$ rpki-client -vvf rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft File: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft (raw, json) Hash identifier: CF3zqfHgrFWnnTWCA0BA2zSWFUDIvs/5wWcvsYs3/JU= Subject key identifier: 66:CF:0E:E6:EE:EE:C0:E3:0A:0F:EE:F1:0A:37:A8:CE:34:7F:50:1D Authority key identifier: 4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD Certificate issuer: /CN=A915BDD9/serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft Manifest number: FB Signing time: Mon 11 Aug 2025 05:19:13 +0000 Manifest this update: Mon 11 Aug 2025 05:19:12 +0000 Manifest next update: Mon 18 Aug 2025 05:19:12 +0000 Files and hashes: 1: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl (hash: iigLUDbfiTLay75ZB3cQqQSXrDx4g/Y/qWG+v2CddNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BDD9, serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Validity Not Before: Aug 11 05:19:12 2025 GMT Not After : Aug 18 05:19:12 2025 GMT Subject: CN=68997d51-bee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b1:9f:f2:41:0b:2b:05:d7:c6:09:cc:32:72: a2:f0:1a:2f:09:de:3e:61:fc:ff:70:b2:26:db:23: d3:81:94:b2:fb:c3:cd:2e:12:96:8f:b2:f1:8f:7d: ea:c6:6e:68:51:82:e7:ea:54:12:b8:3b:ba:c4:b9: e5:d1:df:f5:0f:52:40:eb:e6:ca:bb:c3:7b:87:d7: bf:0c:0c:27:d2:eb:a1:5b:1d:68:df:d7:0b:dc:85: 99:6c:e6:fd:03:fc:c4:f4:39:f6:c8:83:d9:85:25: 1d:d1:54:5b:e5:e1:7f:1c:fc:3d:72:bb:a8:78:05: a7:9e:04:40:d2:0c:c7:08:7b:60:0e:21:85:5b:ec: 3c:2c:45:7b:39:f3:41:98:75:c7:3e:f4:dd:d6:8b: e9:d7:f9:f2:05:ba:67:1d:ff:03:24:0c:ea:e7:27: d3:3c:b9:cf:39:cf:5d:45:81:95:ad:58:00:5b:01: ff:d7:44:8c:d2:50:16:90:1b:74:ea:a5:44:8a:42: b0:cf:da:b2:c4:b9:4e:e1:77:69:ea:09:a1:18:64: 24:4d:30:97:0d:71:3c:84:f9:1b:8a:c6:6b:a6:02: b7:21:6a:a4:ea:7f:54:c6:48:83:6c:b2:6e:19:64: 23:e6:ca:c2:ed:0d:40:9e:12:02:0d:c6:5a:9b:b3: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CF:0E:E6:EE:EE:C0:E3:0A:0F:EE:F1:0A:37:A8:CE:34:7F:50:1D X509v3 Authority Key Identifier: keyid:4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ca:5d:4b:f1:c2:11:3f:be:88:21:4b:8f:89:b3:40:65:76: 2d:b7:4d:dd:9b:e5:25:30:1b:b9:22:1d:f5:95:81:83:43:ed: 80:93:57:e7:0e:50:21:63:f2:77:b9:73:2a:e4:2a:5f:8d:48: e2:63:e9:95:d2:d1:6c:7b:b5:b8:ed:39:36:4b:5c:c8:64:28: 77:a6:b6:26:a4:2a:b4:da:f9:c9:dc:0e:5f:17:5a:36:8a:28: 26:24:f1:97:7a:bf:b4:6e:88:16:7b:32:95:40:48:c4:80:ee: 52:6b:90:5c:af:d4:4f:6c:60:ed:b6:e1:ff:91:10:4a:5f:35: dc:1e:34:4c:6c:f9:6f:78:3a:d1:04:f8:4a:48:db:76:f8:5b: 52:30:b4:7a:83:99:f4:dc:0a:1f:0e:e5:21:12:05:ca:87:e7: b0:fa:ed:ad:55:14:66:97:81:47:03:55:ba:94:2a:d3:a9:0b: a9:76:bd:9a:73:90:30:63:a3:58:5d:59:2d:8f:22:39:aa:05: b8:aa:69:8c:8d:56:af:75:9b:ab:3c:2e:35:a2:1b:36:ab:75: 7c:98:2c:03:80:d2:e9:39:5f:12:69:9c:48:20:4c:7b:57:e2: 47:a4:14:d5:1c:c9:0c:9c:86:1b:f0:17:d4:89:6b:a2:34:40: e1:a4:aa:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJERDkxMTAvBgNVBAUTKDRBMTZFMUVCM0JERjhERDQ2MDczQzI1NTczNTNBNEZD RTg3MDg3Q0QwHhcNMjUwODExMDUxOTEyWhcNMjUwODE4MDUxOTEyWjAYMRYwFAYD VQQDEw02ODk5N2Q1MS1iZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07Gf8kELKwXXxgnMMnKi8BovCd4+Yfz/cLIm2yPTgZSy+8PNLhKWj7Lxj33q xm5oUYLn6lQSuDu6xLnl0d/1D1JA6+bKu8N7h9e/DAwn0uuhWx1o39cL3IWZbOb9 A/zE9Dn2yIPZhSUd0VRb5eF/HPw9cruoeAWnngRA0gzHCHtgDiGFW+w8LEV7OfNB mHXHPvTd1ovp1/nyBbpnHf8DJAzq5yfTPLnPOc9dRYGVrVgAWwH/10SM0lAWkBt0 6qVEikKwz9qyxLlO4Xdp6gmhGGQkTTCXDXE8hPkbisZrpgK3IWqk6n9UxkiDbLJu GWQj5srC7Q1AnhICDcZam7OkoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbPDubu 7sDjCg/u8Qo3qM40f1AdMB8GA1UdIwQYMBaAFEoW4es7343UYHPCVXNTpPzocIfN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkREOS8yMjcyQzVGMEYx QjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2ZmpkUmdjOEpWYzFPa19PaHdo ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoYmg2enZmamRSZ2M4SlZjMU9rX09od2g4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkREOS8yMjcyQzVGMEYxQjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2Zmpk UmdjOEpWYzFPa19PaHdoODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeyl1L8cIRP76IIUuPibNAZXYtt03dm+UlMBu5Ih31lYGDQ+2Ak1fn DlAhY/J3uXMq5CpfjUjiY+mV0tFse7W47Tk2S1zIZCh3prYmpCq02vnJ3A5fF1o2 iigmJPGXer+0bogWezKVQEjEgO5Sa5Bcr9RPbGDttuH/kRBKXzXcHjRMbPlveDrR BPhKSNt2+FtSMLR6g5n03AofDuUhEgXKh+ew+u2tVRRml4FHA1W6lCrTqQupdr2a c5AwY6NYXVktjyI5qgW4qmmMjVavdZurPC41ohs2q3V8mCwDgNLpOV8SaZxIIEx7 V+JHpBTVHMkMnIYb8BfUiWuiNEDhpKqb -----END CERTIFICATE-----Generated at Wed Aug 13 05:30:39 2025 by rpki-client