$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft File: mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json) Hash identifier: yV0TlixBsqu+M8oHqZmlDampFm5JbzpxCLhsKUH3AGw= Subject key identifier: 4A:B9:B9:C9:1A:0A:AE:7E:C5:53:D2:68:49:E6:3A:A6:EA:9D:76:DE Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Certificate serial: 03F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft Manifest number: 03F2 Signing time: Mon 11 Aug 2025 00:40:36 +0000 Manifest this update: Mon 11 Aug 2025 00:40:36 +0000 Manifest next update: Mon 18 Aug 2025 00:40:36 +0000 Files and hashes: 1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: //gl2nIMHei8ujP1wTym6co/LVt//i76MkM3rZQ63eM=) 2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: Lu0DnvWKzViBD3LlCEVvbQZrg7/F2h1sbFYCuGPJgY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1016 (0x3f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919290F, serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Validity Not Before: Aug 11 00:40:36 2025 GMT Not After : Aug 18 00:40:36 2025 GMT Subject: CN=68993c04-849f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:de:eb:2c:4c:c2:c0:de:66:c5:8d:ae:be: a8:5d:8e:ad:43:01:ac:af:ab:87:5c:07:b1:31:70: af:af:98:18:e3:25:ba:2d:b5:71:00:22:b3:8e:c8: ab:4c:b4:02:84:38:d6:c9:f5:56:02:1d:9e:7c:50: bf:ba:47:6d:ec:c7:ac:04:4f:c1:44:71:f1:fe:51: 6c:19:69:d1:c5:f1:dd:9c:da:21:ba:31:ed:99:3a: 02:5d:eb:b4:bb:fe:fa:64:a2:ee:b5:26:56:6e:87: ba:6f:59:e1:30:c7:26:4e:fb:9d:10:10:b4:0b:d7: 30:0b:96:ab:3c:86:f8:53:cd:d5:e2:76:23:b9:d2: bb:b6:6d:5c:33:ef:ca:cd:af:d5:cc:07:c4:36:db: 52:8c:81:aa:0e:b3:b8:67:3f:ed:2e:e1:df:3e:b1: 9e:04:b1:8d:16:bf:46:53:01:90:ce:09:e6:3a:26: 55:09:0e:c5:56:d5:53:7d:97:99:5b:b1:38:07:70: ac:81:7d:13:b8:36:29:7e:22:a7:2c:75:0b:41:95: 7b:a8:93:be:e1:12:71:ad:85:5c:8a:14:8c:43:49: c3:ec:33:a4:94:64:cc:bd:35:33:58:34:95:9b:62: 01:f4:16:31:09:10:1d:8d:ce:7a:d0:d2:da:0d:51: 1f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B9:B9:C9:1A:0A:AE:7E:C5:53:D2:68:49:E6:3A:A6:EA:9D:76:DE X509v3 Authority Key Identifier: keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:fa:15:f8:0b:20:91:cf:2f:df:25:c9:7c:02:b6:35:cf:9d: 4e:bc:0d:12:3f:8f:8e:7b:b6:59:45:6a:e9:6c:1c:8b:21:40: 54:f8:8c:1c:50:c6:33:f1:05:a9:12:63:f9:36:b3:20:42:5c: e5:19:ce:88:98:7d:80:39:2e:80:da:00:13:70:fe:66:2b:14: 47:13:a5:44:78:14:ba:2e:0f:ad:1c:49:f8:6c:75:7e:08:37: 44:8e:4d:ce:94:76:61:e0:5e:dd:f8:08:4e:50:bb:be:6f:4f: 52:d1:f4:ce:eb:bb:0d:c5:4e:8c:69:7b:b3:72:8d:b2:03:51: e6:8f:9a:4e:7f:ba:e2:29:4e:b5:89:74:24:e4:db:a1:81:91: 64:d4:00:68:89:54:4a:9c:18:5f:3a:86:7a:37:95:dc:0f:5b: f1:33:c5:17:a2:5d:a9:8b:ed:e8:5b:4f:f9:6c:74:d1:6d:fd: 72:cf:d5:0d:b8:9a:59:c5:27:83:a6:a4:d3:cd:4a:08:51:d5: e2:66:ef:a1:b7:84:f8:62:d5:75:24:1b:61:d2:7d:6e:f6:a9: 56:4d:e2:7e:b4:65:2b:aa:ce:47:6c:29:24:e8:1a:71:96:f7: 0d:04:cf:ad:bd:06:84:cb:57:c6:3f:c5:f8:b8:1b:88:98:6f: b6:31:7f:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MEYxMTAvBgNVBAUTKDk4MjA5MEE1RUY2RDBGNTU4MzIyRENENUIzN0NCQzQ1 NkU3NUM1NDMwHhcNMjUwODExMDA0MDM2WhcNMjUwODE4MDA0MDM2WjAYMRYwFAYD VQQDEw02ODk5M2MwNC04NDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgze6yxMwsDeZsWNrr6oXY6tQwGsr6uHXAexMXCvr5gY4yW6LbVxACKzjsir TLQChDjWyfVWAh2efFC/ukdt7MesBE/BRHHx/lFsGWnRxfHdnNohujHtmToCXeu0 u/76ZKLutSZWboe6b1nhMMcmTvudEBC0C9cwC5arPIb4U83V4nYjudK7tm1cM+/K za/VzAfENttSjIGqDrO4Zz/tLuHfPrGeBLGNFr9GUwGQzgnmOiZVCQ7FVtVTfZeZ W7E4B3CsgX0TuDYpfiKnLHULQZV7qJO+4RJxrYVcihSMQ0nD7DOklGTMvTUzWDSV m2IB9BYxCRAdjc560NLaDVEfyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEq5ucka Cq5+xVPSaEnmOqbqnXbeMB8GA1UdIwQYMBaAFJggkKXvbQ9VgyLc1bN8vEVudcVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkwRi81QUIyNzUzRTg3 REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQxV0RJdHpWczN5OFJXNTF4 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21DQ1FwZTl0RDFXREl0elZzM3k4Ulc1MXhVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkwRi81QUIyNzUzRTg3REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQx V0RJdHpWczN5OFJXNTF4VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg+hX4CyCRzy/fJcl8ArY1z51OvA0SP4+Oe7ZZRWrpbByLIUBU+Iwc UMYz8QWpEmP5NrMgQlzlGc6ImH2AOS6A2gATcP5mKxRHE6VEeBS6Lg+tHEn4bHV+ CDdEjk3OlHZh4F7d+AhOULu+b09S0fTO67sNxU6MaXuzco2yA1Hmj5pOf7riKU61 iXQk5NuhgZFk1ABoiVRKnBhfOoZ6N5XcD1vxM8UXol2pi+3oW0/5bHTRbf1yz9UN uJpZxSeDpqTTzUoIUdXiZu+ht4T4YtV1JBth0n1u9qlWTeJ+tGUrqs5HbCkk6Bpx lvcNBM+tvQaEy1fGP8X4uBuImG+2MX/G -----END CERTIFICATE-----Generated at Mon Aug 11 04:12:40 2025 by rpki-client