$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json) Hash identifier: /qsyy6L+pdygMl0o0+Z1iyGz00m7ij8GpZjCLNZCYCY= Subject key identifier: 7E:1A:81:0F:B7:5B:FD:B0:DC:1D:EF:14:0E:23:8A:C3:3E:C0:5B:49 Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Certificate serial: 0BD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft Manifest number: 0BC3 Signing time: Sun 10 Aug 2025 18:55:27 +0000 Manifest this update: Sun 10 Aug 2025 18:55:26 +0000 Manifest next update: Sun 17 Aug 2025 18:55:26 +0000 Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: HB83D7nyLgpxfGXo2nhdcC0NTy5TiVH54O4jws4T8pk=) 2: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: dh5ymVZvIc7FqFzTtBzYEQEIMygfVmNQaVU/qA2YVgE=) 3: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: K2Zxx9ME49vXDeg1Ffdf+j0UFdQqBnMUQi0IozP8thk=) 4: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: W6nL3EukqFE9RFLXXry6g4CH+1Dbd14zPnwD38PnUxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3029 (0xbd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Validity Not Before: Aug 10 18:55:26 2025 GMT Not After : Aug 17 18:55:26 2025 GMT Subject: CN=6898eb1f-44af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:cf:af:b4:64:8e:92:16:5f:ca:10:19:88: 3d:45:82:7e:af:6e:88:fc:eb:f1:7b:6d:2c:59:88: a5:a2:c1:b9:fc:2f:73:b4:94:cc:13:86:eb:e2:48: cf:19:c6:01:c4:54:44:f8:b5:c2:64:6c:d8:bb:27: e2:b3:74:66:27:2c:ae:40:e9:5b:f2:0a:18:fc:d1: a1:d8:ae:bd:11:b6:b9:08:d7:04:05:c1:e3:3c:25: 6e:75:97:0e:ee:18:08:8a:e9:c8:03:75:f0:82:e3: 26:cf:1a:3f:90:e2:6d:86:6a:cf:ee:ff:10:20:cb: 30:45:30:e4:28:c1:d8:44:fc:83:71:be:5d:e9:ae: a8:4e:5a:fb:01:f0:0b:43:e1:b0:f3:4f:03:46:b8: 62:6a:b3:17:5d:88:74:2b:2b:47:b5:4d:82:7b:11: bb:88:68:48:21:79:c5:1d:b3:5d:03:9f:4c:17:84: 80:f8:85:12:53:e1:a9:b6:d6:b7:79:7b:5a:2b:cc: 54:7f:85:43:41:9c:09:a9:95:67:27:f5:3a:a6:57: 39:65:8f:db:1f:3f:a6:09:dd:7e:17:e2:90:8a:62: 49:f6:b7:5c:76:17:05:1f:6a:9c:56:28:34:92:5c: a5:08:8b:ad:13:64:33:5e:e2:54:52:d8:de:fc:e0: 53:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1A:81:0F:B7:5B:FD:B0:DC:1D:EF:14:0E:23:8A:C3:3E:C0:5B:49 X509v3 Authority Key Identifier: keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:43:5d:7c:33:b9:c1:1d:b2:2f:d4:11:60:15:fc:72:f4:0e: 0e:4c:61:2a:72:d0:f4:0b:4f:03:16:36:8c:f4:d6:76:9e:2e: 61:80:5b:4f:a9:7c:91:b3:60:3f:48:5b:c1:5b:d8:a9:b0:38: 6b:ab:d1:30:54:05:60:0a:f5:0f:48:dd:67:d4:d7:cc:4e:a4: 7a:bf:45:c1:95:2d:0f:e7:99:2f:7a:78:6b:92:75:e4:c4:6b: 3d:05:e2:49:34:7f:3b:ad:8e:6e:28:76:31:e2:05:01:e9:0d: be:ee:d9:4d:74:32:40:6d:12:8b:9c:e9:91:b0:68:50:cf:e9: 86:52:59:1e:d2:69:87:bf:f0:80:91:9c:a4:de:2e:a0:13:0d: 67:59:74:bb:e2:b0:b1:08:03:b4:aa:dc:c9:90:7c:37:a1:ad: 2d:a1:ab:75:78:f2:af:f5:7d:86:15:91:c3:60:5f:70:ad:a3: 5e:eb:54:93:e9:63:f7:61:d3:19:43:10:ba:7f:40:2f:af:43: e0:39:f1:ec:36:64:64:07:1c:1d:f4:5c:82:aa:f4:b8:ec:3e: c9:b8:31:39:68:d5:e1:94:ea:8d:90:e4:b3:c6:b4:3b:80:51: 5e:16:88:47:1a:cb:9e:75:46:19:eb:1b:3f:0e:f4:55:82:e4: 6f:a8:c5:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFOUIxMTAvBgNVBAUTKDk3NDk1ODE2RDZEQjQ5REZFREVBQzRDMTc0MjkxMjZG RTNERjk3RkIwHhcNMjUwODEwMTg1NTI2WhcNMjUwODE3MTg1NTI2WjAYMRYwFAYD VQQDEw02ODk4ZWIxZi00NGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUXPr7RkjpIWX8oQGYg9RYJ+r26I/Ovxe20sWYilosG5/C9ztJTME4br4kjP GcYBxFRE+LXCZGzYuyfis3RmJyyuQOlb8goY/NGh2K69Eba5CNcEBcHjPCVudZcO 7hgIiunIA3XwguMmzxo/kOJthmrP7v8QIMswRTDkKMHYRPyDcb5d6a6oTlr7AfAL Q+Gw808DRrhiarMXXYh0KytHtU2CexG7iGhIIXnFHbNdA59MF4SA+IUSU+Gptta3 eXtaK8xUf4VDQZwJqZVnJ/U6plc5ZY/bHz+mCd1+F+KQimJJ9rdcdhcFH2qcVig0 klylCIutE2QzXuJUUtje/OBT2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4agQ+3 W/2w3B3vFA4jisM+wFtJMB8GA1UdIwQYMBaAFJdJWBbW20nf7erEwXQpEm/j35f7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU5Qi83QTUzQTYxODI1 QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNkX3Q2c1RCZENrU2ItUGZs X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwbFlGdGJiU2RfdDZzVEJkQ2tTYi1QZmxfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU5Qi83QTUzQTYxODI1QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNk X3Q2c1RCZENrU2ItUGZsX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9Q118M7nBHbIv1BFgFfxy9A4OTGEqctD0C08DFjaM9NZ2ni5hgFtP qXyRs2A/SFvBW9ipsDhrq9EwVAVgCvUPSN1n1NfMTqR6v0XBlS0P55kvenhrknXk xGs9BeJJNH87rY5uKHYx4gUB6Q2+7tlNdDJAbRKLnOmRsGhQz+mGUlke0mmHv/CA kZyk3i6gEw1nWXS74rCxCAO0qtzJkHw3oa0toat1ePKv9X2GFZHDYF9wraNe61ST 6WP3YdMZQxC6f0Avr0PgOfHsNmRkBxwd9FyCqvS47D7JuDE5aNXhlOqNkOSzxrQ7 gFFeFohHGsuedUYZ6xs/DvRVguRvqMUH -----END CERTIFICATE-----Generated at Sun Aug 10 20:04:21 2025 by rpki-client