$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft File: 40tPgNnj9wC8rExSxasj61t-37s.mft (raw, json) Hash identifier: Al5I/7fU4y+xLKjlEVrWhm+9fyoewd9mVnXWvjcEy98= Subject key identifier: BB:4F:84:AE:3A:C9:3D:4E:01:C2:E6:8D:CB:4A:5C:CA:F9:6E:EC:7A Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft Manifest number: 0153 Signing time: Sat 09 Aug 2025 00:08:20 +0000 Manifest this update: Sat 09 Aug 2025 00:08:19 +0000 Manifest next update: Sat 16 Aug 2025 00:08:19 +0000 Files and hashes: 1: 40tPgNnj9wC8rExSxasj61t-37s.crl (hash: 8tVIHvULGZM6A7l4yVG8Feo/KabTLgKW8rdfMZfJgPQ=) 2: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (hash: +idkc0Y+TplJvB7T7xrVzyMgw/UlYDqH1h1gbH9ycfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Validity Not Before: Aug 9 00:08:19 2025 GMT Not After : Aug 16 00:08:19 2025 GMT Subject: CN=68969173-1bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1f:17:32:fb:fb:e0:79:db:39:bf:fe:51:58: b4:2d:25:0e:82:fa:3b:0a:c9:ce:8d:b5:cf:3f:6c: 4b:cb:c0:23:7a:a8:c9:ea:fc:72:ee:82:19:d2:bc: 07:e0:31:58:70:c8:67:17:dd:08:9a:07:be:24:90: 71:74:d1:ef:50:06:6d:d9:00:8c:9b:48:5f:7b:30: 96:17:ac:50:c9:44:12:1c:3f:17:89:4c:95:58:8c: b7:cd:4c:f8:81:b5:6d:e3:2e:e3:51:b4:3d:e4:88: 9e:04:6c:a1:82:98:fa:f2:5b:06:81:ed:2d:4a:dc: 62:3c:1b:1b:82:fc:62:ed:1a:5b:0b:b8:3f:83:46: c5:e4:66:33:63:6b:6b:13:f6:1d:3b:a8:ff:ae:54: df:45:52:32:64:02:94:6c:c8:d9:92:87:a4:fe:9a: ac:75:67:e2:1f:a5:f8:b1:d2:89:f2:27:61:67:5f: f0:7b:3e:bd:5e:af:b2:88:10:8b:4f:7c:4b:4d:98: 92:5e:49:4d:87:26:37:e2:1c:80:e2:e5:fc:45:88: df:ff:7a:a0:1d:fa:42:0f:46:99:96:ca:56:50:22: 59:bd:d4:3a:b1:ba:c8:d5:89:7f:5a:0d:a0:90:18: 6a:e4:f6:c6:74:25:d8:f4:70:f8:dd:90:b2:34:34: 3a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4F:84:AE:3A:C9:3D:4E:01:C2:E6:8D:CB:4A:5C:CA:F9:6E:EC:7A X509v3 Authority Key Identifier: keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:d5:c8:f5:3c:94:f8:91:52:5a:a3:9c:f8:8e:83:e6:f5:27: bc:28:50:84:ef:8a:fa:16:63:57:53:78:0b:c0:84:e3:92:27: e3:96:17:a0:41:ab:60:f2:de:96:21:93:c6:ab:0b:85:26:0e: 7e:26:72:3d:51:7e:e3:e0:77:bb:06:81:25:7c:21:77:97:cc: 54:72:7d:06:cd:37:69:9f:62:49:f4:33:ee:dc:f6:e7:fd:37: fe:aa:1a:46:cf:75:2d:ac:a2:28:ac:16:35:1c:a2:33:3d:cd: 5b:f7:58:d5:32:7a:d8:e8:e5:0f:0a:6c:10:57:a0:28:8e:4d: 3e:85:01:98:59:d7:77:06:1a:72:17:38:35:8c:5b:f2:c3:53: 17:de:70:38:45:9a:32:a5:e5:49:3a:5f:86:26:e3:0c:dc:06: ed:a1:2d:c6:00:9e:0d:df:70:83:7d:97:3a:7b:c2:40:c8:c6: 19:57:92:34:e2:14:f8:90:06:b1:71:5d:66:88:e9:9d:ce:2a: 6a:9e:24:b5:39:93:0c:a5:b4:f8:d9:89:39:94:ca:45:96:0c: 95:7b:83:dc:19:0b:b1:99:f6:ff:e3:24:54:7e:22:a8:3a:32: 27:ca:de:01:f6:18:ff:c4:09:8f:7b:82:a1:9b:54:0f:af:8f: 55:14:ec:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKEUzNEI0RjgwRDlFM0Y3MDBCQ0FDNEM1MkM1QUIyM0VC NUI3RURGQkIwHhcNMjUwODA5MDAwODE5WhcNMjUwODE2MDAwODE5WjAYMRYwFAYD VQQDEw02ODk2OTE3My0xYmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6R8XMvv74HnbOb/+UVi0LSUOgvo7CsnOjbXPP2xLy8AjeqjJ6vxy7oIZ0rwH 4DFYcMhnF90Imge+JJBxdNHvUAZt2QCMm0hfezCWF6xQyUQSHD8XiUyVWIy3zUz4 gbVt4y7jUbQ95IieBGyhgpj68lsGge0tStxiPBsbgvxi7RpbC7g/g0bF5GYzY2tr E/YdO6j/rlTfRVIyZAKUbMjZkoek/pqsdWfiH6X4sdKJ8idhZ1/wez69Xq+yiBCL T3xLTZiSXklNhyY34hyA4uX8RYjf/3qgHfpCD0aZlspWUCJZvdQ6sbrI1Yl/Wg2g kBhq5PbGdCXY9HD43ZCyNDQ6twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtPhK46 yT1OAcLmjctKXMr5bux6MB8GA1UdIwQYMBaAFONLT4DZ4/cAvKxMUsWrI+tbft+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy85NkU2Njc1QTc4 NEUxMUVFQjE5QUQzNERDNEY5QUUwMi80MHRQZ05uajl3QzhyRXhTeGFzajYxdC0z N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQwdFBnTm5qOXdDOHJFeFN4YXNqNjF0LTM3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy85NkU2Njc1QTc4NEUxMUVFQjE5QUQzNERDNEY5QUUwMi80MHRQZ05uajl3 QzhyRXhTeGFzajYxdC0zN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC21cj1PJT4kVJao5z4joPm9Se8KFCE74r6FmNXU3gLwITjkifjlheg Qatg8t6WIZPGqwuFJg5+JnI9UX7j4He7BoElfCF3l8xUcn0GzTdpn2JJ9DPu3Pbn /Tf+qhpGz3UtrKIorBY1HKIzPc1b91jVMnrY6OUPCmwQV6Aojk0+hQGYWdd3Bhpy Fzg1jFvyw1MX3nA4RZoypeVJOl+GJuMM3AbtoS3GAJ4N33CDfZc6e8JAyMYZV5I0 4hT4kAaxcV1miOmdzipqniS1OZMMpbT42Yk5lMpFlgyVe4PcGQuxmfb/4yRUfiKo OjInyt4B9hj/xAmPe4Khm1QPr49VFOxR -----END CERTIFICATE-----Generated at Sun Aug 10 19:00:30 2025 by rpki-client