$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: VUscC3GSvzJpg2cGmLV18a0QuHThEGR+5j+9VweXrc8= Subject key identifier: A4:E0:06:B9:4E:9A:00:62:D2:2C:4A:88:B3:09:3A:BF:2A:9C:9C:18 Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 3516 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 34E5 Signing time: Fri 08 Aug 2025 14:22:06 +0000 Manifest this update: Fri 08 Aug 2025 14:22:06 +0000 Manifest next update: Fri 15 Aug 2025 14:22:06 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: JHZtFwdYPMSguXtJ0xWiqRIPMHGpzcmOtWVPJ/99YQA=) 2: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: yQ9Zz2wr8tjKdfaxVczUpLIfv3iNt/pg9a1JKFuCtos=) 3: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: z0+u6Iw9nBsWkBxEBsOze7XPIpbGqUrpaAbGEfXztn0=) 4: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: C0b11kHxUkGRgJNkSLgXVrGvFc4MAtKBux3nfA6wsg8=) 5: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: SUsUIXE/tKa73O2xJJTZ5W41hRd+PFlpRhUTlZjlrnU=) 6: A82F26B0466911F0ACD64867C4F9AE02.roa (hash: 2ZVWAkjDpndv3LhT9XdZy2paoKqw+nEDo6qJplPnRnM=) 7: 30941278EF2011EF9264077FC4F9AE02.roa (hash: dH1BFoeKKcX/dB6MDpyS3SQGnjUCambU+BCLw/wlqFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13590 (0x3516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Aug 8 14:22:06 2025 GMT Not After : Aug 15 14:22:06 2025 GMT Subject: CN=6896080e-e360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:78:32:05:34:25:c8:dd:61:6e:d5:93:b7: 64:28:50:0c:bb:63:0c:bf:9a:2c:43:89:1d:f6:a5: a5:41:e4:10:c0:a0:bc:fe:ed:17:dd:34:3b:ea:05: 69:f1:83:dd:8a:f9:b0:cc:48:54:4d:83:ee:2a:ff: 2b:67:25:df:5d:8f:aa:01:21:1a:b7:7b:72:c2:93: 36:e0:db:10:d2:2e:8c:a3:c3:99:2e:8a:36:94:d4: 42:d3:bd:d7:59:ef:26:5b:23:44:54:fe:de:fb:4d: f6:ba:e7:7f:13:7d:c6:99:03:5b:b6:27:e3:11:a6: a5:ba:88:5d:9e:c6:71:86:f8:43:4a:a8:e5:a1:94: b1:5c:8c:34:24:70:b9:ba:cc:aa:2d:c0:b7:21:ab: 7f:ac:a4:50:a6:03:d2:af:61:6b:b2:68:df:bf:0c: 39:c9:ca:3b:3d:c0:3b:ab:67:04:f8:cd:dc:00:70: c5:8b:a5:df:35:c0:95:cf:6d:cf:1c:14:e1:c1:f5: 2f:17:95:1b:06:a5:73:1d:59:d5:80:be:87:7d:ef: 02:a7:af:61:62:ff:fa:61:aa:ee:bd:ad:4c:c4:5c: e9:f1:b1:60:72:09:6a:ae:5a:94:bb:7c:67:ec:8d: 51:6f:3b:7b:7f:ad:4a:b0:b5:bb:80:41:1f:b3:62: 7d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E0:06:B9:4E:9A:00:62:D2:2C:4A:88:B3:09:3A:BF:2A:9C:9C:18 X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:53:a1:5d:13:f6:ae:7d:31:e2:ca:fa:0f:de:75:45:b3:80: 39:37:65:d5:eb:58:dc:e7:e4:e8:25:0c:b5:e0:11:62:87:aa: d3:53:e8:c1:9b:53:ad:1b:02:d9:80:53:2b:ab:10:35:07:40: 27:75:01:a0:b7:b3:35:a6:20:1c:9f:8e:f4:fe:90:ec:27:c7: 5a:41:a1:47:26:0a:b6:9f:8e:dd:a2:ba:13:9e:2f:f8:c0:fe: 16:0c:5b:00:b0:b4:22:ed:65:3d:13:ba:f8:75:fb:97:47:68: 87:97:37:ce:b7:c6:14:65:0c:8c:ab:d0:19:7b:ba:f2:4f:d8: e9:d2:aa:b4:65:35:e3:2e:7a:ce:86:64:c2:8a:80:47:ea:43: 02:6e:8c:8f:43:b0:d1:60:ef:b5:00:31:ab:61:b2:62:d5:d7: 0b:57:64:ad:68:05:d5:57:da:0d:75:88:d2:91:5e:3f:a8:56: 28:6a:e0:4b:f8:50:25:d0:3d:30:ca:8f:73:8b:40:6c:6d:52: 50:60:b5:d7:ba:12:55:85:09:15:f5:d6:ea:cb:d0:3c:55:f4: b4:10:91:1e:aa:3d:9f:4a:d7:80:88:41:fb:e9:d5:44:a3:69: 42:6b:47:4f:d2:7b:74:5d:57:73:5c:99:22:bb:9c:79:60:8f: b3:51:99:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjUwODA4MTQyMjA2WhcNMjUwODE1MTQyMjA2WjAYMRYwFAYD VQQDEw02ODk2MDgwZS1lMzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCN4MgU0JcjdYW7Vk7dkKFAMu2MMv5osQ4kd9qWlQeQQwKC8/u0X3TQ76gVp 8YPdivmwzEhUTYPuKv8rZyXfXY+qASEat3tywpM24NsQ0i6Mo8OZLoo2lNRC073X We8mWyNEVP7e+032uud/E33GmQNbtifjEaaluohdnsZxhvhDSqjloZSxXIw0JHC5 usyqLcC3Iat/rKRQpgPSr2Frsmjfvww5yco7PcA7q2cE+M3cAHDFi6XfNcCVz23P HBThwfUvF5UbBqVzHVnVgL6Hfe8Cp69hYv/6Yaruva1MxFzp8bFgcglqrlqUu3xn 7I1Rbzt7f61KsLW7gEEfs2J9NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTgBrlO mgBi0ixKiLMJOr8qnJwYMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9U6FdE/aufTHiyvoP3nVFs4A5N2XV61jc5+ToJQy14BFih6rTU+jB m1OtGwLZgFMrqxA1B0AndQGgt7M1piAcn470/pDsJ8daQaFHJgq2n47doroTni/4 wP4WDFsAsLQi7WU9E7r4dfuXR2iHlzfOt8YUZQyMq9AZe7ryT9jp0qq0ZTXjLnrO hmTCioBH6kMCboyPQ7DRYO+1ADGrYbJi1dcLV2StaAXVV9oNdYjSkV4/qFYoauBL +FAl0D0wyo9zi0BsbVJQYLXXuhJVhQkV9dbqy9A8VfS0EJEeqj2fSteAiEH76dVE o2lCa0dP0nt0XVdzXJkiu5x5YI+zUZnu -----END CERTIFICATE-----Generated at Sat Aug 9 14:32:20 2025 by rpki-client