$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json) Hash identifier: +UNd2ZqOvxuj1CY2iBSma98nkVBzZjsUXbmmSnDiAGw= Subject key identifier: 2E:CA:73:AB:07:DA:87:CA:FC:07:E8:65:43:26:7B:FB:FD:48:44:6E Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft Manifest number: C3 Signing time: Sat 19 Jul 2025 05:58:29 +0000 Manifest this update: Sat 19 Jul 2025 05:58:28 +0000 Manifest next update: Sat 26 Jul 2025 05:58:28 +0000 Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: Obn2X6B9211R1kOXpujeAeMkQ+bFlV1ZyW2rROfm+AU=) 2: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: SBjUcQwgq8eYibunzuM6B0MYbh92vDqaJjZbumGPIz4=) 3: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: rxylyIaFWofGp8fi7f1ysoxvtfFGdtzKVIc05XTsdvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Validity Not Before: Jul 19 05:58:28 2025 GMT Not After : Jul 26 05:58:28 2025 GMT Subject: CN=687b3404-e142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:68:d5:cd:95:71:cc:34:f2:d6:43:06:80: 5c:87:25:b4:32:28:68:5a:07:09:26:4b:91:73:4f: a5:89:28:14:a4:2f:fd:7f:79:bc:de:1c:7b:e5:fc: ab:e3:85:85:ad:05:cc:a2:18:c2:e0:87:e1:64:64: 3e:34:60:b8:e8:19:2a:68:bb:2a:f7:79:53:12:56: 6c:93:07:3d:17:92:8f:56:3b:e3:2a:31:b6:e3:76: b7:ed:29:ed:20:99:a0:0c:9b:a4:bb:39:9a:5e:75: 50:e6:ab:48:4c:fc:81:05:57:83:4e:75:65:a6:a2: 4d:a0:9b:85:ea:51:22:3e:57:8d:f2:27:e1:f4:7c: a0:73:03:95:6b:f4:f3:16:0b:b0:01:e2:1e:f4:0f: 68:cf:a3:51:15:b3:cf:b4:ee:f2:d3:2a:a4:75:30: b9:4b:22:cc:6f:9b:6f:92:4d:96:13:25:e5:83:df: e8:54:b4:5d:c7:d8:a7:08:90:1c:c4:d2:7a:07:b6: f1:ae:86:23:45:8e:26:95:e8:8c:fe:e0:49:db:0f: 26:cd:ee:82:dd:3a:91:30:e4:91:14:a5:7e:fa:2c: 7a:d2:1d:7c:3d:6c:0b:39:5a:3c:3e:8b:fd:f4:45: b4:6a:fc:b8:f9:73:56:a6:a0:73:b9:00:d1:b7:e6: be:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CA:73:AB:07:DA:87:CA:FC:07:E8:65:43:26:7B:FB:FD:48:44:6E X509v3 Authority Key Identifier: keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:05:8d:0e:d0:62:c1:ca:f7:7f:18:0c:e2:6b:4d:38:5d:96: e4:ce:5a:7f:24:97:bb:18:93:eb:06:28:c9:a8:66:3b:3d:8c: 78:d0:23:d9:87:0e:8a:58:c8:ea:09:f3:83:5b:9e:c7:79:ba: c2:15:51:42:60:2e:78:18:35:2e:22:2a:65:7e:00:e4:59:28: ea:88:0a:9d:b5:d7:26:c0:28:ba:9e:31:3e:e0:26:1a:f3:33: 15:f4:e8:77:b7:75:40:42:a3:8c:0b:4f:28:02:fa:61:09:cf: 8c:43:ea:00:ad:0a:bf:0c:c4:7d:ab:b6:49:74:fc:cb:92:8e: 9f:6e:3e:f6:9f:35:b6:d2:de:79:27:61:28:a3:a1:c0:1b:3c: e8:b5:10:89:68:20:70:6f:7e:7a:b2:a6:8d:b7:e5:4b:38:fa: 8d:58:a4:a7:52:41:1b:2b:92:ce:15:14:82:f3:c5:d0:d3:1d: db:56:f7:c7:2a:b4:59:ed:35:08:cd:09:3e:bd:de:f1:d1:d5: cf:47:49:f6:05:37:60:da:5c:ba:e0:91:b2:f7:db:71:87:62: 0a:05:93:e1:89:66:f8:4e:08:6f:df:23:06:c2:29:ea:78:87: 0d:9f:f9:46:28:06:75:0b:6e:b0:7c:f9:85:c8:fc:5b:92:32: 09:61:d2:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUExMTAvBgNVBAUTKEYyNEM0NDMyMTBGNzQxQ0JFNTlEMDE0RUJBNkVFOTcy QjVDRERBRTcwHhcNMjUwNzE5MDU1ODI4WhcNMjUwNzI2MDU1ODI4WjAYMRYwFAYD VQQDEw02ODdiMzQwNC1lMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvG1o1c2Vccw08tZDBoBchyW0MihoWgcJJkuRc0+liSgUpC/9f3m83hx75fyr 44WFrQXMohjC4IfhZGQ+NGC46BkqaLsq93lTElZskwc9F5KPVjvjKjG243a37Snt IJmgDJukuzmaXnVQ5qtITPyBBVeDTnVlpqJNoJuF6lEiPleN8ifh9HygcwOVa/Tz FguwAeIe9A9oz6NRFbPPtO7y0yqkdTC5SyLMb5tvkk2WEyXlg9/oVLRdx9inCJAc xNJ6B7bxroYjRY4mleiM/uBJ2w8mze6C3TqRMOSRFKV++ix60h18PWwLOVo8Pov9 9EW0avy4+XNWpqBzuQDRt+a+0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7Kc6sH 2ofK/AfoZUMme/v9SERuMB8GA1UdIwQYMBaAFPJMRDIQ90HL5Z0BTrpu6XK1zdrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81MTJDNzA1RTM3 QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1FjdmxuUUZPdW03cGNyWE4y dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81MTJDNzA1RTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1Fj dmxuUUZPdW03cGNyWE4ydWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9BY0O0GLByvd/GAzia004XZbkzlp/JJe7GJPrBijJqGY7PYx40CPZ hw6KWMjqCfODW57HebrCFVFCYC54GDUuIiplfgDkWSjqiAqdtdcmwCi6njE+4CYa 8zMV9Oh3t3VAQqOMC08oAvphCc+MQ+oArQq/DMR9q7ZJdPzLko6fbj72nzW20t55 J2Eoo6HAGzzotRCJaCBwb356sqaNt+VLOPqNWKSnUkEbK5LOFRSC88XQ0x3bVvfH KrRZ7TUIzQk+vd7x0dXPR0n2BTdg2ly64JGy99txh2IKBZPhiWb4Tghv3yMGwinq eIcNn/lGKAZ1C26wfPmFyPxbkjIJYdIb -----END CERTIFICATE-----Generated at Sun Jul 20 19:05:56 2025 by rpki-client