$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft File: AWZvx92HXf-g4ZvHPLrajs-aWCc.mft (raw, json) Hash identifier: zrrITef4NH7QoNVBamtcn5b3NjD9GRv0vpKSyO9y2v8= Subject key identifier: 3B:53:5B:F9:27:A6:EA:7C:2D:15:48:EF:15:6E:A9:A2:45:64:7A:A1 Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 Certificate issuer: /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft Manifest number: 019E Signing time: Sun 03 Aug 2025 03:55:30 +0000 Manifest this update: Sun 03 Aug 2025 03:55:29 +0000 Manifest next update: Sun 10 Aug 2025 03:55:29 +0000 Files and hashes: 1: AWZvx92HXf-g4ZvHPLrajs-aWCc.crl (hash: 3crWcD/NhphkQRT3wN6TCyAUWJ8MVxqeQbS9RjUtoyk=) 2: 36E93942D6C511EEB512CC7FC4F9AE02.roa (hash: J/FdYg39XgCJ8nqyyiXOfjFTbprUGYfmqvQJ8jAj03A=) 3: 37649AB0D6C511EEB512CC7FC4F9AE02.roa (hash: Yf3syhODw0cAx33YmQD7J4oKJN2R4/9xKFbcxAFrzEc=) 4: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (hash: v8hFecBZJ729gEYkG3Fnm3Jj8x8TqXCpRI+hn3vItOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Validity Not Before: Aug 3 03:55:29 2025 GMT Not After : Aug 10 03:55:29 2025 GMT Subject: CN=688eddb2-6720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:ff:8a:c1:d9:23:0f:cd:41:02:89:15:44: f0:92:da:19:d0:6b:06:00:d5:cf:ba:05:09:44:bd: 53:be:25:e1:73:08:25:84:d5:46:79:8e:25:75:75: f7:59:3b:24:3e:a0:81:ce:82:35:85:22:4c:87:ea: 05:8a:65:36:6c:6a:e8:fd:8b:1a:66:94:d6:fd:eb: a7:63:e4:8a:4d:b8:a4:c6:4f:4f:9b:94:70:d5:9d: a8:17:5c:15:90:1b:0c:6e:7c:c1:6b:82:91:fb:bd: 59:47:f2:f6:dd:db:22:3d:f7:41:f1:3b:23:db:2d: 3b:26:15:30:72:83:20:5a:c4:01:cb:a8:82:25:6c: 19:ad:dc:83:7e:c7:2d:7f:c5:9b:16:a7:c3:99:1c: 88:3f:8c:1f:87:b5:d1:36:8e:06:87:d0:99:13:ad: d1:60:ab:39:8a:77:19:eb:bd:d7:7c:85:af:51:5b: b6:96:7f:b6:1d:20:5a:20:4a:5b:45:2f:43:51:05: c0:84:cc:9b:89:91:4c:58:3c:ee:d2:08:e2:1d:c9: 8c:de:42:30:ad:a1:e2:20:10:22:e9:03:5d:62:29: 21:5e:0e:6a:ac:fd:9e:f3:52:c2:f4:0a:01:9b:ea: 77:98:00:27:64:08:f8:a8:c6:79:10:4c:5d:27:25: 7c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:53:5B:F9:27:A6:EA:7C:2D:15:48:EF:15:6E:A9:A2:45:64:7A:A1 X509v3 Authority Key Identifier: keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:82:27:50:10:da:5b:5e:d2:12:00:ad:d8:82:48:f2:1a:13: 55:8c:c4:0b:c1:24:ff:e9:66:33:e2:7a:2b:92:da:c4:39:07: ff:81:63:4e:cf:cb:6f:9e:81:6b:74:55:5a:e4:b3:de:f3:fd: b1:72:d6:a5:11:70:e5:fc:3d:fa:84:3a:f8:70:00:f1:9d:13: 6b:ae:38:c1:1f:83:f0:53:a7:d9:b2:73:e0:ee:61:95:e1:21: 61:56:9c:27:41:fa:0c:ca:00:d0:65:60:84:07:9c:4c:d8:d7: a5:5a:de:86:b6:d7:99:0c:1b:b5:72:ac:d3:b5:ef:6b:07:59: 34:3c:58:ad:3e:75:2e:5d:18:8a:cf:27:7b:42:05:98:ff:48: 25:77:1d:33:00:8f:d5:02:b7:46:6d:4e:d3:8c:d9:cf:23:7d: e3:2b:c8:b1:5f:7c:9c:3e:d0:d8:94:fc:9a:c1:a3:05:77:41: 21:d9:3a:f2:c8:39:0b:4c:60:cb:59:09:b4:a0:b1:a1:3a:f0: 3a:ef:23:d0:46:b1:29:03:28:6c:de:f2:4e:a6:39:6b:50:15: 8c:fe:4f:49:6b:34:6b:e5:29:ce:48:a1:77:48:a4:a8:96:d8: a5:aa:cd:6b:32:74:ba:bd:c7:b6:8d:18:6f:f6:cd:d6:ce:b1: ae:35:3e:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NjkxMTAvBgNVBAUTKDAxNjY2RkM3REQ4NzVERkZBMEUxOUJDNzNDQkFEQThF Q0Y5QTU4MjcwHhcNMjUwODAzMDM1NTI5WhcNMjUwODEwMDM1NTI5WjAYMRYwFAYD VQQDEw02ODhlZGRiMi02NzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtor/isHZIw/NQQKJFUTwktoZ0GsGANXPugUJRL1TviXhcwglhNVGeY4ldXX3 WTskPqCBzoI1hSJMh+oFimU2bGro/YsaZpTW/eunY+SKTbikxk9Pm5Rw1Z2oF1wV kBsMbnzBa4KR+71ZR/L23dsiPfdB8Tsj2y07JhUwcoMgWsQBy6iCJWwZrdyDfsct f8WbFqfDmRyIP4wfh7XRNo4Gh9CZE63RYKs5incZ673XfIWvUVu2ln+2HSBaIEpb RS9DUQXAhMybiZFMWDzu0gjiHcmM3kIwraHiIBAi6QNdYikhXg5qrP2e81LC9AoB m+p3mAAnZAj4qMZ5EExdJyV8ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtTW/kn pup8LRVI7xVuqaJFZHqhMB8GA1UdIwQYMBaAFAFmb8fdh13/oOGbxzy62o7Pmlgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk2OS9DRjM5NUMzODFD NkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhmLWc0WnZIUExyYWpzLWFX Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FXWnZ4OTJIWGYtZzRadkhQTHJhanMtYVdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk2OS9DRjM5NUMzODFDNkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhm LWc0WnZIUExyYWpzLWFXQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQgidQENpbXtISAK3YgkjyGhNVjMQLwST/6WYz4norktrEOQf/gWNO z8tvnoFrdFVa5LPe8/2xctalEXDl/D36hDr4cADxnRNrrjjBH4PwU6fZsnPg7mGV 4SFhVpwnQfoMygDQZWCEB5xM2NelWt6GtteZDBu1cqzTte9rB1k0PFitPnUuXRiK zyd7QgWY/0gldx0zAI/VArdGbU7TjNnPI33jK8ixX3ycPtDYlPyawaMFd0Eh2Try yDkLTGDLWQm0oLGhOvA67yPQRrEpAyhs3vJOpjlrUBWM/k9JazRr5SnOSKF3SKSo ltilqs1rMnS6vce2jRhv9s3WzrGuNT6F -----END CERTIFICATE-----Generated at Mon Aug 4 11:25:26 2025 by rpki-client