$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: P8ooqMAk8K1HyxgxYNRO0e+Nyme2IMojwftEPgN7xGE= Subject key identifier: 34:32:68:49:69:BC:C3:71:25:CD:29:84:E7:D4:43:AB:0C:D5:B9:47 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 0116 Signing time: Sat 09 Aug 2025 05:30:51 +0000 Manifest this update: Sat 09 Aug 2025 05:30:51 +0000 Manifest next update: Sat 16 Aug 2025 05:30:51 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: CwhrF0btJO6lVyb96mnS6Mcf7q45eHh0+sEJ8kimI9o=) 2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 1JT4JL5zieWvYxgXcbCI6LK5Unc1DnkiTfLB/8ABEcM=) 3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Zgo+bSd3ddxUsWa4WgDo/fUl+UPnYadDGveXRl2dsm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Aug 9 05:30:51 2025 GMT Not After : Aug 16 05:30:51 2025 GMT Subject: CN=6896dd0b-fcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b3:f3:a3:e2:2a:6a:4e:a6:62:0e:7b:8d:7c: 70:f3:1f:e7:47:37:29:63:cf:06:dc:f5:8f:8f:13: aa:fc:b7:57:19:52:bf:3e:c2:c7:15:22:d8:ec:27: f8:ba:46:41:e3:74:a4:26:54:7d:96:e4:22:9c:76: be:e4:09:79:e7:a5:f1:87:c6:6d:ff:2b:6d:ad:d4: 0e:ed:fb:e4:94:80:7c:04:ec:5c:14:f4:9e:a9:4a: 85:6c:56:5f:77:cc:a3:40:2f:37:66:d2:84:39:83: b0:f0:4e:de:de:77:57:47:b0:5f:c7:e1:c6:3a:19: 53:37:1b:54:4a:f6:9e:d4:d9:b1:42:8a:c1:2d:9c: d0:23:3c:f4:88:d2:08:46:81:06:93:22:f0:f8:78: 50:62:78:9b:18:c1:63:72:c2:a5:cf:88:d8:99:75: 5a:bd:ad:6b:fe:0f:91:d3:d6:1a:47:bf:56:cc:61: f1:d8:95:95:7c:4e:93:61:65:ea:a6:cc:1d:4f:7c: b5:d3:cf:a3:8f:8f:a3:de:3e:54:f8:0c:63:2f:70: b9:be:fd:10:4d:cb:c9:62:39:e2:4e:9b:cb:8e:63: 49:fd:e8:62:fa:e2:18:bc:7c:fd:ad:5c:7f:c5:4b: c7:f7:1e:79:01:9d:47:d1:b7:d4:6e:a2:af:8e:c9: 9e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:32:68:49:69:BC:C3:71:25:CD:29:84:E7:D4:43:AB:0C:D5:B9:47 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:2c:2d:64:8e:db:04:93:e1:cb:78:80:65:20:7c:ba:ae:28: a9:4a:cf:d4:87:50:8a:e2:36:49:be:97:16:e9:12:80:c1:ac: 1d:db:05:34:a2:4d:ce:2d:76:da:a4:42:6d:15:83:71:56:20: f9:1c:b1:e3:fa:08:61:94:bc:0b:0c:8c:d7:af:42:d7:07:03: 88:9c:f8:95:48:01:8c:9e:09:a2:4b:d9:59:f4:cb:63:fe:72: f8:3d:fc:64:b8:20:d8:a5:61:6c:94:24:50:aa:f8:82:5b:1a: 2d:ec:6c:05:15:91:b5:18:18:ed:7c:e8:e5:4a:97:9c:e6:9b: 1b:b1:e3:94:29:f6:28:a5:22:8e:eb:ce:86:a2:17:e7:43:92: 5f:0f:94:5d:7f:ec:f8:94:30:56:b8:d4:78:c7:ab:a3:8b:10: 93:cc:01:ef:52:5a:ae:5d:cc:0c:be:25:3f:b1:68:e3:b4:66: 6c:33:fc:c0:c6:d9:10:3e:5b:92:9b:2f:bc:84:d8:b6:30:ed: 34:db:09:2e:1e:10:9c:70:24:34:d5:56:70:3f:21:55:5b:f3: d6:9e:91:73:43:90:8d:cc:63:5e:70:f9:58:2f:c5:1f:e2:1f: 88:90:3c:e8:7b:7f:0f:d1:57:2d:08:69:85:d2:2d:16:e4:23: 5d:8b:2b:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjUwODA5MDUzMDUxWhcNMjUwODE2MDUzMDUxWjAYMRYwFAYD VQQDEw02ODk2ZGQwYi1mY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57Pzo+Iqak6mYg57jXxw8x/nRzcpY88G3PWPjxOq/LdXGVK/PsLHFSLY7Cf4 ukZB43SkJlR9luQinHa+5Al556Xxh8Zt/yttrdQO7fvklIB8BOxcFPSeqUqFbFZf d8yjQC83ZtKEOYOw8E7e3ndXR7Bfx+HGOhlTNxtUSvae1NmxQorBLZzQIzz0iNII RoEGkyLw+HhQYnibGMFjcsKlz4jYmXVava1r/g+R09YaR79WzGHx2JWVfE6TYWXq pswdT3y108+jj4+j3j5U+AxjL3C5vv0QTcvJYjniTpvLjmNJ/ehi+uIYvHz9rVx/ xUvH9x55AZ1H0bfUbqKvjsmeiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQyaElp vMNxJc0phOfUQ6sM1blHMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3LC1kjtsEk+HLeIBlIHy6riipSs/Uh1CK4jZJvpcW6RKAwawd2wU0 ok3OLXbapEJtFYNxViD5HLHj+ghhlLwLDIzXr0LXBwOInPiVSAGMngmiS9lZ9Mtj /nL4PfxkuCDYpWFslCRQqviCWxot7GwFFZG1GBjtfOjlSpec5psbseOUKfYopSKO 686GohfnQ5JfD5Rdf+z4lDBWuNR4x6ujixCTzAHvUlquXcwMviU/sWjjtGZsM/zA xtkQPluSmy+8hNi2MO002wkuHhCccCQ01VZwPyFVW/PWnpFzQ5CNzGNecPlYL8Uf 4h+IkDzoe38P0VctCGmF0i0W5CNdiytb -----END CERTIFICATE-----Generated at Sat Aug 9 14:30:29 2025 by rpki-client