$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json) Hash identifier: LkNOMHn4oM8B8RRS4oB5YBkay33PsKRrJBZ8x4ZtjFs= Subject key identifier: 8E:B2:F7:43:52:25:0E:29:3D:87:E7:FE:7E:1C:09:BD:E5:91:ED:61 Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 1769 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft Manifest number: 16CE Signing time: Wed 06 Aug 2025 16:42:08 +0000 Manifest this update: Wed 06 Aug 2025 16:42:08 +0000 Manifest next update: Wed 13 Aug 2025 16:42:08 +0000 Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: HQJgyvPQ6jVrsW0T54uFvtxBjId6pnbNGfR0JubKvVw=) 2: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: +7/Vt0FTaK5GWH/3IE+pQmL2wHj4vbU0fzaTx23ZBa4=) 3: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: dHZjnobEWvCkJLuRIvZrVbscT5l1hAVdVQPJ8ZrvrKU=) 4: BE080034527011F0A1061D5AC4F9AE02.roa (hash: hJTyURGyPMiJ2vcKve1J9dwSCev0OBfNhIrnqq/i6xA=) 5: B1D95AEA7F9B11EFBF8E2428C4F9AE02.roa (hash: J48bHySJ6PshhvlJwPkBG6RyobLf8a6YeYETe5QG1TY=) 6: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: uPpnoQZGZKxbY1tDf1IppgOlALrQMUGFd/gQhZLvnlg=) 7: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: o4sVUAvBbfXlH+Fkt0MhUocTngit2NpPuryfYPu2kLw=) 8: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: NWWiuwLgl9RwlWRS8BInX5D7zCXvjEBWjuBg9LiZans=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5993 (0x1769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Aug 6 16:42:08 2025 GMT Not After : Aug 13 16:42:08 2025 GMT Subject: CN=689385e0-0ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:29:11:52:d7:c6:41:c7:ef:9e:d8:44:07: e0:c5:4a:d1:3d:8e:03:e8:a6:f0:8f:5d:36:6b:b2: bb:d0:be:e0:e1:38:6c:be:c1:19:b8:01:ec:23:16: 6d:55:8f:74:6f:50:fa:b5:0f:54:77:27:8d:94:12: 52:30:c7:cd:7d:7c:d9:1f:cf:b5:17:3d:6a:04:47: b3:72:87:fd:2e:4f:be:e2:94:0c:67:a2:1b:fe:2f: a1:3a:4f:8b:9b:89:9d:dd:67:38:9c:d6:a8:b9:18: 4a:6d:96:f5:ad:90:37:43:f5:56:da:ff:b3:d8:92: 1b:84:61:fd:79:1e:4f:e4:fa:8d:eb:38:dd:7e:d5: ff:f3:5d:a7:99:dd:a0:26:ed:2d:d9:38:23:7e:47: e4:fc:51:30:b5:89:9a:3e:82:c1:5a:8c:9f:f4:26: 23:0a:ed:7d:bb:ce:39:c1:fc:a1:43:c9:b4:d5:80: 03:85:ce:ba:ae:0c:1f:1f:ab:b0:60:f7:ff:f0:3b: 5b:c4:3f:fc:c3:28:7c:38:52:5e:3c:09:bc:95:3f: e2:04:8d:e7:2a:cf:65:ef:31:51:c4:e9:68:07:d0: ad:10:7e:bc:21:a3:88:3e:8b:21:8d:39:a6:15:72: e8:93:44:2c:5f:c0:2d:55:eb:c7:19:52:39:95:1a: 4c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B2:F7:43:52:25:0E:29:3D:87:E7:FE:7E:1C:09:BD:E5:91:ED:61 X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:19:94:63:c1:77:8c:70:35:9c:b9:88:ad:84:ff:62:eb:20: eb:0f:e2:5f:88:fb:43:ef:2c:22:c4:7e:99:0f:f0:6c:68:06: 80:a1:20:b6:cb:40:b3:22:25:e6:36:88:62:16:00:ba:96:55: a7:5d:ee:1e:9c:72:01:fa:a0:d3:b8:de:cd:2d:70:39:79:73: 94:0a:40:40:81:eb:6c:d8:18:3a:99:83:8a:d6:bd:05:20:9b: ea:0d:43:27:8b:56:16:ac:7a:e9:4e:8f:6e:b3:e3:33:b4:ac: d6:92:21:53:d9:c5:af:37:4e:6d:75:ca:56:b7:52:f0:0c:e6: 97:c5:bf:38:2f:1d:80:ef:45:62:4b:9a:a6:4b:3d:46:84:45: 30:13:08:16:ba:e5:c4:dd:38:f2:c0:13:21:6e:14:ae:83:72: e8:9c:17:88:a1:14:9d:fd:6a:a2:50:86:44:6c:43:41:5f:f4: 83:f1:62:bc:67:33:dc:97:27:2e:11:9f:a8:73:fb:b9:21:d8: 99:9e:fd:e4:99:1d:f9:14:cb:ed:a3:8b:08:e2:fd:79:87:b9: 05:fa:f1:aa:b7:be:62:3c:16:33:54:32:c8:c2:53:82:5a:4e: 58:26:9b:8f:fe:5a:a2:86:11:72:48:ec:4b:72:f0:e6:aa:c3: 59:cb:b4:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjUwODA2MTY0MjA4WhcNMjUwODEzMTY0MjA4WjAYMRYwFAYD VQQDEw02ODkzODVlMC0wZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc0pEVLXxkHH757YRAfgxUrRPY4D6Kbwj102a7K70L7g4ThsvsEZuAHsIxZt VY90b1D6tQ9UdyeNlBJSMMfNfXzZH8+1Fz1qBEezcof9Lk++4pQMZ6Ib/i+hOk+L m4md3Wc4nNaouRhKbZb1rZA3Q/VW2v+z2JIbhGH9eR5P5PqN6zjdftX/812nmd2g Ju0t2Tgjfkfk/FEwtYmaPoLBWoyf9CYjCu19u845wfyhQ8m01YADhc66rgwfH6uw YPf/8DtbxD/8wyh8OFJePAm8lT/iBI3nKs9l7zFRxOloB9CtEH68IaOIPoshjTmm FXLok0QsX8AtVevHGVI5lRpMDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6y90NS JQ4pPYfn/n4cCb3lke1hMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC SlNHanFCa0FtWGo4X3BIbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyGZRjwXeMcDWcuYithP9i6yDrD+JfiPtD7ywixH6ZD/BsaAaAoSC2 y0CzIiXmNohiFgC6llWnXe4enHIB+qDTuN7NLXA5eXOUCkBAgets2Bg6mYOK1r0F IJvqDUMni1YWrHrpTo9us+MztKzWkiFT2cWvN05tdcpWt1LwDOaXxb84Lx2A70Vi S5qmSz1GhEUwEwgWuuXE3TjywBMhbhSug3LonBeIoRSd/WqiUIZEbENBX/SD8WK8 ZzPclycuEZ+oc/u5IdiZnv3kmR35FMvto4sI4v15h7kF+vGqt75iPBYzVDLIwlOC Wk5YJpuP/lqihhFySOxLcvDmqsNZy7Rp -----END CERTIFICATE-----Generated at Thu Aug 7 05:11:09 2025 by rpki-client