$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft File: U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json) Hash identifier: DJ9X8hdvcT/CMVdawHn1jJoKURTNtcXH7WiH0y4I3Ds= Subject key identifier: 7E:92:09:0E:09:07:A5:F2:2B:97:F1:D6:DC:B3:D5:6C:B0:06:A1:65 Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 2293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft Manifest number: 2238 Signing time: Sun 10 Aug 2025 15:50:39 +0000 Manifest this update: Sun 10 Aug 2025 15:50:39 +0000 Manifest next update: Sun 17 Aug 2025 15:50:38 +0000 Files and hashes: 1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: NnWD2QRdtepn51qj+HsK92PUTyxqoyZ1VtRqoNlnM1M=) 2: 848CD92660A611F0806EB31DC4F9AE02.roa (hash: E2krETd7neWC8d4xIatDnIbAfqIHXkBF6iProCmPjFo=) 3: 17F2F96C72C111F09268602EC4F9AE02.roa (hash: VH7hz66PgVnwG6C7/7dzj+0U30bmqdz9zfd98NwQfn8=) 4: E9B9A0BE72C011F09E92A72CC4F9AE02.roa (hash: pC7J51Inx5erwsjJWLU7wH7gc0TF1uWL6qCvxHaWy/g=) 5: D51DFF6066D111F091E02D4BC4F9AE02.roa (hash: QZfOK/6dq++Q4pUX2oT1vB8pEtdjVESovBNl6mgCxmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8851 (0x2293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: Aug 10 15:50:39 2025 GMT Not After : Aug 17 15:50:38 2025 GMT Subject: CN=6898bfcf-3320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:e2:19:e9:b2:8b:0a:3d:f3:f1:b5:49:3d: b0:3c:62:94:ec:55:00:4b:8c:1a:4c:66:c6:a4:c0: a3:f3:dc:46:cc:78:26:5e:d4:4a:a3:89:9b:3d:f8: b2:8c:4f:4d:55:52:15:5a:8f:a4:a4:4c:6a:03:a2: 79:92:65:e6:cd:1a:b3:bd:08:8d:f2:10:82:dc:39: e3:fd:e9:cf:03:04:c0:24:8a:e6:ae:c0:2e:a4:02: dc:f2:e3:8a:e2:ec:a4:ce:86:98:40:dc:2b:4b:e6: 81:58:8a:58:27:2a:a7:ae:0a:c7:de:e1:90:1b:b3: 62:c3:24:0a:76:9c:96:9d:2a:87:ce:52:88:80:fd: 9e:59:c8:3c:f8:04:ba:ae:94:d0:cf:23:4c:e4:c4: d6:35:cf:40:8b:8f:7d:75:c6:7b:d7:d0:da:89:4c: d9:77:7a:af:a5:61:e5:32:53:f3:d0:04:6d:b3:9a: ad:00:a6:8e:d4:3a:cd:fe:a4:23:2f:79:83:81:6b: 53:b6:c7:71:4b:62:46:61:a4:9c:8c:1a:23:0a:16: 8a:7e:15:0f:98:7f:0a:c6:ef:24:57:26:cb:6a:9d: 33:df:39:2c:8f:de:23:b5:13:03:71:6b:3d:a6:a0: fa:07:08:44:6c:1b:59:df:16:97:ba:79:d2:57:61: 4e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:92:09:0E:09:07:A5:F2:2B:97:F1:D6:DC:B3:D5:6C:B0:06:A1:65 X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7b:d3:7c:b3:e3:5d:ee:ae:b4:aa:00:11:cf:9f:b3:38:76: ad:5a:aa:75:c7:bc:04:59:3c:6c:0f:55:6c:52:4a:1b:6c:84: cc:dd:f1:87:4d:27:95:d4:46:23:bc:f0:f9:c8:1c:ab:fb:32: ce:9e:70:00:c8:b5:e0:98:3b:3e:3e:65:4d:a0:c0:ae:c4:76: cf:9f:e8:f5:9f:41:91:1b:4c:e0:69:39:7b:66:c6:c5:20:eb: 0d:0b:01:8b:a8:26:49:d8:f5:71:66:4b:9d:ad:77:f5:1e:2e: 85:3b:4d:76:f5:98:03:fe:5f:ea:2b:00:8b:85:28:e0:bc:a1: 31:b6:d5:d6:56:af:fd:ee:5f:8f:64:0d:81:62:7b:b9:d4:29: e3:c9:a7:e8:4a:8a:f0:98:fa:d1:6e:df:ae:2f:b4:9a:e1:6e: c3:ac:8b:27:18:d9:83:54:70:16:59:2a:6e:b9:b2:71:b9:1a: 83:f0:6e:cb:97:70:7a:1a:f8:5c:dc:06:a6:38:78:c4:9b:4e: 8d:3a:39:a1:e6:82:2e:38:22:f4:5e:86:32:21:42:b2:b1:fb: de:e4:05:6e:4d:f4:f9:b3:f0:a0:a8:de:de:a7:dc:6a:5d:f9: 53:23:fe:51:3a:4b:91:9f:f9:47:42:96:4f:60:07:49:4d:70: 92:8a:79:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjUwODEwMTU1MDM5WhcNMjUwODE3MTU1MDM4WjAYMRYwFAYD VQQDEw02ODk4YmZjZi0zMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2jiGemyiwo98/G1ST2wPGKU7FUAS4waTGbGpMCj89xGzHgmXtRKo4mbPfiy jE9NVVIVWo+kpExqA6J5kmXmzRqzvQiN8hCC3Dnj/enPAwTAJIrmrsAupALc8uOK 4uykzoaYQNwrS+aBWIpYJyqnrgrH3uGQG7NiwyQKdpyWnSqHzlKIgP2eWcg8+AS6 rpTQzyNM5MTWNc9Ai499dcZ719DaiUzZd3qvpWHlMlPz0ARts5qtAKaO1DrN/qQj L3mDgWtTtsdxS2JGYaScjBojChaKfhUPmH8Kxu8kVybLap0z3zksj94jtRMDcWs9 pqD6BwhEbBtZ3xaXunnSV2FOsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6SCQ4J B6XyK5fx1tyz1WywBqFlMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNENi8xRTlFMUFBQ0QyRUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0 N09GTlFFV2JxNXhvOXBoVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxe9N8s+Nd7q60qgARz5+zOHatWqp1x7wEWTxsD1VsUkobbITM3fGH TSeV1EYjvPD5yByr+zLOnnAAyLXgmDs+PmVNoMCuxHbPn+j1n0GRG0zgaTl7ZsbF IOsNCwGLqCZJ2PVxZkudrXf1Hi6FO0129ZgD/l/qKwCLhSjgvKExttXWVq/97l+P ZA2BYnu51CnjyafoSorwmPrRbt+uL7Sa4W7DrIsnGNmDVHAWWSpuubJxuRqD8G7L l3B6Gvhc3AamOHjEm06NOjmh5oIuOCL0XoYyIUKysfve5AVuTfT5s/CgqN7ep9xq XflTI/5ROkuRn/lHQpZPYAdJTXCSinl7 -----END CERTIFICATE-----Generated at Mon Aug 11 04:22:30 2025 by rpki-client