$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft File: p24FuDRU7RogkCXoPXXkBXkYksE.mft (raw, json) Hash identifier: 1xzJBQMv6zHZIZAMbWR2/hsJXqPaI6c1hVclx7m9YdI= Subject key identifier: 6D:E1:CF:8A:19:B8:F6:FE:1F:81:2E:0B:43:66:19:3C:37:2C:4C:55 Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 Certificate issuer: /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft Manifest number: 096C Signing time: Fri 08 Aug 2025 23:14:00 +0000 Manifest this update: Fri 08 Aug 2025 23:14:00 +0000 Manifest next update: Fri 15 Aug 2025 23:14:00 +0000 Files and hashes: 1: p24FuDRU7RogkCXoPXXkBXkYksE.crl (hash: h8O0NqdqsSoS71pb9hRw8aje3RjT2G/6WtUgf4y6BLs=) 2: 078192DE0E0111F08A256F7AC4F9AE02.roa (hash: LXGEYHuadccOutKJ+/tshTQpVwD3yYdPEV04BO81LG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Validity Not Before: Aug 8 23:14:00 2025 GMT Not After : Aug 15 23:14:00 2025 GMT Subject: CN=689684b8-4cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:54:36:2c:42:13:4e:97:2d:32:82:1b:69:d3: b1:93:c1:c9:a4:00:88:2b:91:05:3f:13:e6:4a:87: 5b:5c:9a:13:5c:d3:69:3a:01:ba:cc:fa:3e:5d:17: bb:48:c6:51:57:1c:41:f4:47:7f:b3:1b:bc:5e:5b: d9:c7:63:57:6d:ee:bf:5f:02:14:c0:66:9c:97:b3: 47:dd:79:88:dd:da:f7:21:17:32:5d:db:8b:cc:9b: 23:bf:14:98:6c:ca:8b:0c:6a:5b:3b:ad:d2:4f:ee: 66:52:f9:69:7b:54:63:fc:63:ad:7c:1c:a3:33:aa: 41:a7:fc:e5:0a:72:49:44:13:5e:72:9f:e7:49:a6: 95:e2:d8:27:47:55:4a:9f:3a:c8:1b:b1:22:55:74: 9f:ba:a6:6c:d9:b9:3b:2d:27:39:16:9c:d5:1a:80: a3:54:0d:bf:ad:a3:c4:61:86:c2:da:b5:17:65:a6: 2f:58:c9:cd:6e:96:4d:ed:86:44:1c:82:79:76:c1: ac:80:c0:c6:29:44:35:e8:ba:b2:31:da:22:55:62: 8e:35:8a:f7:a8:5b:55:f0:4d:7c:12:da:e5:ca:01: 20:76:9f:c3:48:d8:b3:7c:a5:82:23:d6:c2:5c:28: db:e1:5f:ad:f7:63:c2:50:9d:13:e2:31:de:40:30: 11:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E1:CF:8A:19:B8:F6:FE:1F:81:2E:0B:43:66:19:3C:37:2C:4C:55 X509v3 Authority Key Identifier: keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f1:55:77:20:91:b9:5f:1e:24:26:45:52:52:19:53:06:d0: 35:d8:ed:d5:b2:19:8e:56:4b:dd:33:84:09:2f:f5:c6:92:37: 16:b9:37:3c:15:a4:69:44:f9:22:85:a1:09:13:07:22:41:6c: 3a:37:8c:19:4f:d8:49:f6:b8:ca:e2:27:4c:71:09:d9:ce:7d: df:7e:03:5f:6e:9c:07:5d:93:8a:c6:2b:d9:6d:a6:67:c0:9a: eb:36:68:fa:d0:98:42:f0:b1:03:da:ea:00:08:56:4d:50:fc: 9f:74:a6:c8:ca:e0:9c:5a:7e:37:a1:79:85:21:61:f9:e9:6d: 93:38:95:fd:04:cb:33:77:39:54:6a:cb:43:fd:e0:49:d4:46: 0f:7e:ad:ed:cb:76:31:01:35:af:92:bb:c5:82:d6:cb:8d:d7: 9a:4e:93:18:20:e5:83:b4:b5:1d:c2:15:75:b9:e3:c4:f6:e0: 12:5a:0c:1e:65:55:0e:25:a0:f0:55:e2:96:46:e3:83:a2:fd: 72:42:37:d6:bf:b0:e0:5a:db:95:46:95:c2:8f:8e:e4:7e:97: fe:ab:4f:ca:fa:5b:76:bb:b4:93:d2:48:bf:77:7b:fc:e6:f8: 53:fe:0a:17:38:1c:7b:b5:d1:d5:38:7d:fb:64:2c:6e:b4:4d: bd:0f:1d:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTZBQTExMC8GA1UEBRMoQTc2RTA1QjgzNDU0RUQxQTIwOTAyNUU4M0Q3NUU0MDU3 OTE4OTJDMTAeFw0yNTA4MDgyMzE0MDBaFw0yNTA4MTUyMzE0MDBaMBgxFjAUBgNV BAMTDTY4OTY4NGI4LTRjYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWVDYsQhNOly0yghtp07GTwcmkAIgrkQU/E+ZKh1tcmhNc02k6AbrM+j5dF7tI xlFXHEH0R3+zG7xeW9nHY1dt7r9fAhTAZpyXs0fdeYjd2vchFzJd24vMmyO/FJhs yosMals7rdJP7mZS+Wl7VGP8Y618HKMzqkGn/OUKcklEE15yn+dJppXi2CdHVUqf OsgbsSJVdJ+6pmzZuTstJzkWnNUagKNUDb+to8RhhsLatRdlpi9Yyc1ulk3thkQc gnl2wayAwMYpRDXourIx2iJVYo41iveoW1XwTXwS2uXKASB2n8NI2LN8pYIj1sJc KNvhX633Y8JQnRPiMd5AMBH/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbeHPihm4 9v4fgS4LQ2YZPDcsTFUwHwYDVR0jBBgwFoAUp24FuDRU7RogkCXoPXXkBXkYksEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNkFBLzhFREIxMDdFQURB ODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1JvZ2tDWG9QWFhrQlhrWWtz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDI0RnVEUlU3Um9na0NYb1BYWGtCWGtZa3NFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NkFBLzhFREIxMDdFQURBODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1Jv Z2tDWG9QWFhrQlhrWWtzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJnxVXcgkblfHiQmRVJSGVMG0DXY7dWyGY5WS90zhAkv9caSNxa5NzwV pGlE+SKFoQkTByJBbDo3jBlP2En2uMriJ0xxCdnOfd9+A19unAddk4rGK9ltpmfA mus2aPrQmELwsQPa6gAIVk1Q/J90psjK4JxafjeheYUhYfnpbZM4lf0EyzN3OVRq y0P94EnURg9+re3LdjEBNa+Su8WC1suN15pOkxgg5YO0tR3CFXW548T24BJaDB5l VQ4loPBV4pZG44Oi/XJCN9a/sOBa25VGlcKPjuR+l/6rT8r6W3a7tJPSSL93e/zm +FP+Chc4HHu10dU4fftkLG60Tb0PHRk= -----END CERTIFICATE-----Generated at Sat Aug 9 14:25:12 2025 by rpki-client