$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json) Hash identifier: NETCalhlVbWKtDbvK+/bhZk1q+KUWht0eL2rMRI7XiY= Subject key identifier: BA:9C:DA:EB:52:F9:68:9F:5B:3A:18:67:4A:AA:E9:8B:4D:13:59:AC Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft Manifest number: 0174 Signing time: Sun 07 Sep 2025 04:12:27 +0000 Manifest this update: Sun 07 Sep 2025 04:12:26 +0000 Manifest next update: Sun 14 Sep 2025 04:12:25 +0000 Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: qWW7Z8vNI0mgqBC4CiSKRZe8PtWf8TUajnC9fi2J6xI=) 2: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: /eRQukOTRoCvRThMcH9XwUAJIcceCRwYKwwMbY6uF7g=) 3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 2vNMz8bsWYuC9H/vzhdbGUA1HfH3KNf6jV9tK3X2cTM=) 4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: qlqqEk+ktO9kWepPw94741l8FovGv8c1l/1ZfvzH37I=) 5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: za2Ui3WUL1KtJyaUb1Afwi6LYp342P/Dlv/IorKk6Y8=) 6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: /trQaf5mAYLhUwtPoYNSiRtn86zeNkrUACHp5ubxqmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Validity Not Before: Sep 7 04:12:26 2025 GMT Not After : Sep 14 04:12:25 2025 GMT Subject: CN=68bd062a-d549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:8c:ad:a3:20:18:78:8b:a7:a4:e9:d3:63: 51:59:92:33:20:5d:88:5a:b2:e3:91:e8:9a:83:1f: ce:af:21:6b:f1:68:5c:38:de:e1:dc:eb:23:cc:9b: d0:8f:35:ca:3c:3e:d8:15:59:d3:7b:9d:47:22:16: 11:07:b5:55:8c:e6:1a:c9:1a:a6:74:49:46:ec:e0: 54:62:45:5b:e7:2e:87:13:64:c7:b4:9c:ef:8c:a3: 09:8a:66:97:f1:89:c8:f1:d9:68:bf:fa:79:ca:99: 82:a7:1b:34:85:8e:5b:a1:d6:75:ff:15:16:58:fc: d1:28:97:a7:44:e7:a4:f1:2a:26:3a:29:b8:c5:7b: e7:8a:a9:41:25:ca:06:28:d9:58:56:a7:3b:6e:0f: 29:16:09:a3:ed:bf:53:08:cc:a0:50:45:b6:30:fb: c4:e7:b9:8f:27:8c:08:0f:81:79:5c:b7:4b:b0:40: 57:81:8e:78:0b:e8:13:59:4d:50:1f:bc:0f:5c:43: 02:f1:d8:80:5f:65:e1:e6:cc:52:ea:95:11:44:b9: 35:04:c9:b8:ca:f1:84:50:e2:a3:29:a3:c3:d5:bf: 6a:5c:27:1e:3f:08:f4:0f:61:e8:90:d0:51:56:ca: a0:d9:8e:ec:7c:61:2e:82:c5:4f:e3:df:cb:98:23: 1b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9C:DA:EB:52:F9:68:9F:5B:3A:18:67:4A:AA:E9:8B:4D:13:59:AC X509v3 Authority Key Identifier: keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:45:f8:e2:7a:a0:fe:46:b1:a4:62:be:84:80:4d:1c:2f:1f: 64:ad:d9:83:2a:b9:1b:05:00:fa:29:8f:7e:6f:68:de:42:ec: b5:b5:64:bd:c6:77:3f:41:3b:1d:9f:f3:42:0a:b3:97:f8:29: c7:0d:4a:c9:87:37:9b:85:f2:cb:7e:11:eb:90:71:a4:a9:bb: 66:6e:d6:86:99:9e:a1:d4:cb:99:c0:14:a5:30:9c:9b:3a:5d: 4c:d1:d5:27:67:c9:10:aa:01:b8:b2:32:1e:39:05:f0:00:7b: 5b:8f:1b:cf:63:29:9f:9f:93:db:83:63:f2:44:ca:3d:8d:b9: e6:e1:0e:b2:ee:7b:39:c9:23:b9:6d:c1:9e:42:6e:13:74:dd: d4:88:19:06:a4:7b:b7:aa:10:d9:35:67:93:10:0e:48:6f:b9: e5:04:03:11:45:47:d1:24:07:3d:2f:d0:5a:bd:81:29:47:e4: b9:71:34:ea:4f:2b:b7:80:1e:c2:57:e0:ac:f8:e0:12:b7:ee: 65:98:9f:b8:c3:4b:01:d5:15:c2:96:75:04:d1:6c:1e:0c:0f: ad:92:80:14:9a:b0:28:49:8c:3b:5b:c5:59:f6:ed:75:23:26: 12:1e:34:47:8a:41:6d:f8:5a:b3:cd:e6:07:d7:d4:f8:38:a3: 8e:39:4a:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5 NUI5MDJBMjAwHhcNMjUwOTA3MDQxMjI2WhcNMjUwOTE0MDQxMjI1WjAYMRYwFAYD VQQDEw02OGJkMDYyYS1kNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEyMraMgGHiLp6Tp02NRWZIzIF2IWrLjkeiagx/OryFr8WhcON7h3OsjzJvQ jzXKPD7YFVnTe51HIhYRB7VVjOYayRqmdElG7OBUYkVb5y6HE2THtJzvjKMJimaX 8YnI8dlov/p5ypmCpxs0hY5bodZ1/xUWWPzRKJenROek8SomOim4xXvniqlBJcoG KNlYVqc7bg8pFgmj7b9TCMygUEW2MPvE57mPJ4wID4F5XLdLsEBXgY54C+gTWU1Q H7wPXEMC8diAX2Xh5sxS6pURRLk1BMm4yvGEUOKjKaPD1b9qXCcePwj0D2HokNBR Vsqg2Y7sfGEugsVP49/LmCMbSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqc2utS +WifWzoYZ0qq6YtNE1msMB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3 REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJDRS85MDA5OUM0MDU3REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1 U2QyQ3lDOS16ckNWdVFLaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjRfjieqD+RrGkYr6EgE0cLx9krdmDKrkbBQD6KY9+b2jeQuy1tWS9 xnc/QTsdn/NCCrOX+CnHDUrJhzebhfLLfhHrkHGkqbtmbtaGmZ6h1MuZwBSlMJyb Ol1M0dUnZ8kQqgG4sjIeOQXwAHtbjxvPYymfn5Pbg2PyRMo9jbnm4Q6y7ns5ySO5 bcGeQm4TdN3UiBkGpHu3qhDZNWeTEA5Ib7nlBAMRRUfRJAc9L9BavYEpR+S5cTTq Tyu3gB7CV+Cs+OASt+5lmJ+4w0sB1RXClnUE0WweDA+tkoAUmrAoSYw7W8VZ9u11 IyYSHjRHikFt+FqzzeYH19T4OKOOOUrH -----END CERTIFICATE-----Generated at Sun Sep 7 09:52:09 2025 by rpki-client