$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft File: t88LJwp_2x1xeui5edHuD_iL1E8.mft (raw, json) Hash identifier: oWA0dDAZGPx/X4QRx3qWs8iMI+TIhamIwLfLAblmi4g= Subject key identifier: 9B:96:FA:F1:CA:3E:A4:26:28:67:D8:8D:90:AF:7F:DE:6B:74:30:0B Authority key identifier: B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F Certificate issuer: /CN=A915B50D/serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft Manifest number: B7 Signing time: Wed 03 Sep 2025 06:40:02 +0000 Manifest this update: Wed 03 Sep 2025 06:40:02 +0000 Manifest next update: Wed 10 Sep 2025 06:40:02 +0000 Files and hashes: 1: t88LJwp_2x1xeui5edHuD_iL1E8.crl (hash: VCjMdgF8WcjqTp2RHr5nWXhy1lOZLmPWg2zc4q/5F7Y=) 2: 85CDB6087C1211EF8E490677C4F9AE02.roa (hash: dg3/bJiVaiz5v44anOkDfbtlZGRX3EFlzFQApjSj5Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D, serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F Validity Not Before: Sep 3 06:40:02 2025 GMT Not After : Sep 10 06:40:02 2025 GMT Subject: CN=68b7e2c2-461c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:9f:a2:b5:59:da:53:67:9b:16:67:20:76: bb:65:8f:a3:8d:f4:9e:77:95:5d:24:ca:1a:2e:21: af:d0:d7:7b:bd:84:71:1e:86:0b:6d:c4:c8:66:8d: b7:fe:4c:52:1b:a8:97:ac:73:f5:74:f5:8e:e1:e0: 23:71:e4:7a:57:25:18:91:a0:03:36:2e:97:a6:8d: f1:34:56:69:8f:a9:50:be:c5:48:7a:d8:f6:63:31: 21:28:f3:d5:2a:27:29:7d:7c:45:07:0b:fa:60:e9: 29:b6:b9:c7:81:15:e7:a1:de:c2:1a:d4:d0:30:ad: bb:36:f0:e9:5c:d4:09:91:f0:82:ad:19:41:ca:b6: cf:87:af:70:8d:19:7e:1f:3b:3b:e3:24:89:c0:70: e9:1f:f8:59:de:a1:7a:da:28:79:d2:ef:77:41:cb: 7b:dd:96:72:0c:3c:e3:bc:2c:05:c5:79:e3:89:ed: a4:5b:ca:26:43:60:53:5d:4e:95:b7:f5:2d:c1:97: dd:cf:b8:9e:0b:7f:59:21:b7:63:a9:98:1a:88:6b: 18:49:99:7d:8c:a8:99:08:3c:03:6f:32:3a:93:a7: e4:7f:df:06:aa:77:a2:44:8b:66:0d:73:34:47:2d: 55:4a:01:41:15:29:ae:52:b5:5b:e2:1c:64:87:d0: a7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:96:FA:F1:CA:3E:A4:26:28:67:D8:8D:90:AF:7F:DE:6B:74:30:0B X509v3 Authority Key Identifier: keyid:B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:57:62:72:75:03:88:be:f4:bf:b3:cf:15:b3:3b:a9:3d:3c: 0d:2a:c9:44:6e:6b:c7:14:93:bf:52:74:f0:a8:fb:64:c0:ad: 2e:f6:e9:69:37:b4:2e:00:27:25:9e:a9:00:82:ed:be:4c:a4: d1:10:7d:2d:f1:41:0a:eb:62:dd:ad:bb:02:0b:79:e7:b8:7f: 30:8b:a4:63:0a:e2:c8:65:72:af:2f:1e:39:a0:9e:53:0f:21: ba:4e:26:a4:1b:68:e5:9f:52:18:f7:62:1f:12:b6:52:49:1b: db:73:2a:b0:69:00:62:42:ed:54:31:82:c8:d6:db:27:30:f6: e1:7f:80:57:ef:02:57:2e:d2:b6:9e:60:2f:e1:81:cd:e5:5e: 5b:26:e5:b2:8e:f3:96:f9:1c:8a:7d:71:22:6b:8e:5f:30:f6: ea:23:c1:b7:c2:3a:93:9c:d6:5a:1b:e5:33:72:ce:10:e6:66: 1f:bc:9a:e3:37:3c:e9:af:31:28:8d:be:18:88:9b:a2:4e:6a: 8a:26:78:50:3a:cf:36:d8:38:4b:c9:26:69:df:4d:0d:3f:27: 2f:ad:1f:5e:c1:04:ac:76:97:2c:05:38:f9:ea:00:59:d9:80: f7:3f:dd:4a:5b:8f:2f:f2:f8:39:a4:10:f7:5c:af:ac:93:18: d9:19:09:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MEQxMTAvBgNVBAUTKEI3Q0YwQjI3MEE3RkRCMUQ3MTdBRThCOTc5RDFFRTBG Rjg4QkQ0NEYwHhcNMjUwOTAzMDY0MDAyWhcNMjUwOTEwMDY0MDAyWjAYMRYwFAYD VQQDEw02OGI3ZTJjMi00NjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4yforVZ2lNnmxZnIHa7ZY+jjfSed5VdJMoaLiGv0Nd7vYRxHoYLbcTIZo23 /kxSG6iXrHP1dPWO4eAjceR6VyUYkaADNi6Xpo3xNFZpj6lQvsVIetj2YzEhKPPV KicpfXxFBwv6YOkptrnHgRXnod7CGtTQMK27NvDpXNQJkfCCrRlByrbPh69wjRl+ Hzs74ySJwHDpH/hZ3qF62ih50u93Qct73ZZyDDzjvCwFxXnjie2kW8omQ2BTXU6V t/UtwZfdz7ieC39ZIbdjqZgaiGsYSZl9jKiZCDwDbzI6k6fkf98GqneiRItmDXM0 Ry1VSgFBFSmuUrVb4hxkh9CnZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuW+vHK PqQmKGfYjZCvf95rdDALMB8GA1UdIwQYMBaAFLfPCycKf9sdcXrouXnR7g/4i9RP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUwRC9FNjgyNjgzQzdC QkMxMUVGOTJFRTFBNjZDNEY5QUUwMi90ODhMSndwXzJ4MXhldWk1ZWRIdURfaUwx RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Q4OExKd3BfMngxeGV1aTVlZEh1RF9pTDFFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUwRC9FNjgyNjgzQzdCQkMxMUVGOTJFRTFBNjZDNEY5QUUwMi90ODhMSndwXzJ4 MXhldWk1ZWRIdURfaUwxRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6V2JydQOIvvS/s88VszupPTwNKslEbmvHFJO/UnTwqPtkwK0u9ulp N7QuACclnqkAgu2+TKTREH0t8UEK62LdrbsCC3nnuH8wi6RjCuLIZXKvLx45oJ5T DyG6TiakG2jln1IY92IfErZSSRvbcyqwaQBiQu1UMYLI1tsnMPbhf4BX7wJXLtK2 nmAv4YHN5V5bJuWyjvOW+RyKfXEia45fMPbqI8G3wjqTnNZaG+Uzcs4Q5mYfvJrj NzzprzEojb4YiJuiTmqKJnhQOs822DhLySZp300NPycvrR9ewQSsdpcsBTj56gBZ 2YD3P91KW48v8vg5pBD3XK+skxjZGQnQ -----END CERTIFICATE-----Generated at Thu Sep 4 15:49:48 2025 by rpki-client