$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: XCOETYORqlR7nVasEJyM0xcM+7qpTiFjE28dbdQ+c2I= Subject key identifier: E9:77:F8:14:DB:39:23:75:FC:FC:18:C4:62:9B:B1:6C:1C:88:22:19 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0E24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0E0E Signing time: Fri 08 Aug 2025 18:04:21 +0000 Manifest this update: Fri 08 Aug 2025 18:04:20 +0000 Manifest next update: Fri 15 Aug 2025 18:04:20 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: HavLqVDy9jXYbyHS1RdyNrDGFGC0nPcGysAirantogc=) 2: 6523917E508911F0A97F9A28C4F9AE02.roa (hash: K4wA0GoKvzqerl9jOReA1zKoYkvfC5BqWgsjQH9G7Wo=) 3: B2A2CFCEF56C11EE90E38718C4F9AE02.roa (hash: kkPAtmDoelVoYFE7Hbje8wUj2mrPDtwi5yj75S4iHxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3620 (0xe24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Aug 8 18:04:20 2025 GMT Not After : Aug 15 18:04:20 2025 GMT Subject: CN=68963c24-5e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:df:ea:26:41:a4:d4:eb:b3:58:e2:3b:df: 26:21:c6:67:5a:65:f9:b0:81:3d:2f:f3:5a:f3:f2: 07:f7:a3:d1:82:a7:09:9f:fe:71:4b:0b:7d:fc:18: 49:bf:a3:f5:db:ca:ae:31:e7:91:e9:a2:cb:25:68: f1:9a:b0:fd:92:84:4a:36:35:92:fc:9d:db:17:1c: 55:f3:a8:14:e7:42:60:af:a5:bb:96:06:27:63:b8: 86:64:7c:05:01:8e:1d:96:56:92:cd:d8:b7:5a:2a: 91:e9:de:fe:6e:c4:9a:ac:67:e7:5f:7c:6e:7c:a9: 2c:1a:b9:91:d1:39:f8:71:82:24:92:f2:57:20:14: 88:63:d1:d5:cf:f6:5b:38:b5:db:1f:10:79:91:2f: 58:54:5e:ad:81:61:89:30:98:a0:e2:54:ea:37:78: 57:70:68:35:62:65:d4:17:30:c3:7e:c5:cb:32:73: ac:71:e7:c9:30:b6:73:3b:16:66:ff:eb:13:0e:6e: 23:74:61:6c:07:20:8b:09:cb:b6:ab:a0:bc:7d:3b: 85:96:d0:c5:27:ed:f7:d6:d4:b3:70:3f:16:fc:61: a1:36:36:a3:4e:11:b2:e8:6b:10:18:05:15:49:57: e6:04:be:f6:7c:8b:81:8f:ec:22:ef:e5:5f:6d:21: 1a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:77:F8:14:DB:39:23:75:FC:FC:18:C4:62:9B:B1:6C:1C:88:22:19 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e0:50:0c:bf:79:88:ea:bc:57:b8:17:17:95:80:0f:6f:94: bc:0d:4b:a9:37:a9:1e:e4:ae:2b:07:9a:1a:0a:87:95:0e:82: 0a:48:b6:1b:53:3e:51:a1:72:79:56:3a:a4:00:6b:52:3c:92: 0e:89:c6:6b:61:cf:70:ab:09:a4:6c:b4:49:73:d9:ed:de:b3: 95:78:ff:1b:c1:bb:96:69:6e:2c:d0:ee:93:8b:88:ba:8b:2a: ae:39:0f:7b:f5:a3:74:86:2c:57:aa:fa:4b:2c:5c:25:eb:10: fb:ea:eb:ab:e2:0e:69:8c:b2:37:f5:76:b2:6d:e5:94:69:1b: 3c:37:f4:4a:84:63:bd:56:88:a6:2e:c8:f1:ba:60:60:3b:47: 32:92:0b:f5:d5:81:6a:f2:5a:c7:15:e7:8a:ac:d0:de:ed:c1: bf:40:ef:a7:f0:14:3f:d6:88:11:81:5d:f9:42:f4:51:10:52: d6:29:c3:a3:1c:30:a2:05:94:c4:b9:aa:fd:b8:86:b6:57:64: 43:e4:7c:58:3c:f5:9f:1e:04:17:06:9a:44:60:65:8d:f8:9d: f5:6b:c7:73:c3:24:02:5a:bf:31:84:19:44:34:be:99:f6:4c: 96:bc:76:6c:32:95:01:dd:92:d7:cb:98:50:6c:9f:cd:7a:dd: b2:ae:22:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUwODA4MTgwNDIwWhcNMjUwODE1MTgwNDIwWjAYMRYwFAYD VQQDEw02ODk2M2MyNC01ZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YPf6iZBpNTrs1jiO98mIcZnWmX5sIE9L/Na8/IH96PRgqcJn/5xSwt9/BhJ v6P128quMeeR6aLLJWjxmrD9koRKNjWS/J3bFxxV86gU50Jgr6W7lgYnY7iGZHwF AY4dllaSzdi3WiqR6d7+bsSarGfnX3xufKksGrmR0Tn4cYIkkvJXIBSIY9HVz/Zb OLXbHxB5kS9YVF6tgWGJMJig4lTqN3hXcGg1YmXUFzDDfsXLMnOscefJMLZzOxZm /+sTDm4jdGFsByCLCcu2q6C8fTuFltDFJ+331tSzcD8W/GGhNjajThGy6GsQGAUV SVfmBL72fIuBj+wi7+VfbSEamQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOl3+BTb OSN1/PwYxGKbsWwciCIZMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA84FAMv3mI6rxXuBcXlYAPb5S8DUupN6ke5K4rB5oaCoeVDoIKSLYb Uz5RoXJ5VjqkAGtSPJIOicZrYc9wqwmkbLRJc9nt3rOVeP8bwbuWaW4s0O6Ti4i6 iyquOQ979aN0hixXqvpLLFwl6xD76uur4g5pjLI39XaybeWUaRs8N/RKhGO9Voim LsjxumBgO0cykgv11YFq8lrHFeeKrNDe7cG/QO+n8BQ/1ogRgV35QvRREFLWKcOj HDCiBZTEuar9uIa2V2RD5HxYPPWfHgQXBppEYGWN+J31a8dzwyQCWr8xhBlENL6Z 9kyWvHZsMpUB3ZLXy5hQbJ/Net2yriIO -----END CERTIFICATE-----Generated at Sun Aug 10 05:47:20 2025 by rpki-client