$ rpki-client -vvf rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft File: f30yDyoH5DPdvf4oV_XTGTVFF7k.mft (raw, json) Hash identifier: EoTRRDGLfxVuVn5AmOcP31UEJ8hfNIpiVx4S2MLMBFM= Subject key identifier: 97:D9:5F:95:E9:13:38:2B:2F:C3:07:02:E9:5D:9B:36:86:30:4E:F3 Authority key identifier: 7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 Certificate issuer: /CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Certificate serial: 0BFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft Manifest number: 0BF5 Signing time: Wed 20 Aug 2025 18:51:21 +0000 Manifest this update: Wed 20 Aug 2025 18:51:21 +0000 Manifest next update: Wed 27 Aug 2025 18:51:21 +0000 Files and hashes: 1: f30yDyoH5DPdvf4oV_XTGTVFF7k.crl (hash: UNRf9p0g3rab89PrEUkYUn4N/nvSYA+gCN5F5gbi56A=) 2: 800676321BD311EAA341A62DC4F9AE02.roa (hash: RHZCYYPvQQbME4QEcXK5NVornLFSgAMnD5MRoiwlBuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3068 (0xbfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914877B, serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Validity Not Before: Aug 20 18:51:21 2025 GMT Not After : Aug 27 18:51:21 2025 GMT Subject: CN=68a61929-9b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:1f:77:b5:6e:3f:ea:be:30:03:34:58:3c: 31:d4:0a:f4:84:79:10:f5:7e:dc:76:1e:3a:86:82: 98:7e:c1:fb:56:7c:20:84:35:bf:7f:76:7b:f3:1c: 55:5e:02:b3:0d:03:8b:b5:72:37:a1:3a:ae:16:b6: ba:9a:70:86:c6:65:66:55:ef:a8:05:af:f0:d2:85: 6e:a4:f9:1f:cc:18:a0:6f:79:3e:7a:39:03:67:fe: 62:6f:03:58:1a:8b:98:67:34:bc:4c:ca:f5:2e:10: 6d:10:1a:7a:cb:77:e9:55:b8:d4:12:c1:a5:91:cb: 96:0e:77:50:26:8e:70:a9:ab:29:05:11:28:39:c0: 1b:bf:a6:5a:3f:18:bb:95:5c:09:79:fd:fe:63:67: fa:a3:4f:69:56:8d:c5:08:37:3e:c7:e7:1d:f7:57: a0:ca:b2:f7:c3:f3:38:c4:02:57:4f:bd:2e:27:40: 4f:31:93:24:66:d7:a1:92:6e:3c:a6:89:ce:28:b9: 3a:a6:fa:06:8a:e1:b0:f6:56:52:d7:f6:70:02:61: 01:4c:af:8e:17:d8:20:a8:97:56:23:9d:9a:44:2c: e0:bb:51:aa:d5:88:86:8a:82:13:29:90:f3:66:24: fc:fd:c6:6f:e4:b5:de:a6:3a:2f:b4:72:04:93:0c: 31:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D9:5F:95:E9:13:38:2B:2F:C3:07:02:E9:5D:9B:36:86:30:4E:F3 X509v3 Authority Key Identifier: keyid:7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:60:27:02:c1:84:d7:aa:fe:3a:f0:8c:b4:1a:b0:f6:9b:5d: 0d:86:4c:55:75:1c:f3:e8:ba:18:7f:80:98:19:92:e6:00:88: 66:cc:3d:e5:bc:d3:c2:13:26:5a:67:36:ec:cd:2d:a5:ec:a8: c7:47:2e:c8:2b:46:53:54:bc:24:49:d8:7f:ba:21:be:85:af: 82:7c:3e:2c:f5:97:31:5f:6e:f1:52:e8:7f:45:8a:66:2a:09: d4:89:f9:7a:03:32:4c:8e:08:5c:a2:85:a3:93:91:32:ff:f9: ec:7b:4f:f4:3b:d5:d0:ca:e5:d4:8f:57:ee:9c:9a:96:26:7d: 64:16:a9:96:03:cb:3e:ec:ad:27:78:0d:8c:f6:95:b5:81:a4: e1:05:e5:ed:e4:73:a2:2e:1d:c1:f8:e8:2c:4b:dd:2b:ad:fc: b0:b8:25:72:c6:f8:7d:64:9f:b3:a7:64:ac:fd:82:2c:cd:a6: aa:b5:95:2c:ce:ef:3d:ce:f1:eb:93:3e:1c:a5:14:9c:8e:cb: a0:b7:2e:5e:30:a7:ae:33:c3:85:ba:79:af:97:33:b1:32:f8: 3f:1c:ff:69:9b:45:de:ee:24:73:18:2d:5d:ed:e4:1a:9a:85: b6:6d:6b:06:b4:6a:66:e5:b2:13:77:ac:87:fb:6e:31:fd:6c: 5d:3f:75:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3N0IxMTAvBgNVBAUTKDdGN0QzMjBGMkEwN0U0MzNEREJERkUyODU3RjVEMzE5 MzU0NTE3QjkwHhcNMjUwODIwMTg1MTIxWhcNMjUwODI3MTg1MTIxWjAYMRYwFAYD VQQDEw02OGE2MTkyOS05YjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnUfd7VuP+q+MAM0WDwx1Ar0hHkQ9X7cdh46hoKYfsH7VnwghDW/f3Z78xxV XgKzDQOLtXI3oTquFra6mnCGxmVmVe+oBa/w0oVupPkfzBigb3k+ejkDZ/5ibwNY GouYZzS8TMr1LhBtEBp6y3fpVbjUEsGlkcuWDndQJo5wqaspBREoOcAbv6ZaPxi7 lVwJef3+Y2f6o09pVo3FCDc+x+cd91egyrL3w/M4xAJXT70uJ0BPMZMkZtehkm48 ponOKLk6pvoGiuGw9lZS1/ZwAmEBTK+OF9ggqJdWI52aRCzgu1Gq1YiGioITKZDz ZiT8/cZv5LXepjovtHIEkwwxyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfZX5Xp EzgrL8MHAuldmzaGME7zMB8GA1UdIwQYMBaAFH99Mg8qB+Qz3b3+KFf10xk1RRe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODc3Qi8yNTkxMDExRTFC RDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVEUGR2ZjRvVl9YVEdUVkZG N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMHlEeW9INURQZHZmNG9WX1hUR1RWRkY3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODc3Qi8yNTkxMDExRTFCRDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVE UGR2ZjRvVl9YVEdUVkZGN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWYCcCwYTXqv468Iy0GrD2m10NhkxVdRzz6LoYf4CYGZLmAIhmzD3l vNPCEyZaZzbszS2l7KjHRy7IK0ZTVLwkSdh/uiG+ha+CfD4s9ZcxX27xUuh/RYpm KgnUifl6AzJMjghcooWjk5Ey//nse0/0O9XQyuXUj1funJqWJn1kFqmWA8s+7K0n eA2M9pW1gaThBeXt5HOiLh3B+OgsS90rrfywuCVyxvh9ZJ+zp2Ss/YIszaaqtZUs zu89zvHrkz4cpRScjsugty5eMKeuM8OFunmvlzOxMvg/HP9pm0Xe7iRzGC1d7eQa moW2bWsGtGpm5bITd6yH+24x/WxdP3Wa -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:37 2025 by rpki-client