$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft File: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft (raw, json) Hash identifier: HEq2/QOwrCt1Qay1T2HfBkZ1vLnwVuWmRZyPlVLngCY= Subject key identifier: 97:3D:BD:2B:AD:FC:20:0E:7D:56:92:99:7C:A6:71:B1:5B:4F:C7:04 Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A Certificate issuer: /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A Certificate serial: 0AAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft Manifest number: 0AA5 Signing time: Sun 24 Aug 2025 19:31:15 +0000 Manifest this update: Sun 24 Aug 2025 19:31:15 +0000 Manifest next update: Sun 31 Aug 2025 19:31:15 +0000 Files and hashes: 1: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl (hash: kVHwLlt9NeuGa8Tr3ROsIGCs+oln8lmnG5n/ur5pIU0=) 2: BF77D1785DCB11EA880A7643C4F9AE02.roa (hash: H4kc+9yjECNKJF53s7PJuRCRHGgJ3Wfs6TYEVDFyAU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2731 (0xaab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC78, serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A Validity Not Before: Aug 24 19:31:15 2025 GMT Not After : Aug 31 19:31:15 2025 GMT Subject: CN=68ab6883-59e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cd:4f:dc:f6:f1:5a:86:e0:04:99:72:a4:4b: 4c:f9:5a:8a:b7:b5:71:0a:d7:98:c1:81:bd:63:df: 86:ad:a8:a7:a2:e2:27:af:60:7d:24:30:05:27:05: 93:88:f7:78:08:45:d7:21:f2:b1:b8:bb:d1:60:71: 79:54:82:cf:8c:89:67:45:3f:5e:1a:3a:2e:e2:90: ff:8a:7f:09:01:b0:39:ca:01:6b:ef:4b:c8:15:3d: b1:91:35:5f:99:b3:a8:28:d0:2e:9b:b3:7d:94:69: 45:fe:fe:0c:00:c4:11:7a:6e:15:04:3b:c7:b3:1b: 34:72:c6:eb:6b:30:cd:15:84:67:dc:d3:c3:c7:72: 14:0d:4e:23:05:a0:b5:81:5c:33:25:14:d4:86:bb: a4:26:57:49:3e:25:73:5a:60:29:3d:af:56:a5:bb: f7:d7:74:30:ca:b6:9a:00:85:11:72:43:2d:32:12: c2:3c:a7:26:1d:6d:95:97:e7:45:ef:51:87:45:ea: e1:09:cd:4c:90:64:5b:85:10:0b:59:d1:79:b0:c4: 2b:ef:7a:a2:3f:9a:82:31:ce:c1:99:a5:d3:ca:14: 1f:6f:75:90:13:dc:f8:e7:55:d7:99:40:d4:e1:f9: 71:8c:20:cf:ae:23:26:aa:2b:94:a7:33:7f:a2:0b: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3D:BD:2B:AD:FC:20:0E:7D:56:92:99:7C:A6:71:B1:5B:4F:C7:04 X509v3 Authority Key Identifier: keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:b9:c1:38:56:20:5d:ff:ff:f0:8b:30:88:4e:db:82:dd:6c: 84:d1:cc:49:c4:45:55:71:9f:b5:88:74:b8:00:c5:8e:27:75: 96:2d:fd:ac:a2:aa:72:cb:32:f0:a1:7e:9c:06:2f:94:53:ac: a6:b3:b4:d2:b1:8c:70:89:d9:fa:35:f4:3f:0c:88:a8:05:27: 81:58:d3:b2:c0:4c:08:7a:3c:04:6f:ba:1c:a7:42:61:a6:21: f0:72:ba:4c:61:18:5c:eb:9a:61:03:09:96:80:ed:a3:04:95: 45:02:af:6e:3b:9c:01:98:8c:2d:1a:5b:97:74:10:fb:b4:a5: d6:47:09:38:14:ab:91:f5:df:48:0c:d2:28:99:41:a6:82:1a: 07:4c:e2:ba:35:2e:2b:70:75:8f:b9:56:5e:01:d8:92:22:06: c2:fa:0d:0e:b5:7e:41:ef:7d:14:a9:8b:15:09:57:48:bd:03: 75:dd:ea:a1:72:c4:f2:18:f2:49:88:28:08:c0:2b:67:9f:38: 99:9e:6f:fb:14:ac:c2:90:05:18:c2:9e:96:8a:ab:d2:fc:6e: bc:0f:ce:09:46:21:34:d3:59:64:11:0e:cf:bf:0b:99:83:14: c5:ed:b9:c1:79:ff:5f:2c:a3:de:15:83:58:8d:3d:9e:c7:da: 5a:70:60:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDNzgxMTAvBgNVBAUTKDg0OEE3OUFCNTA0MUU3MUNFNjIyNTBCNTdGQzFFMEY1 NDk3OEM5M0EwHhcNMjUwODI0MTkzMTE1WhcNMjUwODMxMTkzMTE1WjAYMRYwFAYD VQQDEw02OGFiNjg4My01OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2M1P3PbxWobgBJlypEtM+VqKt7VxCteYwYG9Y9+GrainouInr2B9JDAFJwWT iPd4CEXXIfKxuLvRYHF5VILPjIlnRT9eGjou4pD/in8JAbA5ygFr70vIFT2xkTVf mbOoKNAum7N9lGlF/v4MAMQRem4VBDvHsxs0csbrazDNFYRn3NPDx3IUDU4jBaC1 gVwzJRTUhrukJldJPiVzWmApPa9Wpbv313QwyraaAIURckMtMhLCPKcmHW2Vl+dF 71GHRerhCc1MkGRbhRALWdF5sMQr73qiP5qCMc7BmaXTyhQfb3WQE9z451XXmUDU 4flxjCDPriMmqiuUpzN/ogv8zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJc9vSut /CAOfVaSmXymcbFbT8cEMB8GA1UdIwQYMBaAFISKeatQQecc5iJQtX/B4PVJeMk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM3OC8xOTJFRkYwODVE Q0IxMUVBODRFMDI5NDNDNEY5QUUwMi9oSXA1cTFCQjV4em1JbEMxZjhIZzlVbDR5 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJcDVxMUJCNXh6bUlsQzFmOEhnOVVsNHlUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM3OC8xOTJFRkYwODVEQ0IxMUVBODRFMDI5NDNDNEY5QUUwMi9oSXA1cTFCQjV4 em1JbEMxZjhIZzlVbDR5VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0ucE4ViBd///wizCITtuC3WyE0cxJxEVVcZ+1iHS4AMWOJ3WWLf2s oqpyyzLwoX6cBi+UU6yms7TSsYxwidn6NfQ/DIioBSeBWNOywEwIejwEb7ocp0Jh piHwcrpMYRhc65phAwmWgO2jBJVFAq9uO5wBmIwtGluXdBD7tKXWRwk4FKuR9d9I DNIomUGmghoHTOK6NS4rcHWPuVZeAdiSIgbC+g0OtX5B730UqYsVCVdIvQN13eqh csTyGPJJiCgIwCtnnziZnm/7FKzCkAUYwp6WiqvS/G68D84JRiE001lkEQ7PvwuZ gxTF7bnBef9fLKPeFYNYjT2ex9pacGAz -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:51 2025 by rpki-client