$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json) Hash identifier: NUFhvI5LaUmF4JTPMTOhM9q427OfiIpPER+c7myFJoM= Subject key identifier: A7:90:35:BE:5E:E5:EF:6B:52:F6:65:D5:E4:AE:0B:0A:4B:A0:2D:D1 Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Certificate serial: 352D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft Manifest number: 34EF Signing time: Sun 10 Aug 2025 14:39:51 +0000 Manifest this update: Sun 10 Aug 2025 14:39:50 +0000 Manifest next update: Sun 17 Aug 2025 14:39:50 +0000 Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: PF0YhVyYOSeuQgsGIc4ClV0Q5X7zfyumMOb3r1KEXCU=) 2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: 96XsaHGbBlvdPveuzctBmWEVFay9353tTmIoY6pIwfU=) 3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: 7VoWeqZEfm/uzTTHWTd+5tooaNNEQjkz4m3jweXJHQc=) 4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: mks3mjRf8YuTD15vdWrOVacIzdvtGICAN5+kmOADW4o=) 5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: eAspH5Rn5OnmP5MIJe3K5vWuZy/bcDzHIj224BW01Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13613 (0x352d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Validity Not Before: Aug 10 14:39:50 2025 GMT Not After : Aug 17 14:39:50 2025 GMT Subject: CN=6898af36-49b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:66:77:c2:af:b8:57:7d:d3:e6:bb:44:1d:77: 93:de:b2:d5:7e:d9:31:f1:31:95:f2:b6:d9:6e:f6: 04:90:57:82:aa:44:3e:12:7c:51:3f:2a:c0:36:3a: d7:91:28:89:64:ac:2a:3f:39:33:44:9f:ef:d4:60: 4d:90:7f:8f:f0:87:7b:6d:e0:ab:35:fc:3d:6e:e3: e8:b1:56:23:f0:03:98:19:af:77:17:46:3d:fc:1b: d2:e9:41:cf:c6:c0:f3:aa:f3:c5:6d:07:a6:71:4b: 9d:c8:24:de:7f:7d:49:43:ef:e5:02:47:27:e4:d3: f3:c3:7f:f6:6f:b7:63:ab:b1:f9:50:cb:dd:d3:19: 4c:fc:bc:90:e3:4b:27:b5:6c:7d:97:11:c0:0a:44: 76:eb:ec:fa:cf:b5:fa:82:a1:b2:c1:e0:43:6a:54: 89:06:9c:bb:ed:10:30:05:78:03:97:d8:3c:d0:20: b2:67:4b:46:58:b0:8a:a8:f5:92:fc:38:e3:1d:4e: a6:66:5d:3e:d4:74:a4:56:65:dc:ee:3e:e5:fd:b1: b2:c2:bb:8d:a6:4d:16:a9:48:2b:d1:63:dc:de:0e: 6b:df:67:db:40:29:59:2c:6b:c4:56:f8:c9:93:e8: df:d3:23:76:7f:45:92:ae:35:7a:07:cb:a9:5e:b7: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:90:35:BE:5E:E5:EF:6B:52:F6:65:D5:E4:AE:0B:0A:4B:A0:2D:D1 X509v3 Authority Key Identifier: keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:33:3b:30:b1:4d:d6:48:45:85:b5:3a:a3:fc:7f:98:cc:ab: 49:06:46:c2:52:22:3a:37:90:c3:59:62:80:d3:6d:0b:8b:05: 19:02:5c:2c:36:a8:76:8f:ce:55:29:7b:53:8d:45:f0:0a:bc: c8:a3:0b:b1:50:36:f7:64:45:4e:66:c5:ab:47:d2:74:68:8f: 18:46:a1:cb:6a:ef:b2:31:0e:be:4b:d2:d9:0b:ea:c3:96:23: 2a:7a:18:bb:8b:39:b1:f4:63:8b:79:b0:a2:f5:df:ad:75:f5: 3e:ee:10:49:b5:0e:e8:33:c1:18:c3:f3:cc:fa:ac:f7:01:e9: cf:55:2c:67:e3:9e:d9:7c:63:c9:27:99:fc:99:3b:5e:88:56: 46:cd:34:c7:35:99:58:89:17:0f:88:bf:3f:58:65:27:bf:df: 2a:4e:fa:12:5f:0d:cd:d8:ed:7f:ef:4a:d0:54:e5:14:66:36: a0:28:6e:0e:99:5e:a0:0e:ad:8b:5c:b2:b7:b7:2d:a3:b6:a8: b1:39:5f:7d:1b:22:ab:2b:b9:a2:19:55:28:dc:f0:9e:a8:40: ae:2e:13:8a:21:01:2e:ce:dd:ad:e6:ca:dc:5d:e3:42:fe:67: 1e:e2:e4:c2:9b:b6:08:33:a4:b4:80:db:79:1d:9f:b2:c0:a9: 9b:5f:3f:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG RUNBMDRCNEEwHhcNMjUwODEwMTQzOTUwWhcNMjUwODE3MTQzOTUwWjAYMRYwFAYD VQQDEw02ODk4YWYzNi00OWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmZ3wq+4V33T5rtEHXeT3rLVftkx8TGV8rbZbvYEkFeCqkQ+EnxRPyrANjrX kSiJZKwqPzkzRJ/v1GBNkH+P8Id7beCrNfw9buPosVYj8AOYGa93F0Y9/BvS6UHP xsDzqvPFbQemcUudyCTef31JQ+/lAkcn5NPzw3/2b7djq7H5UMvd0xlM/LyQ40sn tWx9lxHACkR26+z6z7X6gqGyweBDalSJBpy77RAwBXgDl9g80CCyZ0tGWLCKqPWS /DjjHU6mZl0+1HSkVmXc7j7l/bGywruNpk0WqUgr0WPc3g5r32fbQClZLGvEVvjJ k+jf0yN2f0WSrjV6B8upXrctPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeQNb5e 5e9rUvZl1eSuCwpLoC3RMB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I1MC85RDEzMDVDODFEOEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2 RXZud1VKMVpmd18teWdTMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuMzswsU3WSEWFtTqj/H+YzKtJBkbCUiI6N5DDWWKA020LiwUZAlws Nqh2j85VKXtTjUXwCrzIowuxUDb3ZEVOZsWrR9J0aI8YRqHLau+yMQ6+S9LZC+rD liMqehi7izmx9GOLebCi9d+tdfU+7hBJtQ7oM8EYw/PM+qz3AenPVSxn457ZfGPJ J5n8mTteiFZGzTTHNZlYiRcPiL8/WGUnv98qTvoSXw3N2O1/70rQVOUUZjagKG4O mV6gDq2LXLK3ty2jtqixOV99GyKrK7miGVUo3PCeqECuLhOKIQEuzt2t5srcXeNC /mce4uTCm7YIM6S0gNt5HZ+ywKmbXz8u -----END CERTIFICATE-----Generated at Sun Aug 10 21:13:31 2025 by rpki-client