$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: vRfpHzgIcRFS3VcqAsBlR2WnpMmaJUxdIhPNrra+eyM= Subject key identifier: 74:D5:30:9B:1E:2C:3E:D9:11:6D:E4:58:C9:DB:C4:97:04:94:95:3A Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 0553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 052A Signing time: Thu 04 Sep 2025 23:54:29 +0000 Manifest this update: Thu 04 Sep 2025 23:54:28 +0000 Manifest next update: Thu 11 Sep 2025 23:54:28 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: xJ9/WtmDFjdM8jpYIIfJtcuttLj72DiBEI1soAmjW8c=) 2: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: XSuhAhi3kRB8kUY+l+Kw6bn9CYFf3Y2Di14tTGA1/Oo=) 3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: /zpbbyMm2w5Xcql5zfUtoN8iPAyG5aFUqVMvzNCSPuM=) 4: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: hn+qGaZCtkUKYopOyzVnHKxTxBxzaX/N9RY/bypGInA=) 5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: 9/ZL4wqQ8ewDEJQ51uhQKwNXm0lUHqlJiXvD1GBeNxo=) 6: B9DEB77E654411EFACBF7956C4F9AE02.roa (hash: rrXHgzUdzEuReffPDCPuY00l4dzYtSiphjTni14sFbs=) 7: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 9x2G7s9XnkzB/aoRrwX0fPhCy+k2H2dG9FDGRVFamnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1363 (0x553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Sep 4 23:54:28 2025 GMT Not After : Sep 11 23:54:28 2025 GMT Subject: CN=68ba26b5-8627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:df:13:0b:93:b2:2f:a6:e0:d3:cf:c2:b5: 60:ed:d7:44:f3:4e:ff:69:83:dd:44:58:59:f6:cd: dc:5d:78:ed:ad:cf:27:62:79:84:71:42:1d:c1:bb: bf:65:c9:c9:86:00:e1:ad:55:bc:22:38:db:ea:d1: 74:6b:6c:4b:a7:81:09:d7:5d:41:3d:ed:ee:54:ee: be:ba:62:ef:0e:26:bc:28:11:ac:a4:ca:34:62:cb: 1f:0d:c4:5b:4c:57:ba:04:7f:81:7a:f0:30:ac:10: 2d:b0:4d:d8:86:51:da:bb:c5:06:11:3f:16:d5:0b: 0c:70:d8:5f:b4:4f:9d:5d:df:5e:95:67:3c:e1:ca: d4:49:5b:9c:73:3f:af:7a:d4:ce:68:aa:ef:b6:d0: 15:4a:a0:4d:cc:f3:4a:9e:ba:7b:64:cc:04:d4:f1: d6:26:16:c8:19:4b:ca:bb:a4:98:d8:9b:cb:b8:14: 32:5c:ba:ba:4f:92:8b:22:2a:77:19:e2:af:85:72: 2b:e0:56:3e:4d:b6:41:03:b8:b2:a4:72:1a:77:1a: b1:c6:81:c4:29:00:79:14:3c:e3:c3:6c:cc:87:60: ae:2c:ae:39:80:d0:88:78:da:e1:da:e7:b8:4a:0d: a8:23:94:d9:cb:4b:51:e4:63:e6:37:ea:db:19:62: a7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D5:30:9B:1E:2C:3E:D9:11:6D:E4:58:C9:DB:C4:97:04:94:95:3A X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:68:12:c4:fd:e5:ff:ad:4b:20:90:41:4d:cc:e7:67:51:5e: 90:fe:87:24:84:63:2b:2e:8d:b7:e1:bf:77:f4:6e:d3:ce:b1: f3:02:04:f8:4d:bd:0b:0c:b6:66:84:1e:13:10:d2:e4:77:99: 08:cc:14:c3:35:89:f4:b9:00:c2:65:bb:01:84:25:6b:6c:61: d1:5a:07:5e:de:1d:bc:20:24:bc:0c:bd:43:08:f6:db:0e:fe: e2:8c:1e:dc:75:9e:56:9c:ac:f3:6e:b0:37:68:f7:a3:e5:88: 6a:35:37:c6:11:ee:02:eb:84:89:71:a6:d5:77:34:e6:be:56: 6b:3a:f7:b4:5f:3d:1a:d8:b4:f7:22:69:ad:c9:72:2f:1c:48: b3:89:95:0c:43:a7:c7:47:23:de:39:f6:2a:90:80:3a:0f:7c: 68:89:88:f9:f7:ce:e3:48:ec:00:41:f9:97:bd:56:82:d1:39: 8a:ae:7c:5d:17:f2:ce:6b:3f:f6:35:4c:1c:c2:16:23:16:c4: df:e2:5a:5c:a6:ba:50:c5:19:88:ab:82:9b:62:21:86:af:23: 58:93:d2:fc:83:2f:36:a1:e0:26:b4:57:6c:22:44:f1:2c:a3: 52:51:1e:9c:36:6a:3b:a0:7e:17:1c:e2:a3:5d:57:09:9c:54: d9:17:c7:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUwOTA0MjM1NDI4WhcNMjUwOTExMjM1NDI4WjAYMRYwFAYD VQQDEw02OGJhMjZiNS04NjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9XfEwuTsi+m4NPPwrVg7ddE807/aYPdRFhZ9s3cXXjtrc8nYnmEcUIdwbu/ ZcnJhgDhrVW8Ijjb6tF0a2xLp4EJ111BPe3uVO6+umLvDia8KBGspMo0YssfDcRb TFe6BH+BevAwrBAtsE3YhlHau8UGET8W1QsMcNhftE+dXd9elWc84crUSVuccz+v etTOaKrvttAVSqBNzPNKnrp7ZMwE1PHWJhbIGUvKu6SY2JvLuBQyXLq6T5KLIip3 GeKvhXIr4FY+TbZBA7iypHIadxqxxoHEKQB5FDzjw2zMh2CuLK45gNCIeNrh2ue4 Sg2oI5TZy0tR5GPmN+rbGWKnkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTVMJse LD7ZEW3kWMnbxJcElJU6MB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGaBLE/eX/rUsgkEFNzOdnUV6Q/ockhGMrLo234b939G7TzrHzAgT4 Tb0LDLZmhB4TENLkd5kIzBTDNYn0uQDCZbsBhCVrbGHRWgde3h28ICS8DL1DCPbb Dv7ijB7cdZ5WnKzzbrA3aPej5YhqNTfGEe4C64SJcabVdzTmvlZrOve0Xz0a2LT3 ImmtyXIvHEiziZUMQ6fHRyPeOfYqkIA6D3xoiYj5987jSOwAQfmXvVaC0TmKrnxd F/LOaz/2NUwcwhYjFsTf4lpcprpQxRmIq4KbYiGGryNYk9L8gy82oeAmtFdsIkTx LKNSUR6cNmo7oH4XHOKjXVcJnFTZF8d1 -----END CERTIFICATE-----Generated at Sat Sep 6 12:06:27 2025 by rpki-client