$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json) Hash identifier: 8P2PoGI8LWcgTXnb9r0UOjf7XPYCPmjGzISwcp6OWqg= Subject key identifier: 5E:2B:4D:FD:A6:8C:47:17:ED:A4:0C:4E:11:CC:EF:E1:46:B9:6F:B1 Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 1778 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft Manifest number: 16DD Signing time: Thu 04 Sep 2025 16:43:21 +0000 Manifest this update: Thu 04 Sep 2025 16:43:20 +0000 Manifest next update: Thu 11 Sep 2025 16:43:20 +0000 Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: lqlpA8si9nEPOelJXYrasyQak5IglHF2Mt1ctEUz6yE=) 2: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: +7/Vt0FTaK5GWH/3IE+pQmL2wHj4vbU0fzaTx23ZBa4=) 3: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: dHZjnobEWvCkJLuRIvZrVbscT5l1hAVdVQPJ8ZrvrKU=) 4: BE080034527011F0A1061D5AC4F9AE02.roa (hash: hJTyURGyPMiJ2vcKve1J9dwSCev0OBfNhIrnqq/i6xA=) 5: B1D95AEA7F9B11EFBF8E2428C4F9AE02.roa (hash: J48bHySJ6PshhvlJwPkBG6RyobLf8a6YeYETe5QG1TY=) 6: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: uPpnoQZGZKxbY1tDf1IppgOlALrQMUGFd/gQhZLvnlg=) 7: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: o4sVUAvBbfXlH+Fkt0MhUocTngit2NpPuryfYPu2kLw=) 8: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: NWWiuwLgl9RwlWRS8BInX5D7zCXvjEBWjuBg9LiZans=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 16:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6008 (0x1778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Sep 4 16:43:20 2025 GMT Not After : Sep 11 16:43:20 2025 GMT Subject: CN=68b9c1a8-a6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:6a:b9:0e:80:7e:0f:03:dd:ab:48:cf:d7: af:3e:7d:a7:79:e5:90:bf:23:4b:bc:f5:5a:78:af: 6f:42:fe:0f:00:e1:84:1c:9c:ec:99:26:ce:91:eb: 7a:cf:31:79:47:f2:e9:4e:7f:24:2b:61:c2:ed:c6: 2b:b0:91:1e:6a:7e:9b:8f:31:63:d4:26:4e:b0:66: 46:4b:ec:bb:14:2d:9e:24:92:e7:6c:57:80:eb:61: 58:4e:5d:56:5a:8c:b6:f9:fc:5b:5b:06:8e:fc:43: ef:38:a4:d5:8d:31:b2:3e:7a:85:0b:4b:b3:45:82: c3:60:5b:b5:28:63:cb:e9:0e:cb:57:dc:83:fc:60: dd:1f:36:92:c4:15:14:76:e6:50:ee:d6:92:9e:ff: 1e:74:5c:7d:99:16:2f:c5:72:79:6e:ec:58:9e:38: 55:0f:55:ca:7a:07:5d:04:10:59:96:89:45:29:53: 88:a2:82:d8:f5:65:8a:be:9e:14:ac:29:97:be:39: 54:bc:d1:b9:56:69:22:3a:2e:38:c8:6b:4e:25:c7: 1c:b1:04:07:86:6a:ca:ca:9a:d3:e4:ab:0f:8e:9b: 01:db:42:cd:09:a3:bf:f5:29:9f:5e:6a:8c:a1:d7: fb:7d:76:62:0d:c6:62:cb:e0:e7:0d:1e:5f:97:92: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2B:4D:FD:A6:8C:47:17:ED:A4:0C:4E:11:CC:EF:E1:46:B9:6F:B1 X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d9:0e:d0:c4:8f:c7:26:5f:04:dd:b3:97:da:d3:9e:be:57: 23:6f:06:0d:ef:d6:93:4f:22:02:7a:4f:1a:00:15:52:30:e3: 38:a3:68:64:d2:32:b5:61:36:c0:8b:8c:60:14:e1:77:22:61: 9f:1e:a1:5f:3c:a5:12:9a:64:42:e1:76:ff:ab:df:9c:33:9e: 6c:94:e9:23:bb:c8:93:9d:08:39:59:3f:df:80:67:05:f0:a1: 6a:79:96:dc:d6:11:c3:2b:7d:1e:b7:89:68:a3:e6:4f:23:f2: 7a:b1:0a:88:79:51:da:ae:92:fd:cb:11:bd:62:f3:6d:82:90: 6e:5a:e2:a4:ef:a1:fc:00:6f:f7:ea:33:cb:0f:1a:17:2d:39: 44:54:a9:80:b4:0b:52:24:44:c3:5e:ec:19:ce:16:d5:bd:af: dc:97:1b:9f:e8:89:0f:62:24:0d:d4:78:a3:2c:1a:8e:e2:9e: f7:7c:79:ef:4b:57:01:40:14:13:69:0c:ae:d4:ba:cc:1d:a0: 34:0d:20:8c:a9:ed:ff:10:6a:fe:7b:80:f3:d4:0d:f3:2d:b7: 16:de:de:1c:22:41:2a:df:eb:e7:1c:21:92:7d:ab:2a:bb:b6: 7c:c6:69:5f:55:8c:6e:5c:aa:73:b4:cb:45:a9:17:ec:b6:b3: 17:5d:71:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjUwOTA0MTY0MzIwWhcNMjUwOTExMTY0MzIwWjAYMRYwFAYD VQQDEw02OGI5YzFhOC1hNmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1i5quQ6Afg8D3atIz9evPn2neeWQvyNLvPVaeK9vQv4PAOGEHJzsmSbOket6 zzF5R/LpTn8kK2HC7cYrsJEean6bjzFj1CZOsGZGS+y7FC2eJJLnbFeA62FYTl1W Woy2+fxbWwaO/EPvOKTVjTGyPnqFC0uzRYLDYFu1KGPL6Q7LV9yD/GDdHzaSxBUU duZQ7taSnv8edFx9mRYvxXJ5buxYnjhVD1XKegddBBBZlolFKVOIooLY9WWKvp4U rCmXvjlUvNG5VmkiOi44yGtOJcccsQQHhmrKyprT5KsPjpsB20LNCaO/9SmfXmqM odf7fXZiDcZiy+DnDR5fl5LjGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4rTf2m jEcX7aQMThHM7+FGuW+xMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC SlNHanFCa0FtWGo4X3BIbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj2Q7QxI/HJl8E3bOX2tOevlcjbwYN79aTTyICek8aABVSMOM4o2hk 0jK1YTbAi4xgFOF3ImGfHqFfPKUSmmRC4Xb/q9+cM55slOkju8iTnQg5WT/fgGcF 8KFqeZbc1hHDK30et4loo+ZPI/J6sQqIeVHarpL9yxG9YvNtgpBuWuKk76H8AG/3 6jPLDxoXLTlEVKmAtAtSJETDXuwZzhbVva/clxuf6IkPYiQN1HijLBqO4p73fHnv S1cBQBQTaQyu1LrMHaA0DSCMqe3/EGr+e4Dz1A3zLbcW3t4cIkEq3+vnHCGSfasq u7Z8xmlfVYxuXKpztMtFqRfstrMXXXF+ -----END CERTIFICATE-----Generated at Sat Sep 6 12:06:36 2025 by rpki-client