$ rpki-client -vvf rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft File: cM1M0T4uN35eXDervHl-7ea2Yhs.mft (raw, json) Hash identifier: 6825Ayrwexy54rWOkAx+JcaA7NHILq0LxOF9TX6DNXo= Subject key identifier: 27:DA:55:94:9F:AB:FA:A0:02:E8:3E:5E:AF:E0:56:6E:FA:F9:40:70 Authority key identifier: 70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B Certificate issuer: /CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft Manifest number: 02B6 Signing time: Sat 09 Aug 2025 02:00:49 +0000 Manifest this update: Sat 09 Aug 2025 02:00:48 +0000 Manifest next update: Sat 16 Aug 2025 02:00:48 +0000 Files and hashes: 1: cM1M0T4uN35eXDervHl-7ea2Yhs.crl (hash: 9eLI864rmonr4PIl0iF1AMjn9tN/cTZ40cIm5ozkBMA=) 2: BA5354A4044211EDBB686665C4F9AE02.roa (hash: 5D+EMadPUYOYtPY3WxKsOuXfJZW+RJaKdKnGQtm9R6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F338, serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B Validity Not Before: Aug 9 02:00:48 2025 GMT Not After : Aug 16 02:00:48 2025 GMT Subject: CN=6896abd1-a5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:af:ce:c7:72:8d:58:fd:cc:60:87:ba:c5:22: 6f:0f:f5:8c:45:80:49:06:36:7a:55:94:24:33:d6: 60:d2:99:02:63:06:85:60:24:5e:00:ff:7f:f0:99: b1:31:d1:84:50:95:97:a6:19:04:97:48:00:c3:3b: 83:c2:b2:7b:ae:ca:ab:e0:0b:4f:37:be:64:da:4c: c5:a0:87:bd:25:74:e7:09:7b:11:bc:d7:06:17:e3: c7:99:4d:b2:48:03:94:1b:12:08:7d:0b:fe:69:65: 72:af:48:d8:1a:d0:f7:24:86:ea:a3:14:15:48:db: b3:0a:dc:7b:e2:eb:4e:fc:0b:32:04:d6:d6:d8:89: b0:0e:a7:6d:da:d1:5b:8b:b4:6a:3f:0a:a9:7f:ca: 47:7d:09:73:3d:8e:fe:1d:f1:6b:ae:28:00:f8:8a: 83:41:4b:03:df:8e:7e:cb:67:18:a8:fb:b6:bb:de: 7d:cf:5f:c8:cb:13:a2:e8:80:94:a0:c3:c9:a5:ca: f7:54:40:59:c7:48:44:2c:ec:74:bc:3e:6a:8c:93: db:11:1c:cd:16:e2:5e:a3:38:24:72:b5:6f:be:bc: a3:f8:2a:a2:d4:87:ac:98:69:8e:52:55:91:09:a2: 06:a0:43:18:96:fb:1e:89:25:f7:d5:74:66:17:df: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:55:94:9F:AB:FA:A0:02:E8:3E:5E:AF:E0:56:6E:FA:F9:40:70 X509v3 Authority Key Identifier: keyid:70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:cb:17:a8:c7:6e:87:0d:44:d3:be:8d:97:c4:ab:92:0f:ae: 16:e2:d9:1d:62:4f:d3:60:98:79:74:90:eb:0e:24:f4:34:21: 5a:04:b9:0e:40:28:4d:01:b5:aa:17:58:43:bd:bd:70:3d:e7: 3b:e9:da:20:1a:fd:ff:3f:29:06:cc:e7:c2:49:64:b4:4e:1c: 53:8d:44:0f:71:fc:4b:0f:d8:0e:bd:b9:97:92:db:58:a4:72: 2c:7a:15:c1:bb:2b:3e:d9:fc:27:09:e0:e6:bd:ac:b7:e8:c7: 1a:0e:04:00:24:12:9b:2b:64:a5:48:25:b0:e6:8e:ca:72:c8: b1:5f:02:8e:c8:25:6a:9d:d2:39:6e:b0:d9:df:aa:91:e9:62: 49:de:eb:38:63:ae:18:39:69:3f:d5:ce:73:d5:00:94:35:09: 76:73:e1:56:f7:a6:7a:bf:bd:65:64:90:3d:8b:e1:a8:cc:be: 9d:cc:3b:01:13:12:78:c2:86:32:d9:f0:70:65:d5:31:a4:07: b7:cd:b1:f6:09:af:cd:51:ca:3b:cb:6d:b8:df:c5:58:d6:0a: 41:0b:a3:e9:74:ae:cd:04:42:b6:9d:d5:11:26:16:5c:e8:fa: 15:99:03:b2:73:34:c7:d9:96:80:a0:9c:d1:73:71:28:7c:57: a7:11:a7:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYzMzgxMTAvBgNVBAUTKDcwQ0Q0Q0QxM0UyRTM3N0U1RTVDMzdBQkJDNzk3RUVE RTZCNjYyMUIwHhcNMjUwODA5MDIwMDQ4WhcNMjUwODE2MDIwMDQ4WjAYMRYwFAYD VQQDEw02ODk2YWJkMS1hNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA96/Ox3KNWP3MYIe6xSJvD/WMRYBJBjZ6VZQkM9Zg0pkCYwaFYCReAP9/8Jmx MdGEUJWXphkEl0gAwzuDwrJ7rsqr4AtPN75k2kzFoIe9JXTnCXsRvNcGF+PHmU2y SAOUGxIIfQv+aWVyr0jYGtD3JIbqoxQVSNuzCtx74utO/AsyBNbW2ImwDqdt2tFb i7RqPwqpf8pHfQlzPY7+HfFrrigA+IqDQUsD345+y2cYqPu2u959z1/IyxOi6ICU oMPJpcr3VEBZx0hELOx0vD5qjJPbERzNFuJeozgkcrVvvryj+Cqi1IesmGmOUlWR CaIGoEMYlvseiSX31XRmF99jnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfaVZSf q/qgAug+Xq/gVm76+UBwMB8GA1UdIwQYMBaAFHDNTNE+Ljd+Xlw3q7x5fu3mtmIb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjMzOC9EMjExMTdEQzA0 M0YxMUVEOTM5QUUwNjJDNEY5QUUwMi9jTTFNMFQ0dU4zNWVYRGVydkhsLTdlYTJZ aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMU0wVDR1TjM1ZVhEZXJ2SGwtN2VhMllocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjMzOC9EMjExMTdEQzA0M0YxMUVEOTM5QUUwNjJDNEY5QUUwMi9jTTFNMFQ0dU4z NWVYRGVydkhsLTdlYTJZaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUyxeox26HDUTTvo2XxKuSD64W4tkdYk/TYJh5dJDrDiT0NCFaBLkO QChNAbWqF1hDvb1wPec76dogGv3/PykGzOfCSWS0ThxTjUQPcfxLD9gOvbmXkttY pHIsehXBuys+2fwnCeDmvay36McaDgQAJBKbK2SlSCWw5o7KcsixXwKOyCVqndI5 brDZ36qR6WJJ3us4Y64YOWk/1c5z1QCUNQl2c+FW96Z6v71lZJA9i+GozL6dzDsB ExJ4woYy2fBwZdUxpAe3zbH2Ca/NUco7y22438VY1gpBC6PpdK7NBEK2ndURJhZc 6PoVmQOyczTH2ZaAoJzRc3EofFenEadb -----END CERTIFICATE-----Generated at Sat Aug 9 14:25:01 2025 by rpki-client