$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft File: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft (raw, json) Hash identifier: NpzuBR7F/XS/CbWsIOXsHPlIRrkiZ48Sx6Iv3+DXO6M= Subject key identifier: 43:A9:39:57:20:6D:27:35:6C:96:9D:35:1F:6D:C8:FF:94:6B:15:93 Authority key identifier: 7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 Certificate issuer: /CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft Manifest number: 01BF Signing time: Sat 09 Aug 2025 03:24:11 +0000 Manifest this update: Sat 09 Aug 2025 03:24:10 +0000 Manifest next update: Sat 16 Aug 2025 03:24:10 +0000 Files and hashes: 1: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl (hash: CvMSb5wLMWiwhTVZquzbjGLyOaTlEwv9hWJKVP7NJaI=) 2: EB732812CC8211ED9420A757C4F9AE02.roa (hash: 3Eo9M+6uF1PrL4pGQbaO7H9tA5QUvhxpxJznY/pRFpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AD0, serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Validity Not Before: Aug 9 03:24:10 2025 GMT Not After : Aug 16 03:24:10 2025 GMT Subject: CN=6896bf5a-12df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:80:f1:b5:18:f2:10:52:1e:7b:59:59:a5: 04:36:1a:61:4d:ae:fe:9e:50:35:8e:66:cc:6f:d0: cb:1d:54:66:1c:55:1b:21:ac:3a:41:70:4f:39:57: d7:0f:3e:09:7d:00:3d:d6:20:7a:20:0c:ae:fa:5f: 6d:f0:20:27:0b:5d:75:eb:e1:d9:58:fe:db:20:e0: f1:4f:69:67:e0:d4:3d:1b:26:e8:f9:52:4a:03:a1: 54:71:97:f0:05:f0:39:b2:c4:29:7f:1c:e6:8a:98: 7f:5e:a4:91:5d:40:04:a0:32:1a:59:ca:17:7f:2c: f3:a1:2b:a5:33:2d:70:91:e6:0f:05:b5:05:bd:15: 47:fc:94:ba:7f:34:54:8f:ca:34:c0:37:4c:1f:4f: 9e:32:7d:45:0f:60:a0:09:6e:13:a9:3c:d8:d8:3e: 19:57:82:82:01:70:af:1f:d3:9e:08:9f:10:74:35: 66:a7:b2:5d:1b:dc:fd:13:8b:3d:9f:c8:96:36:ff: b8:ac:8b:12:e8:66:b7:a9:61:8f:a6:7c:38:db:e3: 10:3d:28:f1:00:92:8b:a5:b3:82:3c:41:55:7c:a8: 88:b4:32:82:56:b1:78:ab:ea:60:4f:9b:07:d6:8b: 3a:11:83:39:21:10:8e:04:3e:48:3d:71:dd:c9:50: d8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A9:39:57:20:6D:27:35:6C:96:9D:35:1F:6D:C8:FF:94:6B:15:93 X509v3 Authority Key Identifier: keyid:7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:8a:5d:b1:ba:1a:6d:4e:2c:cf:9b:e4:44:b7:3a:20:61:af: b3:95:47:db:63:38:ed:35:af:57:fe:76:34:73:54:a3:d9:0e: 1c:92:b3:ab:a2:b9:40:13:f8:b6:58:8d:c4:a4:f6:df:0e:61: a5:37:5f:7f:22:6c:08:29:1f:a6:60:e8:f8:d1:b8:e7:02:c2: c3:8c:65:2a:c3:50:6c:88:a4:a8:fc:96:39:a8:f5:63:ec:31: 8c:01:7e:0d:3b:dc:51:c2:45:71:01:ea:12:92:ed:59:62:ef: 34:00:62:6d:85:94:52:9d:4e:25:c4:71:0a:76:eb:da:d4:be: bd:33:5b:c9:b8:a6:77:d2:27:dd:26:b7:57:d2:92:2e:7b:ca: 12:8f:4d:b6:16:17:31:86:9f:50:98:22:38:e6:f2:76:3c:a5: ea:93:e9:8f:b2:cb:5e:7b:9b:7f:bc:41:aa:ec:51:36:7f:89: ac:2d:5e:b8:3d:48:a1:55:be:b8:22:68:3f:8c:7c:94:d4:f5: a5:b7:25:05:7d:85:96:97:19:a6:60:fb:77:a7:e3:b1:c7:48: ff:5d:ce:9a:79:12:2c:59:19:09:ca:32:b9:68:a3:0e:6e:f4: 03:18:d8:bb:84:fc:9e:52:bf:33:3c:cb:00:79:c7:a5:bf:c4: c7:6e:57:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRDAxMTAvBgNVBAUTKDdCRDM2OTU0QzREMEMzMDVBQjRGQTFDMjI1QzBGM0Q3 MzJENjc3MTQwHhcNMjUwODA5MDMyNDEwWhcNMjUwODE2MDMyNDEwWjAYMRYwFAYD VQQDEw02ODk2YmY1YS0xMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykuA8bUY8hBSHntZWaUENhphTa7+nlA1jmbMb9DLHVRmHFUbIaw6QXBPOVfX Dz4JfQA91iB6IAyu+l9t8CAnC1116+HZWP7bIODxT2ln4NQ9Gybo+VJKA6FUcZfw BfA5ssQpfxzmiph/XqSRXUAEoDIaWcoXfyzzoSulMy1wkeYPBbUFvRVH/JS6fzRU j8o0wDdMH0+eMn1FD2CgCW4TqTzY2D4ZV4KCAXCvH9OeCJ8QdDVmp7JdG9z9E4s9 n8iWNv+4rIsS6Ga3qWGPpnw42+MQPSjxAJKLpbOCPEFVfKiItDKCVrF4q+pgT5sH 1os6EYM5IRCOBD5IPXHdyVDYUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOpOVcg bSc1bJadNR9tyP+UaxWTMB8GA1UdIwQYMBaAFHvTaVTE0MMFq0+hwiXA89cy1ncU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFEMC8wOTlBQTdERUND N0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3V3JUNkhDSmNEejF6TFdk eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5TnBWTVRRd3dXclQ2SENKY0R6MXpMV2R4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFEMC8wOTlBQTdERUNDN0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3 V3JUNkhDSmNEejF6TFdkeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4il2xuhptTizPm+REtzogYa+zlUfbYzjtNa9X/nY0c1Sj2Q4ckrOr orlAE/i2WI3EpPbfDmGlN19/ImwIKR+mYOj40bjnAsLDjGUqw1BsiKSo/JY5qPVj 7DGMAX4NO9xRwkVxAeoSku1ZYu80AGJthZRSnU4lxHEKduva1L69M1vJuKZ30ifd JrdX0pIue8oSj022Fhcxhp9QmCI45vJ2PKXqk+mPsstee5t/vEGq7FE2f4msLV64 PUihVb64Img/jHyU1PWltyUFfYWWlxmmYPt3p+Oxx0j/Xc6aeRIsWRkJyjK5aKMO bvQDGNi7hPyeUr8zPMsAecelv8THblf4 -----END CERTIFICATE-----Generated at Sun Aug 10 05:35:37 2025 by rpki-client