$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json) Hash identifier: sxzO1aaHTR2ssYyTMX9VBr6SuF54slbeOMQ+q0oliNU= Subject key identifier: 57:DC:B1:29:CF:58:EE:F5:87:44:3D:E4:11:13:AA:D8:CF:07:27:CE Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087 Certificate serial: 02DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft Manifest number: 02D1 Signing time: Mon 25 Aug 2025 01:40:51 +0000 Manifest this update: Mon 25 Aug 2025 01:40:50 +0000 Manifest next update: Mon 01 Sep 2025 01:40:50 +0000 Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: L+UpEumc1qvxw+iQ0Afk0+9an0Y4zJVhMnG40d8Z9d4=) 2: C79B240C249811EFABD23253C4F9AE02.roa (hash: vxN5ELpDSKeuKP/1PWPd9uK2hQBdf3IJCeKh68BuUKw=) 3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: 6c0Jw3077JWhUg1z+ONRU+S6jEOJ+qb2QR7rvXgZlpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 01:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 732 (0x2dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087 Validity Not Before: Aug 25 01:40:50 2025 GMT Not After : Sep 1 01:40:50 2025 GMT Subject: CN=68abbf22-9b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:b6:18:e1:42:03:34:3c:c1:50:6a:43:65: 45:0a:25:71:e9:f2:ca:86:92:af:e2:c7:cd:63:76: e0:b1:8d:84:f8:1f:18:21:39:51:9b:e9:e4:f4:3b: 9b:e1:89:42:43:90:76:4c:cd:cf:59:3f:5e:25:38: c2:5a:5b:b4:2a:cc:b0:f6:69:66:c4:77:31:b3:3e: ef:3e:39:39:d2:b6:33:93:22:90:2f:fd:14:57:71: 95:00:d0:54:24:0f:97:e5:e9:8e:45:f8:b4:a9:b6: 92:d6:59:2d:b4:b9:9a:92:d2:5d:0b:76:ab:ad:17: 00:7d:87:ad:71:c3:4a:48:4e:0a:bc:4d:b5:58:6d: bd:07:f4:5f:d4:43:fb:ba:55:7b:19:1f:e9:58:38: 5e:2d:74:1c:0b:bd:76:1c:19:1e:20:f5:65:d1:87: 05:58:6c:c4:6a:b6:ac:6a:a7:34:80:7d:1d:5c:c0: 48:46:7c:51:d5:84:be:aa:bf:b9:b4:bd:a3:a8:0f: 35:72:a3:ba:ac:e4:a2:a3:35:eb:14:d8:f5:1f:b1: 94:f3:3c:fe:3f:0c:f7:76:53:c3:d8:df:1e:c9:8b: 54:e0:c8:8f:3e:c7:94:48:af:48:50:c8:54:49:3d: aa:36:7b:32:e2:b8:c8:fe:f6:a1:a9:c6:ea:0b:46: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DC:B1:29:CF:58:EE:F5:87:44:3D:E4:11:13:AA:D8:CF:07:27:CE X509v3 Authority Key Identifier: keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:f5:a5:35:1e:57:a3:28:a3:1b:1d:3d:67:9b:01:0a:f6:29: 30:94:97:53:70:c3:3b:94:ba:36:0b:c2:2b:01:14:f7:fb:4f: 4c:5d:d5:4d:26:c1:5c:d1:02:d2:a5:1f:31:0b:c9:04:82:3d: 41:49:16:8f:eb:d8:5f:20:a1:08:43:be:72:bc:30:f8:49:1d: cb:ba:98:c3:26:64:a3:12:93:cf:5a:07:ed:9f:39:56:79:32: fc:34:49:f2:d6:0b:8d:76:9c:ed:0e:9b:38:06:3c:81:b6:69: 1f:ac:2d:fa:39:75:26:39:a4:1a:15:9e:92:aa:18:63:79:12: fa:49:bf:2d:23:b0:dc:d4:5e:1c:f1:50:23:71:1d:56:b1:96: a6:d2:f7:d9:d5:85:c5:1b:42:75:3c:de:9f:9a:2d:be:b5:3d: 74:45:4d:13:60:23:57:23:46:cc:7d:7b:1c:fc:72:24:c3:e4: 99:d7:b9:09:44:fe:8b:fc:98:d1:12:d2:05:60:5a:b9:46:6a: 81:b1:3b:cb:85:b9:30:36:f8:85:71:95:f9:92:82:d7:05:a0: 15:03:f2:a4:a7:1d:b6:92:bf:08:f5:c9:f3:36:0d:5b:a5:b0: 51:bd:ef:22:a9:f2:5d:32:0b:44:5c:62:49:8f:d9:e2:cf:55: 91:af:21:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCNDkxMTAvBgNVBAUTKEY4MzZERDMwQjYwNDI2MzYyMEQwNjFEMTA1ODRDOEYz MDExNjAwODcwHhcNMjUwODI1MDE0MDUwWhcNMjUwOTAxMDE0MDUwWjAYMRYwFAYD VQQDEw02OGFiYmYyMi05YjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuS2GOFCAzQ8wVBqQ2VFCiVx6fLKhpKv4sfNY3bgsY2E+B8YITlRm+nk9Dub 4YlCQ5B2TM3PWT9eJTjCWlu0Ksyw9mlmxHcxsz7vPjk50rYzkyKQL/0UV3GVANBU JA+X5emORfi0qbaS1lkttLmaktJdC3arrRcAfYetccNKSE4KvE21WG29B/Rf1EP7 ulV7GR/pWDheLXQcC712HBkeIPVl0YcFWGzEarasaqc0gH0dXMBIRnxR1YS+qr+5 tL2jqA81cqO6rOSiozXrFNj1H7GU8zz+Pwz3dlPD2N8eyYtU4MiPPseUSK9IUMhU ST2qNnsy4rjI/vahqcbqC0a1jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfcsSnP WO71h0Q95BETqtjPByfOMB8GA1UdIwQYMBaAFPg23TC2BCY2INBh0QWEyPMBFgCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUI0OS81NTMyQjk2MEZG NUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpqWWcwR0hSQllUSTh3RVdB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EYmRNTFlFSmpZZzBHSFJCWVRJOHdFV0FJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUI0OS81NTMyQjk2MEZGNUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpq WWcwR0hSQllUSTh3RVdBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo9aU1HlejKKMbHT1nmwEK9ikwlJdTcMM7lLo2C8IrART3+09MXdVN JsFc0QLSpR8xC8kEgj1BSRaP69hfIKEIQ75yvDD4SR3LupjDJmSjEpPPWgftnzlW eTL8NEny1guNdpztDps4BjyBtmkfrC36OXUmOaQaFZ6SqhhjeRL6Sb8tI7Dc1F4c 8VAjcR1WsZam0vfZ1YXFG0J1PN6fmi2+tT10RU0TYCNXI0bMfXsc/HIkw+SZ17kJ RP6L/JjREtIFYFq5RmqBsTvLhbkwNviFcZX5koLXBaAVA/Kkpx22kr8I9cnzNg1b pbBRve8iqfJdMgtEXGJJj9niz1WRryE4 -----END CERTIFICATE-----Generated at Mon Aug 25 23:28:00 2025 by rpki-client