$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft File: RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json) Hash identifier: R+v5S3s7upH42l7jVVJyEhFGHDo2yCWEchA0O8Kcq+k= Subject key identifier: 2D:6A:79:EA:EF:6B:52:5F:FC:FE:BE:1B:1A:A3:F3:4F:63:48:25:36 Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft Manifest number: 8D Signing time: Sat 09 Aug 2025 06:58:22 +0000 Manifest this update: Sat 09 Aug 2025 06:58:21 +0000 Manifest next update: Sat 16 Aug 2025 06:58:21 +0000 Files and hashes: 1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: sz9d88tT4LFSOd8qgwS5zGZvo7ssxVF+7keuTwd0yrA=) 2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: CckqoSL6Kl8ijND7YWEunm6CSbx21plf0BMP2SCxoy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Validity Not Before: Aug 9 06:58:21 2025 GMT Not After : Aug 16 06:58:21 2025 GMT Subject: CN=6896f18e-8f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:69:4e:aa:e6:cd:2e:fb:bd:2b:47:88:74:8d: ac:1b:0f:71:6d:c5:32:33:aa:ef:59:c4:d1:2b:22: 7b:63:8d:2f:21:99:a3:2b:0e:73:ed:96:c0:29:b8: 99:f5:15:26:d9:a7:60:72:2e:62:c3:fc:dd:b4:d6: 69:e8:32:2b:55:8f:1c:85:f6:60:30:ae:eb:0e:46: d7:66:c9:df:b0:58:05:10:a8:f0:2e:0c:1f:b6:01: d8:26:3a:a9:8e:ef:06:33:3d:a1:31:5f:4a:32:a0: ca:0b:f8:99:e4:c9:bf:94:bb:c4:c2:c2:48:b2:9d: 6e:79:a8:ba:ae:33:f1:00:cb:67:3d:0e:1c:b8:37: 23:d9:29:22:d6:33:6c:bf:e4:a5:99:d8:df:72:c9: 7f:ad:43:ca:d1:ab:cb:af:84:b3:69:98:83:0a:44: 0b:6e:83:13:30:f6:be:17:ab:76:0f:90:a2:55:25: 21:05:b4:22:85:d1:f8:d9:26:53:10:b6:5e:5c:0e: 90:8c:88:cb:fb:16:d8:b4:51:d7:59:29:c0:9f:b4: 4b:f2:fe:37:68:71:22:b0:36:15:bd:b5:09:75:5a: ea:d5:d8:d6:58:05:96:c1:ea:99:7b:de:ef:57:50: a3:16:63:53:90:1d:f8:a8:0a:a8:f6:0c:ff:53:08: cd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6A:79:EA:EF:6B:52:5F:FC:FE:BE:1B:1A:A3:F3:4F:63:48:25:36 X509v3 Authority Key Identifier: keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:a1:f9:70:82:f8:43:ce:d6:97:80:5d:f5:7d:e6:92:d0:46: bd:2b:9e:1e:c8:a7:e1:3a:af:28:3a:9c:c9:ef:10:61:6e:03: ed:98:06:a3:3a:e5:96:12:37:18:ec:d7:da:92:48:9e:35:63: 1d:67:bc:26:12:5c:af:bf:94:65:73:fd:72:57:5a:f5:f0:be: 40:c1:3a:65:00:da:ef:86:b7:68:84:77:41:80:e6:1f:b6:69: 0e:e1:3d:6a:0d:4b:ff:0e:14:fc:25:3c:92:bc:4a:3d:6c:44: 58:e9:fe:bb:ac:e9:5a:88:7d:24:d2:84:13:ef:aa:4b:11:f2: c0:76:34:9a:5f:6c:b2:a6:ac:5d:5b:34:15:e5:9d:31:40:e2: eb:94:c2:02:9f:b4:5c:58:b0:69:e7:50:67:82:89:d5:4d:a4: 59:46:56:c8:6c:88:4b:d8:c0:34:13:67:08:88:d6:63:e7:81: b3:79:9a:fc:72:c2:8e:48:1a:1b:f4:a2:3d:18:5b:be:84:2d: 77:19:c8:1e:a5:58:b6:ed:60:0e:f3:f2:76:dc:0b:93:13:ac: 8f:8c:ad:f3:32:15:3a:f5:3e:22:88:37:77:f8:1e:54:c7:55: 1e:60:b0:57:4c:98:8f:fa:3a:48:bc:93:13:ce:9a:63:8d:d6: 42:86:83:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QzcxMTAvBgNVBAUTKDQ0QkM3OEVERTYzRDVCNjIyQjdCQUMwM0IzNDk5NkIy RkU0MkUzMjcwHhcNMjUwODA5MDY1ODIxWhcNMjUwODE2MDY1ODIxWjAYMRYwFAYD VQQDEw02ODk2ZjE4ZS04ZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32lOqubNLvu9K0eIdI2sGw9xbcUyM6rvWcTRKyJ7Y40vIZmjKw5z7ZbAKbiZ 9RUm2adgci5iw/zdtNZp6DIrVY8chfZgMK7rDkbXZsnfsFgFEKjwLgwftgHYJjqp ju8GMz2hMV9KMqDKC/iZ5Mm/lLvEwsJIsp1ueai6rjPxAMtnPQ4cuDcj2Ski1jNs v+Slmdjfcsl/rUPK0avLr4SzaZiDCkQLboMTMPa+F6t2D5CiVSUhBbQihdH42SZT ELZeXA6QjIjL+xbYtFHXWSnAn7RL8v43aHEisDYVvbUJdVrq1djWWAWWweqZe97v V1CjFmNTkB34qAqo9gz/UwjNVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1qeerv a1Jf/P6+Gxqj809jSCU2MB8GA1UdIwQYMBaAFES8eO3mPVtiK3usA7NJlrL+QuMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BMjQ1MTE0NjlE OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9STHg0N2VZOVcySXJlNndEczBtV3N2NUM0 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JMeDQ3ZVk5VzJJcmU2d0RzMG1Xc3Y1QzR5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdDNy9BMjQ1MTE0NjlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9STHg0N2VZOVcy SXJlNndEczBtV3N2NUM0eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1oflwgvhDztaXgF31feaS0Ea9K54eyKfhOq8oOpzJ7xBhbgPtmAaj OuWWEjcY7NfakkieNWMdZ7wmElyvv5Rlc/1yV1r18L5AwTplANrvhrdohHdBgOYf tmkO4T1qDUv/DhT8JTySvEo9bERY6f67rOlaiH0k0oQT76pLEfLAdjSaX2yypqxd WzQV5Z0xQOLrlMICn7RcWLBp51BngonVTaRZRlbIbIhL2MA0E2cIiNZj54GzeZr8 csKOSBob9KI9GFu+hC13GcgepVi27WAO8/J23AuTE6yPjK3zMhU69T4iiDd3+B5U x1UeYLBXTJiP+jpIvJMTzppjjdZChoNw -----END CERTIFICATE-----Generated at Sun Aug 10 19:01:34 2025 by rpki-client