$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json) Hash identifier: 4yWPzhsvy15qjl80VbRjuhwZXeCIlnV2MFr/VLsJlac= Subject key identifier: 4F:74:88:5C:39:20:D6:B9:37:D0:DF:3E:D9:BB:07:A6:91:9E:04:71 Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft Manifest number: 0387 Signing time: Sat 09 Aug 2025 01:25:38 +0000 Manifest this update: Sat 09 Aug 2025 01:25:37 +0000 Manifest next update: Sat 16 Aug 2025 01:25:37 +0000 Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: iIollDBKQtvyQ1avXDh537riHGTlkcr+LvCllzcpWQg=) 2: 2E6B1980CA0211EF80E1DD42C4F9AE02.roa (hash: tjP7XKoMqNX1LQ2yQaonbdxhhj6KFZbH0sAXzwNewCI=) 3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: jSZIZjYKkStn9QppODMFCLkxqd3q8dcDZLkti6SpjkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Validity Not Before: Aug 9 01:25:37 2025 GMT Not After : Aug 16 01:25:37 2025 GMT Subject: CN=6896a391-afb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:53:72:ec:0d:d7:cf:54:6a:f6:5c:28:67:07: d9:67:96:17:7e:37:a1:6e:00:4e:d0:b7:86:e3:6a: 9d:cc:ad:49:02:e8:95:45:f0:07:a9:e4:ab:0d:78: e6:85:bd:a8:54:6b:7b:dd:bc:cd:a1:5b:a1:7c:8c: 0b:70:30:7c:b7:3b:31:68:5b:cb:16:8a:6e:9b:29: a8:30:9f:8d:b0:48:eb:d2:91:42:2b:e0:ca:f5:53: 6b:9d:c7:2e:03:62:f1:4b:9b:e0:0c:bd:2c:31:08: 2c:93:3d:07:0c:77:fa:bf:02:e8:89:58:8d:ce:03: a3:81:25:73:59:aa:f6:59:f6:c2:cc:61:38:a9:f5: af:60:04:ba:23:f0:b5:aa:69:67:2b:f0:62:8c:ac: 35:85:9f:d2:48:a7:2d:eb:a8:d6:b9:7f:3e:a5:dc: 13:47:ee:aa:37:22:68:85:53:3a:28:ae:bf:98:43: 83:70:4a:a3:94:1b:4e:49:3b:11:46:a9:04:95:f8: 51:41:7a:48:ae:4d:42:23:78:61:31:82:ba:42:e5: 38:ef:d7:51:6f:f9:d5:16:87:b9:36:5b:5f:3f:d1: 92:6c:25:89:22:97:94:f9:e8:19:07:99:a1:c7:d6: dc:b3:06:9f:ee:bb:70:a2:ed:6c:b9:f8:1c:81:ad: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:74:88:5C:39:20:D6:B9:37:D0:DF:3E:D9:BB:07:A6:91:9E:04:71 X509v3 Authority Key Identifier: keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:78:ab:9b:67:e1:4b:a3:0d:6d:00:f3:00:61:05:ab:a2:e5: 9d:74:eb:53:c5:cc:1f:14:9a:0f:ee:2c:bb:80:37:1f:0b:7c: 47:c2:14:87:f2:20:60:92:b1:5a:5e:29:2e:0d:c9:85:90:77: ed:21:24:3c:80:f2:03:29:06:30:1a:4b:48:dc:91:76:38:8e: 5d:16:e8:dd:45:45:0d:9d:72:9b:06:a1:be:7d:8b:7f:d1:d1: 09:30:52:4d:ee:15:4a:f5:7a:84:9e:4b:05:82:23:6d:9f:5a: 4d:2a:50:5a:0b:88:73:df:90:1d:76:32:c5:7b:ad:33:d4:14: e2:5e:4a:b8:25:c0:01:7e:b3:35:48:5a:94:c8:78:66:ed:18: fe:67:1d:6c:56:24:68:bc:38:74:5a:5e:e2:e4:0c:e8:ff:4a: f9:c2:88:de:ca:82:75:c2:3a:36:ae:6d:37:f0:c5:0f:f0:d5: 54:04:44:b2:52:ea:5e:4e:69:8a:88:16:0a:75:4f:56:0a:32: c7:0d:3d:04:29:68:3b:66:43:8c:5d:b8:da:68:6c:6f:29:41: 80:67:c0:7b:aa:c4:46:0a:46:5b:f7:ea:94:7e:0f:27:5b:21: 99:6d:c1:58:99:44:45:9d:d0:cd:22:93:93:7e:55:de:bc:6c: 0f:0d:d2:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND NDE0RjE2QjUwHhcNMjUwODA5MDEyNTM3WhcNMjUwODE2MDEyNTM3WjAYMRYwFAYD VQQDEw02ODk2YTM5MS1hZmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlNy7A3Xz1Rq9lwoZwfZZ5YXfjehbgBO0LeG42qdzK1JAuiVRfAHqeSrDXjm hb2oVGt73bzNoVuhfIwLcDB8tzsxaFvLFopumymoMJ+NsEjr0pFCK+DK9VNrnccu A2LxS5vgDL0sMQgskz0HDHf6vwLoiViNzgOjgSVzWar2WfbCzGE4qfWvYAS6I/C1 qmlnK/BijKw1hZ/SSKct66jWuX8+pdwTR+6qNyJohVM6KK6/mEODcEqjlBtOSTsR RqkElfhRQXpIrk1CI3hhMYK6QuU479dRb/nVFoe5NltfP9GSbCWJIpeU+egZB5mh x9bcswaf7rtwou1sufgcga0o3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE90iFw5 INa5N9DfPtm7B6aRngRxMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5 QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm b1ljcTN1VFBKaVBFRlBGclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdeKubZ+FLow1tAPMAYQWrouWddOtTxcwfFJoP7iy7gDcfC3xHwhSH 8iBgkrFaXikuDcmFkHftISQ8gPIDKQYwGktI3JF2OI5dFujdRUUNnXKbBqG+fYt/ 0dEJMFJN7hVK9XqEnksFgiNtn1pNKlBaC4hz35AddjLFe60z1BTiXkq4JcABfrM1 SFqUyHhm7Rj+Zx1sViRovDh0Wl7i5Azo/0r5wojeyoJ1wjo2rm038MUP8NVUBESy UupeTmmKiBYKdU9WCjLHDT0EKWg7ZkOMXbjaaGxvKUGAZ8B7qsRGCkZb9+qUfg8n WyGZbcFYmURFndDNIpOTflXevGwPDdJw -----END CERTIFICATE-----Generated at Sat Aug 9 22:47:15 2025 by rpki-client