$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: ZCl/XHDcCqQc2BllbtDjWbLkbnWIZxweCPl7p8n/nqs= Subject key identifier: F1:DD:8D:13:FB:00:BD:A6:FC:DD:ED:4E:08:D8:67:C7:2F:8F:0B:80 Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 24D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 248E Signing time: Thu 04 Sep 2025 15:52:30 +0000 Manifest this update: Thu 04 Sep 2025 15:52:29 +0000 Manifest next update: Thu 11 Sep 2025 15:52:29 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: yd2yDTq+pp/6OypdiyPt6M+bgHhi7pPrl9JuJkW86oc=) 2: 83684F548DF411E7A230506DC4F9AE02.roa (hash: 7rwSXJvv/HshNFddgboHnncSidkclYa/NvGMbxx8LFA=) 3: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: nq0Uzk8SuEDu3ZbDp3B41hYz4SbibvM9axOdjGoUmDE=) 4: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: 4MVhPeL89L4iqif2jjx8A1Zl5rTPkTTCl8RIrLHaD+o=) 5: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: aaC6AltbMVKLhQjXZ7dpspAxhJD3m7klJ08VK8NpfEI=) 6: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: RYNGA3H5ydUqwQnOMshPikkHHM7bQr9sFSWMotIy4S0=) 7: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: +cU9ydF4cWSQqI/mYS8fYBUIoo4803uhA7oc0s3jgaU=) 8: 027532E6385F11EAA879692AC4F9AE02.roa (hash: CM6RIxM9JHHGhZC10urcCuophC6TNcTlTYu0C+8d5wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 15:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9425 (0x24d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: Sep 4 15:52:29 2025 GMT Not After : Sep 11 15:52:29 2025 GMT Subject: CN=68b9b5bd-983a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a4:fb:eb:a2:b1:88:e8:3c:76:38:95:93:7c: 1b:a2:c1:45:73:8f:de:ce:cf:f5:84:b3:f5:3c:1c: 8e:46:2f:27:5a:7b:e5:30:02:1d:12:f1:bb:19:a7: 44:80:27:e4:70:1f:b0:53:79:56:89:c0:34:07:89: 98:09:50:1b:e9:47:79:9f:37:58:f5:58:d0:bb:74: 67:9d:60:32:91:94:b6:99:8f:1b:69:ee:9d:26:3b: 25:41:6a:26:44:f2:71:f5:ff:d1:c1:1e:10:bb:a3: c8:3b:2b:ce:aa:99:4a:9a:dc:a5:27:61:a2:8d:87: af:be:61:0c:68:4d:92:81:f4:4d:ca:9d:31:ad:35: 63:19:ea:98:c5:32:33:ae:b4:da:a3:ed:b5:40:7b: c8:ae:d8:41:78:82:b4:a7:31:37:59:f5:db:09:c4: e4:71:4c:76:c5:b9:d8:e1:6a:ed:6b:78:9d:c4:7a: 66:99:6a:7d:55:bb:3d:45:46:4f:fe:36:4d:cd:f3: df:11:76:b9:ee:a8:18:b4:17:1e:7a:a6:ea:c4:66: c2:fe:b5:8b:d6:a6:35:93:67:b3:03:14:12:fb:aa: 81:bf:4a:0d:d3:43:d0:ed:a3:f9:d8:78:9d:8f:a9: 1d:e6:3a:6b:4e:a8:d8:f4:5e:6a:1e:6e:f7:77:ff: f3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DD:8D:13:FB:00:BD:A6:FC:DD:ED:4E:08:D8:67:C7:2F:8F:0B:80 X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2f:05:b5:14:43:57:f3:85:e1:42:ae:8a:b7:eb:54:4a:49: 80:3a:6f:b3:f9:29:31:f4:10:b4:f9:dd:29:e1:57:a7:c0:f8: d5:3f:cf:bc:9e:6f:d6:a4:ef:84:8b:95:00:d3:f4:5f:f5:98: 13:e3:c0:fc:06:ef:33:0f:20:5e:88:77:49:72:64:23:ae:5e: 26:3c:d9:ac:24:c4:ff:6c:79:34:5a:b8:8b:16:82:83:83:b9: 6e:ba:dc:e5:f4:66:f8:1a:4c:25:17:97:27:d6:ad:1a:a1:1e: 6b:f2:e7:e6:e6:71:42:e8:1f:f1:f9:73:36:c3:45:ae:05:c2: c2:08:e3:4f:2c:d9:b1:81:14:08:97:28:2a:40:aa:f4:0c:0f: 3d:6e:f2:b5:ce:21:6b:a7:f1:75:08:b7:ea:04:a8:60:3b:0f: cd:10:40:fa:11:95:27:74:39:59:1c:65:2c:bb:8b:d8:57:76: b3:10:20:46:ea:1e:df:20:22:01:e5:49:09:0e:9b:23:31:c4: 54:65:71:84:64:af:0d:f1:98:ff:66:ef:dd:25:fe:f9:d5:60: 43:98:f5:2a:fb:d2:c1:6b:7c:d9:d2:b7:16:52:af:6d:05:84: 11:99:63:22:34:ce:9b:30:2f:38:2f:4a:6c:32:a3:25:0f:f0: 54:71:77:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjUwOTA0MTU1MjI5WhcNMjUwOTExMTU1MjI5WjAYMRYwFAYD VQQDEw02OGI5YjViZC05ODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aT766KxiOg8djiVk3wbosFFc4/ezs/1hLP1PByORi8nWnvlMAIdEvG7GadE gCfkcB+wU3lWicA0B4mYCVAb6Ud5nzdY9VjQu3RnnWAykZS2mY8bae6dJjslQWom RPJx9f/RwR4Qu6PIOyvOqplKmtylJ2GijYevvmEMaE2SgfRNyp0xrTVjGeqYxTIz rrTao+21QHvIrthBeIK0pzE3WfXbCcTkcUx2xbnY4Wrta3idxHpmmWp9Vbs9RUZP /jZNzfPfEXa57qgYtBceeqbqxGbC/rWL1qY1k2ezAxQS+6qBv0oN00PQ7aP52Hid j6kd5jprTqjY9F5qHm73d//zHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHdjRP7 AL2m/N3tTgjYZ8cvjwuAMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbLwW1FENX84XhQq6Kt+tUSkmAOm+z+Skx9BC0+d0p4VenwPjVP8+8 nm/WpO+Ei5UA0/Rf9ZgT48D8Bu8zDyBeiHdJcmQjrl4mPNmsJMT/bHk0WriLFoKD g7luutzl9Gb4GkwlF5cn1q0aoR5r8ufm5nFC6B/x+XM2w0WuBcLCCONPLNmxgRQI lygqQKr0DA89bvK1ziFrp/F1CLfqBKhgOw/NEED6EZUndDlZHGUsu4vYV3azECBG 6h7fICIB5UkJDpsjMcRUZXGEZK8N8Zj/Zu/dJf751WBDmPUq+9LBa3zZ0rcWUq9t BYQRmWMiNM6bMC84L0psMqMlD/BUcXd9 -----END CERTIFICATE-----Generated at Sat Sep 6 04:42:31 2025 by rpki-client