$ rpki-client -vvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft File: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft (raw, json) Hash identifier: U7zoFd4XCnTre3QGhacYH/J4QrPsDtYFHfm4K8r2kfQ= Subject key identifier: AF:71:7F:D7:69:7D:8D:1D:22:4E:51:D6:8F:0F:62:88:3D:C7:54:96 Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Certificate serial: 0C99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft Manifest number: 0C8E Signing time: Sun 24 Aug 2025 18:15:46 +0000 Manifest this update: Sun 24 Aug 2025 18:15:45 +0000 Manifest next update: Sun 31 Aug 2025 18:15:45 +0000 Files and hashes: 1: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl (hash: dZhDfoeZPcC/C7nfzJF8gOSbdGSjMLgja6w3/i+Y+w8=) 2: 25234272DF4311EDA83C7074C4F9AE02.roa (hash: wMSrEY4jFMgUk7xS4t418ohJ7Tj1+1Jik/P+Kog8XB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D2CE, serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Validity Not Before: Aug 24 18:15:45 2025 GMT Not After : Aug 31 18:15:45 2025 GMT Subject: CN=68ab56d1-a114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:74:54:dc:4f:81:9c:07:82:47:50:61:42: 30:a8:09:0f:e9:40:ec:5e:9b:2e:5d:f7:a4:0e:99: 08:4e:37:54:1a:49:9e:11:41:22:bf:0c:2a:f3:dd: 1c:56:1c:52:2c:70:b1:52:b8:d9:6e:0f:f2:9a:a7: 0d:84:06:b0:b4:ad:f3:3c:67:0c:0f:79:2b:40:b5: 92:61:de:7f:7c:15:29:7b:95:04:47:37:dc:c0:03: 30:f4:bf:ac:4d:fd:3e:65:1a:c5:68:29:dc:f5:d5: fd:67:7d:eb:f0:d6:a9:21:93:56:f7:fa:91:ee:11: 44:64:e0:46:78:cd:cf:0b:46:3e:a5:4a:f2:0f:79: 85:34:56:27:fc:7a:8c:79:c4:27:f6:39:6b:77:2c: 19:a3:ff:3c:f4:70:7f:a1:fd:f6:cd:50:9a:ae:cb: c3:62:79:e4:65:ae:6c:75:df:3d:1e:fa:e2:66:3b: 8f:d1:de:9b:2e:9a:9c:b3:94:3d:a0:92:b0:4a:7b: 27:9d:ec:8a:aa:b1:f7:a2:3f:24:03:e2:af:de:69: 10:63:8d:26:76:96:db:ea:91:34:42:b1:51:2e:4f: b5:57:e0:29:dc:56:ff:be:0f:79:cf:4b:f3:32:c8: 63:ed:7b:d0:bf:e7:c8:a8:72:af:73:c4:20:2b:ad: 93:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:71:7F:D7:69:7D:8D:1D:22:4E:51:D6:8F:0F:62:88:3D:C7:54:96 X509v3 Authority Key Identifier: keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6c:25:21:1a:63:ed:57:c7:19:79:40:c2:4c:d5:27:82:fd: bc:c0:0d:67:bc:c3:cc:27:c1:80:3a:d7:cc:5f:74:36:04:13: 6b:e5:99:0f:1c:94:37:d9:d6:94:e1:99:d2:8e:e5:f3:0c:3e: 9d:3c:24:52:d9:84:f0:d5:f9:7b:a4:82:db:7d:5e:09:80:de: 8c:7a:b4:b8:b3:43:84:88:ee:b4:ca:53:a8:93:7b:e8:c2:53: 56:0f:4e:e7:fa:da:7e:3b:83:e7:23:2b:69:0c:86:5c:61:c3: fe:07:6f:60:dc:c3:e0:2e:a6:bf:a6:9d:8d:3a:11:36:ae:7d: 1a:90:24:23:b6:1c:ef:66:ee:09:a1:89:11:a0:56:7b:0b:9a: de:89:a6:81:5f:73:b1:31:41:ee:8e:2e:82:72:00:0e:f9:ca: 3e:cd:5e:86:e6:5b:a1:1f:a8:8b:83:02:a2:1b:de:fc:51:5c: 64:be:c1:c4:44:e2:6e:00:3d:b2:50:09:68:88:22:91:02:0b: e0:0a:54:1c:79:a0:9c:81:c7:cc:09:a1:b6:b7:36:19:38:52: 1d:46:20:50:3a:a2:b1:c0:16:55:ec:31:62:f7:bb:58:7b:9c: c8:d9:47:0a:84:03:ba:e6:31:c5:9b:92:a2:82:2c:f6:5e:cd: 28:7d:cb:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyQ0UxMTAvBgNVBAUTKEFFMTYwNDU4NzJERERBQzNEQ0YxMkYwNzk1Q0FENzBF NEMwOUQ5NkMwHhcNMjUwODI0MTgxNTQ1WhcNMjUwODMxMTgxNTQ1WjAYMRYwFAYD VQQDEw02OGFiNTZkMS1hMTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ10VNxPgZwHgkdQYUIwqAkP6UDsXpsuXfekDpkITjdUGkmeEUEivwwq890c VhxSLHCxUrjZbg/ymqcNhAawtK3zPGcMD3krQLWSYd5/fBUpe5UERzfcwAMw9L+s Tf0+ZRrFaCnc9dX9Z33r8NapIZNW9/qR7hFEZOBGeM3PC0Y+pUryD3mFNFYn/HqM ecQn9jlrdywZo/889HB/of32zVCarsvDYnnkZa5sdd89HvriZjuP0d6bLpqcs5Q9 oJKwSnsnneyKqrH3oj8kA+Kv3mkQY40mdpbb6pE0QrFRLk+1V+Ap3Fb/vg95z0vz Mshj7XvQv+fIqHKvc8QgK62TcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9xf9dp fY0dIk5R1o8PYog9x1SWMB8GA1UdIwQYMBaAFK4WBFhy3drD3PEvB5XK1w5MCdls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDJDRS8yQjBFNzI0MDAx MzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJzUGM4UzhIbGNyWERrd0oy V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoWUVXSExkMnNQYzhTOEhsY3JYRGt3SjJXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDJDRS8yQjBFNzI0MDAxMzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJz UGM4UzhIbGNyWERrd0oyV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPbCUhGmPtV8cZeUDCTNUngv28wA1nvMPMJ8GAOtfMX3Q2BBNr5ZkP HJQ32daU4ZnSjuXzDD6dPCRS2YTw1fl7pILbfV4JgN6MerS4s0OEiO60ylOok3vo wlNWD07n+tp+O4PnIytpDIZcYcP+B29g3MPgLqa/pp2NOhE2rn0akCQjthzvZu4J oYkRoFZ7C5reiaaBX3OxMUHuji6CcgAO+co+zV6G5luhH6iLgwKiG978UVxkvsHE ROJuAD2yUAloiCKRAgvgClQceaCcgcfMCaG2tzYZOFIdRiBQOqKxwBZV7DFi97tY e5zI2UcKhAO65jHFm5Kigiz2Xs0ofcu8 -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:00 2025 by rpki-client