$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json) Hash identifier: 3qCjFNxLRq1+cpsc6enq2ivt7RQZGTAOVK1sJDFvA9c= Subject key identifier: 26:B0:D3:1A:DB:16:A7:6C:B5:94:DF:98:1B:FD:09:15:94:AB:CD:B0 Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft Manifest number: EA Signing time: Tue 19 Aug 2025 05:47:15 +0000 Manifest this update: Tue 19 Aug 2025 05:47:15 +0000 Manifest next update: Tue 26 Aug 2025 05:47:15 +0000 Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: Fe0F6/afSesDvujso4soQUr0QywoEOZ+62XwNIchWA8=) 2: A5DE28B4216E11EF88CCA84FC4F9AE02.roa (hash: TnSpnLe7j6/9wTqsNRxeaAfjz8zUewbXt/4PsMyvpP4=) 3: A6550254216E11EF88CCA84FC4F9AE02.roa (hash: hgy+s41tW18ZsoIITX25VfjzDwvg0uuSJ0bvy5UWIIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Validity Not Before: Aug 19 05:47:15 2025 GMT Not After : Aug 26 05:47:15 2025 GMT Subject: CN=68a40fe3-7728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a2:cf:6c:6f:36:31:f8:f2:8e:01:64:c2:35: 43:0c:1e:63:63:ad:ad:9c:36:d3:04:b3:65:a3:83: 71:39:05:46:8b:27:21:3a:39:b2:f4:7b:b0:6c:39: 5f:27:16:40:28:23:b9:9b:7a:9e:d7:2f:b7:2c:73: 90:25:b0:14:30:96:c5:48:44:e9:05:72:38:f5:18: 69:bc:e2:be:dd:79:0b:b2:c0:f6:a1:4c:cd:f4:e1: 1b:77:a2:d7:c5:52:d6:19:26:7f:7d:b2:8d:87:37: 7d:21:89:5c:39:1c:21:7e:95:1c:73:db:f5:21:f8: 16:f1:5a:43:10:7c:80:40:14:08:fe:61:53:98:e7: 40:31:92:ce:76:8b:1b:f0:69:39:4b:69:82:b8:ec: 44:d5:66:5b:00:a9:ee:72:4c:2d:12:f7:20:9e:d3: 2d:72:52:c6:e5:c8:22:95:b2:dc:cc:21:ae:bb:c7: 45:7c:c5:44:61:22:92:d9:44:b2:45:a7:ea:f3:d5: c6:79:7b:c3:81:f8:7f:85:5c:91:e2:6a:32:e6:cf: 78:66:d2:f8:f7:3f:0a:0b:fe:7f:44:b0:99:59:39: 18:d5:15:b5:4b:02:5a:cb:a6:a8:b0:f7:42:b7:c2: 45:11:ab:3e:a1:eb:cb:98:ba:84:65:a9:90:00:9e: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B0:D3:1A:DB:16:A7:6C:B5:94:DF:98:1B:FD:09:15:94:AB:CD:B0 X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:06:0a:27:65:f3:c7:0a:b7:c0:3a:4d:8d:a3:53:4e:e7:12: a9:22:67:e7:b4:76:c1:5a:19:6d:76:3a:43:16:62:50:35:8b: df:aa:6e:90:8c:cf:80:d0:d9:95:d7:c8:47:81:07:fa:e2:61: c8:fb:a6:39:4c:0f:a8:da:5e:75:d6:e3:10:19:f2:fc:50:5c: 76:ad:4c:47:57:07:d5:0f:74:5a:ba:73:f7:1c:09:63:c3:ea: 2c:fd:05:64:bd:61:91:46:eb:aa:86:b7:48:12:22:a3:83:90: c8:4f:e0:e9:23:b6:09:86:63:f9:82:3b:d2:b1:64:2f:51:ef: 98:f0:8b:78:12:b3:91:9a:e2:28:17:69:70:64:7f:c7:40:0b: e3:89:e2:e7:b9:b4:59:dc:8b:8e:ac:11:2e:f9:db:e3:e4:46: 04:ac:f2:52:cc:c6:bd:22:06:51:89:86:98:b0:ab:85:b4:89: f6:cb:f1:f1:0a:0b:a2:9c:f0:f4:9b:f8:c0:dd:ea:65:c1:3d: 78:45:4d:4e:8e:22:8f:2c:67:b9:86:4b:9f:ea:a9:18:27:bf: 57:91:72:f6:ce:42:1c:18:24:9b:82:c8:99:38:96:5b:e0:b0: 0f:44:91:97:75:a9:f4:b2:c9:77:60:34:3d:2c:35:f9:58:bd: 7b:34:47:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFRDMxMTAvBgNVBAUTKEE3NDFFQjQxMEQ0QjhFNDZGRjQ4QUI3MEExREEwMDZB M0RDRjQxQTMwHhcNMjUwODE5MDU0NzE1WhcNMjUwODI2MDU0NzE1WjAYMRYwFAYD VQQDEw02OGE0MGZlMy03NzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaLPbG82MfjyjgFkwjVDDB5jY62tnDbTBLNlo4NxOQVGiychOjmy9HuwbDlf JxZAKCO5m3qe1y+3LHOQJbAUMJbFSETpBXI49RhpvOK+3XkLssD2oUzN9OEbd6LX xVLWGSZ/fbKNhzd9IYlcORwhfpUcc9v1IfgW8VpDEHyAQBQI/mFTmOdAMZLOdosb 8Gk5S2mCuOxE1WZbAKnuckwtEvcgntMtclLG5cgilbLczCGuu8dFfMVEYSKS2USy Rafq89XGeXvDgfh/hVyR4moy5s94ZtL49z8KC/5/RLCZWTkY1RW1SwJay6aosPdC t8JFEas+oevLmLqEZamQAJ6xYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaw0xrb FqdstZTfmBv9CRWUq82wMB8GA1UdIwQYMBaAFKdB60ENS45G/0ircKHaAGo9z0Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VEMy8zQzE2MUZBNjIx NkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGprYl9TS3R3b2RvQWFqM1BR YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VEMy8zQzE2MUZBNjIxNkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGpr Yl9TS3R3b2RvQWFqM1BRYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKBgonZfPHCrfAOk2No1NO5xKpImfntHbBWhltdjpDFmJQNYvfqm6Q jM+A0NmV18hHgQf64mHI+6Y5TA+o2l511uMQGfL8UFx2rUxHVwfVD3RaunP3HAlj w+os/QVkvWGRRuuqhrdIEiKjg5DIT+DpI7YJhmP5gjvSsWQvUe+Y8It4ErORmuIo F2lwZH/HQAvjieLnubRZ3IuOrBEu+dvj5EYErPJSzMa9IgZRiYaYsKuFtIn2y/Hx CguinPD0m/jA3eplwT14RU1OjiKPLGe5hkuf6qkYJ79XkXL2zkIcGCSbgsiZOJZb 4LAPRJGXdan0ssl3YDQ9LDX5WL17NEeg -----END CERTIFICATE-----Generated at Wed Aug 20 15:37:21 2025 by rpki-client