$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: ALaI7Ko9c0zPLuCpgYa1CKrlvmw4pN1BQKq++REQVDM= Subject key identifier: 55:F5:3C:E2:D5:0E:B7:22:C7:45:8F:72:FE:B6:84:22:CB:D4:1C:15 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 053D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 051A Signing time: Sat 09 Aug 2025 00:08:22 +0000 Manifest this update: Sat 09 Aug 2025 00:08:21 +0000 Manifest next update: Sat 16 Aug 2025 00:08:21 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: rnYNspI7Hk9TDGjoW5k+QxBanQbGy1++H6YGV91yNTA=) 2: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: /oWh6sDf6JMhXVQFfiBK5T8ylerkJmv9WJJdVtYkSIU=) 3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: hF9MKD/FwgF9cY8hvh9m1ZRU6ZbNvnTiLbcgCIT5wPc=) 4: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: 9aBOau/kR05/ZlK4Ctxtvv3XFrOvJ/VU5zNEft0SiRE=) 5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: M9HaGHa7pI3ilHdh1OGWp/+WvUY2NRFrgXm0KqnYXRc=) 6: B9DEB77E654411EFACBF7956C4F9AE02.roa (hash: xYaxgWyzwtexyE7NeRo7CnQ16cP15TpfRCg28S5nmVo=) 7: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: ERqr4ZgITrZRkOwS3AN4CJTqd2fIDLE15f/P4/QlBUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1341 (0x53d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Aug 9 00:08:21 2025 GMT Not After : Aug 16 00:08:21 2025 GMT Subject: CN=68969176-9548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:92:32:12:c1:a1:2b:a5:d2:48:59:3b:1b: d6:bd:b5:91:89:07:02:51:c2:e0:f0:11:60:7f:93: 35:c8:8a:ca:18:da:67:fa:c2:12:6c:09:18:24:62: 87:4b:06:33:4f:a3:20:41:44:ca:fd:0b:4d:51:50: 53:2d:e6:d8:68:80:06:25:3e:b7:7d:b4:46:93:00: c4:6c:e8:66:26:62:e2:d0:65:ca:40:b0:15:84:df: c7:25:79:42:71:e0:ec:af:38:24:cc:aa:20:12:64: d1:b5:a1:2d:e8:aa:c0:b5:bb:5e:74:91:df:a0:69: 3f:23:7a:2e:b6:7b:83:a4:73:ec:b9:e3:be:52:42: 09:01:30:c8:dd:f1:e6:4d:00:64:7e:8b:5b:95:87: fa:74:82:9f:ce:a9:bb:df:8c:2e:1f:2b:2a:40:36: 49:b7:0a:69:1b:f0:2e:45:50:11:54:c1:f6:31:58: be:36:d7:19:ce:13:11:f1:e7:63:04:08:01:7c:85: f1:62:d7:e9:88:10:94:8a:59:f9:1a:2d:e4:80:34: 76:82:6e:dc:c8:5f:f0:90:8f:ff:30:f9:3a:6a:29: bb:46:ae:15:b7:a8:1b:35:65:a5:a6:ff:47:6f:be: de:12:26:04:77:d8:ba:97:be:d3:fc:b9:23:2f:64: ae:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F5:3C:E2:D5:0E:B7:22:C7:45:8F:72:FE:B6:84:22:CB:D4:1C:15 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:8a:bd:d4:db:fb:98:bb:45:c6:97:0d:07:83:78:92:d3:b4: 6a:57:f7:98:6c:bc:07:1a:3e:79:e8:6d:a0:c3:bb:7c:87:3b: 75:02:c3:b7:8a:39:29:c2:52:4f:7f:8d:a2:54:91:08:d3:79: 77:ba:c1:d7:18:f5:ac:47:db:df:81:40:bc:49:bd:99:5f:04: 35:b1:7b:c8:84:42:20:45:17:e0:65:06:12:b0:b3:d1:d2:2f: e3:4f:2d:83:04:5c:31:b2:16:27:a5:35:80:75:bd:9c:4f:34: 08:3c:26:61:9a:a5:df:39:00:36:b9:6a:01:6d:c9:5a:d3:13: 27:ef:58:50:99:d6:92:32:90:7b:2b:bc:8f:a7:55:4c:67:03: 3c:a4:0a:24:5d:56:a0:b3:dc:9f:19:64:21:33:81:75:fe:12: 47:3f:68:46:5f:47:8d:0b:e1:d1:50:35:e5:fa:c1:64:eb:de: 83:c0:ce:cb:25:7e:a6:04:c2:e9:be:aa:a7:81:2c:fe:4b:82: fb:5b:bf:5e:e3:ee:df:5d:84:9f:d2:22:78:11:df:91:66:82: b6:4f:d8:bd:c3:11:79:61:f7:4f:82:c1:4a:16:eb:74:4a:bb: 76:dd:45:39:62:cf:d9:14:74:5e:ce:01:83:73:dd:98:c5:dd: 43:b1:ce:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUwODA5MDAwODIxWhcNMjUwODE2MDAwODIxWjAYMRYwFAYD VQQDEw02ODk2OTE3Ni05NTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzeSMhLBoSul0khZOxvWvbWRiQcCUcLg8BFgf5M1yIrKGNpn+sISbAkYJGKH SwYzT6MgQUTK/QtNUVBTLebYaIAGJT63fbRGkwDEbOhmJmLi0GXKQLAVhN/HJXlC ceDsrzgkzKogEmTRtaEt6KrAtbtedJHfoGk/I3outnuDpHPsueO+UkIJATDI3fHm TQBkfotblYf6dIKfzqm734wuHysqQDZJtwppG/AuRVARVMH2MVi+NtcZzhMR8edj BAgBfIXxYtfpiBCUiln5Gi3kgDR2gm7cyF/wkI//MPk6aim7Rq4Vt6gbNWWlpv9H b77eEiYEd9i6l77T/LkjL2SuGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFX1POLV Drcix0WPcv62hCLL1BwVMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChir3U2/uYu0XGlw0Hg3iS07RqV/eYbLwHGj556G2gw7t8hzt1AsO3 ijkpwlJPf42iVJEI03l3usHXGPWsR9vfgUC8Sb2ZXwQ1sXvIhEIgRRfgZQYSsLPR 0i/jTy2DBFwxshYnpTWAdb2cTzQIPCZhmqXfOQA2uWoBbcla0xMn71hQmdaSMpB7 K7yPp1VMZwM8pAokXVags9yfGWQhM4F1/hJHP2hGX0eNC+HRUDXl+sFk696DwM7L JX6mBMLpvqqngSz+S4L7W79e4+7fXYSf0iJ4Ed+RZoK2T9i9wxF5YfdPgsFKFut0 Srt23UU5Ys/ZFHRezgGDc92Yxd1Dsc6u -----END CERTIFICATE-----Generated at Sat Aug 9 14:29:40 2025 by rpki-client