$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: ZWUFmhjcC29lltwWoFwdj/V37IMK0fcxXjUFxP3a9j4= Subject key identifier: C7:FB:75:38:ED:DD:D6:D3:4F:58:4B:DA:CB:F1:0E:45:A1:36:A5:44 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1456 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 1436 Signing time: Fri 08 Aug 2025 17:05:36 +0000 Manifest this update: Fri 08 Aug 2025 17:05:36 +0000 Manifest next update: Fri 15 Aug 2025 17:05:36 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: t8msCPrgl++VlH31B1y4x9KfOszVjdPAOXG5jW8Vqj8=) 2: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: iaZ3s82xkjY2XfRTWiPnjnqnF2ySFKKm+AeAW0yRT+E=) 3: 983A5536450611F093EC3A65C4F9AE02.roa (hash: jXDJFKBYyl2AMr2aBeeaX3dJKta1vZTtNnECUVWIxl8=) 4: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: Z27ILnU+TOqVLLhIyXtiXXV0PlnGYmkYaaio5+3e2ug=) 5: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: U8BSX2DX6JtfXzvuoqYA9Tm3bqF1pxPrmS12/E0gdmw=) 6: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: 8uWfW9Bx2UJleM0TwlNLkikjSTgRwN2eIHzYdV+mzGQ=) 7: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: mH5FkT85wXX1fDkYIcXzDeEU3PHEwchgtocWPplcMrs=) 8: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: 3SvNLk7hW+Uo3wG2xJFv1wsrHQt1APNp92391QdFtgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5206 (0x1456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Aug 8 17:05:36 2025 GMT Not After : Aug 15 17:05:36 2025 GMT Subject: CN=68962e60-5409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:d5:e9:37:c9:51:06:32:60:4b:a0:6d:57: 46:4f:2d:9e:22:a9:d3:78:7d:e3:9a:a0:eb:2e:cb: 45:c5:10:3e:08:0a:c9:9d:67:0b:d3:c0:34:dd:06: 03:b7:b0:2d:cf:7f:4f:5f:33:fd:a7:95:d1:0f:93: 29:36:4c:62:37:b7:2a:3b:b6:20:e9:58:20:c2:fe: 31:f2:77:69:8c:7e:e5:ef:fb:76:d9:ee:e7:7f:15: 2d:43:23:f2:1e:94:32:af:d1:e0:ad:d3:f2:2c:6e: 19:db:2e:94:18:5c:38:ad:66:c7:89:87:51:39:af: cf:4b:4c:72:b0:96:5b:81:46:db:c0:6e:ab:51:f5: 85:33:ca:4a:23:db:9c:b8:b8:14:1c:07:55:b6:a8: ef:27:1a:d3:25:d9:f4:2e:9f:6c:8f:f1:81:32:94: 3b:50:a8:42:b4:79:ac:1e:ae:69:6d:6e:18:59:e8: c8:78:7b:57:7b:e4:84:af:6e:b9:d7:c2:16:37:21: 11:19:61:ca:80:60:54:67:46:bd:1c:8c:2a:eb:c9: e2:fe:37:65:04:d3:3b:5c:eb:b6:42:91:20:8e:d5: 86:73:eb:35:0b:62:fc:98:48:f6:74:b2:f6:aa:cf: 7f:06:ca:e1:01:00:e5:1e:f0:41:73:03:e6:e1:3c: 34:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FB:75:38:ED:DD:D6:D3:4F:58:4B:DA:CB:F1:0E:45:A1:36:A5:44 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:bc:8a:1b:70:5e:1c:a9:a8:88:28:cf:06:cd:5b:36:57:e7: 7f:a1:e9:10:96:ca:b1:03:ab:64:7c:6b:6d:5a:86:8f:be:dc: 7d:11:9c:ee:29:76:0c:42:bf:c4:f5:c7:82:01:d9:35:3e:33: 8b:10:c0:14:ad:4c:24:3d:4e:c7:39:7d:db:03:17:f2:b9:d7: 04:dc:0c:02:be:c5:05:6f:6d:6a:6b:84:fa:f4:ec:a7:13:cd: 9e:ac:04:dc:fc:22:35:3a:d0:e4:a3:49:8e:03:0f:53:b5:fc: 2a:c3:fd:34:36:3d:ed:3e:04:7e:1e:52:cc:4d:8b:a1:fb:47: 6a:de:42:c7:b9:6a:87:48:03:f9:7d:4c:40:8f:47:bf:e0:7b: 06:3b:8d:f1:de:09:c6:2e:81:b9:11:76:1d:ca:57:49:f0:ad: d2:43:c6:ac:db:34:15:96:9c:30:45:ba:e1:ad:17:20:29:ec: 06:ea:92:0a:54:78:a9:f7:80:11:b6:46:b3:35:b6:11:29:83: 51:c3:f4:87:12:9b:ee:e6:2e:5a:60:75:db:60:16:6a:07:20: ea:c9:05:56:3d:24:69:8e:a1:f1:03:78:43:14:5b:4f:61:9e: 70:08:c4:a7:d4:b3:b2:68:c0:6f:6a:42:e9:61:7f:c5:2c:91: 9f:b2:03:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwODA4MTcwNTM2WhcNMjUwODE1MTcwNTM2WjAYMRYwFAYD VQQDEw02ODk2MmU2MC01NDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPjV6TfJUQYyYEugbVdGTy2eIqnTeH3jmqDrLstFxRA+CArJnWcL08A03QYD t7Atz39PXzP9p5XRD5MpNkxiN7cqO7Yg6Vggwv4x8ndpjH7l7/t22e7nfxUtQyPy HpQyr9HgrdPyLG4Z2y6UGFw4rWbHiYdROa/PS0xysJZbgUbbwG6rUfWFM8pKI9uc uLgUHAdVtqjvJxrTJdn0Lp9sj/GBMpQ7UKhCtHmsHq5pbW4YWejIeHtXe+SEr265 18IWNyERGWHKgGBUZ0a9HIwq68ni/jdlBNM7XOu2QpEgjtWGc+s1C2L8mEj2dLL2 qs9/BsrhAQDlHvBBcwPm4Tw0bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMf7dTjt 3dbTT1hL2svxDkWhNqVEMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYvIobcF4cqaiIKM8GzVs2V+d/oekQlsqxA6tkfGttWoaPvtx9EZzu KXYMQr/E9ceCAdk1PjOLEMAUrUwkPU7HOX3bAxfyudcE3AwCvsUFb21qa4T69Oyn E82erATc/CI1OtDko0mOAw9Ttfwqw/00Nj3tPgR+HlLMTYuh+0dq3kLHuWqHSAP5 fUxAj0e/4HsGO43x3gnGLoG5EXYdyldJ8K3SQ8as2zQVlpwwRbrhrRcgKewG6pIK VHip94ARtkazNbYRKYNRw/SHEpvu5i5aYHXbYBZqByDqyQVWPSRpjqHxA3hDFFtP YZ5wCMSn1LOyaMBvakLpYX/FLJGfsgMw -----END CERTIFICATE-----Generated at Fri Aug 8 20:46:14 2025 by rpki-client