$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: KyiiiDe9/0PM56Cy5g1u8L8AIBXMtzGI2jtu4KLWIbk= Subject key identifier: 51:CE:84:A0:3D:20:DD:8C:11:A9:70:5B:C7:79:50:11:B9:87:63:1F Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0D93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0D57 Signing time: Mon 08 Sep 2025 18:05:09 +0000 Manifest this update: Mon 08 Sep 2025 18:05:09 +0000 Manifest next update: Mon 15 Sep 2025 18:05:09 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: yEafVaklvW4iGyGjPZAtcSSy+dzn0k+SsAKiFwZSP1o=) 2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=) 3: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=) 4: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: F6pHZaK0p+hfG2R8U42UIH6mVTyAquKiquy2pjJGlpw=) 5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=) 6: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: P6JTGz167Z9TdfCL7daabxEJTzpdJTGmRrb0uaHZZCk=) 7: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 78fn2memSm7vBnLFbyR7taN3PwAlhw+S3wateBPSFCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3475 (0xd93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Sep 8 18:05:09 2025 GMT Not After : Sep 15 18:05:09 2025 GMT Subject: CN=68bf1ad5-384b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:d3:36:45:85:61:a5:11:34:80:78:27:dc: 70:17:74:53:80:7f:02:d8:06:1c:40:aa:06:58:97: 83:20:70:1a:4a:de:14:7d:50:f1:41:52:97:e0:fa: fc:58:81:d2:e5:63:c1:29:d0:d1:15:36:13:c8:fc: e8:d5:b6:3a:05:36:57:e8:02:11:a1:b4:5c:82:13: 42:f1:8c:d4:bd:ed:8f:5d:12:5a:cc:3b:d0:d8:dd: 1f:27:42:e3:47:e0:be:45:68:35:e1:8a:19:9c:3d: bd:56:01:38:12:dd:30:9c:99:f4:eb:f7:b9:55:09: 47:ab:a0:2a:90:4a:ef:77:09:ba:f9:9d:19:9c:90: b0:64:b7:aa:d5:4f:22:26:73:28:fe:e2:e1:50:d2: b2:b5:fa:66:ce:ec:5a:31:7a:bb:4b:51:b0:a6:07: 9b:17:39:61:59:d7:c8:c8:ce:5b:33:97:a7:9b:30: f0:36:e2:b8:68:7f:c1:04:40:45:09:9a:01:54:2c: ff:16:a5:5a:ff:76:c1:1d:39:10:dc:82:8e:c5:14: df:76:03:36:b1:8b:b7:5f:10:b8:eb:09:39:a9:33: 20:e3:f0:82:9d:e9:51:7e:54:b8:35:c7:b1:be:55: 1d:9c:c8:79:22:9c:ea:5b:22:2a:15:72:2e:df:44: 0a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CE:84:A0:3D:20:DD:8C:11:A9:70:5B:C7:79:50:11:B9:87:63:1F X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e3:ce:3b:89:42:23:27:23:6a:c3:43:39:b4:1f:31:bd:8e: 32:fe:0b:76:a9:3e:9b:35:7c:a1:51:af:6c:72:7e:ad:a6:f0: dc:b0:90:36:0b:de:ce:59:1f:43:ed:2e:7a:5c:5b:e5:ad:df: 2f:43:ce:61:5e:29:af:24:61:ec:7a:f4:e5:cb:c2:a0:40:d5: bc:79:84:bd:8b:54:26:98:05:32:aa:f8:6c:c2:55:60:53:de: 3a:55:4e:56:1d:e7:fc:72:1b:e1:be:f5:46:5c:cb:06:96:6b: ac:57:7b:0d:1a:6d:64:8e:b5:fd:35:00:33:ec:5a:76:9c:cc: c6:4f:5e:c5:f1:2c:db:ed:75:dc:f1:76:0b:3a:4f:99:7e:eb: b8:d1:75:16:8e:84:e2:29:d2:e0:4f:79:cc:91:50:2c:3a:20: 1f:dd:d8:c4:47:c1:31:e9:cc:52:60:74:15:70:4d:66:b3:01: 32:97:e2:57:b8:dc:4d:83:62:0b:5b:03:39:73:f6:fb:8f:e1: 50:33:0e:6e:8a:57:e6:49:90:50:57:72:95:fc:46:b0:f2:b3: 29:e2:3b:aa:38:73:09:10:12:60:b1:f1:a4:86:00:d4:4a:e9: 47:7a:25:4d:85:bc:2f:e4:dc:b1:d2:d5:44:08:59:fa:8f:83: 3f:98:87:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjUwOTA4MTgwNTA5WhcNMjUwOTE1MTgwNTA5WjAYMRYwFAYD VQQDEw02OGJmMWFkNS0zODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bnTNkWFYaURNIB4J9xwF3RTgH8C2AYcQKoGWJeDIHAaSt4UfVDxQVKX4Pr8 WIHS5WPBKdDRFTYTyPzo1bY6BTZX6AIRobRcghNC8YzUve2PXRJazDvQ2N0fJ0Lj R+C+RWg14YoZnD29VgE4Et0wnJn06/e5VQlHq6AqkErvdwm6+Z0ZnJCwZLeq1U8i JnMo/uLhUNKytfpmzuxaMXq7S1GwpgebFzlhWdfIyM5bM5enmzDwNuK4aH/BBEBF CZoBVCz/FqVa/3bBHTkQ3IKOxRTfdgM2sYu3XxC46wk5qTMg4/CCnelRflS4Ncex vlUdnMh5IpzqWyIqFXIu30QKvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHOhKA9 IN2MEalwW8d5UBG5h2MfMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv4847iUIjJyNqw0M5tB8xvY4y/gt2qT6bNXyhUa9scn6tpvDcsJA2 C97OWR9D7S56XFvlrd8vQ85hXimvJGHsevTly8KgQNW8eYS9i1QmmAUyqvhswlVg U946VU5WHef8chvhvvVGXMsGlmusV3sNGm1kjrX9NQAz7Fp2nMzGT17F8Szb7XXc 8XYLOk+Zfuu40XUWjoTiKdLgT3nMkVAsOiAf3djER8Ex6cxSYHQVcE1mswEyl+JX uNxNg2ILWwM5c/b7j+FQMw5uilfmSZBQV3KV/Eaw8rMp4juqOHMJEBJgsfGkhgDU SulHeiVNhbwv5Nyx0tVECFn6j4M/mIdO -----END CERTIFICATE-----Generated at Wed Sep 10 10:12:27 2025 by rpki-client