$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft File: rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json) Hash identifier: BBE696YcczV7NftgLInqwIXLvDdhf7gSznU52BZXx9c= Subject key identifier: D4:DC:91:00:CC:33:8F:4A:C4:6B:61:A1:DB:0A:FA:72:7D:A9:3B:33 Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Certificate serial: 24CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft Manifest number: 24AF Signing time: Fri 08 Aug 2025 15:51:39 +0000 Manifest this update: Fri 08 Aug 2025 15:51:39 +0000 Manifest next update: Fri 15 Aug 2025 15:51:39 +0000 Files and hashes: 1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: 4kA7KJ3LIpgISYENY8ITnOSoQiZcKsFrB3sBtjnGfGo=) 2: 174B2A3441B611F0A03F6C24C4F9AE02.roa (hash: x6GPjwO5sO5Bvm7pWp4Iun3mTm45HGe7z8yRruy5J90=) 3: 842CE8807AE311EF91F51E42C4F9AE02.roa (hash: yW1gxtnqZQt1zea/7tYkbc/ydhmgNTTD61RsdDWGpBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9420 (0x24cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Validity Not Before: Aug 8 15:51:39 2025 GMT Not After : Aug 15 15:51:39 2025 GMT Subject: CN=68961d0b-de37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:92:e4:4b:14:fa:ea:6b:03:c6:6b:25:df:10: c2:f2:e3:12:98:39:39:49:7c:2e:77:ad:cd:67:a2: bb:c8:76:c2:b7:60:5d:11:2a:2e:31:ba:ec:5f:98: 9f:69:8b:e9:85:a5:26:56:f7:8f:1f:9a:8f:f5:4d: 3a:e0:a6:61:89:66:62:cf:38:54:f8:a0:aa:39:9b: 93:18:a5:59:c9:54:a5:14:b1:03:b8:3a:b5:c7:89: 4e:76:9f:f9:bb:50:95:5f:7b:67:ae:9b:bb:a0:ca: 68:9f:bd:de:6d:09:32:cd:c1:94:a2:56:a1:c6:b3: 2c:3b:d6:ec:7b:96:b3:f3:53:a9:d9:a8:af:45:bc: 50:c0:86:75:5f:49:47:fa:c1:78:98:70:ec:d0:69: aa:34:c7:c1:51:a4:f1:f1:b7:de:e0:df:be:29:18: 75:dc:8e:c3:ca:a5:2d:15:86:e1:25:e7:74:90:81: 6f:a1:79:1d:7a:85:8d:58:1e:60:48:2a:2a:9a:ce: 8c:dc:f1:3b:75:a1:7e:6f:6c:80:13:af:24:ea:f1: 11:de:6b:10:28:38:2e:9e:ec:05:f3:8c:9d:cb:3f: ad:d1:c3:4b:04:c4:9c:03:e3:fb:74:ed:1f:b2:a9: 79:84:19:5b:00:f7:cd:43:01:9c:96:83:36:bd:eb: e9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DC:91:00:CC:33:8F:4A:C4:6B:61:A1:DB:0A:FA:72:7D:A9:3B:33 X509v3 Authority Key Identifier: keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:4c:bc:b8:86:d0:e2:4a:c6:8b:3f:76:b1:53:7d:b8:e6:5e: d9:31:74:25:cf:0e:4e:87:78:08:51:2b:8f:1e:84:07:c9:c6: 4a:2a:14:aa:44:4b:51:b5:cf:d6:30:99:05:69:69:1a:7b:71: 41:58:59:ec:56:51:49:14:1f:ec:d1:16:33:0e:32:e4:94:8d: d9:85:75:a3:30:6f:8f:0d:10:42:65:16:1d:23:16:cb:19:60: 18:c7:a3:5a:25:ff:d7:c8:42:62:91:70:d4:ee:22:2a:d0:d2: 20:43:ea:95:70:af:c0:ac:02:c5:86:6c:dd:95:44:e9:64:8f: a5:e2:02:9e:55:fa:95:d5:81:89:a6:3d:3e:2b:81:81:22:a9: 6a:dd:1d:44:39:45:a7:04:83:4b:cb:6b:3d:9e:50:f2:29:40: 55:c3:a2:a3:68:67:8e:3e:22:a5:3e:d5:77:fd:62:bf:f5:73: 16:8b:39:0e:6d:93:95:cb:b0:71:4f:50:fc:c0:c2:07:bb:2f: a0:ec:cc:45:dc:51:d4:d2:af:d4:09:9d:7a:71:72:fe:3a:56: bf:54:d1:75:68:07:40:31:8b:6d:c7:77:cb:58:0e:db:48:6c: 58:1e:20:6b:ef:0e:40:b4:3c:c0:7e:f4:09:d4:b7:be:7f:d7: d2:0a:86:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND OEYyRDkxQjUwHhcNMjUwODA4MTU1MTM5WhcNMjUwODE1MTU1MTM5WjAYMRYwFAYD VQQDEw02ODk2MWQwYi1kZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpLkSxT66msDxmsl3xDC8uMSmDk5SXwud63NZ6K7yHbCt2BdESouMbrsX5if aYvphaUmVvePH5qP9U064KZhiWZizzhU+KCqOZuTGKVZyVSlFLEDuDq1x4lOdp/5 u1CVX3tnrpu7oMpon73ebQkyzcGUolahxrMsO9bse5az81Op2aivRbxQwIZ1X0lH +sF4mHDs0GmqNMfBUaTx8bfe4N++KRh13I7DyqUtFYbhJed0kIFvoXkdeoWNWB5g SCoqms6M3PE7daF+b2yAE68k6vER3msQKDgunuwF84ydyz+t0cNLBMScA+P7dO0f sql5hBlbAPfNQwGcloM2vevp0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTckQDM M49KxGthodsK+nJ9qTszMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3 MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUNEMy84MTIyODZEMjQ3MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1 Ym5qV0V2TjAyNnpJOHRrYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTTLy4htDiSsaLP3axU3245l7ZMXQlzw5Oh3gIUSuPHoQHycZKKhSq REtRtc/WMJkFaWkae3FBWFnsVlFJFB/s0RYzDjLklI3ZhXWjMG+PDRBCZRYdIxbL GWAYx6NaJf/XyEJikXDU7iIq0NIgQ+qVcK/ArALFhmzdlUTpZI+l4gKeVfqV1YGJ pj0+K4GBIqlq3R1EOUWnBINLy2s9nlDyKUBVw6KjaGeOPiKlPtV3/WK/9XMWizkO bZOVy7BxT1D8wMIHuy+g7MxF3FHU0q/UCZ16cXL+Ola/VNF1aAdAMYttx3fLWA7b SGxYHiBr7w5AtDzAfvQJ1Le+f9fSCob+ -----END CERTIFICATE-----Generated at Sun Aug 10 14:00:23 2025 by rpki-client