$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json) Hash identifier: HqIPdjS/ODDXulzqbFsMR9lA8uJBKiWyVvZh9NbAE20= Subject key identifier: D7:A2:BF:B1:E0:1C:9D:5B:42:16:CF:C6:0C:B3:EE:04:33:0E:C6:CA Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft Manifest number: 0414 Signing time: Tue 05 Aug 2025 00:56:46 +0000 Manifest this update: Tue 05 Aug 2025 00:56:46 +0000 Manifest next update: Tue 12 Aug 2025 00:56:46 +0000 Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: maoI8aGpvqpkOwLBM0JfZYV6Nld1QEhOOzg55uQCTJo=) 2: 07C047B28BE911EF9DF25F0BC4F9AE02.roa (hash: w8f9UqJ79XDQJmoeSep+AfxKgamdRq1+8fZXwOXv2As=) 3: 50F671067CC411EF8589DF32C4F9AE02.roa (hash: OIx3I5y70K4lhigPdUK9t3VwKVKzekhTxytvaT3fL4k=) 4: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: tt0v+KBQPMpXrI1DE3BSU9iXmppEt61/W7+0e5BehNo=) 5: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: SS7LsXp/x71VoteuW8pTuBwbWh8OyBISF5BhDwIPz/Q=) 6: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: +SD5oyeqwCVbJIR3Rca7WRwH9ic0DsTEAz6kXO4nmEw=) 7: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: PcnJ0SQLHGsAHxXxj0qo8jDhyNqxoXVPvv8v+GYk0TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Validity Not Before: Aug 5 00:56:46 2025 GMT Not After : Aug 12 00:56:46 2025 GMT Subject: CN=689156ce-baad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:68:46:da:5d:c7:ad:43:0e:10:58:29:bb: af:94:d2:f9:8f:90:a4:47:28:9d:aa:af:c5:e6:6c: 2e:c6:f0:ed:61:51:0e:25:c8:ee:95:4c:34:aa:a9: 5e:2e:e4:32:fe:89:93:a1:be:87:c5:a9:4b:5d:36: e9:14:94:be:d7:a1:4f:f7:b0:4b:d6:87:db:ee:be: 98:30:be:12:64:9c:35:27:15:dd:23:aa:23:23:2f: f7:54:71:7f:27:92:0e:69:d2:a9:b3:45:7d:46:ad: 6e:79:15:e6:3c:02:ce:0f:61:b6:c6:e6:a4:cc:cc: 50:16:51:bc:0b:e9:a9:6f:df:85:e4:a8:77:0d:65: 63:3a:9a:83:3d:0f:b9:a1:70:67:0a:f0:43:77:3d: 57:4d:b7:cc:66:a8:f7:88:4d:a3:78:0e:f1:5c:dc: e0:ec:3d:68:26:e3:8c:29:72:1c:2b:6a:7b:b7:3e: 20:16:5c:6f:be:ee:96:ea:00:0d:d3:b7:77:7f:15: 50:6e:85:3c:ef:c6:ed:07:00:2c:ce:14:7f:a0:0b: 54:ef:76:fd:40:30:28:1f:a8:64:1c:a5:47:e1:73: 3d:46:31:ee:0c:c7:8e:58:10:73:c0:85:0c:cb:3f: b8:04:4b:23:1e:9e:2b:c1:28:13:27:01:1e:66:bf: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A2:BF:B1:E0:1C:9D:5B:42:16:CF:C6:0C:B3:EE:04:33:0E:C6:CA X509v3 Authority Key Identifier: keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:17:94:6c:e8:28:a3:11:da:84:37:28:bc:bf:47:fe:6c:fa: 42:76:74:6f:0d:83:58:f0:17:de:a3:c9:e5:71:1d:17:84:ff: 86:b8:36:ec:d4:da:b3:fe:cc:b3:dd:27:bd:2f:6f:94:dc:97: 24:35:e3:fa:1d:31:3b:bd:61:f3:8c:88:7c:8e:d3:d1:3e:da: 71:93:d9:2e:ef:34:3f:91:cb:d5:7d:d6:9f:7e:29:a5:05:93: 04:7f:d6:6a:19:e3:21:67:be:65:2d:69:12:94:3b:bf:4c:b9: be:1e:f2:ce:02:71:13:83:06:6d:64:e9:9e:76:13:44:ee:79: cf:a5:bd:4d:48:83:cb:87:c8:58:b1:42:e8:14:a7:5a:70:ce: 1b:80:f2:86:16:4f:30:20:a3:d3:ab:fc:ff:6b:69:a7:e1:2a: 96:8b:fd:90:aa:df:e8:d7:87:44:db:2b:96:15:37:f0:a8:56: c8:18:b4:6c:6c:92:82:86:58:87:1a:1f:04:c1:bf:da:40:b9: 6c:35:79:cc:05:52:9d:e3:fc:d5:ec:a0:07:83:d8:6b:a7:a1: 57:94:14:0e:b1:c1:0d:3a:87:c4:86:b9:c4:bf:d2:91:bf:fd: da:68:6c:f1:1a:2a:8f:70:4a:44:42:9c:41:99:7a:c3:64:b3: b7:da:25:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC NzdGMTk4MkYwHhcNMjUwODA1MDA1NjQ2WhcNMjUwODEyMDA1NjQ2WjAYMRYwFAYD VQQDEw02ODkxNTZjZS1iYWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1toRtpdx61DDhBYKbuvlNL5j5CkRyidqq/F5mwuxvDtYVEOJcjulUw0qqle LuQy/omTob6HxalLXTbpFJS+16FP97BL1ofb7r6YML4SZJw1JxXdI6ojIy/3VHF/ J5IOadKps0V9Rq1ueRXmPALOD2G2xuakzMxQFlG8C+mpb9+F5Kh3DWVjOpqDPQ+5 oXBnCvBDdz1XTbfMZqj3iE2jeA7xXNzg7D1oJuOMKXIcK2p7tz4gFlxvvu6W6gAN 07d3fxVQboU878btBwAszhR/oAtU73b9QDAoH6hkHKVH4XM9RjHuDMeOWBBzwIUM yz+4BEsjHp4rwSgTJwEeZr9nfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeiv7Hg HJ1bQhbPxgyz7gQzDsbKMB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI5NC9FM0NDMjVEODgxMUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVX NmRxaGUzVlZIOUMzZnhtQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhF5Rs6CijEdqENyi8v0f+bPpCdnRvDYNY8Bfeo8nlcR0XhP+GuDbs 1Nqz/syz3Se9L2+U3JckNeP6HTE7vWHzjIh8jtPRPtpxk9ku7zQ/kcvVfdaffiml BZMEf9ZqGeMhZ75lLWkSlDu/TLm+HvLOAnETgwZtZOmedhNE7nnPpb1NSIPLh8hY sULoFKdacM4bgPKGFk8wIKPTq/z/a2mn4SqWi/2Qqt/o14dE2yuWFTfwqFbIGLRs bJKChliHGh8Ewb/aQLlsNXnMBVKd4/zV7KAHg9hrp6FXlBQOscENOofEhrnEv9KR v/3aaGzxGiqPcEpEQpxBmXrDZLO32iV+ -----END CERTIFICATE-----Generated at Wed Aug 6 14:18:34 2025 by rpki-client