$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft File: s-AwGXTWpAg9ufSdWtbloVd5KgY.mft (raw, json) Hash identifier: uRrqEmuHzVgqAOOjMBI0pZWLp6gkNwAwlxyn0h+z0Ug= Subject key identifier: 38:FE:69:A8:4C:27:B6:9C:F2:85:29:E8:88:1D:EA:A0:5C:17:A7:45 Authority key identifier: B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 Certificate issuer: /CN=A9116B43/serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Certificate serial: 067B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft Manifest number: 0677 Signing time: Sun 10 Aug 2025 14:50:09 +0000 Manifest this update: Sun 10 Aug 2025 14:50:08 +0000 Manifest next update: Sun 17 Aug 2025 14:50:08 +0000 Files and hashes: 1: s-AwGXTWpAg9ufSdWtbloVd5KgY.crl (hash: Zev9PHcQLTz0o9R5fCpDNQcxVtci+RtE0IWHteDUEYU=) 2: 3A77AE12CB9C11EC9230F70BC4F9AE02.roa (hash: TwjuoGTydiIvsI8500O496Q/mOvNfgRtaZ3KwMAE5xE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1659 (0x67b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B43, serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Validity Not Before: Aug 10 14:50:08 2025 GMT Not After : Aug 17 14:50:08 2025 GMT Subject: CN=6898b1a0-7bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ca:f9:f7:74:c6:f5:03:20:d7:ba:66:07:58: 24:29:05:68:d7:81:53:db:a6:91:9a:a7:39:a4:cb: 35:01:f8:83:fc:81:02:df:47:8f:56:c5:7f:61:37: 94:1f:76:54:3c:2f:68:c4:c4:19:df:56:50:e4:07: 8e:db:91:da:fa:83:d5:4b:83:60:71:e4:a6:9b:c5: e3:29:ca:24:f5:b2:b3:ad:ec:22:4c:93:5f:5a:e6: be:ad:60:da:3a:10:6d:3e:89:17:74:94:9b:05:ba: ad:81:7a:f1:7e:fc:79:c3:b4:27:e0:e7:85:89:3e: ea:19:88:f5:8b:67:02:2b:00:b1:cc:80:b1:03:a2: 8b:ba:e3:6b:94:9a:60:30:05:49:27:4b:a1:cd:bc: e3:be:20:b6:2e:4d:d4:c7:41:ec:ae:00:24:c5:79: f8:79:3d:1b:31:0d:22:c5:b1:5c:14:8e:2e:f4:2f: 98:fd:da:31:0f:7c:25:02:40:b7:e6:68:8a:04:94: 4d:fe:bd:5c:4a:91:e1:9b:fa:00:5f:67:c0:53:67: f6:7e:3e:d0:bb:5b:6a:dc:ba:66:20:31:79:0a:95: 9a:83:3a:a8:62:16:6d:28:29:1a:1c:8f:61:8d:74: c0:c2:44:e6:15:4d:1e:70:f7:41:d5:aa:07:11:8c: c2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FE:69:A8:4C:27:B6:9C:F2:85:29:E8:88:1D:EA:A0:5C:17:A7:45 X509v3 Authority Key Identifier: keyid:B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:aa:c4:4b:d3:29:7f:58:aa:c1:84:cd:fb:6b:73:ce:26:f5: 9b:84:a9:99:ae:ad:31:13:a8:a7:fb:f6:1f:c8:b4:3b:0f:57: 26:0e:7f:84:1b:d5:6b:67:5e:13:ca:c0:90:a2:e4:19:25:43: c5:53:c9:9f:3a:cb:71:a1:8d:2d:8d:e6:15:1a:43:c4:16:e6: 9d:e7:54:c5:9e:50:f0:cd:64:e5:7d:0f:6f:77:d6:92:f5:64: c4:a3:f6:5d:66:98:d8:3f:1b:74:d0:d5:3b:81:04:26:ec:0c: da:ca:b4:50:c1:f5:5a:97:17:10:ba:35:ec:b3:60:40:ed:ca: 0f:08:8a:f3:56:66:8b:bb:28:4f:29:fc:e6:90:dd:16:9f:58: 90:11:65:5d:3e:59:6b:2e:ba:a7:3a:89:80:b6:60:8d:04:5f: ab:dc:4f:34:2f:2c:a5:7a:90:59:ef:1f:c8:93:e9:75:aa:0d: 92:63:98:f9:33:a4:40:c9:cd:06:dd:aa:de:2e:e7:16:63:19: ea:89:34:78:d0:70:ef:03:0c:61:3c:e8:a3:1f:1b:73:37:8f: cb:8d:4a:03:a9:94:45:ed:58:a3:d1:46:da:15:f1:f9:61:02: f5:c5:03:c6:f5:d6:19:7d:bf:a5:b0:9d:e4:fb:df:ae:18:7d: b3:bc:5c:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNDMxMTAvBgNVBAUTKEIzRTAzMDE5NzRENkE0MDgzREI5RjQ5RDVBRDZFNUEx NTc3OTJBMDYwHhcNMjUwODEwMTQ1MDA4WhcNMjUwODE3MTQ1MDA4WjAYMRYwFAYD VQQDEw02ODk4YjFhMC03YmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMr593TG9QMg17pmB1gkKQVo14FT26aRmqc5pMs1AfiD/IEC30ePVsV/YTeU H3ZUPC9oxMQZ31ZQ5AeO25Ha+oPVS4NgceSmm8XjKcok9bKzrewiTJNfWua+rWDa OhBtPokXdJSbBbqtgXrxfvx5w7Qn4OeFiT7qGYj1i2cCKwCxzICxA6KLuuNrlJpg MAVJJ0uhzbzjviC2Lk3Ux0HsrgAkxXn4eT0bMQ0ixbFcFI4u9C+Y/doxD3wlAkC3 5miKBJRN/r1cSpHhm/oAX2fAU2f2fj7Qu1tq3LpmIDF5CpWagzqoYhZtKCkaHI9h jXTAwkTmFU0ecPdB1aoHEYzCOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDj+aahM J7ac8oUp6Igd6qBcF6dFMB8GA1UdIwQYMBaAFLPgMBl01qQIPbn0nVrW5aFXeSoG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI0My81OTQyMUE0RThE N0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BBZzl1ZlNkV3RibG9WZDVL Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtQXdHWFRXcEFnOXVmU2RXdGJsb1ZkNUtnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI0My81OTQyMUE0RThEN0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BB Zzl1ZlNkV3RibG9WZDVLZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrqsRL0yl/WKrBhM37a3POJvWbhKmZrq0xE6in+/YfyLQ7D1cmDn+E G9VrZ14TysCQouQZJUPFU8mfOstxoY0tjeYVGkPEFuad51TFnlDwzWTlfQ9vd9aS 9WTEo/ZdZpjYPxt00NU7gQQm7AzayrRQwfValxcQujXss2BA7coPCIrzVmaLuyhP KfzmkN0Wn1iQEWVdPllrLrqnOomAtmCNBF+r3E80LyylepBZ7x/Ik+l1qg2SY5j5 M6RAyc0G3areLucWYxnqiTR40HDvAwxhPOijHxtzN4/LjUoDqZRF7Vij0UbaFfH5 YQL1xQPG9dYZfb+lsJ3k+9+uGH2zvFyE -----END CERTIFICATE-----Generated at Sun Aug 10 18:25:33 2025 by rpki-client