$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft File: 9RwbzQ28E1ptm8RasFnm3ifpOwM.mft (raw, json) Hash identifier: lz9QjhKH0O+erpzyRuDHDa0L+mteRoH2p4ukjjrWmlw= Subject key identifier: B2:69:8F:79:B5:D6:0D:F7:19:F6:AB:3F:28:DE:69:8B:58:98:3D:D8 Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 Certificate issuer: /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft Manifest number: 0160 Signing time: Mon 11 Aug 2025 04:09:06 +0000 Manifest this update: Mon 11 Aug 2025 04:09:05 +0000 Manifest next update: Mon 18 Aug 2025 04:09:05 +0000 Files and hashes: 1: 9RwbzQ28E1ptm8RasFnm3ifpOwM.crl (hash: bSs+QFQPcqIvfuv3ByKXgaAl8hy3HdrRgc5gu34r5OY=) 2: 9EEDB94662C111EE8F200F60C4F9AE02.roa (hash: nyq8KHP8dGY9X8L7b113gFAzdF9IMtkS8NNdIrOA99k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1F9, serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Validity Not Before: Aug 11 04:09:05 2025 GMT Not After : Aug 18 04:09:05 2025 GMT Subject: CN=68996ce2-59b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6b:34:64:80:01:00:da:a4:49:4f:3e:15:56: 64:5d:0f:a6:ba:a6:3c:d1:07:91:ec:0b:6f:9c:67: db:9a:95:d9:e9:75:be:e8:df:fd:5a:21:d4:50:cf: 35:de:33:e6:67:36:02:cf:3e:57:f9:e6:54:06:89: 75:10:08:d1:d0:5c:8b:6c:6c:a0:f5:fa:ce:9f:54: eb:53:a9:6b:f2:5e:ca:be:32:3a:81:c3:c0:74:68: c9:5b:76:80:d0:10:77:16:f5:95:a4:62:a1:83:c2: 64:6a:8b:2a:2f:12:b4:28:f6:0f:ec:4d:3b:81:d4: d7:85:bc:2f:e4:95:2b:14:27:8a:ce:b2:f2:54:60: 2f:04:e1:d4:86:82:75:c0:b5:53:c3:9b:b0:e9:93: e1:5d:81:0f:e6:e9:76:f0:fc:da:2b:77:6f:b7:2c: 55:27:f8:8e:cd:ea:df:34:bb:d0:2b:49:95:1d:27: cf:ff:95:31:80:59:44:98:b8:f7:ac:90:47:28:4b: d5:24:56:75:f7:d4:8a:34:e2:a4:b3:59:59:f7:d9: d5:5e:db:f9:7d:b0:b5:ad:33:f6:a5:ff:aa:3f:9d: b2:57:2c:6a:22:5a:66:1b:a0:b5:b7:38:26:ad:99: d0:1d:70:4e:d0:a0:29:f1:e8:4b:09:0e:dd:7b:ec: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:69:8F:79:B5:D6:0D:F7:19:F6:AB:3F:28:DE:69:8B:58:98:3D:D8 X509v3 Authority Key Identifier: keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7b:19:97:fd:7b:d0:b4:2b:8d:5a:c0:08:53:c0:84:b0:94: 48:5a:83:be:de:9c:75:66:cf:5f:3d:62:54:16:50:1d:ca:22: cb:28:36:a1:0a:22:bc:48:e2:0a:65:31:33:94:57:48:40:d1: ef:f9:f2:46:ce:c0:27:0e:49:3e:09:8b:9d:e5:19:e6:6d:87: 2f:3e:92:0a:97:d3:e8:0e:9c:1e:c2:95:f2:95:65:a6:63:33: 14:a8:f6:51:6a:1a:0e:8f:e4:fd:72:36:47:1c:a4:82:81:49: 32:e1:c4:fa:48:48:bb:70:fa:50:de:04:ee:18:35:d0:89:7e: 1d:15:09:8b:ed:71:24:87:ad:3f:37:f9:4c:06:be:e0:65:91: 60:76:49:fb:cb:c6:85:01:a2:7a:83:d6:82:8a:5c:ef:6f:94: f3:88:e7:78:19:13:e8:2b:92:5b:1e:31:81:76:7f:81:df:a5: 67:f6:ad:11:fe:88:6b:78:9e:ce:2c:26:6d:99:99:79:df:00: eb:a6:d8:56:1a:31:43:cf:ec:29:8a:4b:1f:e0:88:56:73:c6: 7b:ec:1e:a2:76:6c:c3:79:dd:88:e3:29:18:cb:5e:7c:96:99: 56:b4:48:f4:af:99:68:40:f0:b7:db:eb:4b:56:8e:cc:b5:f1: a2:e3:51:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxRjkxMTAvBgNVBAUTKEY1MUMxQkNEMERCQzEzNUE2RDlCQzQ1QUIwNTlFNkRF MjdFOTNCMDMwHhcNMjUwODExMDQwOTA1WhcNMjUwODE4MDQwOTA1WjAYMRYwFAYD VQQDEw02ODk5NmNlMi01OWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ws0ZIABANqkSU8+FVZkXQ+muqY80QeR7AtvnGfbmpXZ6XW+6N/9WiHUUM81 3jPmZzYCzz5X+eZUBol1EAjR0FyLbGyg9frOn1TrU6lr8l7KvjI6gcPAdGjJW3aA 0BB3FvWVpGKhg8JkaosqLxK0KPYP7E07gdTXhbwv5JUrFCeKzrLyVGAvBOHUhoJ1 wLVTw5uw6ZPhXYEP5ul28PzaK3dvtyxVJ/iOzerfNLvQK0mVHSfP/5UxgFlEmLj3 rJBHKEvVJFZ199SKNOKks1lZ99nVXtv5fbC1rTP2pf+qP52yVyxqIlpmG6C1tzgm rZnQHXBO0KAp8ehLCQ7de+wFuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJpj3m1 1g33GfarPyjeaYtYmD3YMB8GA1UdIwQYMBaAFPUcG80NvBNabZvEWrBZ5t4n6TsD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFGOS83RTQzN0QwNjVE M0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUxcHRtOFJhc0ZubTNpZnBP d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSd2J6UTI4RTFwdG04UmFzRm5tM2lmcE93TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFGOS83RTQzN0QwNjVEM0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUx cHRtOFJhc0ZubTNpZnBPd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKexmX/XvQtCuNWsAIU8CEsJRIWoO+3px1Zs9fPWJUFlAdyiLLKDah CiK8SOIKZTEzlFdIQNHv+fJGzsAnDkk+CYud5RnmbYcvPpIKl9PoDpwewpXylWWm YzMUqPZRahoOj+T9cjZHHKSCgUky4cT6SEi7cPpQ3gTuGDXQiX4dFQmL7XEkh60/ N/lMBr7gZZFgdkn7y8aFAaJ6g9aCilzvb5TziOd4GRPoK5JbHjGBdn+B36Vn9q0R /ohreJ7OLCZtmZl53wDrpthWGjFDz+wpiksf4IhWc8Z77B6idmzDed2I4ykYy158 lplWtEj0r5loQPC32+tLVo7MtfGi41Gi -----END CERTIFICATE-----Generated at Mon Aug 11 06:05:02 2025 by rpki-client