$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json) Hash identifier: sH949OECPfFMVgq4L5kCwxykKE5NTtkYE/cyYe9mol4= Subject key identifier: 38:E5:A2:B3:A9:A4:46:79:9B:5A:05:56:3E:A6:16:2E:26:6C:E5:65 Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0BC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft Manifest number: 0BB8 Signing time: Wed 06 Aug 2025 19:11:31 +0000 Manifest this update: Wed 06 Aug 2025 19:11:30 +0000 Manifest next update: Wed 13 Aug 2025 19:11:30 +0000 Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: WoGJHCYWhLNZIdTMwYQGpy2SZdqWeZyRAwUqNQXB0CE=) 2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: kbjVSRJWVNsKP886UTdCXje46K3vQ/OgBysCSuexrdk=) 3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 0VsxW37CUzW4AoNDh7cYqP2zuBQmSz8Y4/jKr2zDwys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3017 (0xbc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Aug 6 19:11:30 2025 GMT Not After : Aug 13 19:11:30 2025 GMT Subject: CN=6893a8e3-9c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c2:1c:85:a4:bd:a3:78:45:f7:26:a6:c6:26: ee:4b:61:0f:aa:35:d2:29:77:6b:83:a8:7b:4c:4a: 56:fe:36:eb:bf:1d:56:f0:de:6d:df:dc:3e:13:79: 01:cb:89:90:ea:d2:ce:7e:07:3c:9d:e9:d5:23:01: 78:55:36:26:ea:d0:33:18:73:ad:c6:c2:bf:01:1a: f7:96:6c:74:fe:47:78:2f:3d:75:c0:3d:ba:b0:f2: 2a:c9:01:cd:73:3b:83:2a:37:f3:52:cb:9b:dc:b3: 28:21:68:91:1b:18:c8:ac:fa:46:13:b1:24:af:e0: ab:74:18:a7:16:06:15:eb:58:9b:7f:bc:0b:16:48: 27:38:15:88:1e:77:c4:93:03:59:e7:9e:d0:86:46: 41:96:9a:8f:d4:f8:7d:07:87:4e:7b:d6:12:c7:32: 05:f8:1a:fa:2b:6f:a8:2d:7a:5a:e1:a5:c6:ac:21: ae:ea:8f:95:4d:5c:12:7f:7e:94:30:b8:3a:a6:b8: 84:34:e8:6f:96:55:2a:18:7b:c6:cc:37:e5:20:4c: 5f:c8:e9:33:f8:7e:5b:26:47:98:c7:ff:43:00:8c: 19:0a:ae:b1:2f:81:8d:76:6f:6d:9e:57:1f:61:d3: 84:50:17:71:e9:ce:64:84:28:69:7b:a6:76:70:bf: 43:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E5:A2:B3:A9:A4:46:79:9B:5A:05:56:3E:A6:16:2E:26:6C:E5:65 X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:29:9a:7f:7c:c0:77:2b:b1:07:40:99:bd:06:55:e4:4e:3e: 9e:7d:82:c0:0b:aa:91:2e:8c:5e:51:bb:0d:77:1f:a4:3a:ee: c6:e6:7e:61:e1:66:00:a3:21:4c:d9:f5:95:2a:25:dd:35:d5: 46:23:d1:b2:8f:6e:1a:0c:6e:54:ff:46:f3:c3:a2:46:0f:f3: a9:d6:33:5b:c7:bc:3d:32:3b:7f:81:c4:4b:b0:93:66:1b:7f: 31:11:62:81:7b:b2:2e:68:c6:48:71:1c:cf:3b:06:41:52:d9: 91:1b:21:14:62:32:56:52:e3:3a:57:cd:12:a4:85:67:30:2e: db:c4:6f:60:c1:7c:5d:fd:de:51:6e:4a:1d:87:1e:70:5c:69: a5:b4:0e:7b:43:c8:c6:90:00:12:9d:75:88:45:a6:eb:fc:7a: ff:30:1a:99:f0:5b:35:5f:c4:f5:47:fe:49:e9:29:00:ec:d0: c1:28:91:07:64:43:51:7c:05:00:14:a7:9b:bc:dd:3f:6c:79: 7e:5f:5e:a0:65:2d:53:f1:88:1d:c7:5b:4a:4d:19:29:de:2a: 35:2e:ca:61:3f:d1:a5:18:64:95:66:99:00:9b:21:87:f4:3e: 62:80:a0:7f:3e:66:65:cb:63:98:e9:73:e8:6a:6d:5f:0a:a2: 41:07:cf:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjUwODA2MTkxMTMwWhcNMjUwODEzMTkxMTMwWjAYMRYwFAYD VQQDEw02ODkzYThlMy05YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcIchaS9o3hF9yamxibuS2EPqjXSKXdrg6h7TEpW/jbrvx1W8N5t39w+E3kB y4mQ6tLOfgc8nenVIwF4VTYm6tAzGHOtxsK/ARr3lmx0/kd4Lz11wD26sPIqyQHN czuDKjfzUsub3LMoIWiRGxjIrPpGE7Ekr+CrdBinFgYV61ibf7wLFkgnOBWIHnfE kwNZ557QhkZBlpqP1Ph9B4dOe9YSxzIF+Br6K2+oLXpa4aXGrCGu6o+VTVwSf36U MLg6priENOhvllUqGHvGzDflIExfyOkz+H5bJkeYx/9DAIwZCq6xL4GNdm9tnlcf YdOEUBdx6c5khChpe6Z2cL9DEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjlorOp pEZ5m1oFVj6mFi4mbOVlMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53 UzI1YzEtb1NnUDBQVXBlYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARKZp/fMB3K7EHQJm9BlXkTj6efYLAC6qRLoxeUbsNdx+kOu7G5n5h 4WYAoyFM2fWVKiXdNdVGI9Gyj24aDG5U/0bzw6JGD/Op1jNbx7w9Mjt/gcRLsJNm G38xEWKBe7IuaMZIcRzPOwZBUtmRGyEUYjJWUuM6V80SpIVnMC7bxG9gwXxd/d5R bkodhx5wXGmltA57Q8jGkAASnXWIRabr/Hr/MBqZ8Fs1X8T1R/5J6SkA7NDBKJEH ZENRfAUAFKebvN0/bHl+X16gZS1T8Ygdx1tKTRkp3io1LsphP9GlGGSVZpkAmyGH 9D5igKB/PmZly2OY6XPoam1fCqJBB8/B -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:48 2025 by rpki-client