$ rpki-client -vvf rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft File: apVIHOj0DdiJXR-3rukOWVm6g8E.mft (raw, json) Hash identifier: lH7Ma95mYlugWTE7U1nMerDbULtITTp+BldU6ckOjbw= Subject key identifier: 90:C2:E0:3E:77:F4:82:E2:8C:57:CC:E5:C1:39:9F:F3:4F:92:00:C1 Authority key identifier: 6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1 Certificate issuer: /CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1 Certificate serial: 0593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft Manifest number: 058A Signing time: Thu 18 Sep 2025 23:34:44 +0000 Manifest this update: Thu 18 Sep 2025 23:34:43 +0000 Manifest next update: Thu 25 Sep 2025 23:34:43 +0000 Files and hashes: 1: apVIHOj0DdiJXR-3rukOWVm6g8E.crl (hash: z3SpWH2zMMgUywO3wNgD8x8un4fxP3ppGQarQctUqz0=) 2: 0C3D8674345511EFA05D0C10C4F9AE02.roa (hash: yBjQ7vTWm7ckP6p1TXPTQpNI7WA0PEdmWLutLObiHrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DA0C, serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1 Validity Not Before: Sep 18 23:34:43 2025 GMT Not After : Sep 25 23:34:43 2025 GMT Subject: CN=68cc9713-454d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3e:bc:8d:35:4f:80:35:30:ed:91:68:e7:e3: 9e:b8:04:8e:7b:14:b7:bb:e7:98:06:b1:52:7d:f9: bc:aa:ce:b2:77:21:ec:dd:43:fd:cf:69:29:d8:13: 4c:c2:52:22:cb:3a:ab:d5:32:14:5b:28:eb:24:3c: 33:d6:c7:9b:27:fd:7c:9e:ff:3c:0d:63:1b:1e:f5: 96:c8:ca:1f:e0:ff:c8:60:33:99:6c:61:59:d4:88: d4:5a:38:d5:e0:85:f3:ea:e2:a4:88:61:7d:1d:3a: 58:a8:69:8e:14:e1:43:a2:a8:b2:51:93:c0:3e:96: f5:7f:e2:7f:69:d8:27:49:64:e2:d2:f2:ec:08:db: 11:48:8d:55:84:72:08:61:55:fc:30:77:a0:10:82: 18:5e:40:10:c5:33:ca:14:1e:8f:d1:c3:75:9c:01: dc:73:0f:92:dd:6f:f1:11:19:13:10:f9:47:8a:7a: 7e:af:36:4a:d3:2c:48:d2:66:22:db:ec:76:02:3c: 2f:23:f6:64:75:7c:f2:3b:dd:ec:51:63:f4:ad:71: 24:02:bf:ed:fa:f9:48:1c:86:bf:d5:a7:19:11:8a: 66:54:64:8b:b9:5a:04:b9:95:84:8d:6b:9b:43:90: e3:fa:84:55:15:16:89:3d:02:a1:a1:02:ed:8d:47: 96:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C2:E0:3E:77:F4:82:E2:8C:57:CC:E5:C1:39:9F:F3:4F:92:00:C1 X509v3 Authority Key Identifier: keyid:6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d4:b0:71:bb:61:5f:5b:4a:05:2a:bb:56:9d:a2:81:a9:e6: b9:49:ac:ab:59:cf:bd:e2:6e:e8:6b:4d:87:b5:2d:ad:0a:5f: 2b:54:65:a8:01:e3:71:36:11:87:a4:52:85:3e:7a:4e:0c:ad: f9:7c:58:f0:d9:69:33:fe:78:fd:46:ee:60:30:9d:fb:ff:46: fa:47:e3:6b:e9:62:a6:68:e6:7d:54:89:a2:c2:0e:6a:80:72: 50:b7:e6:ec:b0:b1:17:d0:6c:1e:6e:03:25:55:cd:b0:56:25: 47:6d:96:32:ce:1d:f6:19:1e:da:2d:0e:64:f4:0c:ee:7b:bb: 0f:cd:77:73:bd:7c:4b:8f:99:2c:40:4d:04:a8:18:75:c4:ed: 69:1a:fb:21:97:af:6b:cf:62:96:5d:26:9b:f2:c0:99:86:ac: af:c4:86:b0:f8:9d:26:aa:de:66:38:c9:f7:63:41:d9:be:bc: a2:3d:15:71:39:74:e5:db:3c:86:77:74:4e:de:59:84:af:6c: 31:d3:cf:cb:3d:a0:7b:14:02:f2:91:fd:cb:72:40:55:8e:58: c8:77:f8:19:d8:4f:92:b9:42:98:bc:b5:da:07:2b:b6:9c:0c: 23:8d:22:bb:13:f6:0e:86:ff:c0:49:0a:e0:83:5b:3f:6d:e5: af:69:95:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERBMEMxMTAvBgNVBAUTKDZBOTU0ODFDRThGNDBERDg4OTVEMUZCN0FFRTkwRTU5 NTlCQTgzQzEwHhcNMjUwOTE4MjMzNDQzWhcNMjUwOTI1MjMzNDQzWjAYMRYwFAYD VQQDEw02OGNjOTcxMy00NTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlD68jTVPgDUw7ZFo5+OeuASOexS3u+eYBrFSffm8qs6ydyHs3UP9z2kp2BNM wlIiyzqr1TIUWyjrJDwz1sebJ/18nv88DWMbHvWWyMof4P/IYDOZbGFZ1IjUWjjV 4IXz6uKkiGF9HTpYqGmOFOFDoqiyUZPAPpb1f+J/adgnSWTi0vLsCNsRSI1VhHII YVX8MHegEIIYXkAQxTPKFB6P0cN1nAHccw+S3W/xERkTEPlHinp+rzZK0yxI0mYi 2+x2AjwvI/ZkdXzyO93sUWP0rXEkAr/t+vlIHIa/1acZEYpmVGSLuVoEuZWEjWub Q5Dj+oRVFRaJPQKhoQLtjUeWkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDC4D53 9ILijFfM5cE5n/NPkgDBMB8GA1UdIwQYMBaAFGqVSBzo9A3YiV0ft67pDllZuoPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REEwQy9CNkRFMTMxMkYw NDkxMUVCOTQxRkZCMzJDNEY5QUUwMi9hcFZJSE9qMERkaUpYUi0zcnVrT1dWbTZn OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwVklIT2owRGRpSlhSLTNydWtPV1ZtNmc4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REEwQy9CNkRFMTMxMkYwNDkxMUVCOTQxRkZCMzJDNEY5QUUwMi9hcFZJSE9qMERk aUpYUi0zcnVrT1dWbTZnOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc1LBxu2FfW0oFKrtWnaKBqea5SayrWc+94m7oa02HtS2tCl8rVGWo AeNxNhGHpFKFPnpODK35fFjw2Wkz/nj9Ru5gMJ37/0b6R+Nr6WKmaOZ9VImiwg5q gHJQt+bssLEX0GwebgMlVc2wViVHbZYyzh32GR7aLQ5k9Azue7sPzXdzvXxLj5ks QE0EqBh1xO1pGvshl69rz2KWXSab8sCZhqyvxIaw+J0mqt5mOMn3Y0HZvryiPRVx OXTl2zyGd3RO3lmEr2wx08/LPaB7FALykf3LckBVjljId/gZ2E+SuUKYvLXaByu2 nAwjjSK7E/YOhv/ASQrgg1s/beWvaZW6 -----END CERTIFICATE-----Generated at Fri Sep 19 03:00:18 2025 by rpki-client