$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: kufHis67HXzb5XYMoaG4Y41RbIx2Nbv8PLkiXKdHfrg= Subject key identifier: 1C:A2:D9:B9:42:26:AF:25:11:FD:20:CA:EE:7F:FC:4D:11:FD:6B:8E Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0D84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0D48 Signing time: Sun 10 Aug 2025 18:04:26 +0000 Manifest this update: Sun 10 Aug 2025 18:04:26 +0000 Manifest next update: Sun 17 Aug 2025 18:04:26 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: KvJWnyfnvcaHe2OqB/Ut7dUjlHC9ozkhBg75R7ZGN/A=) 2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=) 3: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=) 4: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: F6pHZaK0p+hfG2R8U42UIH6mVTyAquKiquy2pjJGlpw=) 5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=) 6: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: P6JTGz167Z9TdfCL7daabxEJTzpdJTGmRrb0uaHZZCk=) 7: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 78fn2memSm7vBnLFbyR7taN3PwAlhw+S3wateBPSFCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3460 (0xd84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Aug 10 18:04:26 2025 GMT Not After : Aug 17 18:04:26 2025 GMT Subject: CN=6898df2a-541f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a7:b8:f9:65:7f:b4:03:2d:f6:f6:14:45:42: 4d:94:93:a4:7a:5d:10:d5:b8:3c:30:2e:3f:48:90: f5:2c:f0:fd:a6:fd:0d:ed:d3:dd:ba:a0:b1:c2:e6: 74:27:0d:81:1e:2b:89:a2:a3:f7:57:b0:80:01:b3: d6:ab:b2:18:ae:55:2f:93:42:37:16:16:4d:d5:48: f3:a2:b2:62:08:27:a7:84:d6:d0:7a:82:b7:72:ee: 9d:e3:91:38:61:07:a3:2d:66:05:ee:f7:25:b9:57: 22:0a:ef:eb:c8:fe:38:4c:54:3e:a6:8e:3a:d6:62: 66:b8:cf:37:ae:e2:5d:e9:08:fa:de:5a:3d:17:bb: 43:d0:4e:64:f7:ba:fe:f6:d9:44:73:d5:27:03:d9: 25:46:70:89:7d:fb:63:06:1d:5b:0e:56:11:36:10: 13:e5:9b:80:f5:78:53:e7:e9:01:9c:1c:d3:58:37: 7c:27:bc:1e:01:77:91:8d:af:1e:fe:97:ea:a7:c1: 02:ec:53:f1:98:6a:27:49:8b:16:7d:45:4f:23:e0: 55:b9:ea:94:06:d3:14:ff:b1:27:f8:1e:3f:92:f8: 42:32:69:6a:72:80:aa:e7:b5:99:a7:6e:02:24:6a: 3c:a1:88:dc:ec:35:3d:19:f3:c2:84:64:ca:d6:85: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A2:D9:B9:42:26:AF:25:11:FD:20:CA:EE:7F:FC:4D:11:FD:6B:8E X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ae:9e:2e:b2:89:d0:ef:50:80:0c:90:b7:4f:38:9e:20:a6: 75:ea:c6:47:95:69:b2:ad:ac:04:d5:2a:b0:d0:72:57:81:66: 8c:48:7b:84:44:fc:66:82:29:47:a6:e9:ac:a5:f3:53:b8:56: 28:00:b0:d1:c3:18:c6:39:1a:92:ee:c6:39:2b:36:33:0a:99: cc:10:96:35:a7:f8:67:95:65:3f:86:01:ad:36:50:03:dd:f4: 99:cb:6d:ca:2f:a7:37:86:54:5c:48:82:6c:79:54:42:5b:17: 0f:cf:7e:c1:36:ba:94:27:d0:c2:1e:5a:ce:b7:1c:b4:e4:bf: 15:cb:a4:e4:19:71:54:f1:b9:90:14:d0:e8:8f:82:4a:53:f5: dd:a5:1c:82:23:78:b3:82:7b:21:92:1f:61:d4:95:46:44:38: 54:65:1a:16:19:b9:8a:94:34:86:3f:fb:26:5e:37:77:ea:0a: c5:20:e1:e4:df:21:8d:bd:64:7e:4c:5d:ce:80:15:11:5e:3a: 45:df:ff:e9:32:a4:cf:f7:60:ca:25:a7:fe:d0:30:ec:54:d4: 59:89:1c:58:04:18:83:94:76:cf:7c:32:2f:32:55:30:ce:ba: 04:21:a4:24:85:8a:af:b8:1f:80:33:ac:35:ee:7f:3b:b3:e8: ec:49:7e:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjUwODEwMTgwNDI2WhcNMjUwODE3MTgwNDI2WjAYMRYwFAYD VQQDEw02ODk4ZGYyYS01NDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ae4+WV/tAMt9vYURUJNlJOkel0Q1bg8MC4/SJD1LPD9pv0N7dPduqCxwuZ0 Jw2BHiuJoqP3V7CAAbPWq7IYrlUvk0I3FhZN1UjzorJiCCenhNbQeoK3cu6d45E4 YQejLWYF7vcluVciCu/ryP44TFQ+po461mJmuM83ruJd6Qj63lo9F7tD0E5k97r+ 9tlEc9UnA9klRnCJfftjBh1bDlYRNhAT5ZuA9XhT5+kBnBzTWDd8J7weAXeRja8e /pfqp8EC7FPxmGonSYsWfUVPI+BVueqUBtMU/7En+B4/kvhCMmlqcoCq57WZp24C JGo8oYjc7DU9GfPChGTK1oWyMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByi2blC Jq8lEf0gyu5//E0R/WuOMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAurp4usonQ71CADJC3TzieIKZ16sZHlWmyrawE1Sqw0HJXgWaMSHuE RPxmgilHpumspfNTuFYoALDRwxjGORqS7sY5KzYzCpnMEJY1p/hnlWU/hgGtNlAD 3fSZy23KL6c3hlRcSIJseVRCWxcPz37BNrqUJ9DCHlrOtxy05L8Vy6TkGXFU8bmQ FNDoj4JKU/XdpRyCI3izgnshkh9h1JVGRDhUZRoWGbmKlDSGP/smXjd36grFIOHk 3yGNvWR+TF3OgBURXjpF3//pMqTP92DKJaf+0DDsVNRZiRxYBBiDlHbPfDIvMlUw zroEIaQkhYqvuB+AM6w17n87s+jsSX7A -----END CERTIFICATE-----Generated at Mon Aug 11 04:15:59 2025 by rpki-client