeq -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:15 2025 by rpki-client