$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft File: AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json) Hash identifier: Uj1oHrgdLAJjTT9WRc78mI1vhGMDaJBM4QhWO9pWxGk= Subject key identifier: 05:63:CF:B8:E7:10:45:75:2D:49:93:93:66:1C:E3:E1:39:D6:A3:4F Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Certificate serial: 065D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft Manifest number: 061C Signing time: Mon 04 Aug 2025 23:28:14 +0000 Manifest this update: Mon 04 Aug 2025 23:28:13 +0000 Manifest next update: Mon 11 Aug 2025 23:28:13 +0000 Files and hashes: 1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: PeYf6L7h7gSypXXf90w0w8Ufu6ghVjD+6Q6Vm1yeVsY=) 2: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: btGjIQwgSn7JJwZL2buYiqMnVUjDHCpTzcRyOHOVV9w=) 3: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: 57IRG/hk+CbShhSRohuNNMRM6NtPI2s9mEQB7EL1Rs8=) 4: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: ltl+DfDEYXJ+yRffLM013Libfn2gz+fEWau0tvSsxac=) 5: 37DF315640B111F0B139F22BC4F9AE02.roa (hash: 4Gm7XiaugCNOeoZN6LJmkv/s+XyGBxUWo0FM4EVSPNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 23:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1629 (0x65d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Validity Not Before: Aug 4 23:28:13 2025 GMT Not After : Aug 11 23:28:13 2025 GMT Subject: CN=6891420d-98ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ab:fa:b9:47:1a:c3:63:2f:64:33:14:ad:5e: 3a:54:76:13:cb:67:57:63:59:d4:cf:63:82:bf:d0: ea:63:56:98:62:50:e2:cc:e1:c0:13:98:4a:58:24: c7:1b:93:bc:d7:ca:c0:74:d8:a0:46:fa:1a:b9:48: 7b:48:55:29:45:53:96:2f:0e:7c:3a:a4:11:12:48: 5c:fc:1e:ca:79:e1:4e:aa:53:ed:2a:cf:3d:45:36: 72:5c:c5:d2:e0:fd:9f:1b:61:56:f6:d0:06:f3:a3: fb:5e:37:59:af:e7:cb:d5:42:e0:6a:a7:37:41:de: 3c:8d:50:4b:77:08:34:30:6c:26:fe:68:44:59:ac: 1f:4f:ae:1b:98:1e:ff:ac:42:73:59:f7:38:d8:10: 1f:56:6f:61:48:f0:8f:6d:1c:13:84:7e:62:78:49: 11:f6:fb:f2:14:cc:28:7f:c6:23:19:21:4b:63:dc: ea:0e:21:7f:54:a2:d7:68:79:3b:05:62:9f:40:ce: 6c:4a:1e:17:b7:b6:a4:e9:8d:05:24:58:94:8d:0b: 67:cf:97:63:48:c5:00:1c:64:70:ff:58:93:25:b6: ed:15:7a:da:67:8f:9b:91:04:ce:9a:7a:1b:28:c2: 53:44:15:45:9c:2b:3d:ff:ee:a8:e9:17:be:7e:c6: 56:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:63:CF:B8:E7:10:45:75:2D:49:93:93:66:1C:E3:E1:39:D6:A3:4F X509v3 Authority Key Identifier: keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:76:2e:a9:da:e8:7e:02:d4:18:19:07:4d:e7:a6:c2:cf:39: d0:f5:15:3c:7c:8e:94:7e:77:b7:03:ff:64:31:19:d2:ee:20: 54:0e:d6:d6:6e:c2:da:0c:85:fb:99:e7:d5:9b:84:d3:f4:f9: d3:78:d1:4b:12:99:c0:9d:75:6c:dc:38:8f:87:09:4a:d1:65: b7:43:c5:52:71:e5:ee:c9:3e:f1:69:bf:62:d4:bb:b4:73:0e: 9d:26:f2:37:af:b6:46:02:e9:17:40:c4:a6:f0:44:cb:bc:c8: 8b:2a:62:c2:2f:6e:41:1e:af:c5:06:88:5d:b8:16:f2:9f:e5: 51:a7:a3:dd:f4:d5:10:92:f3:76:88:49:b5:59:62:bf:69:18: e6:36:dc:d5:59:06:36:56:38:bb:e0:c9:71:e1:d2:79:1f:30: 68:2a:e0:6a:cc:b1:c5:b1:07:b9:52:bb:c6:b5:65:c1:9c:ae: 53:8e:8b:e1:10:11:aa:e1:11:7c:00:4f:9d:c0:69:68:98:c1: ef:e6:59:89:a8:04:98:43:f5:59:b4:27:82:26:e4:69:7a:01: 21:8d:45:0f:ed:17:df:5c:be:29:82:34:86:40:2e:2d:4d:c7: 97:25:6b:33:db:e7:13:9e:c6:77:3a:9f:65:7e:e5:a8:49:18: bd:df:91:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC NTc3MzQ1NkIwHhcNMjUwODA0MjMyODEzWhcNMjUwODExMjMyODEzWjAYMRYwFAYD VQQDEw02ODkxNDIwZC05OGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36v6uUcaw2MvZDMUrV46VHYTy2dXY1nUz2OCv9DqY1aYYlDizOHAE5hKWCTH G5O818rAdNigRvoauUh7SFUpRVOWLw58OqQREkhc/B7KeeFOqlPtKs89RTZyXMXS 4P2fG2FW9tAG86P7XjdZr+fL1ULgaqc3Qd48jVBLdwg0MGwm/mhEWawfT64bmB7/ rEJzWfc42BAfVm9hSPCPbRwThH5ieEkR9vvyFMwof8YjGSFLY9zqDiF/VKLXaHk7 BWKfQM5sSh4Xt7ak6Y0FJFiUjQtnz5djSMUAHGRw/1iTJbbtFXraZ4+bkQTOmnob KMJTRBVFnCs9/+6o6Re+fsZWwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVjz7jn EEV1LUmTk2Yc4+E51qNPMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4 RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDhEOS81NDgzQkZCNkM4RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNi QWE4WW9Mc2Jsd3ExZHpSV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBdi6p2uh+AtQYGQdN56bCzznQ9RU8fI6Ufne3A/9kMRnS7iBUDtbW bsLaDIX7mefVm4TT9PnTeNFLEpnAnXVs3DiPhwlK0WW3Q8VSceXuyT7xab9i1Lu0 cw6dJvI3r7ZGAukXQMSm8ETLvMiLKmLCL25BHq/FBohduBbyn+VRp6Pd9NUQkvN2 iEm1WWK/aRjmNtzVWQY2Vji74Mlx4dJ5HzBoKuBqzLHFsQe5UrvGtWXBnK5Tjovh EBGq4RF8AE+dwGlomMHv5lmJqASYQ/VZtCeCJuRpegEhjUUP7RffXL4pgjSGQC4t TceXJWsz2+cTnsZ3Op9lfuWoSRi935Eo -----END CERTIFICATE-----Generated at Wed Aug 6 19:25:56 2025 by rpki-client