$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json) Hash identifier: kzhYPmcP/bBEHbL4nCbes/SkzuU4c6ltudVIivv3+xc= Subject key identifier: FE:AF:AD:A8:2F:73:11:C2:2E:75:80:8D:75:54:DF:BF:A7:96:62:46 Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 1760 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft Manifest number: 16C5 Signing time: Sun 20 Jul 2025 16:37:45 +0000 Manifest this update: Sun 20 Jul 2025 16:37:45 +0000 Manifest next update: Sun 27 Jul 2025 16:37:45 +0000 Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: 4V7dxrpwxfDNfORPnYFzDRblFZBd5A3mKaZ8TNWOXhA=) 2: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: +7/Vt0FTaK5GWH/3IE+pQmL2wHj4vbU0fzaTx23ZBa4=) 3: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: dHZjnobEWvCkJLuRIvZrVbscT5l1hAVdVQPJ8ZrvrKU=) 4: BE080034527011F0A1061D5AC4F9AE02.roa (hash: hJTyURGyPMiJ2vcKve1J9dwSCev0OBfNhIrnqq/i6xA=) 5: B1D95AEA7F9B11EFBF8E2428C4F9AE02.roa (hash: J48bHySJ6PshhvlJwPkBG6RyobLf8a6YeYETe5QG1TY=) 6: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: uPpnoQZGZKxbY1tDf1IppgOlALrQMUGFd/gQhZLvnlg=) 7: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: o4sVUAvBbfXlH+Fkt0MhUocTngit2NpPuryfYPu2kLw=) 8: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: NWWiuwLgl9RwlWRS8BInX5D7zCXvjEBWjuBg9LiZans=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5984 (0x1760) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Jul 20 16:37:45 2025 GMT Not After : Jul 27 16:37:45 2025 GMT Subject: CN=687d1b59-c551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:1c:64:10:00:0d:c4:78:29:65:6a:07:f4: f8:03:c3:f8:51:d4:80:4f:7c:d4:67:b5:80:99:69: cd:ba:e9:e5:74:f7:92:d0:e6:6f:71:ad:38:b1:de: d0:d3:25:0e:11:b7:aa:ba:49:06:99:20:dd:7e:eb: e1:a4:10:33:94:1f:e5:59:23:6f:17:d6:7a:21:7f: 50:88:4e:ac:a6:36:6e:1f:bd:aa:45:58:a5:bb:73: af:1c:c2:c5:e0:a4:b9:18:a8:7b:f5:71:7a:df:dc: 3a:49:ee:81:25:1f:e7:d2:06:44:86:e5:db:ce:ab: 71:b7:18:33:8e:cd:29:90:b4:fb:40:d4:69:fa:0e: 66:fa:f0:a2:f1:b0:10:2e:6a:2a:ec:46:48:4f:da: 6a:8a:11:e3:a9:39:16:70:29:4c:06:1b:3c:f8:96: b9:7a:73:03:08:98:16:da:b2:1f:91:e8:af:a6:1b: b3:f5:44:d7:b0:9b:12:4a:a3:16:73:2b:81:ff:cb: a0:ec:cf:5d:03:35:2a:83:11:11:cf:27:b3:c3:a3: d7:1a:59:50:86:c9:af:0d:36:5f:7e:e2:1a:3d:38: 45:8d:b0:03:f6:12:5d:bb:4a:7a:69:9d:8c:47:21: 8a:8f:e7:2a:73:75:4c:62:cd:37:dc:38:cb:46:ae: c4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AF:AD:A8:2F:73:11:C2:2E:75:80:8D:75:54:DF:BF:A7:96:62:46 X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:46:58:21:4c:84:b1:80:6a:42:3e:15:85:13:ac:2e:1d:f2: ad:dc:bb:d6:f5:d2:85:0a:c1:2f:71:c1:4d:18:2a:41:fe:74: 08:8c:b3:4f:4a:ab:41:93:92:1c:53:af:ec:57:d3:80:fe:b3: a2:46:c0:1e:a3:4a:6d:9d:9e:4a:f0:36:43:41:7f:c3:36:45: 08:65:cd:4b:7c:1f:9a:9e:68:01:6a:e7:be:52:4b:d4:ce:9b: ae:34:5e:8c:45:20:90:86:c4:74:7a:66:8d:35:42:ba:3a:d4: 1d:57:c2:a8:c0:51:d6:68:70:f5:64:25:11:45:c6:2a:e2:86: ae:d7:b8:ca:c1:ea:68:2d:14:3d:24:89:ee:f2:d4:6b:49:bd: 2e:9a:e4:56:e5:a4:16:2b:83:1c:5f:a1:d4:2b:23:2d:dd:db: be:d4:e5:8d:a8:72:26:26:af:77:0f:49:6c:c0:2c:d9:6d:49: cf:cb:42:21:3d:69:ff:9b:c5:6c:a0:b9:86:b1:ee:9d:69:f6: 23:58:05:6d:25:bc:f5:91:5b:f6:90:51:33:c9:25:92:a4:a9: 92:ae:b2:a0:32:5d:87:21:d7:c9:a3:ef:db:70:d3:a6:00:1b: b3:7a:6d:47:a0:42:b1:94:a3:cb:3d:20:8b:f9:bf:3c:95:0f: 78:15:28:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjUwNzIwMTYzNzQ1WhcNMjUwNzI3MTYzNzQ1WjAYMRYwFAYD VQQDEw02ODdkMWI1OS1jNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7QcZBAADcR4KWVqB/T4A8P4UdSAT3zUZ7WAmWnNuunldPeS0OZvca04sd7Q 0yUOEbequkkGmSDdfuvhpBAzlB/lWSNvF9Z6IX9QiE6spjZuH72qRVilu3OvHMLF 4KS5GKh79XF639w6Se6BJR/n0gZEhuXbzqtxtxgzjs0pkLT7QNRp+g5m+vCi8bAQ Lmoq7EZIT9pqihHjqTkWcClMBhs8+Ja5enMDCJgW2rIfkeivphuz9UTXsJsSSqMW cyuB/8ug7M9dAzUqgxERzyezw6PXGllQhsmvDTZffuIaPThFjbAD9hJdu0p6aZ2M RyGKj+cqc3VMYs033DjLRq7EjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6vragv cxHCLnWAjXVU37+nlmJGMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC SlNHanFCa0FtWGo4X3BIbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1RlghTISxgGpCPhWFE6wuHfKt3LvW9dKFCsEvccFNGCpB/nQIjLNP SqtBk5IcU6/sV9OA/rOiRsAeo0ptnZ5K8DZDQX/DNkUIZc1LfB+anmgBaue+UkvU zpuuNF6MRSCQhsR0emaNNUK6OtQdV8KowFHWaHD1ZCURRcYq4oau17jKwepoLRQ9 JInu8tRrSb0umuRW5aQWK4McX6HUKyMt3du+1OWNqHImJq93D0lswCzZbUnPy0Ih PWn/m8VsoLmGse6dafYjWAVtJbz1kVv2kFEzySWSpKmSrrKgMl2HIdfJo+/bcNOm ABuzem1HoEKxlKPLPSCL+b88lQ94FSh1 -----END CERTIFICATE-----Generated at Sun Jul 20 18:38:49 2025 by rpki-client