$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft File: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json) Hash identifier: rEMI0QmW2G5QwyED84/0W7G5xZpqPj3RMlQAATS6l1E= Subject key identifier: 46:7D:18:79:00:1B:87:CE:0C:09:0B:D6:BE:87:0B:AA:ED:47:46:E1 Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 Certificate issuer: /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft Manifest number: 0130 Signing time: Mon 11 Aug 2025 04:41:44 +0000 Manifest this update: Mon 11 Aug 2025 04:41:44 +0000 Manifest next update: Mon 18 Aug 2025 04:41:44 +0000 Files and hashes: 1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: zXnaUns4mfYMbyO8Jacxj0Sl6P5BvVVuOT4dWBOGi/8=) 2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: v8vLgjK5S+JdCLTZc8YYYPXnZStqFTZMOLbog1OTRVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 04:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C212, serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Validity Not Before: Aug 11 04:41:44 2025 GMT Not After : Aug 18 04:41:44 2025 GMT Subject: CN=68997488-f315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:69:53:5d:5f:9e:25:6a:36:7b:d0:ec:79: 4b:b5:cc:04:b6:98:f0:0d:21:14:99:33:f8:a8:9f: 72:9d:bf:f2:d9:8d:ef:98:89:e8:de:a2:5d:61:46: f7:0b:50:09:f4:26:c9:61:25:05:7d:a3:41:d0:03: 24:59:0d:ef:82:be:cb:fc:0e:36:2d:ee:58:9f:b7: b2:07:54:c6:35:c7:2a:15:13:fd:b3:68:ae:f8:86: 29:09:36:a5:05:32:9f:3d:d2:6e:f9:71:ba:a9:c2: aa:41:bc:f7:04:60:52:e8:3e:cf:a9:9b:69:0d:4e: 2a:61:0a:f9:91:f2:38:a9:6d:f2:20:2a:27:59:e7: 6f:6d:d4:e5:63:4f:43:73:90:a5:dc:44:4f:b5:79: a6:5a:77:44:b5:00:be:a9:7c:49:ad:ef:55:c7:19: 83:bc:79:7f:07:6c:40:c8:75:18:75:b4:28:9d:f7: 2a:ab:d3:58:e6:b5:0c:53:30:89:41:38:07:07:e0: 7a:3b:61:4d:b8:4f:5e:f3:35:01:12:7a:d0:41:d7: a6:cb:de:93:52:6d:b9:1f:ff:ce:8f:75:2f:22:1f: dc:eb:c2:39:a2:ca:df:e2:85:46:61:9f:e0:56:1e: d0:e1:ff:dd:ca:55:7e:8e:76:58:d9:d0:3e:98:ec: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7D:18:79:00:1B:87:CE:0C:09:0B:D6:BE:87:0B:AA:ED:47:46:E1 X509v3 Authority Key Identifier: keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:45:65:a6:88:71:2d:1e:44:16:f2:13:74:36:da:ba:ef:14: a0:bb:b8:d0:9e:45:cf:5c:f7:c1:cf:f3:e5:dd:cd:28:d3:0c: e7:e3:53:28:82:30:ec:05:7a:0a:8b:a5:ad:4f:b2:b3:a6:35: e7:75:ec:71:64:5c:b1:9b:2a:ce:04:de:d4:07:20:f6:82:ba: 23:38:39:13:39:3c:b3:6b:46:34:6d:4d:11:0d:1e:2e:c7:9b: 8c:fe:95:84:1d:5a:a0:58:dc:19:d7:00:59:b7:1a:d1:83:82: 65:db:b8:66:f8:7c:40:9d:3d:e7:15:a0:ad:be:b9:75:89:c5: df:92:ac:b3:62:c3:3e:73:75:33:83:04:0b:c3:0d:65:5b:9c: fb:18:a0:50:ae:33:a2:af:28:a8:b8:04:56:b4:ad:0f:2d:9f: 21:27:40:82:7a:ad:da:78:15:a1:d8:54:22:99:11:be:73:b5: e0:d1:2c:f5:0b:3f:3c:41:4a:5e:85:f4:22:82:e1:b0:01:e0: ad:ec:fd:8e:0c:72:3c:1f:d0:7a:aa:fd:13:27:6f:61:cc:69: 5c:bb:33:a7:25:a1:aa:6d:d7:e2:97:33:9f:19:ef:64:ab:48: 16:b7:da:e4:ee:79:a3:0c:fe:1f:a9:8d:be:67:bb:b0:08:55: d0:81:54:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMTIxMTAvBgNVBAUTKEQwNUFDOTBBMjA3RjYwODdDRTAyRURDMjMxODhFMzJB QUExQjFCNDQwHhcNMjUwODExMDQ0MTQ0WhcNMjUwODE4MDQ0MTQ0WjAYMRYwFAYD VQQDEw02ODk5NzQ4OC1mMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZFpU11fniVqNnvQ7HlLtcwEtpjwDSEUmTP4qJ9ynb/y2Y3vmIno3qJdYUb3 C1AJ9CbJYSUFfaNB0AMkWQ3vgr7L/A42Le5Yn7eyB1TGNccqFRP9s2iu+IYpCTal BTKfPdJu+XG6qcKqQbz3BGBS6D7PqZtpDU4qYQr5kfI4qW3yIConWedvbdTlY09D c5Cl3ERPtXmmWndEtQC+qXxJre9VxxmDvHl/B2xAyHUYdbQonfcqq9NY5rUMUzCJ QTgHB+B6O2FNuE9e8zUBEnrQQdemy96TUm25H//Oj3UvIh/c68I5osrf4oVGYZ/g Vh7Q4f/dylV+jnZY2dA+mOzI4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZ9GHkA G4fODAkL1r6HC6rtR0bhMB8GA1UdIwQYMBaAFNBayQogf2CHzgLtwjGI4yqqGxtE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxMi80QjIzM0VFQUEy RDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJZk9BdTNDTVlqaktxb2JH MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBGckpDaUJfWUlmT0F1M0NNWWpqS3FvYkcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxMi80QjIzM0VFQUEyRDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJ Zk9BdTNDTVlqaktxb2JHMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWRWWmiHEtHkQW8hN0Ntq67xSgu7jQnkXPXPfBz/Pl3c0o0wzn41Mo gjDsBXoKi6WtT7KzpjXndexxZFyxmyrOBN7UByD2grojODkTOTyza0Y0bU0RDR4u x5uM/pWEHVqgWNwZ1wBZtxrRg4Jl27hm+HxAnT3nFaCtvrl1icXfkqyzYsM+c3Uz gwQLww1lW5z7GKBQrjOiryiouARWtK0PLZ8hJ0CCeq3aeBWh2FQimRG+c7Xg0Sz1 Cz88QUpehfQiguGwAeCt7P2ODHI8H9B6qv0TJ29hzGlcuzOnJaGqbdfilzOfGe9k q0gWt9rk7nmjDP4fqY2+Z7uwCFXQgVS5 -----END CERTIFICATE-----Generated at Wed Aug 13 05:56:28 2025 by rpki-client