$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft File: sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json) Hash identifier: 59J0ycemkmqTTzrvSBcSTjpY4ZZroUU/MsI7Fg/vYYM= Subject key identifier: 4F:FD:45:96:A3:12:15:AE:A6:2C:5C:BC:BE:2D:C0:6D:29:36:04:4E Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC Certificate issuer: /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC Certificate serial: 0733 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft Manifest number: 0AC8 Signing time: Mon 08 Sep 2025 19:28:33 +0000 Manifest this update: Mon 08 Sep 2025 19:28:33 +0000 Manifest next update: Mon 15 Sep 2025 19:28:33 +0000 Files and hashes: 1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: 4/mx2AUCv7e0gsFClGAYxmE2tUG5LnTQmKjuaTiOp24=) 2: A8D10944DEA511EEB7B9DC35C4F9AE02.roa (hash: F5nZUR683r0GHaN7PIQS7ScZ+hYmoRww/yUwHk4aoNk=) 3: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: SjnLXmN7OQs2QJo93KJDaMm8uwo9AE2p0tGK7wMyelo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1843 (0x733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC Validity Not Before: Sep 8 19:28:33 2025 GMT Not After : Sep 15 19:28:33 2025 GMT Subject: CN=68bf2e61-5782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:21:b4:07:68:7c:ea:5a:41:2f:d1:b7:9d:0e: f4:6f:00:7a:19:1c:12:85:7d:8b:0b:c9:ad:5b:3a: 47:df:6c:7f:16:b2:ec:2d:d4:d5:4e:48:01:dd:09: e3:04:1a:3d:e0:f3:13:1f:5a:99:2a:e3:0a:99:6d: 6f:f5:50:b5:50:31:a2:38:7b:9b:1b:53:20:ef:40: 65:29:6e:a6:82:a4:58:0e:79:28:de:db:e8:98:e4: fb:61:09:aa:ac:dd:da:0f:6e:71:63:61:aa:9f:60: 9b:cc:ac:68:89:ba:8f:f1:cb:67:ef:89:a0:92:17: 75:8e:91:b0:2d:f5:a2:f9:f8:26:13:b5:4d:35:4d: 6f:5b:ec:b4:d6:64:55:b8:77:63:ab:84:3a:da:10: af:50:a5:bd:8d:e5:06:5a:2d:50:24:56:f9:a1:bc: 69:90:46:90:9d:d9:f2:2d:51:f6:41:79:fb:63:cd: f0:93:b6:0d:63:88:5c:c9:04:5c:c6:07:11:ec:e9: 01:f4:a4:3d:51:ad:f1:8f:82:0e:3c:03:59:24:90: 38:75:fd:83:4d:c2:d9:aa:11:ce:b0:6e:c5:c6:a3: d6:d1:57:bc:fc:7d:6a:7b:92:6a:cf:87:d2:b2:d7: c7:30:eb:f4:ff:37:16:0b:37:c8:2a:79:29:a6:33: 45:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FD:45:96:A3:12:15:AE:A6:2C:5C:BC:BE:2D:C0:6D:29:36:04:4E X509v3 Authority Key Identifier: keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:02:09:70:57:6f:b5:3b:b5:d0:b9:9d:9c:8e:9c:b7:db:e2: 29:a9:e6:0a:84:a8:20:55:4f:13:31:54:ff:d4:34:43:c9:00: da:48:f2:b9:33:e3:d5:8c:16:1b:30:47:11:9e:da:41:23:93: 12:bb:97:4c:c7:fd:4b:dc:b5:d0:f4:00:90:bb:46:fc:e2:e9: 2d:9e:f1:10:43:1e:da:98:28:ba:72:63:55:9c:5b:7c:4a:fd: 58:b5:22:5b:9f:dc:65:4f:f3:9f:48:9e:7e:85:9c:88:b4:d3: a8:2b:e9:be:01:96:37:2d:49:a3:4b:8f:e1:4f:6e:1d:d2:3a: b8:be:5a:11:71:4b:cc:62:97:e0:1b:89:d3:9d:43:97:76:c1: 8b:cc:2d:8f:47:e8:de:80:75:24:1e:2b:8e:6d:07:18:37:c5: dc:ba:16:59:10:40:06:b6:6f:b6:f5:a5:71:16:f9:51:2f:b0: 7b:bc:c3:cf:84:53:ac:f1:ad:cc:d8:0e:9b:54:99:1c:c5:d3: df:cc:9c:e6:8d:11:28:aa:73:31:11:b6:54:a5:ac:f2:2b:e6: 7f:e4:a5:7d:bb:e7:13:84:f5:89:17:37:06:a2:8f:cb:33:0a: bf:33:4c:25:0d:6b:8b:b8:db:f0:60:08:55:47:22:be:a1:39: b3:b2:51:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNzcxMTAvBgNVBAUTKEIxOEVBNEI0ODY4NEE2N0RFQTAxMzhCQUJBMjMzMDZE MDAwM0NEQ0MwHhcNMjUwOTA4MTkyODMzWhcNMjUwOTE1MTkyODMzWjAYMRYwFAYD VQQDEw02OGJmMmU2MS01NzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yG0B2h86lpBL9G3nQ70bwB6GRwShX2LC8mtWzpH32x/FrLsLdTVTkgB3Qnj BBo94PMTH1qZKuMKmW1v9VC1UDGiOHubG1Mg70BlKW6mgqRYDnko3tvomOT7YQmq rN3aD25xY2Gqn2CbzKxoibqP8ctn74mgkhd1jpGwLfWi+fgmE7VNNU1vW+y01mRV uHdjq4Q62hCvUKW9jeUGWi1QJFb5obxpkEaQndnyLVH2QXn7Y83wk7YNY4hcyQRc xgcR7OkB9KQ9Ua3xj4IOPANZJJA4df2DTcLZqhHOsG7FxqPW0Ve8/H1qe5Jqz4fS stfHMOv0/zcWCzfIKnkppjNFIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/9RZaj EhWupixcvL4twG0pNgROMB8GA1UdIwQYMBaAFLGOpLSGhKZ96gE4urojMG0AA83M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU3Ny9DNDAwQkI1QzU2 RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBuM3FBVGk2dWlNd2JRQUR6 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZNmt0SWFFcG4zcUFUaTZ1aU13YlFBRHpjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUU3Ny9DNDAwQkI1QzU2RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBu M3FBVGk2dWlNd2JRQUR6Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCAglwV2+1O7XQuZ2cjpy32+IpqeYKhKggVU8TMVT/1DRDyQDaSPK5 M+PVjBYbMEcRntpBI5MSu5dMx/1L3LXQ9ACQu0b84uktnvEQQx7amCi6cmNVnFt8 Sv1YtSJbn9xlT/OfSJ5+hZyItNOoK+m+AZY3LUmjS4/hT24d0jq4vloRcUvMYpfg G4nTnUOXdsGLzC2PR+jegHUkHiuObQcYN8XcuhZZEEAGtm+29aVxFvlRL7B7vMPP hFOs8a3M2A6bVJkcxdPfzJzmjREoqnMxEbZUpazyK+Z/5KV9u+cThPWJFzcGoo/L Mwq/M0wlDWuLuNvwYAhVRyK+oTmzslGn -----END CERTIFICATE-----Generated at Tue Sep 9 17:41:03 2025 by rpki-client