$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft File: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json) Hash identifier: 9NWIsbAKmtH2dtcglN7yro8FlpR0M2U7qUC0Mr3gt04= Subject key identifier: 47:AA:7F:E0:C8:80:6E:30:60:E5:32:DF:71:FA:35:CF:45:FB:92:DF Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Certificate serial: 08E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft Manifest number: 08D1 Signing time: Fri 08 Aug 2025 20:49:13 +0000 Manifest this update: Fri 08 Aug 2025 20:49:12 +0000 Manifest next update: Fri 15 Aug 2025 20:49:12 +0000 Files and hashes: 1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: hdOsFfLUjOYZN1d5eBUvCrrGHPL5tAyPmQdGUgGYhTA=) 2: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: Rbebv7a/3bjYuOYYlHIXr662xadEzX5etaY1VAtT19Q=) 3: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: unM5ewA/QOJvINE5uAU/tFjaV4piAYCJJAvmIWLeMb8=) 4: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: 2TPeWUxi8y2dJKsuFTVthNuMYrZypRCJy1Y/CFzYdHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Validity Not Before: Aug 8 20:49:12 2025 GMT Not After : Aug 15 20:49:12 2025 GMT Subject: CN=689662c8-c0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e2:0f:b1:62:e6:0d:73:a0:73:5d:29:aa:95: b0:0d:e4:ce:42:4d:c9:28:66:80:14:80:a3:8e:53: bf:c4:3f:38:6d:f8:06:40:a9:17:4d:4d:5f:c9:aa: b1:16:6d:90:ce:49:5f:2a:73:2b:7d:64:c6:cd:f2: dd:cb:84:34:85:85:15:1b:1c:9d:0a:b2:25:2e:42: eb:ab:c1:df:cb:ae:2c:88:8e:be:c3:cf:59:6d:0a: 03:16:db:01:f1:16:be:a3:7a:1b:7f:a3:83:a4:9f: 7b:c5:36:36:f5:20:ff:5e:b5:f2:9d:b6:7b:01:b7: 1c:a5:11:2f:88:bd:1d:dc:9d:ec:d2:c7:9c:50:5d: ce:b9:42:c2:b8:82:15:ab:a8:25:c2:e0:ee:52:64: c5:ce:12:57:7d:2b:5d:e9:dd:4d:24:3d:2c:45:33: 9d:23:f0:b4:9b:68:21:3a:e7:27:4b:66:90:fc:68: 00:1e:51:f6:c6:c2:18:2f:3c:29:b8:da:1d:2c:c5: f0:56:a9:95:0f:89:d8:8a:fb:e6:34:13:c0:7a:f3: 7b:35:74:a8:6d:72:81:4b:27:0b:2c:af:b9:02:29: cd:c5:f4:ca:26:b9:d8:8e:a6:ac:43:13:f0:af:a3: 02:ae:3e:64:ab:63:ee:69:9b:37:5b:e9:57:57:ca: 92:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AA:7F:E0:C8:80:6E:30:60:E5:32:DF:71:FA:35:CF:45:FB:92:DF X509v3 Authority Key Identifier: keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:dc:ec:58:9d:b3:9a:29:1f:68:c3:17:9b:4c:9c:93:ed:2f: f6:3f:2e:72:e8:d6:f2:ad:69:5d:61:32:8e:e1:8d:9c:db:38: a6:78:25:d6:93:36:e6:f7:60:ae:95:40:02:b2:c3:f1:2b:ef: 8e:aa:76:45:ce:6a:79:9d:04:b1:32:71:8b:99:87:b2:3a:d5: d2:d5:dc:0d:fc:cd:ee:db:52:5b:fd:ee:12:23:ae:c1:ac:dd: 41:e8:4e:61:3e:f1:f0:bc:4e:ea:16:0c:84:b0:4d:a5:7d:21: 19:c6:12:62:15:b4:18:f0:12:8d:81:83:9c:29:c4:b1:86:d9: a9:e7:be:d0:37:85:a0:97:7e:de:b3:87:9d:5b:d6:bd:0c:54: 6d:ea:b3:28:cf:91:06:0b:01:be:7f:22:15:d2:01:89:73:db: 4f:18:62:4a:da:ff:26:36:95:db:44:0a:d2:9c:e4:f4:c2:cb: d3:d6:58:5c:16:b3:17:72:d2:d7:14:55:e4:a0:ad:ac:30:12: b0:f1:78:38:7e:f2:78:9e:c8:1d:cb:10:78:7f:09:ca:40:53: c5:51:eb:af:43:c2:3f:39:80:7b:37:07:2d:f8:52:c5:c8:86: e3:dd:36:45:99:9c:d4:b8:52:4a:47:f1:05:52:fc:51:02:f6: 65:7d:6b:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB MjBDRkI1NEMwHhcNMjUwODA4MjA0OTEyWhcNMjUwODE1MjA0OTEyWjAYMRYwFAYD VQQDEw02ODk2NjJjOC1jMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uIPsWLmDXOgc10pqpWwDeTOQk3JKGaAFICjjlO/xD84bfgGQKkXTU1fyaqx Fm2QzklfKnMrfWTGzfLdy4Q0hYUVGxydCrIlLkLrq8Hfy64siI6+w89ZbQoDFtsB 8Ra+o3obf6ODpJ97xTY29SD/XrXynbZ7AbccpREviL0d3J3s0secUF3OuULCuIIV q6glwuDuUmTFzhJXfStd6d1NJD0sRTOdI/C0m2ghOucnS2aQ/GgAHlH2xsIYLzwp uNodLMXwVqmVD4nYivvmNBPAevN7NXSobXKBSycLLK+5AinNxfTKJrnYjqasQxPw r6MCrj5kq2PuaZs3W+lXV8qSjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeqf+DI gG4wYOUy33H6Nc9F+5LfMB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkMzOS8yN0VFQ0ZEMEJCOTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxq OVR2MW1xaE4yYXlpRFB0VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB3OxYnbOaKR9owxebTJyT7S/2Py5y6NbyrWldYTKO4Y2c2zimeCXW kzbm92CulUACssPxK++OqnZFzmp5nQSxMnGLmYeyOtXS1dwN/M3u21Jb/e4SI67B rN1B6E5hPvHwvE7qFgyEsE2lfSEZxhJiFbQY8BKNgYOcKcSxhtmp577QN4Wgl37e s4edW9a9DFRt6rMoz5EGCwG+fyIV0gGJc9tPGGJK2v8mNpXbRArSnOT0wsvT1lhc FrMXctLXFFXkoK2sMBKw8Xg4fvJ4nsgdyxB4fwnKQFPFUeuvQ8I/OYB7Nwct+FLF yIbj3TZFmZzUuFJKR/EFUvxRAvZlfWt5 -----END CERTIFICATE-----Generated at Sun Aug 10 18:20:41 2025 by rpki-client