$ rpki-client -vvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft File: aFCqv5vavya_oJKDAh_pE9aVbjI.mft (raw, json) Hash identifier: 4zq1L4QQusqR7P9+hnp248t+nNnet7MdJw/Ka3Cf8P4= Subject key identifier: 15:2D:D9:BF:74:C0:E8:A1:39:52:23:8F:F6:D9:84:FB:B7:BE:F5:38 Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32 Certificate issuer: /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32 Certificate serial: 132C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft Manifest number: 131C Signing time: Fri 08 Aug 2025 17:13:12 +0000 Manifest this update: Fri 08 Aug 2025 17:13:11 +0000 Manifest next update: Fri 15 Aug 2025 17:13:11 +0000 Files and hashes: 1: aFCqv5vavya_oJKDAh_pE9aVbjI.crl (hash: lWPd5eZB2cvFEbrxbwpcjycU2ps1lK+2LwHE31iTaRc=) 2: 583F2920A6E611EF9BD0C728C4F9AE02.roa (hash: QCjfIjSatqEkani4vFyMBR81W4WM4U5LTw8JrcC/R5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4908 (0x132c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32 Validity Not Before: Aug 8 17:13:11 2025 GMT Not After : Aug 15 17:13:11 2025 GMT Subject: CN=68963027-1e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:71:82:16:4a:85:09:a4:82:f2:49:2a:18:a4: 38:61:ad:c6:ca:46:e2:7f:3e:34:2d:52:df:ca:ec: 41:03:2c:0d:76:5a:80:b6:5b:f5:8d:de:62:a7:e8: e1:fa:fc:23:17:a5:56:d0:c1:1c:d8:d5:c1:25:2b: eb:1a:c3:b5:65:5f:e8:4c:9e:41:00:fe:fc:48:a4: ce:38:9b:aa:d4:8d:13:a0:b8:cd:dc:5e:2d:a8:56: 9b:f1:3e:d9:9f:5a:56:57:89:3f:23:48:6e:25:e7: c6:af:da:ed:e8:45:6c:ba:24:ae:c0:f8:88:65:ac: 90:b8:5d:d3:f5:e7:c6:83:73:05:24:be:24:de:91: 6b:64:64:ba:0c:61:23:ca:1c:b7:10:67:05:5b:97: 53:06:4c:95:f7:5d:8d:33:ac:6c:9e:c4:88:2a:7f: d4:77:3f:5d:18:49:12:52:ec:ba:9b:33:3f:f2:0f: ae:f6:bb:dc:17:3b:34:7d:3e:7b:cc:4f:6e:6d:cf: 6d:cd:29:25:01:14:a8:5d:35:2c:46:99:03:9d:9e: 33:74:08:0b:cb:20:1d:a7:35:d5:a2:29:cf:5e:a8: 68:00:7b:58:81:d9:69:7e:3d:57:15:be:79:7c:a5: a3:e2:09:c4:82:6f:f8:15:d7:b2:b3:bb:29:bb:fe: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2D:D9:BF:74:C0:E8:A1:39:52:23:8F:F6:D9:84:FB:B7:BE:F5:38 X509v3 Authority Key Identifier: keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:02:0e:b5:48:b1:98:50:ca:50:f1:77:8a:8e:66:32:a0:1c: 91:f0:8c:42:f3:18:06:2a:f6:34:77:52:51:88:93:0e:79:4d: 74:48:9e:ee:9a:36:c2:e4:61:e4:9d:a9:08:56:a4:7e:8c:b1: d9:e0:98:f3:9c:02:84:e5:9a:ee:f2:8a:8d:cb:78:4b:63:4a: 9f:3a:d3:53:b3:17:c7:d6:af:f9:9e:e1:71:66:e4:88:ca:e5: d8:86:91:43:1b:6d:e9:95:bd:2f:ec:55:f9:62:c4:05:40:23: 1d:53:b3:b7:7d:53:2f:6f:0e:07:28:87:c4:b1:23:35:e6:05: af:70:03:c9:6f:71:2a:ce:97:65:07:5d:e6:57:5d:74:a3:89: 59:bb:be:20:ab:85:88:85:f3:eb:e1:cc:61:68:f6:95:76:c0: 09:d2:bd:80:f2:00:cd:32:a6:bd:07:cd:55:25:ab:b2:1a:ed: d4:9e:cb:e1:11:c4:d1:13:3d:ca:2c:37:75:66:e2:f8:e8:08: 5f:24:23:b2:e2:87:a8:40:d4:80:78:d8:ce:ac:d2:17:d0:c1: 8b:f7:5e:4f:61:d0:3c:b3:30:fb:41:0c:93:b5:25:c2:a8:17: aa:08:9e:e1:eb:0a:82:57:3e:d0:b2:51:6d:8b:2d:6e:23:ee: 2e:b3:d7:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY5NzgxMTAvBgNVBAUTKDY4NTBBQUJGOUJEQUJGMjZCRkEwOTI4MzAyMUZFOTEz RDY5NTZFMzIwHhcNMjUwODA4MTcxMzExWhcNMjUwODE1MTcxMzExWjAYMRYwFAYD VQQDEw02ODk2MzAyNy0xZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nGCFkqFCaSC8kkqGKQ4Ya3Gykbifz40LVLfyuxBAywNdlqAtlv1jd5ip+jh +vwjF6VW0MEc2NXBJSvrGsO1ZV/oTJ5BAP78SKTOOJuq1I0ToLjN3F4tqFab8T7Z n1pWV4k/I0huJefGr9rt6EVsuiSuwPiIZayQuF3T9efGg3MFJL4k3pFrZGS6DGEj yhy3EGcFW5dTBkyV912NM6xsnsSIKn/Udz9dGEkSUuy6mzM/8g+u9rvcFzs0fT57 zE9ubc9tzSklARSoXTUsRpkDnZ4zdAgLyyAdpzXVoinPXqhoAHtYgdlpfj1XFb55 fKWj4gnEgm/4Fdeys7spu/4BzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUt2b90 wOihOVIjj/bZhPu3vvU4MB8GA1UdIwQYMBaAFGhQqr+b2r8mv6CSgwIf6RPWlW4y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjk3OC83RTIyQjM3NEI2 OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5YV9vSktEQWhfcEU5YVZi akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FGQ3F2NXZhdnlhX29KS0RBaF9wRTlhVmJqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjk3OC83RTIyQjM3NEI2OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5 YV9vSktEQWhfcEU5YVZiakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7Ag61SLGYUMpQ8XeKjmYyoByR8IxC8xgGKvY0d1JRiJMOeU10SJ7u mjbC5GHknakIVqR+jLHZ4JjznAKE5Zru8oqNy3hLY0qfOtNTsxfH1q/5nuFxZuSI yuXYhpFDG23plb0v7FX5YsQFQCMdU7O3fVMvbw4HKIfEsSM15gWvcAPJb3Eqzpdl B13mV110o4lZu74gq4WIhfPr4cxhaPaVdsAJ0r2A8gDNMqa9B81VJauyGu3Unsvh EcTREz3KLDd1ZuL46AhfJCOy4oeoQNSAeNjOrNIX0MGL915PYdA8szD7QQyTtSXC qBeqCJ7h6wqCVz7QslFtiy1uI+4us9dz -----END CERTIFICATE-----Generated at Sat Aug 9 10:41:45 2025 by rpki-client