$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: myy2UA9IJT/B2DLIAOLP7uRbJ5t66XSUXNCLdTWldLo= Subject key identifier: 23:99:8C:E3:26:AD:DC:38:EC:AD:A7:18:F3:71:0C:B4:67:70:F3:33 Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 03CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 03C5 Signing time: Fri 05 Sep 2025 00:58:31 +0000 Manifest this update: Fri 05 Sep 2025 00:58:30 +0000 Manifest next update: Fri 12 Sep 2025 00:58:30 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: XcB5WfBnkgvdVmjw/iV1W1cbR8exPywBUFlqiYiBBY0=) 2: D83A3404EF0311EDA8B8C81EC4F9AE02.roa (hash: vAub+gasrAOQ1+asaJIl575xD7KBPecCLw303hY+Tq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: Sep 5 00:58:30 2025 GMT Not After : Sep 12 00:58:30 2025 GMT Subject: CN=68ba35b6-1d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bb:63:7d:46:74:df:42:53:b0:e9:3f:4c:eb: dd:9b:54:b6:63:ec:22:86:c2:a9:6e:ed:c3:31:98: 27:d9:f6:88:9d:dc:07:f9:ab:d9:fe:2e:25:b3:3d: fb:ce:98:c4:b2:45:34:7c:6a:17:17:db:de:d8:60: a5:83:f6:f5:17:20:44:a6:bb:20:c4:25:ec:a3:25: 93:0d:b6:6b:4a:11:6a:94:7b:37:e7:68:66:d5:18: 73:74:4d:22:2e:3c:8b:47:59:16:fc:96:e2:b6:b3: 5b:f8:89:a2:84:f3:2b:70:fb:ca:ee:f7:5e:78:35: a8:64:da:3b:74:d6:98:0a:eb:d7:f3:80:75:68:48: 0e:12:7d:52:36:9a:e8:47:8c:a9:b1:36:75:ee:82: 95:92:f1:0e:fd:08:31:01:25:a8:09:8e:9b:40:9c: 6f:29:0d:77:74:4a:44:3d:bc:7c:ec:86:83:2e:26: 78:76:56:43:21:2b:7d:4e:31:ae:6e:c4:38:0f:9a: 3d:58:fa:c2:f6:4e:13:39:d8:15:11:6c:78:1a:92: b3:44:33:fe:23:a8:19:5c:29:47:da:f2:3b:30:70: 07:dc:60:0b:0a:34:31:52:c6:d6:21:8f:5c:d5:c0: a8:55:65:09:1e:29:b3:85:fc:85:c3:5b:e1:28:8e: 61:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:99:8C:E3:26:AD:DC:38:EC:AD:A7:18:F3:71:0C:B4:67:70:F3:33 X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:72:4c:06:c3:cb:c4:ec:51:5e:9c:73:5e:19:b5:4d:97:e6: 86:48:c2:85:6f:fe:dc:1c:7c:72:dc:aa:d7:78:df:a8:ed:2a: f0:d2:2d:de:98:4f:3e:8a:61:96:74:51:43:6a:c1:fe:4d:bd: 3c:ce:c3:2d:05:8e:5d:4f:2e:69:7c:5e:6e:06:ad:8c:76:21: b5:9e:fb:33:13:61:2d:9d:22:55:4f:71:b7:3d:93:a7:05:88: 4c:ff:8e:0c:b8:b2:45:bd:a6:51:55:e4:58:73:80:62:83:07: 0d:a7:e2:6d:e5:69:3b:e1:27:9b:82:9e:5b:7c:07:c0:b2:4e: 22:e8:61:97:56:ee:59:81:c9:47:92:73:14:39:8e:7f:f8:97: c1:fe:32:be:7c:84:92:ef:72:c8:50:65:09:b4:9c:5a:73:a9: 6b:66:75:d1:61:de:cf:e7:59:f0:83:e8:65:c7:d5:20:57:b3: 38:77:bd:7a:fa:c7:18:cd:0d:2f:1c:f9:4a:4e:a6:93:96:fa: 21:97:bc:49:9d:03:01:12:2a:71:90:e8:6d:8e:61:19:4a:b7: a3:f5:c3:1e:27:80:87:1b:eb:8d:8e:fc:b2:fe:46:7d:c0:2d: da:99:f8:d3:f5:17:bc:53:c7:10:76:8c:91:b5:6a:fd:2a:fe: b3:5f:a3:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjUwOTA1MDA1ODMwWhcNMjUwOTEyMDA1ODMwWjAYMRYwFAYD VQQDEw02OGJhMzViNi0xZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrtjfUZ030JTsOk/TOvdm1S2Y+wihsKpbu3DMZgn2faIndwH+avZ/i4lsz37 zpjEskU0fGoXF9ve2GClg/b1FyBEprsgxCXsoyWTDbZrShFqlHs352hm1RhzdE0i LjyLR1kW/JbitrNb+ImihPMrcPvK7vdeeDWoZNo7dNaYCuvX84B1aEgOEn1SNpro R4ypsTZ17oKVkvEO/QgxASWoCY6bQJxvKQ13dEpEPbx87IaDLiZ4dlZDISt9TjGu bsQ4D5o9WPrC9k4TOdgVEWx4GpKzRDP+I6gZXClH2vI7MHAH3GALCjQxUsbWIY9c 1cCoVWUJHimzhfyFw1vhKI5h3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOZjOMm rdw47K2nGPNxDLRncPMzMB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgckwGw8vE7FFenHNeGbVNl+aGSMKFb/7cHHxy3KrXeN+o7Srw0i3e mE8+imGWdFFDasH+Tb08zsMtBY5dTy5pfF5uBq2MdiG1nvszE2EtnSJVT3G3PZOn BYhM/44MuLJFvaZRVeRYc4BigwcNp+Jt5Wk74Sebgp5bfAfAsk4i6GGXVu5ZgclH knMUOY5/+JfB/jK+fISS73LIUGUJtJxac6lrZnXRYd7P51nwg+hlx9UgV7M4d716 +scYzQ0vHPlKTqaTlvohl7xJnQMBEipxkOhtjmEZSrej9cMeJ4CHG+uNjvyy/kZ9 wC3amfjT9Re8U8cQdoyRtWr9Kv6zX6Ms -----END CERTIFICATE-----Generated at Sat Sep 6 12:40:51 2025 by rpki-client