$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json) Hash identifier: XnDlnmlZ8rTbmmQoFdi1gk+V0cTMz+rAM06JAPvU3+o= Subject key identifier: 8A:29:3A:B5:82:A6:0D:0C:E7:F3:D0:F1:07:4E:E4:9F:0B:64:2C:71 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 0836 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft Manifest number: 0829 Signing time: Tue 12 Aug 2025 21:07:43 +0000 Manifest this update: Tue 12 Aug 2025 21:07:43 +0000 Manifest next update: Tue 19 Aug 2025 21:07:43 +0000 Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: X+XbcXrZ5VNDhDRmj54vndhjhUKmi/zuGy8UEr0C17s=) 2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: NCc9hJCBXOq0YAm+ILP4RcqXk9/Ipks9AopJvqBxvro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 21:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2102 (0x836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Aug 12 21:07:43 2025 GMT Not After : Aug 19 21:07:43 2025 GMT Subject: CN=689bad1f-6594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:e8:f9:6d:aa:5d:77:cf:94:d8:9f:98:3e: e8:5e:43:8e:82:36:bb:2f:09:08:13:a6:d7:c7:5e: 06:f2:af:88:40:ae:a8:67:5e:cf:ff:87:49:56:93: 60:7c:75:d6:93:f7:88:66:30:74:a8:48:2f:b3:64: 9d:03:83:16:1a:a6:df:ea:c7:e3:78:7d:dd:77:46: 84:77:62:e4:dd:35:23:3b:bf:20:25:dc:23:58:1c: 32:99:22:42:9e:fa:b9:3d:14:1d:21:71:db:88:8b: 85:32:59:e7:31:3a:00:b3:0e:c4:91:16:96:89:cc: 5d:7c:28:99:fc:4e:1f:9c:96:cc:e1:6f:c5:a3:3a: b5:66:1b:62:5e:d1:86:df:33:93:47:16:cc:bc:fa: b0:72:de:89:2d:f2:5d:4f:b5:f0:24:5b:2f:11:5d: be:7c:24:c4:f0:8d:74:e0:35:8a:65:2d:50:07:10: ad:4e:3d:4b:4c:09:6b:04:d9:5f:5c:39:36:4e:a0: 84:f8:1a:bc:cc:32:cb:71:4c:26:e6:7f:9e:72:cd: 56:93:1d:55:1e:89:46:6b:eb:61:ca:67:6e:ad:82: df:99:b8:9c:63:d0:4c:31:a1:04:0c:c5:cb:82:7a: a8:e8:32:52:c0:12:41:e2:b2:45:c6:1b:02:a0:36: e5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:29:3A:B5:82:A6:0D:0C:E7:F3:D0:F1:07:4E:E4:9F:0B:64:2C:71 X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c2:56:bd:7c:b9:5b:86:d9:ce:f3:24:98:87:cb:53:88:25: 0a:18:b0:25:20:3e:14:dd:8a:ab:c9:43:90:44:ee:3f:c6:f6: 44:2a:22:cf:49:76:3a:10:e0:31:90:1c:9a:5f:e4:c9:a6:bc: e8:7d:2a:3f:dc:6c:26:4e:58:16:96:61:79:cb:b9:78:46:b5: a1:f8:c4:da:85:b1:95:41:5b:cb:54:0d:3d:a7:8e:6c:d8:76: f1:98:5e:00:ee:73:1f:78:71:a5:57:38:6d:15:e3:59:73:ef: 97:ce:9e:89:48:de:cd:17:fe:c4:d4:52:2c:99:3b:12:dd:19: aa:37:3c:26:20:b6:2d:04:a8:a2:96:52:a0:69:8c:fe:62:82: 23:b6:03:ae:78:b6:f6:01:c5:e6:c0:18:a1:44:5c:43:4d:c2: a2:4f:65:ac:a9:f5:a5:50:90:72:76:7a:d6:a3:b0:19:55:f7: 22:18:18:9c:1a:25:c7:6f:da:de:82:78:60:27:7a:ae:d4:17: 07:34:d0:e5:a2:9d:e8:69:0c:4c:3f:f8:ca:78:0a:ec:0e:2b: c5:a9:cf:5d:ba:18:57:bf:35:bb:bf:9d:d8:54:38:74:30:7d: 44:26:97:74:1f:6c:2f:56:0f:d9:08:c9:cc:df:3a:21:e7:97: 2a:44:79:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjUwODEyMjEwNzQzWhcNMjUwODE5MjEwNzQzWjAYMRYwFAYD VQQDEw02ODliYWQxZi02NTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuu/o+W2qXXfPlNifmD7oXkOOgja7LwkIE6bXx14G8q+IQK6oZ17P/4dJVpNg fHXWk/eIZjB0qEgvs2SdA4MWGqbf6sfjeH3dd0aEd2Lk3TUjO78gJdwjWBwymSJC nvq5PRQdIXHbiIuFMlnnMToAsw7EkRaWicxdfCiZ/E4fnJbM4W/Fozq1ZhtiXtGG 3zOTRxbMvPqwct6JLfJdT7XwJFsvEV2+fCTE8I104DWKZS1QBxCtTj1LTAlrBNlf XDk2TqCE+Bq8zDLLcUwm5n+ecs1Wkx1VHolGa+thymdurYLfmbicY9BMMaEEDMXL gnqo6DJSwBJB4rJFxhsCoDblpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIopOrWC pg0M5/PQ8QdO5J8LZCxxMB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2 a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHwla9fLlbhtnO8ySYh8tTiCUKGLAlID4U3YqryUOQRO4/xvZEKiLP SXY6EOAxkByaX+TJprzofSo/3GwmTlgWlmF5y7l4RrWh+MTahbGVQVvLVA09p45s 2HbxmF4A7nMfeHGlVzhtFeNZc++Xzp6JSN7NF/7E1FIsmTsS3RmqNzwmILYtBKii llKgaYz+YoIjtgOueLb2AcXmwBihRFxDTcKiT2WsqfWlUJBydnrWo7AZVfciGBic GiXHb9regnhgJ3qu1BcHNNDlop3oaQxMP/jKeArsDivFqc9duhhXvzW7v53YVDh0 MH1EJpd0H2wvVg/ZCMnM3zoh55cqRHkT -----END CERTIFICATE-----Generated at Wed Aug 13 05:58:26 2025 by rpki-client