$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft File: mAInpdd1oDTad40z-IxcwCDRw5w.mft (raw, json) Hash identifier: hO3eY/FPEIe0jaaJVeykre1TBCXWxPwO05Z7fp3031I= Subject key identifier: 61:C5:E0:1F:A2:F3:F4:73:7B:E4:1E:8C:F0:20:EB:7E:01:9C:54:C1 Authority key identifier: 98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C Certificate issuer: /CN=A9148E7B/serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft Manifest number: 0203 Signing time: Sat 23 Aug 2025 02:29:15 +0000 Manifest this update: Sat 23 Aug 2025 02:29:14 +0000 Manifest next update: Sat 30 Aug 2025 02:29:14 +0000 Files and hashes: 1: mAInpdd1oDTad40z-IxcwCDRw5w.crl (hash: FYI4ipoYg1TbcbEh21dILNsRAiscA/yoA3SyAc1Srtw=) 2: 8CFF3572708F11ED88DF8322C4F9AE02.roa (hash: lONZjm0NjFEm7xQkBCGWnrkGFmjAfW8U6anBdYjJWgg=) 3: 6EFEF1C0783411F0ACDC1E85C4F9AE02.roa (hash: n6s5JyXMmytqejaauO4Aj8GeIHMHvHugjnr7nvKP2/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.crl rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E7B, serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C Validity Not Before: Aug 23 02:29:14 2025 GMT Not After : Aug 30 02:29:14 2025 GMT Subject: CN=68a9277a-afd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:cd:d5:00:13:d1:11:7c:e9:82:76:f4:95: 04:90:53:56:27:30:53:81:37:22:d1:b6:ba:5b:72: 73:44:74:7a:5b:6c:4e:06:67:c7:da:1d:44:cd:60: 8e:f1:79:54:9c:f9:18:9a:1b:6a:da:e4:5e:4e:46: 20:be:5b:42:16:4b:db:99:01:d9:6b:07:62:cb:d5: 1a:84:19:e6:4d:9f:6c:e6:15:18:1b:29:80:1c:73: aa:8c:f4:c9:77:5f:e1:65:a4:ec:0c:15:2c:1e:cb: 7a:d2:37:6a:8f:c5:a1:ad:51:a4:9a:69:8e:af:a7: 45:5f:84:2d:f4:85:e0:ba:c6:b0:81:76:38:b1:fd: 2f:68:69:67:fd:2a:03:0e:30:09:7e:ac:e4:61:4e: ab:65:56:cd:e7:7f:ca:8a:ad:79:09:6b:fe:9d:63: 86:bc:04:3c:85:a9:93:94:55:fc:89:0a:45:14:15: db:d0:9e:87:bc:3b:9e:d1:2a:dd:c6:a9:d1:3e:2f: b1:e7:2b:a3:6e:c1:0c:78:eb:c2:a8:65:a3:1a:69: 50:4d:d2:e4:a2:83:82:3b:27:83:c7:66:6d:40:ce: f5:83:4d:9a:4e:3c:27:97:e4:14:ff:6d:f6:80:8e: 56:08:7d:41:21:20:16:73:3b:88:7d:e4:1f:6e:3c: 44:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C5:E0:1F:A2:F3:F4:73:7B:E4:1E:8C:F0:20:EB:7E:01:9C:54:C1 X509v3 Authority Key Identifier: keyid:98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4a:cc:49:fb:33:73:28:60:14:9b:44:f8:23:4b:a3:67:90: e0:32:8a:ad:70:9d:f6:95:61:55:81:34:a7:bf:a5:2e:86:af: d4:91:a9:7b:88:fc:3a:ca:fa:fb:af:8e:ed:c6:88:0a:7e:77: 1e:2b:05:29:f8:d4:f8:6c:5e:17:8c:9e:f0:6b:45:bd:b5:df: 24:41:75:af:a9:a5:7a:a8:3a:09:c1:79:93:22:3c:92:d5:3c: 3e:11:a5:4a:dd:59:3d:0a:48:68:e8:9a:89:b2:9a:63:be:bc: 29:ed:5d:9e:b5:c6:43:e7:96:78:34:83:50:6e:02:80:c0:5f: 89:84:80:d6:ed:2d:3f:15:84:88:78:12:e4:6f:b3:44:f4:3e: c4:dd:9c:ab:14:44:bc:4f:d8:83:56:4c:8a:30:80:c4:6c:d7: ef:11:26:b1:a4:48:da:6d:c0:d3:27:ed:03:4b:61:1a:25:2e: 28:98:3f:1f:aa:db:e3:1e:72:7d:4f:0c:01:2b:24:76:3a:98: 8c:4a:82:b9:67:eb:6e:26:31:d5:11:ed:4d:51:cf:c3:a5:97: 1b:6b:1a:5a:3a:0f:08:d1:40:e4:dd:8c:0d:86:34:64:0c:ba: 35:f1:fa:bd:25:87:45:28:d9:c2:a0:51:19:0c:47:b8:7a:b2: 0d:39:35:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFN0IxMTAvBgNVBAUTKDk4MDIyN0E1RDc3NUEwMzREQTc3OEQzM0Y4OEM1Q0Mw MjBEMUMzOUMwHhcNMjUwODIzMDIyOTE0WhcNMjUwODMwMDIyOTE0WjAYMRYwFAYD VQQDEw02OGE5Mjc3YS1hZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFrN1QAT0RF86YJ29JUEkFNWJzBTgTci0ba6W3JzRHR6W2xOBmfH2h1EzWCO 8XlUnPkYmhtq2uReTkYgvltCFkvbmQHZawdiy9UahBnmTZ9s5hUYGymAHHOqjPTJ d1/hZaTsDBUsHst60jdqj8WhrVGkmmmOr6dFX4Qt9IXgusawgXY4sf0vaGln/SoD DjAJfqzkYU6rZVbN53/Kiq15CWv+nWOGvAQ8hamTlFX8iQpFFBXb0J6HvDue0Srd xqnRPi+x5yujbsEMeOvCqGWjGmlQTdLkooOCOyeDx2ZtQM71g02aTjwnl+QU/232 gI5WCH1BISAWczuIfeQfbjxEPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHF4B+i 8/Rze+QejPAg634BnFTBMB8GA1UdIwQYMBaAFJgCJ6XXdaA02neNM/iMXMAg0cOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU3Qi80NzhGQTZENjcw OEQxMUVEOTRFMzJEMjJDNEY5QUUwMi9tQUlucGRkMW9EVGFkNDB6LUl4Y3dDRFJ3 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21BSW5wZGQxb0RUYWQ0MHotSXhjd0NEUnc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU3Qi80NzhGQTZENjcwOEQxMUVEOTRFMzJEMjJDNEY5QUUwMi9tQUlucGRkMW9E VGFkNDB6LUl4Y3dDRFJ3NXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaSsxJ+zNzKGAUm0T4I0ujZ5DgMoqtcJ32lWFVgTSnv6Uuhq/Ukal7 iPw6yvr7r47txogKfnceKwUp+NT4bF4XjJ7wa0W9td8kQXWvqaV6qDoJwXmTIjyS 1Tw+EaVK3Vk9Ckho6JqJsppjvrwp7V2etcZD55Z4NINQbgKAwF+JhIDW7S0/FYSI eBLkb7NE9D7E3ZyrFES8T9iDVkyKMIDEbNfvESaxpEjabcDTJ+0DS2EaJS4omD8f qtvjHnJ9TwwBKyR2OpiMSoK5Z+tuJjHVEe1NUc/DpZcbaxpaOg8I0UDk3YwNhjRk DLo18fq9JYdFKNnCoFEZDEe4erINOTX7 -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:29 2025 by rpki-client