$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: PVkg6lm/6DyY0pex7I8KVFQ6jOzGTyeOuqpEYAUgFzM= Subject key identifier: 90:8E:9C:1A:A7:DC:C9:4E:0D:A1:C9:E7:E4:1E:C3:7E:83:52:A5:6D Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0C75 Signing time: Fri 08 Aug 2025 18:41:37 +0000 Manifest this update: Fri 08 Aug 2025 18:41:36 +0000 Manifest next update: Fri 15 Aug 2025 18:41:36 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: O+WnJV6AHVFgB3NN+3kd6IgeIvp9YVTvG4/nYbd98oU=) 2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: RkMRmNqmHZ9s0oSB72MGnOxEbYhdY42Vffpm2UpowTM=) 3: B430443A324211EFB14FB614C4F9AE02.roa (hash: 72kjZWvSx4fyueGWPj1oIcb7cSxhi/YjCVNjsbLh3iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Aug 8 18:41:36 2025 GMT Not After : Aug 15 18:41:36 2025 GMT Subject: CN=689644e1-60b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:9c:74:45:92:6a:2e:9a:04:4f:20:91:b8: 6b:7b:52:ba:69:24:75:65:f0:54:16:17:4c:35:0b: 90:6a:0a:07:4b:98:7c:48:b5:89:c0:a1:80:f7:13: b5:fa:19:73:13:50:de:d7:92:7c:6a:8b:fc:58:6a: 38:66:54:24:92:94:08:7b:97:b9:11:93:96:56:d9: 7c:5f:1f:94:f6:5f:5e:2b:a0:62:4d:a1:5e:d7:98: 16:4e:e0:bd:57:ce:ba:af:67:53:02:37:5f:2f:58: 24:3f:4e:b4:2d:f9:02:de:fc:68:2e:e0:d3:e3:48: 2f:a1:e0:c0:89:09:70:a4:b5:a1:01:e2:28:ce:af: 21:04:80:1a:dc:57:af:9b:b5:c6:d0:2c:d9:dd:36: 50:36:e9:e7:b4:be:07:eb:84:61:84:4d:2c:e5:6d: f7:26:84:f4:2b:26:cb:6b:bc:55:c4:d4:33:30:a4: 19:6a:7f:e9:87:24:2d:2d:af:eb:45:e6:8e:38:99: e0:ea:11:3e:e6:e4:85:45:ee:e0:c1:0b:57:0d:36: 81:5a:97:d6:57:f4:a8:a6:85:8f:ce:1d:c9:5e:b3: ce:0a:13:26:15:b0:f4:ec:a7:c8:ac:7c:8b:00:fd: 88:3e:03:ba:c7:62:08:45:02:d5:f6:98:81:c4:1a: 33:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8E:9C:1A:A7:DC:C9:4E:0D:A1:C9:E7:E4:1E:C3:7E:83:52:A5:6D X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:4d:20:39:ee:af:39:fc:5e:5f:94:f0:88:c7:2b:e0:8b:8d: c8:17:52:e3:f5:4b:cc:53:01:1b:60:0d:8d:6d:cd:21:87:f3: d0:c8:cd:19:25:ac:05:d2:dc:52:ba:3b:d1:dd:f2:97:2d:9a: e3:6a:1c:8f:c5:20:a2:60:d0:65:96:13:e2:7b:ac:e8:73:e4: 78:96:88:c6:5e:17:60:1a:14:76:ee:fe:2e:bd:d4:6c:37:07: 9d:cd:70:52:cb:de:94:69:6c:cb:70:a5:d0:f2:00:07:1d:0f: f0:8d:03:f5:e2:d1:86:8c:93:b4:30:28:c0:a6:f5:05:92:07: c6:24:cc:87:0e:4d:91:c9:87:3b:5e:95:f7:9d:09:ad:30:0f: bf:08:60:90:8f:70:7d:78:81:56:39:69:c3:7f:f2:2c:86:3d: 97:9f:85:3b:d3:11:c5:67:a2:14:02:a1:58:2d:b8:83:0a:a4: ea:ce:60:03:cb:d0:9d:1f:df:81:1c:dc:8f:c0:e2:ed:f9:17: 53:34:a0:c0:84:52:20:fb:bf:b3:f3:17:97:66:6b:8b:38:1f: 37:38:5d:10:cc:88:41:98:3f:ef:d9:f3:e4:af:b0:95:9b:71: d9:e8:f2:b6:9a:59:46:3d:24:1d:fc:e4:48:9d:03:9b:f4:32: 28:de:9c:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjUwODA4MTg0MTM2WhcNMjUwODE1MTg0MTM2WjAYMRYwFAYD VQQDEw02ODk2NDRlMS02MGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFacdEWSai6aBE8gkbhre1K6aSR1ZfBUFhdMNQuQagoHS5h8SLWJwKGA9xO1 +hlzE1De15J8aov8WGo4ZlQkkpQIe5e5EZOWVtl8Xx+U9l9eK6BiTaFe15gWTuC9 V866r2dTAjdfL1gkP060LfkC3vxoLuDT40gvoeDAiQlwpLWhAeIozq8hBIAa3Fev m7XG0CzZ3TZQNunntL4H64RhhE0s5W33JoT0KybLa7xVxNQzMKQZan/phyQtLa/r ReaOOJng6hE+5uSFRe7gwQtXDTaBWpfWV/SopoWPzh3JXrPOChMmFbD07KfIrHyL AP2IPgO6x2IIRQLV9piBxBozyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCOnBqn 3MlODaHJ5+Qew36DUqVtMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTTSA57q85/F5flPCIxyvgi43IF1Lj9UvMUwEbYA2Nbc0hh/PQyM0Z JawF0txSujvR3fKXLZrjahyPxSCiYNBllhPie6zoc+R4lojGXhdgGhR27v4uvdRs NwedzXBSy96UaWzLcKXQ8gAHHQ/wjQP14tGGjJO0MCjApvUFkgfGJMyHDk2RyYc7 XpX3nQmtMA+/CGCQj3B9eIFWOWnDf/Ishj2Xn4U70xHFZ6IUAqFYLbiDCqTqzmAD y9CdH9+BHNyPwOLt+RdTNKDAhFIg+7+z8xeXZmuLOB83OF0QzIhBmD/v2fPkr7CV m3HZ6PK2mllGPSQd/ORInQOb9DIo3pxv -----END CERTIFICATE-----Generated at Sun Aug 10 10:45:05 2025 by rpki-client