$ rpki-client -vvf rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft File: apVIHOj0DdiJXR-3rukOWVm6g8E.mft (raw, json) Hash identifier: iG2KRNkmlkPfzl2VB8BT2VKjbIFNRG3oJVgZfxzn19I= Subject key identifier: 08:6C:9B:5F:69:96:5C:DC:D3:08:37:72:D5:7B:C5:41:36:99:22:20 Authority key identifier: 6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1 Certificate issuer: /CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1 Certificate serial: 057A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft Manifest number: 0573 Signing time: Tue 12 Aug 2025 23:45:18 +0000 Manifest this update: Tue 12 Aug 2025 23:45:17 +0000 Manifest next update: Tue 19 Aug 2025 23:45:17 +0000 Files and hashes: 1: apVIHOj0DdiJXR-3rukOWVm6g8E.crl (hash: KQddn9wJmh6Qtlnmhrr3z4zbyI/rPdBz5AJmMwnQm9Y=) 2: 0C3D8674345511EFA05D0C10C4F9AE02.roa (hash: ZnpRalcn1+UDz0Qh9MVT7PEHG3mXFgwSlTQlnQVlTtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 23:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1402 (0x57a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DA0C, serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1 Validity Not Before: Aug 12 23:45:17 2025 GMT Not After : Aug 19 23:45:17 2025 GMT Subject: CN=689bd20e-551b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cf:51:76:07:0c:c9:16:f3:88:ea:c9:4a:69: 75:b2:03:60:bf:fd:2e:d0:31:09:46:c2:46:53:01: 0b:81:96:e2:a3:c3:18:a3:92:5c:bd:31:eb:c5:0a: e6:c2:cc:d2:75:d5:3e:0e:d8:7b:5e:69:ec:05:11: a2:cd:91:97:22:b6:c2:a9:b7:c1:26:4b:3d:3c:8d: c1:c1:53:7a:ff:7e:b3:e4:41:a6:f7:c4:70:d9:8a: 6c:0b:54:44:5e:d7:6b:66:e6:59:de:d1:70:af:88: 9d:5a:ea:c1:da:28:f1:9d:6b:f7:e2:d2:3a:8f:df: dd:aa:7d:a9:9d:4b:c9:f2:e0:86:3b:d4:f8:e4:14: 85:57:7c:8d:8d:6c:05:3e:a5:e1:1f:1b:6f:30:5e: 74:96:54:65:fe:71:a6:6a:b0:74:9e:77:18:a3:7e: 56:c8:78:60:4e:7c:87:c5:6d:32:fa:a5:92:59:ab: 7a:39:83:0f:ab:d5:dd:66:de:55:3e:47:8e:08:3c: ce:2f:df:3f:4b:ed:08:12:77:95:bb:d1:e1:4f:7c: 3a:bf:5d:a5:63:c6:1e:0f:82:cc:24:5f:ad:9d:89: 9b:7a:31:58:e2:2c:f0:1c:ce:1c:ea:77:1d:fb:f7: 05:c4:1f:95:25:73:1e:a2:aa:89:aa:d6:2c:b7:79: 31:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6C:9B:5F:69:96:5C:DC:D3:08:37:72:D5:7B:C5:41:36:99:22:20 X509v3 Authority Key Identifier: keyid:6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0e:77:2e:3e:b5:4c:1c:64:b3:61:81:ca:29:16:40:21:8b: d2:0e:4b:50:aa:e0:08:53:cb:e5:a5:fe:89:2e:35:76:22:d2: 31:e7:c0:ec:15:c8:73:53:c4:35:eb:ef:17:bc:d4:80:68:2c: 79:cc:f9:5f:8e:e6:a6:9c:b5:84:6f:88:d3:8a:f7:da:a0:ba: 2d:42:03:5f:e6:5f:f3:06:02:de:d3:b0:dd:25:d3:c6:b1:37: d6:26:2a:e2:ab:2c:7c:d2:13:5d:68:b5:5d:06:cf:b7:4a:f0: a2:98:03:06:6a:f4:ea:11:1d:92:47:df:79:e4:ad:ea:66:ef: 59:af:0d:f9:3e:14:20:e6:c5:3f:7e:bd:4e:19:f7:1a:12:0e: 10:00:27:42:0b:3c:c7:12:be:5f:5b:63:3a:98:10:2a:6d:3b: 0d:f3:a3:b3:fe:02:0f:8c:a9:e3:b1:30:8d:07:be:67:d9:33: 0f:24:2d:df:c1:3e:5a:68:2f:64:36:86:f2:65:bf:6b:7e:31: 7e:02:03:9f:aa:a6:32:9a:34:61:03:f2:f8:59:b2:6a:f9:03: da:df:4b:33:de:25:95:ff:f5:d1:5e:88:c2:c8:3a:f9:a5:e3: bf:5a:05:15:5f:51:c0:15:bd:a0:4d:7e:d6:ca:2b:d6:d6:7a: bb:91:ee:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERBMEMxMTAvBgNVBAUTKDZBOTU0ODFDRThGNDBERDg4OTVEMUZCN0FFRTkwRTU5 NTlCQTgzQzEwHhcNMjUwODEyMjM0NTE3WhcNMjUwODE5MjM0NTE3WjAYMRYwFAYD VQQDEw02ODliZDIwZS01NTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1c9RdgcMyRbziOrJSml1sgNgv/0u0DEJRsJGUwELgZbio8MYo5JcvTHrxQrm wszSddU+Dth7XmnsBRGizZGXIrbCqbfBJks9PI3BwVN6/36z5EGm98Rw2YpsC1RE XtdrZuZZ3tFwr4idWurB2ijxnWv34tI6j9/dqn2pnUvJ8uCGO9T45BSFV3yNjWwF PqXhHxtvMF50llRl/nGmarB0nncYo35WyHhgTnyHxW0y+qWSWat6OYMPq9XdZt5V PkeOCDzOL98/S+0IEneVu9HhT3w6v12lY8YeD4LMJF+tnYmbejFY4izwHM4c6ncd +/cFxB+VJXMeoqqJqtYst3kxCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhsm19p llzc0wg3ctV7xUE2mSIgMB8GA1UdIwQYMBaAFGqVSBzo9A3YiV0ft67pDllZuoPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REEwQy9CNkRFMTMxMkYw NDkxMUVCOTQxRkZCMzJDNEY5QUUwMi9hcFZJSE9qMERkaUpYUi0zcnVrT1dWbTZn OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwVklIT2owRGRpSlhSLTNydWtPV1ZtNmc4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REEwQy9CNkRFMTMxMkYwNDkxMUVCOTQxRkZCMzJDNEY5QUUwMi9hcFZJSE9qMERk aUpYUi0zcnVrT1dWbTZnOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANDncuPrVMHGSzYYHKKRZAIYvSDktQquAIU8vlpf6JLjV2ItIx58Ds FchzU8Q16+8XvNSAaCx5zPlfjuamnLWEb4jTivfaoLotQgNf5l/zBgLe07DdJdPG sTfWJiriqyx80hNdaLVdBs+3SvCimAMGavTqER2SR9955K3qZu9Zrw35PhQg5sU/ fr1OGfcaEg4QACdCCzzHEr5fW2M6mBAqbTsN86Oz/gIPjKnjsTCNB75n2TMPJC3f wT5aaC9kNobyZb9rfjF+AgOfqqYymjRhA/L4WbJq+QPa30sz3iWV//XRXojCyDr5 peO/WgUVX1HAFb2gTX7WyivW1nq7ke6G -----END CERTIFICATE-----Generated at Wed Aug 13 05:32:55 2025 by rpki-client