$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft File: mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json) Hash identifier: pnC8kkuljmlVZSHCtJeNebVbEx7ykRdD63UWQ0jppcY= Subject key identifier: CF:C7:88:B7:DE:0B:C2:B9:B3:45:4C:06:C3:44:E8:B2:F8:83:C6:9B Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft Manifest number: 0142 Signing time: Sat 09 Aug 2025 04:44:29 +0000 Manifest this update: Sat 09 Aug 2025 04:44:28 +0000 Manifest next update: Sat 16 Aug 2025 04:44:28 +0000 Files and hashes: 1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: NXT5/8bKsPRY7UqrwGCu+dW+zh9f8oOrEp1+4Q8eIoU=) 2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: WCeA5fOBWFOKkLb8P073mp5LsBAsFbEzZHlJDI60+6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Validity Not Before: Aug 9 04:44:28 2025 GMT Not After : Aug 16 04:44:28 2025 GMT Subject: CN=6896d22d-1a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:db:e5:fd:06:c2:0b:fb:c5:0e:20:cb:10: ac:2f:72:04:e0:3f:b6:ab:67:eb:08:61:4e:ee:16: c2:83:98:2c:4f:1c:58:23:e2:fd:9f:c2:00:19:cd: fb:95:3d:8c:32:3f:49:1f:52:ab:6a:8b:7f:e5:5d: 34:f3:35:86:11:be:9f:43:4d:d9:b2:ab:1c:ba:34: 20:15:11:9c:41:ae:0b:da:b1:a9:44:65:84:24:05: cb:0a:ba:00:22:3a:f5:8a:ee:e3:b9:7d:b1:ee:b1: 26:2c:f7:4e:78:0f:66:bd:cc:f6:5c:cd:1e:4e:48: 4d:3a:75:1c:cd:df:35:f0:ff:f2:e0:d0:c5:80:dd: df:4a:9f:0f:1b:bb:08:b8:6a:16:d7:b9:72:8a:87: 7c:7f:36:55:16:f2:e4:1b:72:8b:d2:95:b5:a5:42: b8:2d:e5:c5:58:4c:26:23:e0:06:39:65:a7:56:ab: 92:1f:98:ba:1b:c8:ad:60:63:70:68:be:13:a8:53: e9:e2:ee:24:b4:d0:f6:14:b2:7e:2b:e6:2d:56:28: 35:ad:9d:22:fe:48:58:83:8f:ad:9c:70:e5:6e:df: a2:3f:20:a9:ae:ec:a1:af:f7:a0:4a:34:a6:7c:31: e5:96:11:c9:1e:84:31:d8:0c:b3:8d:69:d1:a9:db: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C7:88:B7:DE:0B:C2:B9:B3:45:4C:06:C3:44:E8:B2:F8:83:C6:9B X509v3 Authority Key Identifier: keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e0:ef:a4:62:31:78:69:08:12:45:60:15:5a:86:eb:01:92: ae:36:b4:b7:08:8c:d9:81:26:ed:95:2e:0d:e2:9d:ad:ca:39: e0:67:e2:f7:a0:cf:f9:2d:58:3c:c9:0c:a3:66:8f:8e:64:66: b3:d0:62:8c:36:e9:1a:6e:00:36:2a:75:f9:3a:1a:c5:98:47: 77:c5:23:84:ed:fe:09:d0:5d:89:1f:eb:ed:5a:35:15:40:3e: ca:65:38:fe:43:02:61:80:08:6c:b6:b9:80:cc:3d:e0:aa:15: c4:2c:95:d4:6d:dd:0d:18:fc:9a:e5:f4:7d:b3:14:c6:0a:e6: e2:e6:3d:ad:29:d7:87:e5:a4:85:c8:cd:f7:a4:99:85:f1:b3: 9a:b7:51:c3:d5:08:6b:49:b7:17:0e:44:4d:e4:43:49:40:35: aa:e4:fd:e3:1b:f0:ea:5d:93:d8:a1:4b:66:74:33:f2:2c:23: c4:5a:37:df:6c:2e:52:d2:9a:02:92:d8:82:31:d5:e4:54:7b: 2c:49:b7:57:07:40:d9:9a:ee:d5:35:9f:b7:6f:05:13:99:71: af:9e:f2:09:84:92:ea:b1:46:a7:a0:5a:7b:2b:68:4c:10:68: 74:60:c3:90:e4:19:ee:36:fd:86:a1:21:5c:d1:54:35:13:b7: 1f:fd:4c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk1OTExMTAvBgNVBAUTKDlBRDM0OUY0NTQ4NTNCQjE4OTJBRkVGNjA0OEMxODcy NTgwNTc3NjEwHhcNMjUwODA5MDQ0NDI4WhcNMjUwODE2MDQ0NDI4WjAYMRYwFAYD VQQDEw02ODk2ZDIyZC0xYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY7b5f0Gwgv7xQ4gyxCsL3IE4D+2q2frCGFO7hbCg5gsTxxYI+L9n8IAGc37 lT2MMj9JH1Kraot/5V008zWGEb6fQ03ZsqscujQgFRGcQa4L2rGpRGWEJAXLCroA Ijr1iu7juX2x7rEmLPdOeA9mvcz2XM0eTkhNOnUczd818P/y4NDFgN3fSp8PG7sI uGoW17lyiod8fzZVFvLkG3KL0pW1pUK4LeXFWEwmI+AGOWWnVquSH5i6G8itYGNw aL4TqFPp4u4ktND2FLJ+K+YtVig1rZ0i/khYg4+tnHDlbt+iPyCpruyhr/egSjSm fDHllhHJHoQx2AyzjWnRqds52QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/HiLfe C8K5s0VMBsNE6LL4g8abMB8GA1UdIwQYMBaAFJrTSfRUhTuxiSr+9gSMGHJYBXdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTU5MS9ERUQ4MzU2ODg5 MkMxMUVFOTQ3NzgxNkRDNEY5QUUwMi9tdE5KOUZTRk83R0pLdjcyQkl3WWNsZ0Zk MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL210Tko5RlNGTzdHSkt2NzJCSXdZY2xnRmQyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTU5MS9ERUQ4MzU2ODg5MkMxMUVFOTQ3NzgxNkRDNEY5QUUwMi9tdE5KOUZTRk83 R0pLdjcyQkl3WWNsZ0ZkMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq4O+kYjF4aQgSRWAVWobrAZKuNrS3CIzZgSbtlS4N4p2tyjngZ+L3 oM/5LVg8yQyjZo+OZGaz0GKMNukabgA2KnX5OhrFmEd3xSOE7f4J0F2JH+vtWjUV QD7KZTj+QwJhgAhstrmAzD3gqhXELJXUbd0NGPya5fR9sxTGCubi5j2tKdeH5aSF yM33pJmF8bOat1HD1QhrSbcXDkRN5ENJQDWq5P3jG/DqXZPYoUtmdDPyLCPEWjff bC5S0poCktiCMdXkVHssSbdXB0DZmu7VNZ+3bwUTmXGvnvIJhJLqsUanoFp7K2hM EGh0YMOQ5BnuNv2GoSFc0VQ1E7cf/Uw3 -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:27 2025 by rpki-client