$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft File: G96wwnXJDoG_o6r-IT5OcSHrc0o.mft (raw, json) Hash identifier: b/wlOJPO1K+fP9JPdE0NudImNjFM9+pMXPgYZOEJqkk= Subject key identifier: C0:9C:7B:10:00:46:AC:CD:49:4D:DF:FE:BC:78:37:31:60:8D:80:0E Authority key identifier: 1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A Certificate issuer: /CN=A9142E1E/serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft Manifest number: A4 Signing time: Sat 09 Aug 2025 06:42:16 +0000 Manifest this update: Sat 09 Aug 2025 06:42:16 +0000 Manifest next update: Sat 16 Aug 2025 06:42:16 +0000 Files and hashes: 1: G96wwnXJDoG_o6r-IT5OcSHrc0o.crl (hash: Z3fo6IjW7+/EC9PFrzCGG6X6xr4jcvU8fHdXcZ1Gd9w=) 2: 31B5D564824311EF9C69B985C4F9AE02.roa (hash: IVX22Sj0l4iAKc50j77MELQdp1CwcB3skhe7+xJHsEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Validity Not Before: Aug 9 06:42:16 2025 GMT Not After : Aug 16 06:42:16 2025 GMT Subject: CN=6896edc8-1fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1c:7b:41:26:e5:4a:3b:e5:bf:04:30:bd:84: a1:49:2e:4c:16:86:44:26:2d:9f:61:a7:0f:c6:9c: 69:8c:03:54:a8:36:61:4c:54:ae:16:b7:0c:7a:66: bb:5a:3b:e7:68:43:71:eb:44:26:50:56:bd:71:5c: 41:5a:e1:2b:5d:58:04:3f:39:24:94:45:dc:86:80: ea:cd:f9:5a:8e:78:37:6e:f7:9e:f2:a4:99:b8:a2: b8:5b:e5:3d:90:cb:94:77:a3:df:50:89:73:27:f8: 70:ae:71:12:12:f9:82:f0:98:eb:d8:19:c9:86:47: 94:8e:6f:0c:6e:12:01:85:f4:11:67:88:07:96:66: b4:1c:35:d7:aa:5b:4d:cf:26:22:8d:6f:aa:75:06: 32:f4:90:c6:de:98:0b:b0:06:37:a9:33:c5:5c:68: 7d:96:b3:cc:d5:35:bf:81:de:bc:d9:a1:d7:71:35: f4:f2:e4:e8:79:f8:9c:d2:88:8d:59:f9:a9:b7:6f: 98:ea:75:e1:33:7a:50:3a:42:16:21:57:e3:a3:bf: 7b:4b:57:b3:05:69:cb:f2:29:4f:79:29:29:2e:22: b7:82:41:df:2a:99:bf:25:e5:03:8e:7d:59:7f:88: 70:40:00:93:50:ca:d6:65:8d:f5:16:14:ed:2e:24: 54:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9C:7B:10:00:46:AC:CD:49:4D:DF:FE:BC:78:37:31:60:8D:80:0E X509v3 Authority Key Identifier: keyid:1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a1:19:96:e1:95:77:11:12:b7:53:9b:4b:73:1f:f7:5e:c6: d6:0f:a3:e4:ab:f0:0f:d8:f0:f6:0f:e5:09:59:e0:93:7a:74: fc:1d:c8:e8:2c:4c:f2:d1:ab:3a:39:07:d7:16:6a:ed:6c:c6: ff:44:45:df:d0:a2:98:a1:02:f0:b4:ae:06:6a:9c:31:86:4a: c8:b2:06:45:3e:87:03:6b:68:bd:48:7a:84:60:41:d9:22:8a: 7c:1c:06:b2:13:5b:98:99:92:f2:ee:c6:a3:ae:81:8e:b0:cc: ac:1c:e2:9c:64:36:c0:0c:1d:09:1a:f2:89:aa:2f:2a:fb:f8: 3d:95:97:3a:2c:11:1d:f1:35:09:25:fd:76:08:d7:48:e0:e3: 98:e7:68:85:f1:b3:c6:9c:c7:ef:d8:df:56:b0:c6:a6:80:f5: a1:d6:5c:07:0d:f0:d2:53:40:a1:61:3c:67:98:dc:f4:00:46: 4c:f0:86:69:ac:f9:2e:74:9b:82:cb:b5:41:a4:fe:27:0a:b4: e4:23:1a:62:2d:78:2b:b6:85:e1:a4:3a:52:3f:d4:37:cd:19: 7a:8f:fd:34:f1:95:9e:d5:ff:3b:c1:aa:91:fe:42:a0:a8:2c: f8:b8:04:bd:0b:d8:fa:0f:f5:f4:5b:e2:46:1d:a2:94:4d:53: d0:22:ab:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFMUUxMTAvBgNVBAUTKDFCREVCMEMyNzVDOTBFODFCRkEzQUFGRTIxM0U0RTcx MjFFQjczNEEwHhcNMjUwODA5MDY0MjE2WhcNMjUwODE2MDY0MjE2WjAYMRYwFAYD VQQDEw02ODk2ZWRjOC0xZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Rx7QSblSjvlvwQwvYShSS5MFoZEJi2fYacPxpxpjANUqDZhTFSuFrcMema7 WjvnaENx60QmUFa9cVxBWuErXVgEPzkklEXchoDqzflajng3bvee8qSZuKK4W+U9 kMuUd6PfUIlzJ/hwrnESEvmC8Jjr2BnJhkeUjm8MbhIBhfQRZ4gHlma0HDXXqltN zyYijW+qdQYy9JDG3pgLsAY3qTPFXGh9lrPM1TW/gd682aHXcTX08uToefic0oiN Wfmpt2+Y6nXhM3pQOkIWIVfjo797S1ezBWnL8ilPeSkpLiK3gkHfKpm/JeUDjn1Z f4hwQACTUMrWZY31FhTtLiRUdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCcexAA RqzNSU3f/rx4NzFgjYAOMB8GA1UdIwQYMBaAFBvesMJ1yQ6Bv6Oq/iE+TnEh63NK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkUxRS8xM0Q4MDYwODgy NDIxMUVGQUQzRDgxODFDNEY5QUUwMi9HOTZ3d25YSkRvR19vNnItSVQ1T2NTSHJj MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c5Nnd3blhKRG9HX282ci1JVDVPY1NIcmMwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkUxRS8xM0Q4MDYwODgyNDIxMUVGQUQzRDgxODFDNEY5QUUwMi9HOTZ3d25YSkRv R19vNnItSVQ1T2NTSHJjMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMoRmW4ZV3ERK3U5tLcx/3XsbWD6Pkq/AP2PD2D+UJWeCTenT8Hcjo LEzy0as6OQfXFmrtbMb/REXf0KKYoQLwtK4GapwxhkrIsgZFPocDa2i9SHqEYEHZ Iop8HAayE1uYmZLy7sajroGOsMysHOKcZDbADB0JGvKJqi8q+/g9lZc6LBEd8TUJ Jf12CNdI4OOY52iF8bPGnMfv2N9WsMamgPWh1lwHDfDSU0ChYTxnmNz0AEZM8IZp rPkudJuCy7VBpP4nCrTkIxpiLXgrtoXhpDpSP9Q3zRl6j/008ZWe1f87waqR/kKg qCz4uAS9C9j6D/X0W+JGHaKUTVPQIquY -----END CERTIFICATE-----Generated at Sun Aug 10 04:14:34 2025 by rpki-client