$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json) Hash identifier: t6BO9O/+HiATeg9KRKTT8GBMODzHFrADY54qiRhcleY= Subject key identifier: DC:34:62:48:DB:F0:80:38:C2:89:6D:87:DF:21:C1:6D:53:3C:A8:0D Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft Manifest number: A3 Signing time: Tue 05 Aug 2025 06:55:09 +0000 Manifest this update: Tue 05 Aug 2025 06:55:08 +0000 Manifest next update: Tue 12 Aug 2025 06:55:08 +0000 Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: 03T2wO9gTtqUxqOMCBkAx1bQLDWLbguu8Ebzzh1rMOw=) 2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: GUv+bR0jB5xe+4YguFwkCK8B685+o0kSH52XBLyO1zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Validity Not Before: Aug 5 06:55:08 2025 GMT Not After : Aug 12 06:55:08 2025 GMT Subject: CN=6891aacc-c75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:85:a1:6a:d1:a9:3c:8b:76:04:3c:c1:28: 9c:77:87:34:61:4c:6d:39:71:03:6c:2f:e6:f7:ac: ba:7f:b1:db:16:89:b1:a8:1e:b4:04:8e:7b:7f:b3: 1c:f2:54:17:6e:b2:fc:c1:ec:52:9c:08:75:af:65: 9e:30:20:27:4b:f5:59:65:c3:dc:de:f0:ee:ff:30: 72:94:d8:a2:99:37:1b:dd:5a:38:50:5b:11:2b:01: 0c:a3:37:74:a0:fb:2a:9c:03:6f:dc:05:8c:d8:9b: 85:6d:af:e8:6d:d1:50:fb:12:9f:cf:0f:c5:64:03: b5:8e:5d:48:e2:ec:cd:c9:18:2b:9a:41:dd:5d:cb: 17:48:59:bf:b1:d6:52:2f:15:79:53:13:50:2c:f9: 24:c1:fe:88:80:b7:d2:41:bf:67:5c:7b:25:4e:7e: ab:72:ff:81:ba:a5:3d:e1:de:1c:19:92:f4:54:0f: 2c:1b:4b:da:b8:c9:60:51:c2:b3:ad:16:8d:51:52: 05:ee:8f:45:35:f3:82:fa:ab:56:af:99:28:0d:ad: 23:5c:03:10:8b:8e:18:26:71:a6:5c:8a:57:6f:56: 90:89:b0:02:e6:05:df:18:34:4b:89:cc:95:39:b2: 25:94:70:d4:e1:55:2c:a0:6e:dc:6c:a0:b6:ca:c2: cc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:34:62:48:DB:F0:80:38:C2:89:6D:87:DF:21:C1:6D:53:3C:A8:0D X509v3 Authority Key Identifier: keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c2:ec:11:a3:07:12:dd:ee:5c:2a:3d:09:b7:72:a9:4c:38: af:d6:4a:4a:ee:8c:e0:d9:8f:b0:8d:33:68:45:43:3c:ed:6b: ab:6a:4b:96:59:84:55:18:8f:e5:97:87:10:2f:38:f5:4f:a8: a4:4f:d1:9b:36:7b:b6:a7:73:89:f5:e2:6c:59:45:ed:ca:fc: 89:49:39:16:37:b1:b4:c0:43:47:c0:f9:7d:03:0a:a9:9e:54: 4c:ae:18:65:c7:7f:31:3e:b8:a4:1d:4e:71:0d:54:64:b2:60: be:5e:7e:bf:bc:1e:49:6a:bc:cd:2e:d0:03:8d:9a:f1:30:1c: e1:0c:6c:54:70:03:ee:a2:b6:f0:1f:9f:62:32:50:9f:c2:7b: d0:5f:07:a4:ae:d2:57:e5:2a:9d:d1:01:3b:c4:9f:4a:a5:47: 1b:84:ce:62:54:0b:ec:c0:4d:90:09:ba:0c:88:72:e4:9e:22: fb:43:ce:1b:d6:6a:52:45:b2:5c:f1:f9:51:6d:c9:ef:fa:70: cc:fe:22:00:84:4c:c4:09:2c:dd:3e:6a:b6:94:4b:76:1c:15: c8:c6:79:be:48:a9:96:5a:76:bb:cd:66:e3:22:58:b1:9b:63: e6:c2:05:56:75:04:48:a1:79:70:ce:69:7b:cc:1e:f8:ed:58: 23:89:ca:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKDEwMEQ5QUVFOTFEMjI3RkU0NzU5MzRGMjk3OEMzNjE3 RDhDRkE4RUUwHhcNMjUwODA1MDY1NTA4WhcNMjUwODEyMDY1NTA4WjAYMRYwFAYD VQQDEw02ODkxYWFjYy1jNzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZGFoWrRqTyLdgQ8wSicd4c0YUxtOXEDbC/m96y6f7HbFomxqB60BI57f7Mc 8lQXbrL8wexSnAh1r2WeMCAnS/VZZcPc3vDu/zBylNiimTcb3Vo4UFsRKwEMozd0 oPsqnANv3AWM2JuFba/obdFQ+xKfzw/FZAO1jl1I4uzNyRgrmkHdXcsXSFm/sdZS LxV5UxNQLPkkwf6IgLfSQb9nXHslTn6rcv+BuqU94d4cGZL0VA8sG0vauMlgUcKz rRaNUVIF7o9FNfOC+qtWr5koDa0jXAMQi44YJnGmXIpXb1aQibAC5gXfGDRLicyV ObIllHDU4VUsoG7cbKC2ysLMbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNw0Ykjb 8IA4wolth98hwW1TPKgNMB8GA1UdIwQYMBaAFBANmu6R0if+R1k08peMNhfYz6ju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS81N0ZGNEJDQThC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pfNUhXVFR5bDR3MkY5alBx TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS81N0ZGNEJDQThCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pf NUhXVFR5bDR3MkY5alBxTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNwuwRowcS3e5cKj0Jt3KpTDiv1kpK7ozg2Y+wjTNoRUM87WurakuW WYRVGI/ll4cQLzj1T6ikT9GbNnu2p3OJ9eJsWUXtyvyJSTkWN7G0wENHwPl9Awqp nlRMrhhlx38xPrikHU5xDVRksmC+Xn6/vB5JarzNLtADjZrxMBzhDGxUcAPuorbw H59iMlCfwnvQXwekrtJX5Sqd0QE7xJ9KpUcbhM5iVAvswE2QCboMiHLkniL7Q84b 1mpSRbJc8flRbcnv+nDM/iIAhEzECSzdPmq2lEt2HBXIxnm+SKmWWna7zWbjIlix m2PmwgVWdQRIoXlwzml7zB747Vgjicod -----END CERTIFICATE-----Generated at Thu Aug 7 04:02:25 2025 by rpki-client