$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: 3tghE4zggR7aQI9OnbmnWURcb2z8k96X3Gp+y8yrMn8= Subject key identifier: 16:31:2A:34:2D:69:5F:F9:C5:22:ED:A1:D8:85:1F:70:F6:C8:EE:C1 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0E35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0E1E Signing time: Thu 04 Sep 2025 18:00:48 +0000 Manifest this update: Thu 04 Sep 2025 18:00:47 +0000 Manifest next update: Thu 11 Sep 2025 18:00:47 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: YNma1QKsQaghWMX0OKdVPdRObKv8JxY7TQCi8npCok8=) 2: 6523917E508911F0A97F9A28C4F9AE02.roa (hash: jE/gERhg7Q/ZBmdgP299kcHysh2HoFhaGOzo1pjoX3Y=) 3: B2A2CFCEF56C11EE90E38718C4F9AE02.roa (hash: kkPAtmDoelVoYFE7Hbje8wUj2mrPDtwi5yj75S4iHxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3637 (0xe35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Sep 4 18:00:47 2025 GMT Not After : Sep 11 18:00:47 2025 GMT Subject: CN=68b9d3d0-fc6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b8:73:45:9c:db:f5:96:6b:9f:0d:a9:a7:25: 97:85:94:b6:45:e3:64:69:32:08:6c:de:d7:4a:c4: a3:07:8d:d2:04:07:e0:de:a3:09:e5:bb:38:57:98: c1:8b:90:71:d9:90:10:8a:27:b1:0c:c8:d5:da:c5: 4d:ea:91:20:6a:90:ee:ab:48:3a:28:39:f3:d2:22: 3c:8e:48:cb:6a:67:d3:95:ad:bc:90:6c:6a:0e:28: d5:1f:5f:94:7d:e2:4c:b4:98:2d:c8:34:15:32:96: f4:25:e4:1e:c3:21:cd:7a:fe:4c:4d:f2:85:26:1f: d3:7b:2e:9a:80:95:83:50:e3:a6:bd:09:f7:f2:f9: 62:83:e0:59:1e:2a:69:08:31:d4:1f:24:6c:0a:21: 04:58:f2:59:91:f5:a5:dd:8b:cf:08:76:7a:c4:58: dd:08:ef:0f:58:dd:06:2a:55:40:25:e3:35:15:a9: c0:55:57:b9:85:d5:b0:c9:20:ad:e2:a9:06:b2:11: da:97:a5:54:54:b4:38:ff:40:e7:8e:64:61:6f:e1: c6:64:9c:04:fa:4f:ed:da:aa:0f:be:00:95:54:04: 4d:01:95:47:70:fe:07:e3:86:60:02:0b:72:2e:07: f6:12:2a:16:29:30:04:f7:a0:a8:20:20:dc:55:71: 99:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:31:2A:34:2D:69:5F:F9:C5:22:ED:A1:D8:85:1F:70:F6:C8:EE:C1 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:a0:cf:0c:80:4a:b0:f0:02:81:0b:52:03:ad:29:b4:3d:11: c1:3b:c2:b3:b7:32:2a:9a:6c:f1:2e:b1:eb:7e:82:a0:40:20: 6d:5e:b5:17:fa:c6:88:a6:96:b3:d7:a4:d0:5b:96:a3:61:67: 37:72:44:ad:8b:62:4d:e3:15:05:9f:6e:5d:a3:a6:4d:46:e3: 8d:e9:c8:73:8f:60:a5:46:22:fd:a1:e4:9b:b3:c8:c5:a0:43: 27:83:09:c2:52:f1:19:7b:de:c8:4e:79:f1:b1:57:22:b8:4f: 8f:04:17:d2:3a:e9:b8:45:ac:99:d4:46:36:85:67:32:a0:7b: 5a:64:95:b6:ac:7f:57:07:98:7e:fe:c7:f8:62:08:37:88:20: d4:c1:69:60:14:ed:71:bf:70:a5:16:bc:1b:67:60:46:88:8b: 83:76:71:6e:a5:1d:7a:3c:b3:18:02:98:1c:9a:ae:46:50:cd: 36:c1:a7:35:55:f3:81:29:dd:d8:c9:d1:2f:40:6f:3d:50:5e: c4:21:aa:71:0c:7d:96:17:b4:3e:d1:97:0a:78:15:21:70:3c: ed:5e:76:62:00:3d:24:79:03:c7:8b:fb:bd:fd:6b:7f:f2:e5: 53:32:65:5d:d2:e0:66:52:73:fc:a3:3c:42:d9:70:07:a9:37: 2a:0b:74:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUwOTA0MTgwMDQ3WhcNMjUwOTExMTgwMDQ3WjAYMRYwFAYD VQQDEw02OGI5ZDNkMC1mYzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9bhzRZzb9ZZrnw2ppyWXhZS2ReNkaTIIbN7XSsSjB43SBAfg3qMJ5bs4V5jB i5Bx2ZAQiiexDMjV2sVN6pEgapDuq0g6KDnz0iI8jkjLamfTla28kGxqDijVH1+U feJMtJgtyDQVMpb0JeQewyHNev5MTfKFJh/Tey6agJWDUOOmvQn38vlig+BZHipp CDHUHyRsCiEEWPJZkfWl3YvPCHZ6xFjdCO8PWN0GKlVAJeM1FanAVVe5hdWwySCt 4qkGshHal6VUVLQ4/0DnjmRhb+HGZJwE+k/t2qoPvgCVVARNAZVHcP4H44ZgAgty Lgf2EioWKTAE96CoICDcVXGZZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYxKjQt aV/5xSLtodiFH3D2yO7BMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChoM8MgEqw8AKBC1IDrSm0PRHBO8KztzIqmmzxLrHrfoKgQCBtXrUX +saIppaz16TQW5ajYWc3ckSti2JN4xUFn25do6ZNRuON6chzj2ClRiL9oeSbs8jF oEMngwnCUvEZe97ITnnxsVciuE+PBBfSOum4RayZ1EY2hWcyoHtaZJW2rH9XB5h+ /sf4Ygg3iCDUwWlgFO1xv3ClFrwbZ2BGiIuDdnFupR16PLMYApgcmq5GUM02wac1 VfOBKd3YydEvQG89UF7EIapxDH2WF7Q+0ZcKeBUhcDztXnZiAD0keQPHi/u9/Wt/ 8uVTMmVd0uBmUnP8ozxC2XAHqTcqC3Tu -----END CERTIFICATE-----Generated at Fri Sep 5 11:30:18 2025 by rpki-client