$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft File: o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft (raw, json) Hash identifier: pMB05dcl22LSsm4G1KrFkHpiemIQbhEeJ0yxEpgShu8= Subject key identifier: 8B:F7:1B:3C:F4:A2:58:6E:9B:D3:E6:D0:26:81:A8:CB:52:DE:23:7D Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 Certificate issuer: /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft Manifest number: FA Signing time: Sat 09 Aug 2025 05:38:57 +0000 Manifest this update: Sat 09 Aug 2025 05:38:57 +0000 Manifest next update: Sat 16 Aug 2025 05:38:57 +0000 Files and hashes: 1: o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl (hash: 09G4tMcSGzyTp7lUpHY68Tw133SxWP3Tnb/tuf3ejx8=) 2: 4A9AD51270F811F0BA070F34C4F9AE02.roa (hash: QDfFAc+QsuBck33Pcmt3S/+ttTSwrhFIgTHSmH6YmEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C10F, serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Validity Not Before: Aug 9 05:38:57 2025 GMT Not After : Aug 16 05:38:57 2025 GMT Subject: CN=6896def1-795b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:00:21:c2:ab:42:34:49:2b:7d:48:dc:71:f3: d5:a7:95:d5:1a:2f:bc:a7:c0:9a:b5:2e:ec:9c:49: a5:26:72:3f:a3:49:8f:6a:25:18:7e:07:b8:da:74: 3c:c6:54:4d:97:77:d3:fc:6f:59:2a:17:48:02:ad: 76:22:cc:d1:f3:66:10:ee:45:9b:53:ba:74:c7:d3: e0:ac:f7:36:50:6d:cd:71:76:92:f7:3e:f6:36:15: 8c:13:c3:a0:1a:96:c7:09:a3:3e:5e:e6:79:11:24: 00:fe:1a:06:02:4f:e3:3c:3b:08:6f:1f:48:ce:c7: 50:59:f6:ed:a6:a6:58:cb:1f:9a:5b:5a:70:d0:27: 80:3e:9f:ff:62:9f:21:d4:08:94:e5:ef:a5:87:7a: 26:48:a2:e6:31:ea:61:9c:d6:f2:e1:df:04:54:9a: ce:08:07:53:21:e5:22:67:b9:9b:b3:87:49:57:12: 4f:2b:15:97:59:23:c6:52:d2:40:de:63:f6:66:28: a5:d4:c5:f1:9c:9f:3c:e7:48:36:c6:e5:76:32:15: 93:10:69:46:14:c1:df:42:b5:77:2a:56:08:78:e0: d3:3e:d5:0b:06:32:af:cd:1c:89:82:21:07:7a:77: 60:8a:69:65:08:a8:43:22:83:40:b4:59:1e:53:cc: 38:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F7:1B:3C:F4:A2:58:6E:9B:D3:E6:D0:26:81:A8:CB:52:DE:23:7D X509v3 Authority Key Identifier: keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:6a:b8:ff:e8:43:ae:02:7e:83:ac:1a:03:7f:47:f9:03:31: ea:41:67:bd:e6:d8:ca:a0:c0:fe:61:3b:87:1f:60:22:ab:6e: e2:03:f7:e2:e1:e7:b2:7d:65:5f:cc:f9:a2:15:bd:75:7a:c7: 57:89:3f:72:03:e9:9e:06:8d:41:8b:0a:7a:e4:75:11:4f:b8: 21:9a:dd:24:8c:0f:57:55:6a:f5:25:57:af:09:f5:57:fc:c8: a1:4f:27:50:2e:fe:57:49:24:c0:51:1f:7a:28:35:59:54:af: 1d:f7:00:c7:9e:20:95:ed:01:e2:41:50:d9:ea:2b:19:07:e3: e6:f6:c8:c1:45:a6:ff:d3:1c:76:e9:78:88:df:eb:0f:65:9a: 80:75:14:ce:7a:5f:95:20:92:c7:8f:f7:88:c9:8c:b6:40:a9: 77:98:1c:21:d1:df:de:22:f1:9f:16:55:4b:5c:11:c9:5c:8d: 96:c7:e7:2e:18:ee:f6:a9:6a:81:cb:1d:93:65:2c:99:bb:4d: d6:87:5f:25:a0:b8:b8:c1:29:9c:79:b2:31:e5:bb:eb:3c:f1: 92:82:f3:42:1c:c4:ac:cb:21:79:4c:53:ad:0c:8c:d6:0d:9e: 67:2b:bd:3b:bf:ee:77:0a:2c:c1:87:b2:34:38:c8:c4:8a:73: 89:80:f1:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMxMEYxMTAvBgNVBAUTKEEzRUI1MUQyOTk5QkJCNDQ2NTlCRERBNkJFMUUxMEZB NTUxRTIyNjUwHhcNMjUwODA5MDUzODU3WhcNMjUwODE2MDUzODU3WjAYMRYwFAYD VQQDEw02ODk2ZGVmMS03OTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQAhwqtCNEkrfUjccfPVp5XVGi+8p8CatS7snEmlJnI/o0mPaiUYfge42nQ8 xlRNl3fT/G9ZKhdIAq12IszR82YQ7kWbU7p0x9PgrPc2UG3NcXaS9z72NhWME8Og GpbHCaM+XuZ5ESQA/hoGAk/jPDsIbx9IzsdQWfbtpqZYyx+aW1pw0CeAPp//Yp8h 1AiU5e+lh3omSKLmMephnNby4d8EVJrOCAdTIeUiZ7mbs4dJVxJPKxWXWSPGUtJA 3mP2Ziil1MXxnJ8850g2xuV2MhWTEGlGFMHfQrV3KlYIeODTPtULBjKvzRyJgiEH endgimllCKhDIoNAtFkeU8w4wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIv3Gzz0 olhum9Pm0CaBqMtS3iN9MB8GA1UdIwQYMBaAFKPrUdKZm7tEZZvdpr4eEPpVHiJl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzEwRi85QTc1ODBDOEZE NEExMUVFODA5QjA3MzBDNEY5QUUwMi9vLXRSMHBtYnUwUmxtOTJtdmg0US1sVWVJ bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdFIwcG1idTBSbG05Mm12aDRRLWxVZUltVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzEwRi85QTc1ODBDOEZENEExMUVFODA5QjA3MzBDNEY5QUUwMi9vLXRSMHBtYnUw UmxtOTJtdmg0US1sVWVJbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHarj/6EOuAn6DrBoDf0f5AzHqQWe95tjKoMD+YTuHH2Aiq27iA/fi 4eeyfWVfzPmiFb11esdXiT9yA+meBo1Biwp65HURT7ghmt0kjA9XVWr1JVevCfVX /MihTydQLv5XSSTAUR96KDVZVK8d9wDHniCV7QHiQVDZ6isZB+Pm9sjBRab/0xx2 6XiI3+sPZZqAdRTOel+VIJLHj/eIyYy2QKl3mBwh0d/eIvGfFlVLXBHJXI2Wx+cu GO72qWqByx2TZSyZu03Wh18loLi4wSmcebIx5bvrPPGSgvNCHMSsyyF5TFOtDIzW DZ5nK707v+53CizBh7I0OMjEinOJgPGc -----END CERTIFICATE-----Generated at Sun Aug 10 04:55:50 2025 by rpki-client