$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json) Hash identifier: dKmgJSbOg9cwkA7blNu+Mg5E1eooiepy7WPbXbB4nYg= Subject key identifier: 02:CE:D2:E0:01:5C:CF:0D:63:15:B6:F7:AB:DE:37:D9:82:E4:C4:29 Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Certificate serial: 0282 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft Manifest number: 0278 Signing time: Thu 21 Aug 2025 01:54:19 +0000 Manifest this update: Thu 21 Aug 2025 01:54:18 +0000 Manifest next update: Thu 28 Aug 2025 01:54:18 +0000 Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: c4XDGef1QbYgWOgIznFdcaW5YS3vlIuIG4vYnV79kJg=) 2: 899B070834D511ED99B1921FC4F9AE02.roa (hash: 59L53XZQZjjT2hN0a9eIPXDObrfGJobgfFbYtXLEctM=) 3: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: L9Ip2okOSQMq2psn2x0tTtvnTzOcLa7ive90M13do6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 642 (0x282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Validity Not Before: Aug 21 01:54:18 2025 GMT Not After : Aug 28 01:54:18 2025 GMT Subject: CN=68a67c4a-7db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:55:a1:6d:b9:49:72:7a:14:52:e7:4f:f6: 5a:d2:ea:cb:aa:24:64:00:0f:ea:32:8e:e1:39:89: f5:8e:fb:ed:94:0e:22:43:a7:ec:b1:96:d1:07:db: f3:cb:81:93:03:45:2c:b1:b0:e9:3c:64:8a:42:26: cc:1d:02:84:be:bb:f2:1e:a7:ca:0b:a3:30:9a:9a: f0:74:e5:98:6b:83:00:df:4c:f8:6d:50:89:4c:e4: df:5d:63:90:2c:a1:a8:3d:2b:2b:12:fd:ff:69:05: b1:69:42:76:c9:a1:d3:60:b4:ad:b4:c7:cc:6c:d0: 80:df:66:29:d8:5c:72:80:7a:58:b5:5d:65:a1:b4: 9d:b0:32:77:2e:47:f6:0b:c4:ea:94:95:e2:f0:4a: a7:9d:05:96:df:e0:a9:ab:8e:50:65:f8:29:5d:43: 43:c5:42:1b:d9:1c:ee:45:28:8f:5d:63:b5:51:84: e6:21:08:5f:c0:1b:ac:05:b2:b3:12:af:dc:cc:4b: e8:e5:38:5a:a4:00:0f:1c:b2:6e:a4:b5:ed:7d:18: 75:14:6e:b1:e0:c9:57:9f:bf:d6:aa:f8:f5:89:07: ad:47:2c:3b:46:61:d4:0b:0f:ab:1a:d5:29:cf:33: 57:f5:55:2c:f0:7e:a0:a2:22:b3:11:c9:88:87:1e: 6f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CE:D2:E0:01:5C:CF:0D:63:15:B6:F7:AB:DE:37:D9:82:E4:C4:29 X509v3 Authority Key Identifier: keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:68:f4:18:38:44:11:57:55:d3:21:16:d6:12:90:b3:f1:d2: ca:ec:f6:02:34:10:83:12:fd:49:f5:ef:17:ba:40:b2:25:e9: 79:72:df:70:49:6a:f4:1a:d4:8e:5a:b9:7c:84:54:cd:11:e6: 2c:3c:26:76:18:d5:41:7d:ba:88:89:16:91:31:9d:f2:cc:01: 1a:3a:39:9a:91:03:aa:c9:e8:d1:3a:56:89:87:73:f1:0a:8d: d7:f6:fe:fd:4d:af:5d:85:da:e7:5f:43:67:32:f1:15:b6:70: 12:08:83:3b:09:89:c0:50:33:12:3d:67:1c:13:7c:4f:6b:a6: 09:53:2a:b5:1a:30:7a:0d:2f:6d:5e:35:48:0d:c8:58:55:6e: e4:9b:3e:27:64:e7:1b:e7:e1:27:19:f6:65:d3:be:e7:27:3e: 84:0e:6d:7a:b9:53:08:fb:27:69:21:f5:68:f6:c1:e4:be:a5: 2a:66:16:27:1f:af:dc:81:2a:97:42:17:25:e5:bb:8d:ac:53: b1:83:05:47:f7:10:a3:e3:4b:07:e2:cf:a9:46:35:73:71:8e: 45:a4:a4:8c:f0:0e:8d:7e:8f:7b:65:ba:3f:c5:96:ef:4a:cb: e5:3a:8d:a8:cd:1b:32:55:73:5d:7f:7b:89:18:27:08:e9:8f: d9:36:23:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2 ODhENzQzODQwHhcNMjUwODIxMDE1NDE4WhcNMjUwODI4MDE1NDE4WjAYMRYwFAYD VQQDEw02OGE2N2M0YS03ZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqj1VoW25SXJ6FFLnT/Za0urLqiRkAA/qMo7hOYn1jvvtlA4iQ6fssZbRB9vz y4GTA0UssbDpPGSKQibMHQKEvrvyHqfKC6MwmprwdOWYa4MA30z4bVCJTOTfXWOQ LKGoPSsrEv3/aQWxaUJ2yaHTYLSttMfMbNCA32Yp2FxygHpYtV1lobSdsDJ3Lkf2 C8TqlJXi8EqnnQWW3+Cpq45QZfgpXUNDxUIb2RzuRSiPXWO1UYTmIQhfwBusBbKz Eq/czEvo5ThapAAPHLJupLXtfRh1FG6x4MlXn7/Wqvj1iQetRyw7RmHUCw+rGtUp zzNX9VUs8H6goiKzEcmIhx5v4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALO0uAB XM8NYxW296veN9mC5MQpMB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYxRS9DQzY1QTY2QTFGOUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3 cmFhRnNjYWhONXRvalhRNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGaPQYOEQRV1XTIRbWEpCz8dLK7PYCNBCDEv1J9e8XukCyJel5ct9w SWr0GtSOWrl8hFTNEeYsPCZ2GNVBfbqIiRaRMZ3yzAEaOjmakQOqyejROlaJh3Px Co3X9v79Ta9dhdrnX0NnMvEVtnASCIM7CYnAUDMSPWccE3xPa6YJUyq1GjB6DS9t XjVIDchYVW7kmz4nZOcb5+EnGfZl077nJz6EDm16uVMI+ydpIfVo9sHkvqUqZhYn H6/cgSqXQhcl5buNrFOxgwVH9xCj40sH4s+pRjVzcY5FpKSM8A6Nfo97Zbo/xZbv SsvlOo2ozRsyVXNdf3uJGCcI6Y/ZNiOy -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:50 2025 by rpki-client