$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft File: m0YBtrC3j7j-njkzSoG1pd1ZVik.mft (raw, json) Hash identifier: zzzTaVEqNzOqZ0bJiH+JqEJHJzTrWOq2WUzgh0BF6X8= Subject key identifier: D8:DE:8E:A5:3D:FC:09:59:1A:5A:36:1F:5C:F9:AA:00:1E:C9:B9:D5 Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 0803 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft Manifest number: 07DD Signing time: Sun 10 Aug 2025 21:05:01 +0000 Manifest this update: Sun 10 Aug 2025 21:05:00 +0000 Manifest next update: Sun 17 Aug 2025 21:05:00 +0000 Files and hashes: 1: m0YBtrC3j7j-njkzSoG1pd1ZVik.crl (hash: iXPoTg2IvWr8xD/9t6Nva/YKrVQ9IQOQE0BFTHJbo0Y=) 2: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (hash: JxqBCjBT9K2ryaUj1ZqNSpK/pt6W0FIjzbMts6xP/O4=) 3: 1F046D5EAD5311EBA93CEB69C4F9AE02.roa (hash: QsOZtg7wgKPEMzZpQNjN0cwc1dkJJaHe5vPoUHzDi2E=) 4: 2B67707C449911EC873EEE33C4F9AE02.roa (hash: dfHP081F3AjgTxtk/Kol9IWl1ohuGadWFkcTnhyHleE=) 5: 1E69B82CAD5311EBA93CEB69C4F9AE02.roa (hash: BiwvJd+dCFyWKlGsVpLMc1ZbpjUFsliw37pP+lj/D+c=) 6: 202D8382AD5311EBA93CEB69C4F9AE02.roa (hash: 9CVFCRxGd96rDHgxt1WsX71RS0A2IwtDONeOpXumo3o=) 7: F4DFF910CB0311EC817AED0BC4F9AE02.roa (hash: 3EaaIhegA520f9Jq9jn6VCkgAQsJfc5446BLnaSLsuo=) 8: 1DC10D94AD5311EBA93CEB69C4F9AE02.roa (hash: lLU3brsFcJmxfza+HPsqiH2/FCfohQp/aB2RU3YA2bQ=) 9: 20BC506CAD5311EBA93CEB69C4F9AE02.roa (hash: FAebLgMlFuIn+Jv3/Kno5dJ1sOWIko5p1IcZ8bmbDwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2051 (0x803) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7, serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: Aug 10 21:05:00 2025 GMT Not After : Aug 17 21:05:00 2025 GMT Subject: CN=6899097d-cc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:f0:4e:d6:ba:2c:d3:2e:38:98:54:d7:3a: 98:2f:55:3a:f9:7b:0c:e5:36:ad:db:1d:94:88:4c: 43:96:aa:4e:e9:49:7f:32:03:93:0c:9a:8f:12:fc: 09:a9:4e:25:1f:4c:74:98:aa:a0:aa:b9:64:ea:15: 56:48:54:13:4e:b0:c4:d5:ca:59:e0:00:0b:bb:9d: 00:b6:54:b9:0c:f6:a0:3e:42:bc:d3:9a:b4:bf:b5: bb:14:91:57:73:8d:b8:57:13:44:e8:a8:c4:dc:90: 5a:b2:53:ac:2e:fd:83:cb:5d:ed:57:48:0a:28:03: fe:e0:fe:81:4c:7a:3d:e9:e1:70:ca:4e:24:50:f9: 2d:75:3c:de:7a:97:18:89:6b:d0:17:2a:b6:54:06: d2:24:cf:1e:ae:75:3c:ab:b6:6f:db:71:cd:88:70: 22:26:54:23:b3:a6:24:ed:6e:08:2a:03:2d:3d:bc: 38:43:0f:24:aa:15:9e:e3:fd:aa:07:56:59:d7:93: 91:c3:36:9f:15:4f:a6:e9:c4:07:6a:93:cd:de:9f: 86:7a:ec:33:71:15:c4:a2:a8:95:bc:5b:89:64:2c: b1:f8:9b:8f:32:82:c7:d7:49:53:3c:e8:d3:61:4b: 30:53:5e:61:3c:a7:70:a2:4e:53:f2:05:f0:83:48: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DE:8E:A5:3D:FC:09:59:1A:5A:36:1F:5C:F9:AA:00:1E:C9:B9:D5 X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:60:c4:5a:cf:0a:b9:51:98:a0:97:c5:7f:44:11:df:16:01: e4:1b:a0:a5:8d:f6:33:3c:e0:df:83:0a:c9:4a:07:89:c2:fa: 2b:ee:47:3d:0f:9b:30:d5:a6:20:ce:9a:cd:fd:4f:1a:e5:47: f5:ff:08:5e:4e:6c:06:bc:67:d1:0a:7f:74:5f:01:75:2e:05: c8:ce:cc:78:a5:06:f9:c6:bc:14:60:f3:41:6d:bc:1f:89:58: f9:e2:f5:13:68:fd:04:17:ce:c0:d3:4a:1b:e7:a3:9b:ef:a1: 88:4d:99:38:ad:f9:ee:80:38:77:40:4a:fe:9d:d5:56:aa:55: 47:44:7c:78:25:b3:32:46:c2:e1:09:39:9c:6a:e6:b2:08:14: 44:2c:53:d1:41:6e:50:b5:0a:24:20:5e:03:48:46:bd:62:85: c6:d9:0a:14:d7:dc:f2:5f:3c:1b:57:48:c5:46:2e:71:66:84: 68:9a:5e:c9:8d:11:61:ac:57:67:e9:01:8f:a2:28:dd:e3:a6: 57:4e:b2:5e:df:e8:f8:a6:91:d3:13:72:de:a3:29:a8:63:ee: 7a:13:35:34:9e:f7:19:1d:0f:76:76:ce:57:63:69:3b:6d:04: de:10:9c:96:c3:e8:b0:39:8f:9b:2c:e5:7e:da:24:8a:21:d2: 01:43:3b:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjUwODEwMjEwNTAwWhcNMjUwODE3MjEwNTAwWjAYMRYwFAYD VQQDEw02ODk5MDk3ZC1jYzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLrwTta6LNMuOJhU1zqYL1U6+XsM5Tat2x2UiExDlqpO6Ul/MgOTDJqPEvwJ qU4lH0x0mKqgqrlk6hVWSFQTTrDE1cpZ4AALu50AtlS5DPagPkK805q0v7W7FJFX c424VxNE6KjE3JBaslOsLv2Dy13tV0gKKAP+4P6BTHo96eFwyk4kUPktdTzeepcY iWvQFyq2VAbSJM8ernU8q7Zv23HNiHAiJlQjs6Yk7W4IKgMtPbw4Qw8kqhWe4/2q B1ZZ15ORwzafFU+m6cQHapPN3p+GeuwzcRXEoqiVvFuJZCyx+JuPMoLH10lTPOjT YUswU15hPKdwok5T8gXwg0g8IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjejqU9 /AlZGlo2H1z5qgAeybnVMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JGNy9BRDJBQzcyRUZCRUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3 ai1uamt6U29HMXBkMVpWaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeYMRazwq5UZigl8V/RBHfFgHkG6CljfYzPODfgwrJSgeJwvor7kc9 D5sw1aYgzprN/U8a5Uf1/wheTmwGvGfRCn90XwF1LgXIzsx4pQb5xrwUYPNBbbwf iVj54vUTaP0EF87A00ob56Ob76GITZk4rfnugDh3QEr+ndVWqlVHRHx4JbMyRsLh CTmcauayCBRELFPRQW5QtQokIF4DSEa9YoXG2QoU19zyXzwbV0jFRi5xZoRoml7J jRFhrFdn6QGPoijd46ZXTrJe3+j4ppHTE3LeoymoY+56EzU0nvcZHQ92ds5XY2k7 bQTeEJyWw+iwOY+bLOV+2iSKIdIBQztL -----END CERTIFICATE-----Generated at Mon Aug 11 04:11:23 2025 by rpki-client