$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: GfL2f/oqH+o1tHGH+JxqQ2lcBZ7XbUlG6oR6eibOg30= Subject key identifier: E8:D5:E6:E5:81:41:A2:29:48:9C:6F:64:75:85:55:DA:40:AA:B7:02 Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 1355 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 12FB Signing time: Thu 04 Sep 2025 17:12:56 +0000 Manifest this update: Thu 04 Sep 2025 17:12:55 +0000 Manifest next update: Thu 11 Sep 2025 17:12:55 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: EgJ5GjqQipZArc0C01V8+ASRKJNtrtKvI8F3bt1G7P4=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: pmGjv9e4kJuui8gahJeniJTVkFZxLqAkqBkutIyaUmM=) 3: 2227B66CF97B11EFA2B83631C4F9AE02.roa (hash: x6GId7866GEm2yx9Alj41gMxCnlfSK7cwtQgE9xlFPo=) 4: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: JtAyYvcjsSIbHjMavRbf74w0IIhNg4IBABZJn0wcwzQ=) 5: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: vz1JkowcSPPocIJM8LY5Tc1J1IEwQwHTAm7ad6CcM1k=) 6: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: 3fdnPO7nIXug6dYvzk2siFXVuDYGDIdJas3DCvUTWPA=) 7: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: DOUd4Ct4uA10KaiPoOZjeWOyNrfXwTZYgvv/v0X/i0Y=) 8: DEF977A6E53611EB81682769C4F9AE02.roa (hash: SO0gHlbHvBD1Qdf3mOeX+9pYdaFRkZquUMH00OZSNZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 17:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4949 (0x1355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Sep 4 17:12:55 2025 GMT Not After : Sep 11 17:12:55 2025 GMT Subject: CN=68b9c897-e859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:75:6f:5f:d8:e9:d0:3f:10:4e:c3:5d:d2:d3: 83:69:cb:68:7c:6a:8a:6c:0e:fc:64:9b:be:82:37: ad:50:e7:54:81:4d:cc:82:7e:32:f0:1f:50:0d:17: 75:0b:a5:b6:59:32:ef:22:71:b9:bb:95:ab:29:89: 04:1c:45:f7:c0:0b:32:e4:e6:45:ed:b7:b0:bd:87: 8a:33:29:c5:39:c6:8b:91:63:1b:d0:3c:0f:0e:64: 44:ed:80:2f:0f:b8:66:bf:2a:70:d4:a8:86:da:e3: fa:df:b3:a7:64:4d:47:1b:3a:0c:52:ca:9d:28:9c: 65:9b:5c:d1:7f:36:a5:fb:65:9d:e7:df:71:95:a4: 10:3b:7e:5a:e1:3d:25:d2:67:90:68:a3:d4:d5:09: 7e:f8:8d:f1:c1:0a:8c:64:e7:1e:19:36:44:8f:a6: 97:1e:0b:e7:34:07:03:17:30:9d:a2:79:68:51:3d: 0d:84:88:ff:99:85:77:f1:7b:0b:14:0c:20:e2:6b: 7e:b7:14:4d:f7:03:93:f8:fb:f4:34:44:93:61:a5: 80:4b:93:86:73:81:94:b0:49:20:76:dc:09:b7:60: a3:d9:eb:45:9a:31:1a:23:e8:96:95:0d:a7:c2:da: ce:10:f1:85:72:3d:28:f8:70:cf:cf:ef:c2:ee:54: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D5:E6:E5:81:41:A2:29:48:9C:6F:64:75:85:55:DA:40:AA:B7:02 X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:c2:36:b7:7a:7e:f2:ac:15:de:a3:5b:3f:ca:7a:d0:f9:08: 96:d0:77:c0:aa:c2:56:ae:86:07:02:cd:24:88:ae:38:d6:54: d2:76:4f:05:5a:21:d2:b0:7c:b2:14:f3:ef:44:59:95:d2:8a: 5a:83:85:8e:38:3f:2b:f5:77:6c:d2:b1:82:32:90:8c:0a:d9: c7:0b:cd:8b:17:cb:7c:fb:9c:f7:a6:a2:22:de:fd:29:aa:35: 57:65:8b:eb:fd:52:46:b7:68:0b:d5:6e:d9:13:15:c2:8b:71: c1:15:82:de:a4:46:14:5e:31:ca:e6:8e:04:36:dc:7e:ee:d2: 8d:bf:79:05:2d:9e:d3:20:f6:3c:c3:a0:5d:69:73:60:5e:87: ba:46:c0:cb:11:67:cb:15:35:8d:b9:25:66:e1:e0:91:d5:6e: 6c:5a:70:cb:d7:24:65:20:32:41:50:0c:59:ef:c3:93:b7:24: 94:67:ec:36:a0:6d:e8:7f:0c:1b:7b:1e:4c:79:1b:05:26:16: eb:d9:70:4a:72:58:20:c2:51:4c:8a:0a:00:3f:50:38:53:ab: 8e:56:32:00:10:50:77:62:42:6f:80:3f:c3:2b:c3:61:c9:7b: b8:14:48:41:54:c5:08:78:f1:ca:d1:8b:8d:7d:b1:9a:e5:d7: 91:52:62:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUwOTA0MTcxMjU1WhcNMjUwOTExMTcxMjU1WjAYMRYwFAYD VQQDEw02OGI5Yzg5Ny1lODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HVvX9jp0D8QTsNd0tODactofGqKbA78ZJu+gjetUOdUgU3Mgn4y8B9QDRd1 C6W2WTLvInG5u5WrKYkEHEX3wAsy5OZF7bewvYeKMynFOcaLkWMb0DwPDmRE7YAv D7hmvypw1KiG2uP637OnZE1HGzoMUsqdKJxlm1zRfzal+2Wd599xlaQQO35a4T0l 0meQaKPU1Ql++I3xwQqMZOceGTZEj6aXHgvnNAcDFzCdonloUT0NhIj/mYV38XsL FAwg4mt+txRN9wOT+Pv0NESTYaWAS5OGc4GUsEkgdtwJt2Cj2etFmjEaI+iWlQ2n wtrOEPGFcj0o+HDPz+/C7lRh9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjV5uWB QaIpSJxvZHWFVdpAqrcCMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJwja3en7yrBXeo1s/ynrQ+QiW0HfAqsJWroYHAs0kiK441lTSdk8F WiHSsHyyFPPvRFmV0opag4WOOD8r9Xds0rGCMpCMCtnHC82LF8t8+5z3pqIi3v0p qjVXZYvr/VJGt2gL1W7ZExXCi3HBFYLepEYUXjHK5o4ENtx+7tKNv3kFLZ7TIPY8 w6BdaXNgXoe6RsDLEWfLFTWNuSVm4eCR1W5sWnDL1yRlIDJBUAxZ78OTtySUZ+w2 oG3ofwwbex5MeRsFJhbr2XBKclggwlFMigoAP1A4U6uOVjIAEFB3YkJvgD/DK8Nh yXu4FEhBVMUIePHK0YuNfbGa5deRUmIA -----END CERTIFICATE-----Generated at Sat Sep 6 08:15:00 2025 by rpki-client