$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json) Hash identifier: xrzBEX8em5e+oQlFur0az8ddxYuUJPAch1NDrYjSfa0= Subject key identifier: 79:17:DB:63:08:B4:6D:EA:C2:01:70:76:B1:CB:BA:2B:CE:CA:EC:CA Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Certificate serial: 0B8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft Manifest number: 0B86 Signing time: Wed 20 Aug 2025 19:05:46 +0000 Manifest this update: Wed 20 Aug 2025 19:05:45 +0000 Manifest next update: Wed 27 Aug 2025 19:05:45 +0000 Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: fP/lNIqtRc9+fXLhtDMI6BfqP8flb6T8CMcppEmg6ks=) 2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: 2QDvhbtMSuUMKkHjiP/BzPb8Yd8fGPxfNmWlpQE2e54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2957 (0xb8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Validity Not Before: Aug 20 19:05:45 2025 GMT Not After : Aug 27 19:05:45 2025 GMT Subject: CN=68a61c89-1eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:28:a7:a4:64:3b:1f:da:c7:02:f5:34:7d:d1: 7c:df:fa:f0:f1:73:9a:57:72:30:e8:eb:a6:8d:dc: e4:2c:06:f6:0f:a2:eb:c6:85:59:74:07:fd:96:ae: ec:4a:59:01:e9:64:f6:5c:bf:3a:20:e1:13:48:97: 21:73:91:16:72:4f:4a:bb:2b:28:1a:27:30:7e:65: 1e:90:58:b5:70:49:0f:8d:27:1e:4a:75:bf:0c:42: bc:22:01:a5:0d:df:70:66:ec:eb:fe:01:97:4c:b0: 70:38:e7:10:53:4e:e4:70:d8:99:e6:f8:00:65:05: 69:bc:4d:5a:42:99:ba:21:6d:fe:1f:aa:d1:56:f4: 22:d0:38:dd:4c:11:ce:95:7a:f9:4d:30:31:b7:37: 42:89:bb:80:b1:99:a9:8f:ca:2b:bd:05:71:d4:c1: 88:3e:a1:70:1b:62:34:f1:f3:5b:aa:bc:98:ed:ea: 20:0d:0d:78:e1:46:72:40:d9:6a:e0:f0:21:02:f6: 58:91:5a:26:86:74:a1:5f:3a:3a:a3:2a:e4:53:80: d8:92:03:6c:e8:40:57:15:ee:10:0e:2c:7f:03:cb: 04:54:ba:35:5c:1b:80:55:0d:ff:70:a6:31:07:92: 0d:ca:a3:08:2a:9d:6a:31:5b:47:5d:68:c4:2c:c0: 96:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:17:DB:63:08:B4:6D:EA:C2:01:70:76:B1:CB:BA:2B:CE:CA:EC:CA X509v3 Authority Key Identifier: keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bd:2e:f0:5f:b1:03:2f:ab:e7:dd:07:70:1f:58:40:4f:84: 22:30:14:7d:6d:7d:0b:ef:fc:0e:56:9f:d0:6c:d8:ae:2a:0c: 07:73:dc:a3:bb:b2:85:e9:6d:c7:ed:f5:0c:ff:b5:b0:53:d1: 3e:46:91:51:b8:95:1e:b1:01:5b:e9:00:c6:f8:22:78:da:b3: 37:0e:a4:5b:ec:64:be:f4:cc:18:5e:1a:f6:2b:cd:de:a0:21: 74:49:a9:69:3b:cd:9f:e8:f2:ad:b7:c9:2d:1b:72:95:a1:3b: 68:cb:6a:15:1c:0c:20:80:ef:38:fd:7e:ce:d2:e2:81:31:5d: 3e:fe:b1:d0:40:c6:e6:b9:4b:f3:26:21:94:41:d2:bc:42:88: 75:3b:6c:0c:5d:63:a7:03:75:41:eb:64:07:0a:db:cf:77:9e: 98:59:ad:86:49:f9:ef:dc:46:28:b1:ac:9c:b5:27:9a:7b:41: 7f:70:d3:54:5e:f3:98:7b:71:76:9d:29:1e:ae:a8:b1:9d:e3: 58:ae:12:ec:a0:b5:f9:61:d8:05:60:7e:4c:f8:68:ca:7c:17: 98:82:64:f1:70:e8:01:e6:fe:82:83:d1:58:2c:40:6f:fc:3d: 9a:ea:53:36:74:ca:0c:80:37:03:52:73:66:d1:79:06:60:9b: 0b:a5:0f:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0 NENCODU4QzgwHhcNMjUwODIwMTkwNTQ1WhcNMjUwODI3MTkwNTQ1WjAYMRYwFAYD VQQDEw02OGE2MWM4OS0xZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySinpGQ7H9rHAvU0fdF83/rw8XOaV3Iw6OumjdzkLAb2D6LrxoVZdAf9lq7s SlkB6WT2XL86IOETSJchc5EWck9KuysoGicwfmUekFi1cEkPjSceSnW/DEK8IgGl Dd9wZuzr/gGXTLBwOOcQU07kcNiZ5vgAZQVpvE1aQpm6IW3+H6rRVvQi0DjdTBHO lXr5TTAxtzdCibuAsZmpj8orvQVx1MGIPqFwG2I08fNbqryY7eogDQ144UZyQNlq 4PAhAvZYkVomhnShXzo6oyrkU4DYkgNs6EBXFe4QDix/A8sEVLo1XBuAVQ3/cKYx B5INyqMIKp1qMVtHXWjELMCWmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkX22MI tG3qwgFwdrHLuivOyuzKMB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzdCNi80M0Y2QTU3ODMxRUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5 aEI2ZnF5VnRER0JFeTRXTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANvS7wX7EDL6vn3QdwH1hAT4QiMBR9bX0L7/wOVp/QbNiuKgwHc9yj u7KF6W3H7fUM/7WwU9E+RpFRuJUesQFb6QDG+CJ42rM3DqRb7GS+9MwYXhr2K83e oCF0SalpO82f6PKtt8ktG3KVoTtoy2oVHAwggO84/X7O0uKBMV0+/rHQQMbmuUvz JiGUQdK8Qoh1O2wMXWOnA3VB62QHCtvPd56YWa2GSfnv3EYosayctSeae0F/cNNU XvOYe3F2nSkerqixneNYrhLsoLX5YdgFYH5M+GjKfBeYgmTxcOgB5v6Cg9FYLEBv /D2a6lM2dMoMgDcDUnNm0XkGYJsLpQ9v -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:41 2025 by rpki-client