$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json) Hash identifier: 5asvsLN6tLGhMGPy1WX1xkSf4yQLiOkcuzsF3W6zqzc= Subject key identifier: B7:E1:16:D4:6E:74:49:55:3A:6C:9C:E3:CE:AF:B7:BB:BB:08:95:87 Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft Manifest number: 0255 Signing time: Thu 07 Aug 2025 02:25:43 +0000 Manifest this update: Thu 07 Aug 2025 02:25:43 +0000 Manifest next update: Thu 14 Aug 2025 02:25:43 +0000 Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: 7LKX4l8Vzwa8boiuftZFkbhrLg04Tb+Ua8HNdoDD2Os=) 2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: nIc0DzbDh/PwNmfiEtRIcpTiu7BnHHbJ2kvWsihcckg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Validity Not Before: Aug 7 02:25:43 2025 GMT Not After : Aug 14 02:25:43 2025 GMT Subject: CN=68940ea7-359a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:6f:e9:fa:99:92:13:27:63:1e:4b:97:f6: 8d:6a:ee:6b:e0:78:9e:15:ea:c4:80:76:08:69:6a: 41:ff:f5:d0:24:5c:93:e8:62:d8:5f:f1:e7:fe:b4: 40:82:74:ef:ad:9b:c0:71:ee:1c:6d:41:af:ed:6e: fe:c0:62:93:f8:e2:f4:31:c7:e4:a3:7e:3e:33:d3: 21:e3:47:77:60:f8:e2:d9:a4:09:2b:84:14:f6:d6: 22:d6:72:9d:a2:0c:5d:9d:2c:20:da:08:4d:67:a8: 4a:e2:16:ff:05:9d:86:e7:39:31:66:45:ed:d7:08: 5f:93:d1:21:6a:d2:ef:4a:c4:40:61:6d:85:79:db: 69:50:a6:2f:67:68:0a:94:90:9f:99:06:97:e3:c2: f9:7d:cc:f7:5e:00:ee:e8:58:63:16:50:04:6a:85: ec:7f:6e:d3:eb:74:fd:98:5e:4d:07:23:8f:9d:e8: e6:db:00:2b:41:e8:8b:29:d9:4b:43:e7:6f:02:94: 2a:5a:a4:2c:c7:73:db:4f:e6:e3:8d:60:e1:2b:7c: 38:66:1c:61:bc:68:bc:85:7f:0d:2f:8d:02:7b:47: 44:ce:fa:eb:38:b9:0c:63:90:90:71:48:f8:cd:a6: 4c:d5:52:d8:f4:20:7f:16:f2:f5:d5:5c:26:5c:65: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E1:16:D4:6E:74:49:55:3A:6C:9C:E3:CE:AF:B7:BB:BB:08:95:87 X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e4:c9:c0:6b:f3:14:ce:75:d1:d4:65:79:85:78:53:a3:30: b5:55:ca:3a:67:4d:a3:e4:46:45:87:23:9a:78:88:2e:d2:40: 99:74:c1:22:f6:3f:48:74:a4:55:e8:32:d5:90:04:2d:c8:9a: 8e:5b:61:40:f4:87:c8:46:78:09:28:e0:3f:10:7b:0f:19:2e: 36:8f:c2:5f:46:07:07:18:55:16:dc:5b:7c:50:1a:32:fd:d2: a9:cc:b4:b9:8a:e9:d1:70:31:ab:a1:71:55:dd:36:20:21:eb: 21:65:43:13:50:37:84:22:f3:83:f1:0c:d2:36:a4:e6:08:de: 3b:89:aa:a1:64:c5:38:0b:23:a1:ca:29:3a:06:dd:46:e1:9c: 4a:94:25:52:82:46:c4:f6:4a:3e:43:6f:1e:2a:40:5b:e8:aa: fe:8d:04:09:45:e9:55:b0:6a:e8:1d:65:f2:2c:05:2b:ae:d7: c4:2e:97:4a:2a:1f:70:6a:5f:41:81:1b:8d:a9:40:9d:d9:01: 15:38:6f:45:36:b5:3e:08:fd:7a:28:ba:22:33:7a:0b:15:3f: 91:ac:fa:d8:13:d5:87:f2:ee:41:f6:44:16:35:d1:3b:73:62: 51:8e:ea:d2:ce:22:c1:1d:63:ba:38:0c:57:f5:48:a1:da:a4: 43:c5:73:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjUwODA3MDIyNTQzWhcNMjUwODE0MDIyNTQzWjAYMRYwFAYD VQQDEw02ODk0MGVhNy0zNTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqtv6fqZkhMnYx5Ll/aNau5r4HieFerEgHYIaWpB//XQJFyT6GLYX/Hn/rRA gnTvrZvAce4cbUGv7W7+wGKT+OL0Mcfko34+M9Mh40d3YPji2aQJK4QU9tYi1nKd ogxdnSwg2ghNZ6hK4hb/BZ2G5zkxZkXt1whfk9EhatLvSsRAYW2FedtpUKYvZ2gK lJCfmQaX48L5fcz3XgDu6FhjFlAEaoXsf27T63T9mF5NByOPnejm2wArQeiLKdlL Q+dvApQqWqQsx3PbT+bjjWDhK3w4ZhxhvGi8hX8NL40Ce0dEzvrrOLkMY5CQcUj4 zaZM1VLY9CB/FvL11VwmXGVMcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfhFtRu dElVOmyc486vt7u7CJWHMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEY2OS9COTk4REQzQzI5MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhy MHV5d1JYZ1gzR3Vqd041SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk5MnAa/MUznXR1GV5hXhTozC1Vco6Z02j5EZFhyOaeIgu0kCZdMEi 9j9IdKRV6DLVkAQtyJqOW2FA9IfIRngJKOA/EHsPGS42j8JfRgcHGFUW3Ft8UBoy /dKpzLS5iunRcDGroXFV3TYgIeshZUMTUDeEIvOD8QzSNqTmCN47iaqhZMU4CyOh yik6Bt1G4ZxKlCVSgkbE9ko+Q28eKkBb6Kr+jQQJRelVsGroHWXyLAUrrtfELpdK Kh9wal9BgRuNqUCd2QEVOG9FNrU+CP16KLoiM3oLFT+RrPrYE9WH8u5B9kQWNdE7 c2JRjurSziLBHWO6OAxX9Uih2qRDxXPe -----END CERTIFICATE-----Generated at Fri Aug 8 13:03:02 2025 by rpki-client