$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft File: mAInpdd1oDTad40z-IxcwCDRw5w.mft (raw, json) Hash identifier: nqZacyx5krjkMXFgoFbs3dekJF9+/ECp8ryfiOThsIM= Subject key identifier: 03:4A:4E:97:12:C4:41:5D:0F:FB:86:21:10:EA:80:96:F0:6D:EC:65 Authority key identifier: 98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C Certificate issuer: /CN=A9148E7B/serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft Manifest number: 01F8 Signing time: Sat 09 Aug 2025 02:48:57 +0000 Manifest this update: Sat 09 Aug 2025 02:48:56 +0000 Manifest next update: Sat 16 Aug 2025 02:48:56 +0000 Files and hashes: 1: mAInpdd1oDTad40z-IxcwCDRw5w.crl (hash: TTrMLNuS8IAu6+8GWO8n2J4hTgxnQPTwVFAhyGaKxL4=) 2: 8CFF3572708F11ED88DF8322C4F9AE02.roa (hash: lONZjm0NjFEm7xQkBCGWnrkGFmjAfW8U6anBdYjJWgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.crl rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E7B, serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C Validity Not Before: Aug 9 02:48:56 2025 GMT Not After : Aug 16 02:48:56 2025 GMT Subject: CN=6896b718-9632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:12:17:45:cd:b6:25:58:3f:db:db:c1:cc:9e: 1a:6b:88:18:f7:88:22:f7:9f:cd:8f:28:b2:bc:07: a7:87:a8:54:5d:91:83:cd:fb:6d:fe:a6:32:46:a8: ac:bb:5c:c7:34:39:08:e7:18:de:be:09:8d:1a:ad: 7c:88:46:31:48:aa:54:48:a2:20:d2:08:de:a4:f3: d1:89:e6:07:b2:27:60:bd:00:c5:76:e8:74:89:41: a2:50:64:c7:e1:78:bc:57:eb:bc:de:4d:e4:90:55: cd:0f:d5:a4:57:1e:3d:1b:42:04:7c:69:56:e4:b3: 1b:23:7f:72:3e:5d:39:71:f7:1a:a2:25:e1:c9:d9: 6a:3e:a9:da:a8:65:64:4c:1f:c9:04:5a:ce:9f:b9: b7:3e:a8:1d:29:9c:9a:84:fa:8d:f6:8f:f8:76:81: de:9b:5e:59:ad:b5:6f:58:82:41:0e:b6:ea:d9:1d: 0a:b7:b3:55:1e:0e:a1:18:19:d3:88:b7:49:49:26: 78:4f:77:11:af:66:81:33:d9:d7:0d:3f:92:97:28: 84:8b:59:12:9e:85:57:c1:ee:b7:4c:74:c5:0e:e8: 2f:81:da:57:3c:84:ba:e9:15:8a:b5:a8:99:25:6e: 3c:07:b8:72:a4:36:fa:2b:80:9d:fa:e4:0d:35:98: de:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4A:4E:97:12:C4:41:5D:0F:FB:86:21:10:EA:80:96:F0:6D:EC:65 X509v3 Authority Key Identifier: keyid:98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:02:2f:6a:22:b5:41:ae:20:c2:36:3e:82:e2:d9:98:8d:3b: c4:35:78:97:d6:b9:59:41:03:85:2e:77:24:92:b0:e7:c1:6e: b7:4a:71:32:33:39:2a:50:48:50:e1:98:1a:5d:94:9d:b4:f0: e2:d8:e5:97:55:28:f7:ce:d3:52:ea:d8:43:04:27:69:e9:80: 44:01:ab:5b:ce:b1:c7:ba:e4:44:bb:22:57:04:ee:42:fa:ca: 9d:22:d5:e9:76:34:99:62:df:d3:6d:df:7e:22:09:f1:3d:c2: 8d:d9:fc:4a:b9:7d:40:1a:1b:62:6a:3b:0b:8d:42:77:10:3b: 81:20:0a:04:a7:a2:d0:68:9b:fe:5c:3c:fe:58:48:d4:1b:1f: 16:7a:ef:22:45:5f:f5:08:6b:2c:82:fc:2d:4e:86:fe:22:45: 6d:51:a7:fc:88:fd:a9:fe:97:73:d5:ac:b2:0c:b4:fb:38:c7: dd:ff:dd:ba:3a:bd:49:bf:9e:7d:c2:ed:80:6b:ea:18:6b:7b: 38:2c:44:ce:33:20:b5:ae:54:15:8f:39:20:7a:33:41:b7:bf: f2:63:63:59:2d:69:44:9e:92:e6:d9:2a:55:ec:15:2b:16:5a: cf:c6:17:6d:ea:f6:03:e4:88:c7:7d:37:c1:f2:c2:b2:18:5b: 9d:77:39:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFN0IxMTAvBgNVBAUTKDk4MDIyN0E1RDc3NUEwMzREQTc3OEQzM0Y4OEM1Q0Mw MjBEMUMzOUMwHhcNMjUwODA5MDI0ODU2WhcNMjUwODE2MDI0ODU2WjAYMRYwFAYD VQQDEw02ODk2YjcxOC05NjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RIXRc22JVg/29vBzJ4aa4gY94gi95/NjyiyvAenh6hUXZGDzftt/qYyRqis u1zHNDkI5xjevgmNGq18iEYxSKpUSKIg0gjepPPRieYHsidgvQDFduh0iUGiUGTH 4Xi8V+u83k3kkFXND9WkVx49G0IEfGlW5LMbI39yPl05cfcaoiXhydlqPqnaqGVk TB/JBFrOn7m3PqgdKZyahPqN9o/4doHem15ZrbVvWIJBDrbq2R0Kt7NVHg6hGBnT iLdJSSZ4T3cRr2aBM9nXDT+SlyiEi1kSnoVXwe63THTFDugvgdpXPIS66RWKtaiZ JW48B7hypDb6K4Cd+uQNNZjeMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANKTpcS xEFdD/uGIRDqgJbwbexlMB8GA1UdIwQYMBaAFJgCJ6XXdaA02neNM/iMXMAg0cOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU3Qi80NzhGQTZENjcw OEQxMUVEOTRFMzJEMjJDNEY5QUUwMi9tQUlucGRkMW9EVGFkNDB6LUl4Y3dDRFJ3 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21BSW5wZGQxb0RUYWQ0MHotSXhjd0NEUnc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU3Qi80NzhGQTZENjcwOEQxMUVEOTRFMzJEMjJDNEY5QUUwMi9tQUlucGRkMW9E VGFkNDB6LUl4Y3dDRFJ3NXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqAi9qIrVBriDCNj6C4tmYjTvENXiX1rlZQQOFLnckkrDnwW63SnEy MzkqUEhQ4ZgaXZSdtPDi2OWXVSj3ztNS6thDBCdp6YBEAatbzrHHuuREuyJXBO5C +sqdItXpdjSZYt/Tbd9+IgnxPcKN2fxKuX1AGhtiajsLjUJ3EDuBIAoEp6LQaJv+ XDz+WEjUGx8Weu8iRV/1CGssgvwtTob+IkVtUaf8iP2p/pdz1ayyDLT7OMfd/926 Or1Jv559wu2Aa+oYa3s4LETOMyC1rlQVjzkgejNBt7/yY2NZLWlEnpLm2SpV7BUr FlrPxhdt6vYD5IjHfTfB8sKyGFuddzlq -----END CERTIFICATE-----Generated at Sat Aug 9 23:19:16 2025 by rpki-client