$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: MiRG1gMhb2tH8zO52TQVaGVrCRBrOnFDlrTfhunVKg8= Subject key identifier: 05:A5:35:D2:55:8D:8B:C6:BB:2D:50:18:86:A5:EA:96:3D:17:2A:E1 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0C7D Signing time: Sun 24 Aug 2025 18:25:26 +0000 Manifest this update: Sun 24 Aug 2025 18:25:25 +0000 Manifest next update: Sun 31 Aug 2025 18:25:25 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: OiojMZmhmX94PxI1wNtlJ9Jgva2eu3RaZVPA/5OveHE=) 2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: RkMRmNqmHZ9s0oSB72MGnOxEbYhdY42Vffpm2UpowTM=) 3: B430443A324211EFB14FB614C4F9AE02.roa (hash: 72kjZWvSx4fyueGWPj1oIcb7cSxhi/YjCVNjsbLh3iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Aug 24 18:25:25 2025 GMT Not After : Aug 31 18:25:25 2025 GMT Subject: CN=68ab5915-6e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:35:66:68:58:5b:c3:ad:41:f3:d0:57:c5: 9e:0d:f9:39:c7:44:f9:da:72:64:fe:3a:f4:b2:f0: f9:a5:25:3a:9d:64:0d:f2:55:39:e7:c5:e8:80:29: e3:9a:26:06:4c:45:87:da:db:48:e1:8c:b9:56:cb: bd:cd:ee:03:aa:2b:7f:04:6b:81:2a:61:62:7d:ec: f8:ad:5f:37:b5:01:b2:bc:87:fb:88:27:1b:f3:e7: 82:06:f9:53:62:b1:94:9d:3a:1f:df:e8:a8:ff:68: 99:25:d1:c1:2b:20:39:6e:c4:f1:be:3c:ee:28:23: f1:c5:86:9d:7f:45:6d:63:76:c1:b0:5a:b1:9e:cd: 5e:46:33:2b:1b:21:a4:67:33:5c:e6:20:59:2d:6b: 24:50:1b:20:e3:9c:09:0e:fb:e4:90:76:16:c8:96: 8f:3d:63:84:f2:44:69:f0:a2:18:ae:1c:e4:f3:f8: 81:f1:61:e7:02:48:f2:98:3b:7d:59:b9:ae:e9:32: 87:3b:43:61:79:e7:bc:30:b6:cb:ad:be:cf:2c:33: 53:ba:a8:c4:eb:47:1a:2f:ef:6e:01:5c:62:f8:e1: d5:46:71:2c:84:67:68:30:5d:22:fb:2d:4c:73:3b: 14:55:11:2f:fb:f9:01:57:04:b0:71:5d:95:e6:4c: b6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A5:35:D2:55:8D:8B:C6:BB:2D:50:18:86:A5:EA:96:3D:17:2A:E1 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:94:8b:31:fe:b4:83:c6:68:08:b4:56:77:aa:9b:f4:46:4d: e5:51:0c:71:5c:79:0a:9f:f9:a1:57:79:fb:46:e2:27:af:fb: f5:dd:61:b0:67:93:b8:02:21:fb:89:bd:b8:29:09:de:3f:d5: be:57:99:ee:96:2f:28:2a:ef:d1:74:68:3f:af:66:bf:27:9a: de:69:0b:97:3a:d7:12:13:08:fd:92:71:e8:1f:5f:b1:ce:dd: 35:7d:11:69:0f:1d:20:21:af:fd:26:d1:a3:2f:cf:e1:16:32: 3d:6a:f1:a9:52:1b:39:96:60:f0:2e:b8:c5:f0:e0:7e:c4:a2: bd:46:bb:f4:c8:01:8e:a2:1a:54:a6:66:9a:6a:1f:77:e6:b2: a5:02:8f:53:5b:78:4d:2f:33:5e:65:ed:1a:c7:15:79:20:8a: 1f:6e:2c:c1:20:ea:d1:83:ea:d6:8f:a7:2c:4a:74:4f:5d:d1: 79:4a:9c:72:33:ad:ad:4d:cb:86:46:49:d3:ed:45:38:79:f2: 5d:08:f1:e3:66:23:4f:76:b9:6e:5b:57:21:64:0a:b3:bb:3d: 99:75:7a:d0:b5:ab:50:d7:ed:70:8b:4b:b8:5d:93:4e:79:20: 7c:a8:cf:13:03:4c:87:3d:eb:32:c6:35:1a:f9:ce:ec:0b:6b: f1:13:c3:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjUwODI0MTgyNTI1WhcNMjUwODMxMTgyNTI1WjAYMRYwFAYD VQQDEw02OGFiNTkxNS02ZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcE1ZmhYW8OtQfPQV8WeDfk5x0T52nJk/jr0svD5pSU6nWQN8lU558XogCnj miYGTEWH2ttI4Yy5Vsu9ze4Dqit/BGuBKmFifez4rV83tQGyvIf7iCcb8+eCBvlT YrGUnTof3+io/2iZJdHBKyA5bsTxvjzuKCPxxYadf0VtY3bBsFqxns1eRjMrGyGk ZzNc5iBZLWskUBsg45wJDvvkkHYWyJaPPWOE8kRp8KIYrhzk8/iB8WHnAkjymDt9 Wbmu6TKHO0Nheee8MLbLrb7PLDNTuqjE60caL+9uAVxi+OHVRnEshGdoMF0i+y1M czsUVREv+/kBVwSwcV2V5ky29QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWlNdJV jYvGuy1QGIal6pY9FyrhMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAklIsx/rSDxmgItFZ3qpv0Rk3lUQxxXHkKn/mhV3n7RuInr/v13WGw Z5O4AiH7ib24KQneP9W+V5nuli8oKu/RdGg/r2a/J5reaQuXOtcSEwj9knHoH1+x zt01fRFpDx0gIa/9JtGjL8/hFjI9avGpUhs5lmDwLrjF8OB+xKK9Rrv0yAGOohpU pmaaah935rKlAo9TW3hNLzNeZe0axxV5IIofbizBIOrRg+rWj6csSnRPXdF5Spxy M62tTcuGRknT7UU4efJdCPHjZiNPdrluW1chZAqzuz2ZdXrQtatQ1+1wi0u4XZNO eSB8qM8TA0yHPesyxjUa+c7sC2vxE8Pu -----END CERTIFICATE-----Generated at Sun Aug 24 21:48:15 2025 by rpki-client