$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft File: -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json) Hash identifier: UJZdjQgsgvourYLjLHy+1f4jr+3rWCpimK1c9ZwqPh0= Subject key identifier: 38:05:10:D4:7C:36:E3:7E:60:9A:06:62:28:AF:46:5D:79:C0:10:EB Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft Manifest number: 0193 Signing time: Sat 09 Aug 2025 03:48:27 +0000 Manifest this update: Sat 09 Aug 2025 03:48:26 +0000 Manifest next update: Sat 16 Aug 2025 03:48:26 +0000 Files and hashes: 1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: 51BTAPEqhIh+QDR/2HfIAdqCG0ywXyjpLydco1wLKXg=) 2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: Hgvy/rbsLEaWAnrB/PMoMX/RB2XdkdZAeykYpDBMbDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF Validity Not Before: Aug 9 03:48:26 2025 GMT Not After : Aug 16 03:48:26 2025 GMT Subject: CN=6896c50b-a1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6a:33:10:76:34:05:8b:0a:c1:e7:d3:5a:ff: a3:04:06:87:72:4f:4a:9f:00:d8:89:25:2b:a7:11: b5:27:59:61:74:61:b6:fc:a9:a0:b6:57:64:c2:ef: 44:05:f7:16:61:ed:3c:d5:94:87:20:12:15:05:93: ca:a0:82:b6:0e:f6:c5:b3:f1:4d:2b:8b:37:f8:b3: b4:39:bc:40:36:26:2a:c6:25:d2:10:73:1e:ab:ab: b3:ba:ae:0e:b3:02:db:f0:fd:8c:8c:db:9e:9d:19: fe:8f:16:53:f9:c9:65:33:45:7e:b0:43:10:80:2c: 7d:c3:b0:7b:d1:39:69:97:c4:11:d3:06:d4:20:f8: 71:5c:2b:8e:b7:bc:e0:a8:36:75:12:29:89:66:67: 9b:cb:40:3b:ce:aa:1b:10:d8:d7:5c:d3:67:9a:d2: 96:33:1c:f9:7e:cf:c8:2c:14:29:21:ea:18:1f:4d: 95:d3:83:b1:6d:6e:e7:66:d3:45:5c:02:7a:f3:ac: 49:73:ba:4f:2b:d7:98:6b:2f:ef:b5:e9:9d:ed:89: 49:05:df:36:45:53:2a:a0:f7:43:07:0c:95:e2:8b: 39:6b:f2:49:6c:89:50:8c:22:53:bf:19:f9:be:48: 26:47:73:46:c6:7f:15:d9:e8:af:94:f5:26:7f:b3: b2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:05:10:D4:7C:36:E3:7E:60:9A:06:62:28:AF:46:5D:79:C0:10:EB X509v3 Authority Key Identifier: keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:78:68:69:7d:17:21:98:ce:37:57:43:f0:dc:1e:78:3d:99: ab:50:dc:c9:e4:83:a6:df:37:d9:8a:3d:cc:c1:1b:81:29:48: 93:e7:89:96:aa:c1:27:55:d9:d9:7b:bf:8b:38:07:35:b9:73: 7e:24:09:a9:b8:e4:2e:c1:6c:32:4f:ab:a6:cd:cf:e3:77:ee: e8:44:b7:f4:81:a4:89:f4:32:0b:4a:86:59:fb:eb:da:20:66: 96:12:61:12:14:61:18:f5:9d:06:1b:0a:e0:84:a5:19:50:73: 06:64:3b:c5:07:17:64:26:9b:d7:9e:a8:5a:ab:42:35:a7:ee: 86:99:b0:75:86:5e:4a:de:11:7b:af:3b:19:ce:95:5f:43:da: f7:9f:2e:e8:e9:49:62:cf:93:4e:7f:20:34:ef:66:d3:d4:d7: a2:52:01:bf:43:69:58:ce:a4:d3:d3:ac:69:76:a0:46:4e:3c: f0:b5:e5:20:21:06:7b:ff:29:62:14:7c:f3:e6:2e:42:8d:17: a9:8c:8a:0c:cf:47:72:5c:f8:49:bd:54:91:c1:6a:7e:3d:02: aa:04:5d:a7:ac:64:42:9f:5c:b0:f9:17:b8:ec:7a:c6:25:da: b6:a8:4a:b0:a8:48:ad:13:f0:f8:f0:cc:c0:01:f2:ac:f1:6a: ec:05:cc:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyM0IxMTAvBgNVBAUTKEY4MEExN0UxOEUzRjNBMTJGNzUyMzM2NzJFOEFDNjdG ODBFNTJGREYwHhcNMjUwODA5MDM0ODI2WhcNMjUwODE2MDM0ODI2WjAYMRYwFAYD VQQDEw02ODk2YzUwYi1hMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymozEHY0BYsKwefTWv+jBAaHck9KnwDYiSUrpxG1J1lhdGG2/Kmgtldkwu9E BfcWYe081ZSHIBIVBZPKoIK2DvbFs/FNK4s3+LO0ObxANiYqxiXSEHMeq6uzuq4O swLb8P2MjNuenRn+jxZT+cllM0V+sEMQgCx9w7B70Tlpl8QR0wbUIPhxXCuOt7zg qDZ1EimJZmeby0A7zqobENjXXNNnmtKWMxz5fs/ILBQpIeoYH02V04OxbW7nZtNF XAJ686xJc7pPK9eYay/vtemd7YlJBd82RVMqoPdDBwyV4os5a/JJbIlQjCJTvxn5 vkgmR3NGxn8V2eivlPUmf7OyrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgFENR8 NuN+YJoGYiivRl15wBDrMB8GA1UdIwQYMBaAFPgKF+GOPzoS91IzZy6Kxn+A5S/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIzQi9EQzQ5QTVGQTBB QjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09oTDNVak5uTG9yR2Y0RGxM OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1Bb1g0WTRfT2hMM1VqTm5Mb3JHZjREbEw5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDIzQi9EQzQ5QTVGQTBBQjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09o TDNVak5uTG9yR2Y0RGxMOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDeGhpfRchmM43V0Pw3B54PZmrUNzJ5IOm3zfZij3MwRuBKUiT54mW qsEnVdnZe7+LOAc1uXN+JAmpuOQuwWwyT6umzc/jd+7oRLf0gaSJ9DILSoZZ++va IGaWEmESFGEY9Z0GGwrghKUZUHMGZDvFBxdkJpvXnqhaq0I1p+6GmbB1hl5K3hF7 rzsZzpVfQ9r3ny7o6Uliz5NOfyA072bT1NeiUgG/Q2lYzqTT06xpdqBGTjzwteUg IQZ7/yliFHzz5i5CjRepjIoMz0dyXPhJvVSRwWp+PQKqBF2nrGRCn1yw+Re47HrG Jdq2qEqwqEitE/D48MzAAfKs8WrsBczV -----END CERTIFICATE-----Generated at Sun Aug 10 10:38:23 2025 by rpki-client