$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft File: 9Avota0WsYR_wNT0cI-dQUkxq6Y.mft (raw, json) Hash identifier: S+F1aD224YJSuy9GIGFseNX5a+mVoPtxOPjOS4gvDGU= Subject key identifier: E4:60:73:7E:48:90:B0:A7:C1:6B:EE:4C:67:0D:C1:C3:3F:35:52:64 Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 Certificate issuer: /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6 Certificate serial: 02E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft Manifest number: 02BF Signing time: Mon 11 Aug 2025 01:52:43 +0000 Manifest this update: Mon 11 Aug 2025 01:52:42 +0000 Manifest next update: Mon 18 Aug 2025 01:52:42 +0000 Files and hashes: 1: 9Avota0WsYR_wNT0cI-dQUkxq6Y.crl (hash: Oc9CifeAehiOui+L1dIQ4sm0zSQ5EB7AIM05wQyESRA=) 2: 214E67EA1EF911EDAAC3AE62C4F9AE02.roa (hash: a4uhbXD/6QpvqZpvGb3TRBkEFO6veICTLlQsVLL56TI=) 3: 36660EAE679E11EFBAD37686C4F9AE02.roa (hash: AxabGlp0IamL1AOMbCgBi5Y/mrLVivTXD8uMAD10h7U=) 4: E6E564502DD811EF8471C475C4F9AE02.roa (hash: Tr9asl+9bdm0TeSvn9r/O8sCMPe6OQ4Bqr4X3WrBuL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 745 (0x2e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BCEE, serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6 Validity Not Before: Aug 11 01:52:42 2025 GMT Not After : Aug 18 01:52:42 2025 GMT Subject: CN=68994ceb-111b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:45:32:8a:25:16:a1:c8:27:b1:ae:55:e4:bb: d8:be:47:73:ff:21:58:80:e7:17:19:aa:e1:ea:e6: 16:1a:61:dd:4f:9d:24:02:dd:10:09:04:21:70:be: 5f:76:6a:bc:f7:72:93:9e:ed:31:96:d4:8a:d2:a6: b6:f8:16:4f:94:d1:fd:89:01:43:e1:fa:77:d7:74: 0c:06:26:47:86:1b:4e:92:12:50:19:2c:4b:a4:52: 2a:c4:37:cc:09:8e:22:c7:96:1d:1d:7d:d8:2a:0e: 24:cb:91:71:2d:68:1b:1f:6d:41:bc:76:ea:c4:31: f3:e0:8a:5c:80:44:17:85:4e:69:b5:34:31:23:be: 06:f5:9d:db:87:49:46:bb:65:d0:4d:7c:29:76:34: d3:f2:af:8d:10:d8:18:4c:5e:9e:ad:87:50:b7:92: 30:1e:2c:19:2a:ad:54:b0:1d:76:22:dd:78:49:3c: d7:20:12:a2:44:7d:35:31:d5:a7:43:b5:fa:08:17: ee:9a:f5:86:26:b4:26:b1:82:67:b1:62:29:25:0a: 7e:05:b8:11:9d:25:2a:75:91:32:d6:4f:63:97:bb: 3b:f5:8d:eb:34:84:cb:bf:31:95:08:9d:6b:30:af: 78:54:f6:3a:05:bc:31:04:b9:25:b4:b0:c1:a1:97: 1a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:60:73:7E:48:90:B0:A7:C1:6B:EE:4C:67:0D:C1:C3:3F:35:52:64 X509v3 Authority Key Identifier: keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:47:3c:a9:a2:fd:85:f4:d4:e3:78:47:67:cf:96:3b:7e:93: ef:d3:09:14:ec:bb:58:e3:2e:54:ca:65:65:20:5b:37:bb:4c: 20:d2:99:eb:0f:99:82:fb:01:d6:fb:54:19:28:eb:fc:8a:4e: f2:b4:2c:38:4d:bd:d1:be:27:f7:15:40:65:d5:43:3c:45:4a: e1:eb:63:d6:7b:7f:51:38:ef:ba:93:2f:d4:4a:dc:fc:ad:d0: 9e:dd:2c:a3:75:ad:1f:67:e4:0f:d8:e0:30:45:89:57:8b:dc: 75:a1:65:51:1c:a8:5b:34:00:32:59:c7:23:94:da:65:10:da: d1:aa:84:af:ed:6d:5f:3d:71:29:67:82:d4:29:6d:d0:a7:78: 50:a5:a7:bc:8c:1c:30:b0:67:a2:4a:dc:94:c2:98:25:b1:fe: 7c:41:0f:28:22:20:24:7b:d6:98:2a:6d:44:b3:9c:c8:95:39: dd:0e:b4:7a:2e:89:f0:d7:96:b4:f7:f3:32:57:8f:ef:d3:d3: 86:a7:53:fc:98:cf:ce:76:67:28:61:f5:4d:fe:6a:75:db:f6: 21:f4:7d:8e:96:a9:0e:73:85:a0:e4:b0:e6:c7:5a:ba:79:cd: be:d2:e0:3a:73:fe:91:ba:19:34:b4:e3:c0:d2:38:a6:b5:8d: 4f:a6:d1:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJDRUUxMTAvBgNVBAUTKEY0MEJFOEI1QUQxNkIxODQ3RkMwRDRGNDcwOEY5RDQx NDkzMUFCQTYwHhcNMjUwODExMDE1MjQyWhcNMjUwODE4MDE1MjQyWjAYMRYwFAYD VQQDEw02ODk5NGNlYi0xMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEUyiiUWocgnsa5V5LvYvkdz/yFYgOcXGarh6uYWGmHdT50kAt0QCQQhcL5f dmq893KTnu0xltSK0qa2+BZPlNH9iQFD4fp313QMBiZHhhtOkhJQGSxLpFIqxDfM CY4ix5YdHX3YKg4ky5FxLWgbH21BvHbqxDHz4IpcgEQXhU5ptTQxI74G9Z3bh0lG u2XQTXwpdjTT8q+NENgYTF6erYdQt5IwHiwZKq1UsB12It14STzXIBKiRH01MdWn Q7X6CBfumvWGJrQmsYJnsWIpJQp+BbgRnSUqdZEy1k9jl7s79Y3rNITLvzGVCJ1r MK94VPY6BbwxBLkltLDBoZcaYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORgc35I kLCnwWvuTGcNwcM/NVJkMB8GA1UdIwQYMBaAFPQL6LWtFrGEf8DU9HCPnUFJMaum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkNFRS82OEMzNTYzMDEz RkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZUl93TlQwY0ktZFFVa3hx NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBdm90YTBXc1lSX3dOVDBjSS1kUVVreHE2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkNFRS82OEMzNTYzMDEzRkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZ Ul93TlQwY0ktZFFVa3hxNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTRzypov2F9NTjeEdnz5Y7fpPv0wkU7LtY4y5UymVlIFs3u0wg0pnr D5mC+wHW+1QZKOv8ik7ytCw4Tb3Rvif3FUBl1UM8RUrh62PWe39ROO+6ky/UStz8 rdCe3Syjda0fZ+QP2OAwRYlXi9x1oWVRHKhbNAAyWccjlNplENrRqoSv7W1fPXEp Z4LUKW3Qp3hQpae8jBwwsGeiStyUwpglsf58QQ8oIiAke9aYKm1Es5zIlTndDrR6 Lonw15a09/MyV4/v09OGp1P8mM/OdmcoYfVN/mp12/Yh9H2OlqkOc4Wg5LDmx1q6 ec2+0uA6c/6Ruhk0tOPA0jimtY1PptFg -----END CERTIFICATE-----Generated at Mon Aug 11 12:58:17 2025 by rpki-client