$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: PloMXGii7CcqefVlsW5RveR0yDWYcz11zs5lxsaZYyY= Subject key identifier: B2:F9:2F:0D:16:0E:86:17:84:B7:B5:24:32:90:95:60:78:5E:CA:7C Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 0844 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 0839 Signing time: Tue 12 Aug 2025 21:04:29 +0000 Manifest this update: Tue 12 Aug 2025 21:04:28 +0000 Manifest next update: Tue 19 Aug 2025 21:04:28 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: d+lfu0WkjUahmCrPsVvrMrLvesw2fPj9+2PQbRy64Vk=) 2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: bmGPH4RhQZKxlLUmaYqMU+RwVlTsBX8WAQ+VbAJVD+E=) 3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: +U5B9OE0qMYRoG1rt8ratJnPLrr7cjy6lf0aOQepvOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2116 (0x844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: Aug 12 21:04:28 2025 GMT Not After : Aug 19 21:04:28 2025 GMT Subject: CN=689bac5d-0a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:1f:cf:61:ed:9d:a3:a1:05:c0:31:4b:9a: 1b:43:b0:22:21:b6:ae:2e:52:f1:b1:7e:f9:3b:ff: 8b:76:18:8e:60:02:60:74:90:ee:6f:d7:26:9b:a9: 3e:69:74:33:6e:25:d5:7a:30:42:3b:ac:c1:c1:a5: aa:e3:dd:48:ea:5f:e6:62:bc:1f:b1:d0:2b:6e:12: 73:df:89:38:43:fc:3e:2c:0b:1f:19:72:40:c4:37: 60:07:8a:a1:42:9b:f6:11:9d:d2:77:20:b1:6a:03: 09:63:54:c7:74:7f:d0:e9:d6:c3:52:e5:56:1d:b0: 7a:2c:76:e1:b3:95:1a:b1:15:11:31:cc:7c:71:d5: f4:3c:ca:a0:08:b3:a3:0d:2c:3f:04:fc:60:64:7f: fd:83:a4:50:e0:d9:f1:67:60:7e:14:81:1a:01:ea: 9f:50:60:52:2e:a0:78:cd:86:6e:f1:d5:b1:95:36: c6:6a:5e:e3:75:d7:e8:66:a3:54:a3:5a:9e:7a:72: 46:1e:35:6b:0b:41:a2:c1:8d:f9:3e:f3:35:b7:cf: e6:b6:42:c1:46:0a:2b:84:a3:fc:b8:06:2a:6b:5d: c7:ca:20:ec:be:54:59:62:bb:41:4e:87:0b:ae:28: 69:88:ef:ec:53:e8:ff:3a:73:ca:6d:0f:60:c8:5d: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F9:2F:0D:16:0E:86:17:84:B7:B5:24:32:90:95:60:78:5E:CA:7C X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:df:76:0e:1d:67:a4:8b:4b:f5:29:ba:58:37:6b:cf:6e:82: 0a:89:74:6d:a7:7c:7e:8e:7d:bf:3b:c9:48:10:83:5b:fe:96: d7:ae:1a:00:9e:0d:19:86:66:ed:b5:c5:53:c1:8f:af:f9:4c: b8:09:a8:af:29:65:87:1b:36:7b:50:fa:eb:25:26:55:54:e2: 67:d9:63:c7:88:f6:f5:44:d2:4f:74:a1:6c:ae:19:49:89:d9: 5f:31:c6:4d:e0:94:bc:fe:12:d9:af:8f:74:b5:84:ef:ba:4f: 83:e3:2b:d7:b5:cd:64:40:60:fb:f9:80:28:41:d9:a2:2d:10: 2f:b0:3f:89:4b:28:0c:c7:7a:24:d2:33:4f:d1:07:80:97:de: ae:05:01:20:93:e9:a2:91:4b:c0:9d:02:e2:8c:3a:d7:4f:9a: eb:c5:89:7d:e5:b7:34:08:a8:25:ad:4a:c3:d6:7f:f6:2b:b3: a1:7e:64:3b:67:c2:67:3a:e9:c8:b3:f2:b0:33:49:eb:74:28: b3:11:c9:43:82:d2:27:4d:df:1b:6a:82:15:b8:69:6d:95:4b: cc:85:f3:ff:9c:d6:b3:d7:46:9d:5f:ff:65:15:2c:6c:49:e4: f5:1e:67:fe:44:6c:84:2f:46:5d:f8:09:21:c2:96:6f:3f:74: 77:3e:d4:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjUwODEyMjEwNDI4WhcNMjUwODE5MjEwNDI4WjAYMRYwFAYD VQQDEw02ODliYWM1ZC0wYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyd4fz2HtnaOhBcAxS5obQ7AiIbauLlLxsX75O/+LdhiOYAJgdJDub9cmm6k+ aXQzbiXVejBCO6zBwaWq491I6l/mYrwfsdArbhJz34k4Q/w+LAsfGXJAxDdgB4qh Qpv2EZ3SdyCxagMJY1THdH/Q6dbDUuVWHbB6LHbhs5UasRURMcx8cdX0PMqgCLOj DSw/BPxgZH/9g6RQ4NnxZ2B+FIEaAeqfUGBSLqB4zYZu8dWxlTbGal7jddfoZqNU o1qeenJGHjVrC0GiwY35PvM1t8/mtkLBRgorhKP8uAYqa13HyiDsvlRZYrtBTocL rihpiO/sU+j/OnPKbQ9gyF2dcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLL5Lw0W DoYXhLe1JDKQlWB4Xsp8MB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa33YOHWeki0v1KbpYN2vPboIKiXRtp3x+jn2/O8lIEINb/pbXrhoA ng0ZhmbttcVTwY+v+Uy4CaivKWWHGzZ7UPrrJSZVVOJn2WPHiPb1RNJPdKFsrhlJ idlfMcZN4JS8/hLZr490tYTvuk+D4yvXtc1kQGD7+YAoQdmiLRAvsD+JSygMx3ok 0jNP0QeAl96uBQEgk+mikUvAnQLijDrXT5rrxYl95bc0CKglrUrD1n/2K7OhfmQ7 Z8JnOunIs/KwM0nrdCizEclDgtInTd8baoIVuGltlUvMhfP/nNaz10adX/9lFSxs SeT1Hmf+RGyEL0Zd+AkhwpZvP3R3PtSg -----END CERTIFICATE-----Generated at Tue Aug 12 22:48:28 2025 by rpki-client