$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json) Hash identifier: UMjsTMtMeOExjmMKS9XozPAMaKRXz5XKXh7IoPlcXaY= Subject key identifier: 2E:57:BF:A1:D3:16:6B:4C:F3:BF:FC:0A:38:FE:A1:5E:C7:CE:F0:AE Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Certificate serial: 0B61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft Manifest number: 0B4C Signing time: Fri 08 Aug 2025 19:24:40 +0000 Manifest this update: Fri 08 Aug 2025 19:24:39 +0000 Manifest next update: Fri 15 Aug 2025 19:24:39 +0000 Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: rHTQSN0uKDF8DjPBi4yCN3gmd2Sk4IUPVXEsqad1iVg=) 2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: da18YanehMb25ZME1c4CpzCwhlEVLs96RlfGiZoiMxU=) 3: E324E2F6F40611EAA5B2244FC4F9AE02.roa (hash: feQeohVrk3aa2EM/daTKcvI0d6w6k0q2b/efqxvduBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2913 (0xb61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Validity Not Before: Aug 8 19:24:39 2025 GMT Not After : Aug 15 19:24:39 2025 GMT Subject: CN=68964ef7-fb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:97:66:d0:8b:6e:19:d0:bc:b9:50:fc:4f: c8:36:0d:3b:21:90:1e:76:2b:7e:73:e8:4c:25:c6: 16:3b:dc:36:da:29:cb:7f:60:30:7b:7d:44:ce:92: e8:61:a3:2a:01:5e:e0:ef:f9:a8:12:f5:1a:ff:a3: f3:75:e4:7e:0e:0e:ce:04:06:f8:23:20:ce:2e:9d: e4:ec:39:c6:49:58:4c:fc:eb:2f:27:7d:3a:76:a0: 89:6a:43:9f:5b:c3:ac:c6:d2:a8:89:c9:55:0d:b3: 52:31:6a:b4:61:3e:1c:fb:10:9a:ad:0c:43:ea:9d: ff:be:4b:cb:e1:60:59:a9:83:7a:db:f5:35:f6:d3: e3:45:0e:24:a0:ae:31:90:8f:5b:ed:6d:a4:3a:df: 05:b3:06:d2:0a:77:19:7e:81:cb:d1:8a:49:4f:cc: 17:d3:c3:63:4b:b4:b5:d4:29:73:b1:ca:c1:9a:75: cd:db:a4:d5:f1:a4:d8:87:3e:39:18:71:f6:c1:ee: 7f:73:94:55:05:5b:fa:6f:74:b8:47:7e:7f:87:4c: d5:12:3b:13:31:70:52:4e:03:78:1a:a7:fe:2d:31: 2a:b0:db:97:08:37:91:02:ff:96:0e:56:6c:7e:84: ae:0a:0c:ea:c0:ae:c0:6f:12:a6:74:f1:29:30:72: 7b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:57:BF:A1:D3:16:6B:4C:F3:BF:FC:0A:38:FE:A1:5E:C7:CE:F0:AE X509v3 Authority Key Identifier: keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:a6:f7:12:90:86:be:e7:b4:98:1e:2a:11:32:ba:2e:4c:54: f7:9b:3f:0a:b5:c2:a6:51:fa:35:63:74:06:c9:03:4a:b6:f7: 6e:43:81:f3:6d:17:98:7d:27:32:e0:1d:dd:a0:d3:d5:23:b0: d4:46:ca:f1:e7:02:2e:f6:b7:0c:0d:87:5f:11:75:09:dd:9f: bf:d9:f5:33:22:55:2f:33:8d:66:a6:1d:58:93:f5:bb:84:ab: f0:6e:89:39:3b:de:44:26:79:51:56:bc:40:03:d6:ae:3a:df: e1:f4:60:cf:60:47:74:01:8e:dd:7b:91:57:a9:a5:3f:89:84: 79:ae:ad:cf:4e:54:35:47:63:aa:3a:7b:76:b2:6a:b7:a2:33: 3e:53:48:53:46:e5:ac:58:08:a3:3a:c7:36:f6:0d:34:63:3c: b1:51:2a:a0:19:43:0b:bc:22:a6:12:89:ed:63:af:47:f4:bb: 2c:21:95:71:dc:21:6d:d5:1f:99:e3:96:d7:39:e5:db:da:4b: 45:fa:69:6d:79:13:24:02:36:7f:85:cc:20:b8:a0:d6:64:85: d8:92:94:99:0d:fa:47:78:58:98:d3:cd:44:fc:7c:c3:6d:c7: 2a:89:24:df:b7:e1:43:e0:84:4d:d8:01:c0:b1:0f:40:4a:dd: d4:45:84:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM4OEQxMTAvBgNVBAUTKDMyNjQ0MzY0NzlBNTBFRDQwQ0NGRDJCNzA0RTYwMjQ5 NjA4RTQzQTgwHhcNMjUwODA4MTkyNDM5WhcNMjUwODE1MTkyNDM5WjAYMRYwFAYD VQQDEw02ODk2NGVmNy1mYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGiXZtCLbhnQvLlQ/E/INg07IZAedit+c+hMJcYWO9w22inLf2Awe31EzpLo YaMqAV7g7/moEvUa/6PzdeR+Dg7OBAb4IyDOLp3k7DnGSVhM/OsvJ306dqCJakOf W8OsxtKoiclVDbNSMWq0YT4c+xCarQxD6p3/vkvL4WBZqYN62/U19tPjRQ4koK4x kI9b7W2kOt8FswbSCncZfoHL0YpJT8wX08NjS7S11ClzscrBmnXN26TV8aTYhz45 GHH2we5/c5RVBVv6b3S4R35/h0zVEjsTMXBSTgN4Gqf+LTEqsNuXCDeRAv+WDlZs foSuCgzqwK7AbxKmdPEpMHJ77QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5Xv6HT FmtM87/8Cjj+oV7HzvCuMB8GA1UdIwQYMBaAFDJkQ2R5pQ7UDM/StwTmAklgjkOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzg4RC8zOEFCNTkxRTNE QzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0UU16OUszQk9ZQ1NXQ09R NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tUkRaSG1sRHRRTXo5SzNCT1lDU1dDT1E2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzg4RC8zOEFCNTkxRTNEQzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0 UU16OUszQk9ZQ1NXQ09RNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWpvcSkIa+57SYHioRMrouTFT3mz8KtcKmUfo1Y3QGyQNKtvduQ4Hz bReYfScy4B3doNPVI7DURsrx5wIu9rcMDYdfEXUJ3Z+/2fUzIlUvM41mph1Yk/W7 hKvwbok5O95EJnlRVrxAA9auOt/h9GDPYEd0AY7de5FXqaU/iYR5rq3PTlQ1R2Oq Ont2smq3ojM+U0hTRuWsWAijOsc29g00YzyxUSqgGUMLvCKmEontY69H9LssIZVx 3CFt1R+Z45bXOeXb2ktF+mlteRMkAjZ/hcwguKDWZIXYkpSZDfpHeFiY081E/HzD bccqiSTft+FD4IRN2AHAsQ9ASt3URYQq -----END CERTIFICATE-----Generated at Sat Aug 9 14:26:17 2025 by rpki-client