$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json) Hash identifier: YpIs+shZkWX0On1FkvRmifhzFmtHg7shF/F5Ut5NNsQ= Subject key identifier: 55:42:33:89:16:10:68:FC:38:CE:E5:6C:07:B4:49:4D:80:6C:AE:90 Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 34FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft Manifest number: 34D5 Signing time: Sun 24 Aug 2025 14:37:51 +0000 Manifest this update: Sun 24 Aug 2025 14:37:51 +0000 Manifest next update: Sun 31 Aug 2025 14:37:50 +0000 Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: BB+OHrOEE3Xj5hGh+tEU2VbHuPWa/Qv0/+GeJt/RZYQ=) 2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: wvEIUxvlUFTH2qcHsopuAxq+KjN4ylNQUioBhK93yXg=) 3: 4A08F422F43211EBA188C86AC4F9AE02.roa (hash: 3Y7LHhfPoBb0WxabpgiKDHOJivLh/nfOe4OHRiwg/0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13565 (0x34fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: Aug 24 14:37:51 2025 GMT Not After : Aug 31 14:37:50 2025 GMT Subject: CN=68ab23bf-ab4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:ee:da:31:02:4f:38:ff:a3:fc:de:76:93: 29:75:43:7b:bc:53:18:38:e5:8e:0b:d8:f1:83:a5: 09:3e:ff:24:25:e9:30:c7:6a:80:dd:99:d2:d9:8b: e0:8a:51:ce:41:1e:73:e6:35:ca:cc:cf:8a:a8:a6: c1:7e:b8:9d:79:ab:fd:7e:b2:d0:e1:5d:67:01:34: 1d:6f:bf:52:b6:37:52:44:68:d0:5f:5a:50:34:3c: 91:1a:6e:c4:f5:40:4f:02:72:fb:41:52:d1:a1:28: 3b:ac:cd:59:b3:6a:13:dd:32:dc:6b:42:f2:fe:46: 7d:7b:d2:0e:1c:cd:cd:17:cf:63:a3:8b:0d:36:35: fc:f2:04:49:90:20:5d:83:d4:7f:5b:a2:42:f5:e8: 42:43:be:c4:26:3d:84:74:fc:d0:4c:b1:44:f0:22: 55:3f:b9:5a:5e:4f:37:50:f1:26:76:5c:94:ab:86: 45:0b:6d:86:37:64:fd:8d:2a:6c:0f:c6:be:5d:33: 4f:a6:c1:84:74:04:bd:52:22:2a:82:0a:3d:a6:0e: 1e:d6:31:fd:79:ae:3a:55:0d:42:aa:a7:81:24:1c: 36:58:6a:e8:b9:c4:57:66:58:e6:19:cf:4a:24:a8: a4:39:8a:50:0d:a7:65:d6:f0:00:db:aa:13:e2:ab: ee:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:42:33:89:16:10:68:FC:38:CE:E5:6C:07:B4:49:4D:80:6C:AE:90 X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:60:74:7d:b0:52:af:d9:e8:52:e2:b8:32:c3:13:da:9e:51: b5:a2:c9:cf:8c:fd:ea:91:1b:95:ca:f5:b1:aa:9c:13:1a:39: 06:a3:ab:c1:c7:0d:12:00:03:94:27:0f:8a:82:1b:4c:fe:17: 00:26:b9:f9:29:17:bc:21:23:8f:05:91:d7:6b:fd:c5:02:e3: 2f:db:e6:54:eb:58:a8:eb:48:c8:d6:d7:7d:98:12:87:0a:d6: e7:8f:28:c0:ff:a8:f6:65:2b:2d:13:ad:9c:8d:23:e2:31:c8: d5:44:37:07:4c:f0:b9:3b:00:a5:5f:4e:ba:61:1e:ad:16:04: 15:2a:96:ac:4d:e3:42:d9:86:7f:19:6f:98:06:55:b5:25:2d: 49:0c:8c:19:52:28:2f:86:a9:4c:0f:f8:87:a8:cd:a3:90:3c: b0:4b:84:15:45:eb:68:ea:bc:f2:63:e9:ca:a3:77:ca:9c:41: ab:7b:3f:88:56:d6:df:de:24:cb:79:eb:6a:fd:03:b0:f7:35: 37:6c:c9:eb:62:51:27:6a:88:6e:89:e9:0b:86:e9:96:44:da: 9f:25:0d:25:f8:d0:c1:1b:94:fc:f3:9e:9d:d3:20:9b:3e:16: 8a:dd:99:33:14:72:2a:54:72:82:c2:ab:9b:22:22:d8:c8:c9: e1:fb:94:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjUwODI0MTQzNzUxWhcNMjUwODMxMTQzNzUwWjAYMRYwFAYD VQQDEw02OGFiMjNiZi1hYjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Yzu2jECTzj/o/zedpMpdUN7vFMYOOWOC9jxg6UJPv8kJekwx2qA3ZnS2Yvg ilHOQR5z5jXKzM+KqKbBfrideav9frLQ4V1nATQdb79StjdSRGjQX1pQNDyRGm7E 9UBPAnL7QVLRoSg7rM1Zs2oT3TLca0Ly/kZ9e9IOHM3NF89jo4sNNjX88gRJkCBd g9R/W6JC9ehCQ77EJj2EdPzQTLFE8CJVP7laXk83UPEmdlyUq4ZFC22GN2T9jSps D8a+XTNPpsGEdAS9UiIqggo9pg4e1jH9ea46VQ1CqqeBJBw2WGroucRXZljmGc9K JKikOYpQDadl1vAA26oT4qvuoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVCM4kW EGj8OM7lbAe0SU2AbK6QMB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDgzNC9ERkJBNTBCODFEOEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01P c1IzNFRpaFZ5cXQ5RmliNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADYHR9sFKv2ehS4rgywxPanlG1osnPjP3qkRuVyvWxqpwTGjkGo6vB xw0SAAOUJw+KghtM/hcAJrn5KRe8ISOPBZHXa/3FAuMv2+ZU61io60jI1td9mBKH CtbnjyjA/6j2ZSstE62cjSPiMcjVRDcHTPC5OwClX066YR6tFgQVKpasTeNC2YZ/ GW+YBlW1JS1JDIwZUigvhqlMD/iHqM2jkDywS4QVReto6rzyY+nKo3fKnEGrez+I Vtbf3iTLeetq/QOw9zU3bMnrYlEnaohuiekLhumWRNqfJQ0l+NDBG5T8856d0yCb PhaK3ZkzFHIqVHKCwqubIiLYyMnh+5QK -----END CERTIFICATE-----Generated at Sun Aug 24 21:31:13 2025 by rpki-client