$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json) Hash identifier: F70gpoal8Vmb1qK0OEd9hsaIIwdbiwHRdVF3IO7/gFM= Subject key identifier: 42:80:38:34:6D:A3:B7:38:34:98:D4:20:EB:22:2D:68:0B:18:E8:19 Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft Manifest number: DE Signing time: Fri 05 Sep 2025 05:52:56 +0000 Manifest this update: Fri 05 Sep 2025 05:52:56 +0000 Manifest next update: Fri 12 Sep 2025 05:52:56 +0000 Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: a5dELlvayjogQY7kmttRg5lJBd37jmZlq94nMEVxOas=) 2: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: P4Mm2VNQngkGMc8lCO6eHVGOp7Fy5SVP9GQX/B339mE=) 3: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: vmrZgLw19B5ritq7z4vG50pAGmXRwXJvrAIY9L3sz/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Validity Not Before: Sep 5 05:52:56 2025 GMT Not After : Sep 12 05:52:56 2025 GMT Subject: CN=68ba7ab8-ddfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:ac:f8:75:55:f1:50:8e:c2:21:1d:76:11: 48:10:05:10:a0:e9:4d:b0:0e:da:12:6d:1c:2d:a8: c3:9f:d6:48:be:07:fa:de:54:21:3a:83:13:c2:0f: 17:94:78:c4:98:77:8e:7c:2c:e2:1a:b8:7c:93:16: 9e:0a:79:e8:de:05:30:c3:b2:6f:86:22:87:46:9c: 6b:95:8c:3c:54:10:0a:a8:db:bc:b4:af:b6:97:30: 3b:0e:8f:d5:00:01:6a:3d:dd:cd:d3:13:5d:a8:8b: 5c:bb:39:8b:18:0f:ec:8e:bf:52:88:3b:89:46:05: f5:dd:5f:6f:88:af:65:2d:f6:0e:89:77:b5:40:a3: c5:bb:05:07:0f:88:d8:ed:67:0f:47:c3:5f:ea:a1: 45:76:37:73:14:a6:8f:a5:7a:20:b5:32:3f:f8:21: b2:0a:92:29:a2:de:0b:43:e0:9c:ba:25:3a:39:b8: b8:b0:e6:2e:58:67:44:b0:98:2e:57:8e:70:5b:0e: 76:b7:65:a0:5f:fd:80:86:5a:a2:60:84:7f:17:32: 72:a4:11:65:54:98:81:e1:b5:65:0f:08:bb:55:70: 55:e5:91:cc:20:52:72:5a:b1:63:a9:bf:bd:1e:39: 46:20:33:b3:d2:4c:7e:79:9b:41:ee:4c:68:a3:58: 7f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:80:38:34:6D:A3:B7:38:34:98:D4:20:EB:22:2D:68:0B:18:E8:19 X509v3 Authority Key Identifier: keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:20:b7:31:bb:32:d1:f4:04:27:2d:a5:a8:3f:67:2e:ee:78: 8f:cb:af:e0:15:34:7a:c2:8a:4b:a3:aa:e4:16:9d:07:b6:3a: bc:b9:f4:de:ce:45:f3:fa:7a:21:92:07:e6:ad:28:fb:01:63: d3:42:73:01:a3:85:6d:8b:94:ae:fa:aa:c4:17:c5:9c:07:1b: b5:62:48:52:82:e5:ca:bd:16:09:79:11:e5:7e:7d:d9:b0:29: 60:a0:30:6e:af:32:16:8a:41:bd:72:d8:bc:99:95:a1:ef:34: 1e:32:8c:27:3c:e2:5b:7a:db:6a:8d:80:a0:33:41:2a:53:98: 87:42:20:9a:19:91:22:0b:04:05:a1:e7:ff:f3:84:18:cb:16: d1:15:63:3f:d4:7d:2f:d6:f3:b5:6f:a1:3b:d3:4e:cf:25:76: 89:49:87:d6:6b:ad:33:d5:c8:d0:0c:c8:cc:0b:63:22:35:61: f2:df:82:6f:8b:86:25:c9:92:2e:33:03:72:70:07:b1:a2:c4: 92:02:37:ba:34:99:cb:26:bd:65:3f:a2:40:9d:be:c0:3d:7a: cd:51:e0:d7:9f:ed:30:fc:d3:43:8e:80:5d:94:d4:1b:b0:9e: 26:2e:17:5c:fe:7b:2d:72:f7:9b:ff:4e:55:59:fa:95:46:fd: 1b:ff:3e:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUExMTAvBgNVBAUTKEYyNEM0NDMyMTBGNzQxQ0JFNTlEMDE0RUJBNkVFOTcy QjVDRERBRTcwHhcNMjUwOTA1MDU1MjU2WhcNMjUwOTEyMDU1MjU2WjAYMRYwFAYD VQQDEw02OGJhN2FiOC1kZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybSs+HVV8VCOwiEddhFIEAUQoOlNsA7aEm0cLajDn9ZIvgf63lQhOoMTwg8X lHjEmHeOfCziGrh8kxaeCnno3gUww7JvhiKHRpxrlYw8VBAKqNu8tK+2lzA7Do/V AAFqPd3N0xNdqItcuzmLGA/sjr9SiDuJRgX13V9viK9lLfYOiXe1QKPFuwUHD4jY 7WcPR8Nf6qFFdjdzFKaPpXogtTI/+CGyCpIpot4LQ+CcuiU6Obi4sOYuWGdEsJgu V45wWw52t2WgX/2AhlqiYIR/FzJypBFlVJiB4bVlDwi7VXBV5ZHMIFJyWrFjqb+9 HjlGIDOz0kx+eZtB7kxoo1h/1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKAODRt o7c4NJjUIOsiLWgLGOgZMB8GA1UdIwQYMBaAFPJMRDIQ90HL5Z0BTrpu6XK1zdrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81MTJDNzA1RTM3 QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1FjdmxuUUZPdW03cGNyWE4y dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81MTJDNzA1RTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1Fj dmxuUUZPdW03cGNyWE4ydWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9ILcxuzLR9AQnLaWoP2cu7niPy6/gFTR6wopLo6rkFp0Htjq8ufTe zkXz+nohkgfmrSj7AWPTQnMBo4Vti5Su+qrEF8WcBxu1YkhSguXKvRYJeRHlfn3Z sClgoDBurzIWikG9cti8mZWh7zQeMownPOJbettqjYCgM0EqU5iHQiCaGZEiCwQF oef/84QYyxbRFWM/1H0v1vO1b6E7007PJXaJSYfWa60z1cjQDMjMC2MiNWHy34Jv i4YlyZIuMwNycAexosSSAje6NJnLJr1lP6JAnb7APXrNUeDXn+0w/NNDjoBdlNQb sJ4mLhdc/nstcveb/05VWfqVRv0b/z6L -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:57 2025 by rpki-client