$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft File: tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft (raw, json) Hash identifier: /Sw+i7wnIPqwesYNhxuJuk2BHKeGgqNKnPZn4Maj39Q= Subject key identifier: 5D:E2:9C:36:EA:E0:32:3E:22:C5:6A:6D:4E:4B:96:AD:53:8B:E4:E0 Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 Certificate issuer: /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft Manifest number: 24 Signing time: Sun 03 Aug 2025 08:22:39 +0000 Manifest this update: Sun 03 Aug 2025 08:22:39 +0000 Manifest next update: Sun 10 Aug 2025 08:22:39 +0000 Files and hashes: 1: tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl (hash: kB4jrLe3W31UJ5hI+mEMOxoS4sdJ5UlHmPnl2793wko=) 2: E641780E535211F0A795A950C4F9AE02.roa (hash: /6fZjzm6zMKlJavcLCHUvZwJwnYnVUAiwPFKfA2za2E=) 3: ACE7F9985DF711F084BC8A50C4F9AE02.roa (hash: JnKzQUCZZIkzk+PTJ2yOthp2jewtbhpdupguptGlDRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Validity Not Before: Aug 3 08:22:39 2025 GMT Not After : Aug 10 08:22:39 2025 GMT Subject: CN=688f1c4f-e8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:ae:26:b2:8a:4b:ff:bf:59:9b:2e:51:ce: 0f:54:70:74:83:1f:73:0d:63:1b:df:8b:12:82:29: 61:c0:30:dd:1f:c6:6b:31:c1:dd:46:fa:57:76:00: 2c:37:f0:73:1f:3e:11:b2:fc:86:ef:0b:b1:1e:80: 21:34:66:ce:22:0b:16:b5:b3:be:71:1e:14:14:d8: 3e:4a:b1:d2:39:a6:d7:b7:04:32:d7:73:8a:71:41: 46:8d:a1:0d:59:37:c9:61:e2:15:0b:1b:1b:9f:be: 79:70:dc:89:2e:86:d8:71:d0:03:76:4e:af:0f:08: 54:9a:62:a0:0e:6a:73:b0:55:e6:21:cb:5b:28:53: ed:19:99:be:3b:68:36:7e:98:b2:bb:3f:15:b8:a2: a9:db:c8:47:84:0c:f6:5f:16:51:0e:a2:70:76:d7: 4c:c7:f5:14:50:c4:8d:de:b3:f3:e3:a1:e1:0d:dd: 83:ea:6c:52:26:bf:47:cb:34:eb:1f:9a:ee:fa:dc: 39:90:c5:ca:24:22:ef:8e:e8:71:a9:86:76:2f:f8: 9e:c1:e8:ec:da:5b:f2:9a:3d:ec:49:64:78:91:2f: e0:4f:1b:85:63:8d:90:ce:6b:26:45:5b:30:c3:a6: f4:a5:f8:e8:50:4b:6c:98:58:da:99:ba:db:8d:70: 29:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E2:9C:36:EA:E0:32:3E:22:C5:6A:6D:4E:4B:96:AD:53:8B:E4:E0 X509v3 Authority Key Identifier: keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:96:9e:34:09:5f:ba:d3:ec:9b:05:54:3d:13:9f:31:8a:eb: 75:d1:5e:20:b0:9f:b8:f9:38:79:7b:44:32:c3:e1:37:58:80: 43:99:46:e6:69:97:36:6b:8e:44:85:07:2a:b9:f3:2b:87:73: dd:67:45:b3:ed:70:8d:cc:70:5a:1a:c3:67:c1:6e:d3:f4:1b: d5:d8:74:27:eb:b0:45:f8:44:19:30:e2:a8:83:ab:43:e7:8d: 28:48:db:e3:ee:35:34:6b:9d:d8:68:ff:22:f6:30:b6:23:c7: 74:d5:21:03:a3:7b:29:21:27:4d:35:25:ea:cd:68:22:d5:1f: 87:5f:67:e0:3b:05:5b:68:85:58:14:d1:7d:43:46:9e:ff:05: e3:89:eb:60:c0:c0:a3:18:35:eb:90:99:dc:ec:a8:68:7e:99: 65:6f:74:1e:de:d0:b3:91:c5:f4:83:bc:43:2d:7e:67:bf:e8: eb:17:2d:92:36:c7:c7:a8:72:69:b4:7f:a4:0a:98:88:64:e6: 92:28:de:a5:a4:a5:49:37:49:bb:ff:12:16:98:b8:a1:26:6d: 9f:ac:75:22:d0:74:00:3f:5a:89:45:44:45:77:e1:a4:c6:e4: 56:79:ab:95:76:af:33:a1:e2:ae:ce:a0:b5:8d:93:50:7e:49: ef:f3:f6:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUJBQzExMC8GA1UEBRMoQjQwMzhBQjY0MDM5RjMxNDU2MjJBMjBGRjcwRUQ3QkUx RDRFN0Y5MTAeFw0yNTA4MDMwODIyMzlaFw0yNTA4MTAwODIyMzlaMBgxFjAUBgNV BAMTDTY4OGYxYzRmLWU4YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjqK4msopL/79Zmy5Rzg9UcHSDH3MNYxvfixKCKWHAMN0fxmsxwd1G+ld2ACw3 8HMfPhGy/IbvC7EegCE0Zs4iCxa1s75xHhQU2D5KsdI5pte3BDLXc4pxQUaNoQ1Z N8lh4hULGxufvnlw3Ikuhthx0AN2Tq8PCFSaYqAOanOwVeYhy1soU+0Zmb47aDZ+ mLK7PxW4oqnbyEeEDPZfFlEOonB210zH9RRQxI3es/PjoeEN3YPqbFImv0fLNOsf mu763DmQxcokIu+O6HGphnYv+J7B6OzaW/KaPexJZHiRL+BPG4VjjZDOayZFWzDD pvSl+OhQS2yYWNqZutuNcCktAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXeKcNurg Mj4ixWptTkuWrVOL5OAwHwYDVR0jBBgwFoAUtAOKtkA58xRWIqIP9w7Xvh1Of5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQkFDLzY0OUJDM0IyNTBD OTExRjBCNDczMDI0NkM0RjlBRTAyL3RBT0t0a0E1OHhSV0lxSVA5dzdYdmgxT2Y1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEFPS3RrQTU4eFJXSXFJUDl3N1h2aDFPZjVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB QkFDLzY0OUJDM0IyNTBDOTExRjBCNDczMDI0NkM0RjlBRTAyL3RBT0t0a0E1OHhS V0lxSVA5dzdYdmgxT2Y1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFyWnjQJX7rT7JsFVD0TnzGK63XRXiCwn7j5OHl7RDLD4TdYgEOZRuZp lzZrjkSFByq58yuHc91nRbPtcI3McFoaw2fBbtP0G9XYdCfrsEX4RBkw4qiDq0Pn jShI2+PuNTRrndho/yL2MLYjx3TVIQOjeykhJ001JerNaCLVH4dfZ+A7BVtohVgU 0X1DRp7/BeOJ62DAwKMYNeuQmdzsqGh+mWVvdB7e0LORxfSDvEMtfme/6OsXLZI2 x8eocmm0f6QKmIhk5pIo3qWkpUk3Sbv/EhaYuKEmbZ+sdSLQdAA/WolFREV34aTG 5FZ5q5V2rzOh4q7OoLWNk1B+Se/z9ho= -----END CERTIFICATE-----Generated at Mon Aug 4 04:05:50 2025 by rpki-client