$ rpki-client -vvf rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft File: doh0adZBC-RoB3WHhH7qoIC0InI.mft (raw, json) Hash identifier: t1rAr6H/YS2PWjdTlTNaHOoBenPV23nmsLTPbTamMqY= Subject key identifier: 61:BD:6B:9D:AD:EA:6A:AE:05:B7:9C:C5:15:67:65:65:6F:72:58:A0 Authority key identifier: 76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72 Certificate issuer: /CN=A9114382/serialNumber=76887469D6410BE468077587847EEAA080B42272 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft Manifest number: 56 Signing time: Thu 21 Aug 2025 11:07:31 +0000 Manifest this update: Thu 21 Aug 2025 11:07:31 +0000 Manifest next update: Thu 28 Aug 2025 11:07:31 +0000 Files and hashes: 1: doh0adZBC-RoB3WHhH7qoIC0InI.crl (hash: JIuLuaJdFFIV27kxkG8kSBr3ea7LbZSu+r1+KUgd8og=) 2: 069483747E7F11F091356E86C4F9AE02.roa (hash: Yrv7o+i08VMkPfTsO9wW2G4Ntl0tTtmIsoOx+zJY4Xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 11:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114382, serialNumber=76887469D6410BE468077587847EEAA080B42272 Validity Not Before: Aug 21 11:07:31 2025 GMT Not After : Aug 28 11:07:31 2025 GMT Subject: CN=68a6fdf3-a607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:a7:89:d2:f9:09:80:5f:ea:1d:09:fc:9c: 52:e2:65:28:e4:3e:de:85:8d:20:78:bb:7e:c1:07: 50:01:7f:6d:97:29:5b:54:da:db:65:91:39:33:f9: 15:6c:c3:26:0a:c5:cc:81:39:64:50:61:9b:70:5f: 6f:21:8e:78:ef:03:5a:39:1c:d5:bf:a7:da:a0:0a: 8c:5c:6c:d5:dd:61:2a:eb:f7:ba:36:a4:b2:e9:cb: f1:4d:2b:b1:07:f6:61:d3:58:ac:7f:e2:fe:a0:3d: a9:e0:d8:b2:87:0d:86:65:d6:91:c9:db:8c:ed:f6: 1c:b2:99:0a:e3:33:28:53:f2:d0:9d:8c:85:9f:dc: f4:fa:f8:c4:e9:e2:ed:7e:1f:f6:a9:ab:3d:68:9b: d4:3e:b0:31:a7:30:14:54:23:5f:22:06:40:88:a1: be:e7:94:19:6c:aa:1e:c7:3a:fa:8c:de:9a:a6:6b: 35:2f:e5:21:88:ec:8b:b0:23:3d:44:3c:43:a7:49: 71:41:56:f8:ad:52:d5:03:de:34:fd:5d:56:97:c3: 63:86:ec:11:2d:34:11:ab:f4:94:f1:97:f2:f1:10: d4:58:c6:da:f6:7f:02:52:29:c3:74:5c:4d:05:42: 4d:b3:01:34:1b:ea:bf:e1:de:40:a5:a7:b0:f9:54: 34:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BD:6B:9D:AD:EA:6A:AE:05:B7:9C:C5:15:67:65:65:6F:72:58:A0 X509v3 Authority Key Identifier: keyid:76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:14:22:4f:f0:ae:f1:ec:62:c6:4b:e4:8b:8b:4f:36:53:9e: 5f:02:5a:72:00:3b:ba:16:1c:c0:72:54:0a:09:85:85:74:2d: 3d:13:56:06:b8:97:b7:52:41:72:57:a3:3d:16:ae:94:75:95: 76:e2:58:ce:1f:8b:72:5f:6e:80:9f:26:bf:c1:40:88:f0:ae: fa:7b:1b:f5:ca:d0:90:ff:0b:f9:09:79:6e:d9:66:d9:a8:44: ea:e7:af:fa:fe:13:e0:a8:8c:a4:af:2d:25:f1:a4:c2:1a:dd: 8f:76:b8:8d:d8:df:ec:44:99:c5:00:59:e8:5b:ec:be:b5:42: 9d:31:85:ac:55:9c:2a:14:86:a7:b7:78:28:e7:59:0a:20:db: be:0f:63:8a:aa:16:74:e6:68:5f:10:0c:44:06:0e:eb:fe:98: 3c:59:7b:2c:74:24:b9:57:37:1b:20:84:41:85:78:3d:f7:7e: 85:07:23:cb:b9:24:6f:6a:02:0f:4d:92:17:e0:ed:44:5a:f0: c6:b9:de:a7:b5:5d:00:cc:9d:ff:33:d8:57:a4:3f:43:1d:c7: e6:d4:5c:a2:d7:7c:5b:46:92:ea:96:8e:2d:89:8a:b2:7d:e6: f7:e9:a1:31:50:68:23:f6:17:95:9c:b2:ee:46:3b:8b:9a:01: b9:bd:83:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDM4MjExMC8GA1UEBRMoNzY4ODc0NjlENjQxMEJFNDY4MDc3NTg3ODQ3RUVBQTA4 MEI0MjI3MjAeFw0yNTA4MjExMTA3MzFaFw0yNTA4MjgxMTA3MzFaMBgxFjAUBgNV BAMTDTY4YTZmZGYzLWE2MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8TKeJ0vkJgF/qHQn8nFLiZSjkPt6FjSB4u37BB1ABf22XKVtU2ttlkTkz+RVs wyYKxcyBOWRQYZtwX28hjnjvA1o5HNW/p9qgCoxcbNXdYSrr97o2pLLpy/FNK7EH 9mHTWKx/4v6gPang2LKHDYZl1pHJ24zt9hyymQrjMyhT8tCdjIWf3PT6+MTp4u1+ H/apqz1om9Q+sDGnMBRUI18iBkCIob7nlBlsqh7HOvqM3pqmazUv5SGI7IuwIz1E PEOnSXFBVvitUtUD3jT9XVaXw2OG7BEtNBGr9JTxl/LxENRYxtr2fwJSKcN0XE0F Qk2zATQb6r/h3kClp7D5VDQfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYb1rna3q aq4Ft5zFFWdlZW9yWKAwHwYDVR0jBBgwFoAUdoh0adZBC+RoB3WHhH7qoIC0InIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0MzgyLzQ0QjVGQTFDMEFD MDExRjBCNThGODI0N0M0RjlBRTAyL2RvaDBhZFpCQy1Sb0IzV0hoSDdxb0lDMElu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZG9oMGFkWkJDLVJvQjNXSGhIN3FvSUMwSW5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 MzgyLzQ0QjVGQTFDMEFDMDExRjBCNThGODI0N0M0RjlBRTAyL2RvaDBhZFpCQy1S b0IzV0hoSDdxb0lDMEluSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIwUIk/wrvHsYsZL5IuLTzZTnl8CWnIAO7oWHMByVAoJhYV0LT0TVga4 l7dSQXJXoz0WrpR1lXbiWM4fi3JfboCfJr/BQIjwrvp7G/XK0JD/C/kJeW7ZZtmo ROrnr/r+E+CojKSvLSXxpMIa3Y92uI3Y3+xEmcUAWehb7L61Qp0xhaxVnCoUhqe3 eCjnWQog274PY4qqFnTmaF8QDEQGDuv+mDxZeyx0JLlXNxsghEGFeD33foUHI8u5 JG9qAg9Nkhfg7URa8Ma53qe1XQDMnf8z2FekP0Mdx+bUXKLXfFtGkuqWji2JirJ9 5vfpoTFQaCP2F5Wcsu5GO4uaAbm9g5I= -----END CERTIFICATE-----Generated at Fri Aug 22 16:23:02 2025 by rpki-client