$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft File: aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json) Hash identifier: qN9R2wI49XMc8djurxn2aHEvVxt8Vef3BnalaGzVN4U= Subject key identifier: 24:FB:95:94:BF:A3:A2:43:1C:F6:1B:AD:BF:BF:A1:25:E0:4F:DB:58 Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 Certificate issuer: /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Certificate serial: 07C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft Manifest number: 07BB Signing time: Wed 06 Aug 2025 21:33:08 +0000 Manifest this update: Wed 06 Aug 2025 21:33:07 +0000 Manifest next update: Wed 13 Aug 2025 21:33:07 +0000 Files and hashes: 1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: aZwvTdnK7XFDldhBuaMEcn5eSRIxpRJuR8erhy5WXQM=) 2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: MoYCzKz4ghJi1D1zSWKy/H/ig794mxo8w546loZw0HA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1985 (0x7c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Validity Not Before: Aug 6 21:33:07 2025 GMT Not After : Aug 13 21:33:07 2025 GMT Subject: CN=6893ca14-99fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:97:30:2e:b6:d2:1b:02:0b:7f:0d:4c:3a: a7:0c:13:e6:cb:76:26:4c:50:5e:18:1e:4a:82:9e: 79:4f:b6:ce:c7:72:41:25:c1:4b:21:d3:a0:34:4b: 93:ed:06:bf:46:95:a1:e3:2e:ea:bc:61:ff:49:d1: c0:96:8f:a4:20:9a:72:58:4d:b7:c7:5c:53:c1:d1: ed:d2:26:5e:c8:cb:77:99:fe:f7:f3:d0:29:d0:48: d3:1a:de:01:c7:85:16:4b:4f:f9:e7:3d:3e:43:63: 3b:d3:ab:68:39:55:55:d7:5c:25:8e:41:ef:65:08: 4b:e1:a6:b9:64:6d:34:74:24:d2:d9:32:de:80:90: be:8b:19:b3:6e:df:79:b4:ef:7a:df:3f:f7:24:43: b6:30:73:d3:c4:d3:bf:d1:4b:0a:f5:78:ee:de:b8: c8:04:fa:5b:db:c5:b6:ed:01:4d:eb:ec:44:21:a9: 56:1c:2a:22:65:d9:72:0f:00:73:ab:73:34:ec:b7: 55:58:75:3b:d7:54:fd:19:67:79:e3:c4:57:ef:c3: d0:66:79:30:36:e4:77:ff:dc:fb:94:24:30:ac:20: ea:0a:48:79:0b:ea:2c:61:1c:2e:eb:3c:52:75:5d: f5:fb:66:7f:f1:dc:0f:48:13:4e:96:80:45:38:d3: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FB:95:94:BF:A3:A2:43:1C:F6:1B:AD:BF:BF:A1:25:E0:4F:DB:58 X509v3 Authority Key Identifier: keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:30:6f:6d:ea:1a:60:6a:39:3d:46:2f:80:ce:b4:cd:ce:74: 3f:0e:db:09:1d:7b:63:50:64:78:8e:a7:30:83:e0:eb:60:9e: d0:15:a7:eb:15:a3:b5:81:55:44:16:97:f4:cd:63:33:8e:75: 01:ce:b3:bf:27:59:ad:06:67:8b:12:bd:f3:6f:ca:57:18:eb: df:d6:41:9f:86:5a:7f:69:15:ed:92:9e:53:2d:e1:f9:1d:57: fc:b6:2d:3e:24:45:b3:64:c2:bc:3e:b1:ab:43:5d:52:17:ae: 85:7b:ca:9f:7a:e5:13:e1:9a:fd:4a:35:d6:11:4c:85:df:c0: 37:18:27:ff:ca:ce:f6:c8:30:13:84:fa:23:28:c0:78:50:3d: 46:ec:80:56:e7:87:4a:a3:89:81:df:23:45:8e:a7:2a:b7:bb: dd:35:df:3c:11:d2:46:96:a3:86:4e:a2:ca:2e:0e:5b:0d:a8: 1d:18:3a:82:f8:ae:bd:8b:42:1c:0b:2a:82:08:4b:00:15:56: cb:e0:e0:8c:33:90:b4:8c:31:10:51:48:85:68:6c:e8:ff:34: 9d:8e:07:8e:12:24:5c:a8:c2:a0:97:02:02:4d:da:82:3b:a0: 87:6f:dd:12:1d:1c:15:5e:3f:e6:64:07:11:c5:c8:f7:9b:dd: 1d:d0:1f:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ5MzExMTAvBgNVBAUTKDY4REE0RTg1QTc5ODRCM0ZEMTBBRUYzNEM3RDFEMDBG MUI0NjQ1MzEwHhcNMjUwODA2MjEzMzA3WhcNMjUwODEzMjEzMzA3WjAYMRYwFAYD VQQDEw02ODkzY2ExNC05OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDqXMC620hsCC38NTDqnDBPmy3YmTFBeGB5Kgp55T7bOx3JBJcFLIdOgNEuT 7Qa/RpWh4y7qvGH/SdHAlo+kIJpyWE23x1xTwdHt0iZeyMt3mf7389Ap0EjTGt4B x4UWS0/55z0+Q2M706toOVVV11wljkHvZQhL4aa5ZG00dCTS2TLegJC+ixmzbt95 tO963z/3JEO2MHPTxNO/0UsK9Xju3rjIBPpb28W27QFN6+xEIalWHCoiZdlyDwBz q3M07LdVWHU711T9GWd548RX78PQZnkwNuR3/9z7lCQwrCDqCkh5C+osYRwu6zxS dV31+2Z/8dwPSBNOloBFONMwOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCT7lZS/ o6JDHPYbrb+/oSXgT9tYMB8GA1UdIwQYMBaAFGjaToWnmEs/0QrvNMfR0A8bRkUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDkzMS9GQjVBNTA4NDA4 NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6X1JDdTgweDlIUUR4dEdS VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FOcE9oYWVZU3pfUkN1ODB4OUhRRHh0R1JURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDkzMS9GQjVBNTA4NDA4NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6 X1JDdTgweDlIUUR4dEdSVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3MG9t6hpgajk9Ri+AzrTNznQ/DtsJHXtjUGR4jqcwg+DrYJ7QFafr FaO1gVVEFpf0zWMzjnUBzrO/J1mtBmeLEr3zb8pXGOvf1kGfhlp/aRXtkp5TLeH5 HVf8ti0+JEWzZMK8PrGrQ11SF66Fe8qfeuUT4Zr9SjXWEUyF38A3GCf/ys72yDAT hPojKMB4UD1G7IBW54dKo4mB3yNFjqcqt7vdNd88EdJGlqOGTqLKLg5bDagdGDqC +K69i0IcCyqCCEsAFVbL4OCMM5C0jDEQUUiFaGzo/zSdjgeOEiRcqMKglwICTdqC O6CHb90SHRwVXj/mZAcRxcj3m90d0B+X -----END CERTIFICATE-----Generated at Fri Aug 8 12:51:08 2025 by rpki-client