$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json) Hash identifier: fIv/hKWCJkYEGdNfWP6OOxaDEb42iGJ/w3MwUqKxavY= Subject key identifier: A2:99:F5:F8:AA:04:6D:93:78:F5:93:1F:52:09:1D:E1:B8:7E:BF:22 Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft Manifest number: 037E Signing time: Mon 11 Aug 2025 01:09:16 +0000 Manifest this update: Mon 11 Aug 2025 01:09:16 +0000 Manifest next update: Mon 18 Aug 2025 01:09:16 +0000 Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: 3OjVPCH+VDfAjSD0chZG7ZyLFVQA0oYfOXIK0k0ipLk=) 2: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: ETk4yckaIN4zob6tGTfs6vKP9pAP7tygu9LlkOfrkSU=) 3: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: HgWyC5qLUIQClxHJEnvtF6CqTubXKBmljCRRSfRxHP0=) 4: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: BIcjECgUWsQ4hPpYoXe2O+HNYZxFLkHcHH/BGhRf0OQ=) 5: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: AVY0d5/NDiEX5/XcV/ITBN3dlkJ2RLeGLkg0Eo543zw=) 6: E0AE0960457811EDA501504AC4F9AE02.roa (hash: 1sOapiiUanKllNe/+g0UPifOXHz9i1edOTGe9WGOS80=) 7: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: R2unzPo0vV/yNS9/vpK5AzQ4ju39sQQVsnw2HUUIUOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: Aug 11 01:09:16 2025 GMT Not After : Aug 18 01:09:16 2025 GMT Subject: CN=689942bc-2c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:20:4d:01:48:8c:9a:0a:ba:6a:4f:ff:ab:59: 9c:1f:0d:c3:48:b2:f6:05:1a:27:ff:f3:d8:8e:fc: 75:f1:f3:f1:75:8e:11:a0:3e:28:c5:83:ba:f3:41: 44:0f:fe:53:09:9d:b0:f3:5c:c3:25:77:fa:fc:b7: cd:68:98:dc:42:c2:e0:4d:05:81:88:75:09:ea:c3: b5:25:70:a0:f4:ba:46:8f:6b:c2:78:ef:07:38:14: 90:17:5e:51:b9:e7:85:c9:74:f6:0a:7a:b9:69:b3: 6d:d2:20:2d:d5:85:cd:80:77:a7:bc:2c:c5:bc:71: 65:da:5d:0b:80:a1:36:cd:70:c4:56:65:f5:84:90: 2e:7e:68:96:3a:fb:83:b5:15:5c:19:17:25:2d:f8: d8:a3:6e:7f:c5:ab:7a:f3:82:59:d3:e4:0d:c9:13: 1d:c5:cb:83:f1:06:2d:19:5b:18:e9:4c:66:b3:d8: b0:7c:ad:b2:9d:d0:a7:08:60:d4:9a:a7:b5:d0:32: a9:f9:0f:d4:fb:01:66:df:67:db:d3:c2:a5:40:6e: d9:4c:9a:51:7d:dd:e2:47:48:14:f3:b2:3d:a4:9f: 14:6c:0f:13:ba:8c:26:99:85:a4:e0:bf:5b:d6:c8: 3e:15:7a:8f:8e:a8:24:eb:9b:03:9e:e3:e5:f0:a3: b1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:99:F5:F8:AA:04:6D:93:78:F5:93:1F:52:09:1D:E1:B8:7E:BF:22 X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:40:8a:bc:b4:eb:e6:55:20:ac:42:c8:65:46:7b:b4:d1:f9: ae:50:89:c9:59:1a:03:4b:56:f6:66:6e:78:09:db:04:8c:0b: 64:36:ef:eb:54:24:9c:15:76:3e:d5:79:f4:0a:05:1d:88:e1: 29:e8:8b:b8:5e:33:2b:b2:c9:a8:17:85:b0:e1:38:04:c2:6f: d0:0e:fc:17:d4:1d:8d:d4:d5:97:45:bf:8f:88:85:87:21:66: 6f:96:0a:40:38:2b:1f:82:c3:c3:e7:77:72:76:bd:50:ee:e5: ef:83:9c:24:ea:21:2e:d1:e9:65:c7:4f:1e:53:95:5b:5e:de: ec:28:02:08:1a:dd:99:b7:b5:47:fe:90:70:d5:56:63:53:6c: 56:ab:fc:a4:af:bf:c5:bf:0a:46:ac:25:dc:12:12:3d:46:e0: b5:cf:ca:5a:54:47:22:7a:77:0f:d7:13:03:14:47:2c:9a:8f: a6:59:1f:e9:47:c4:fb:14:eb:a5:8b:cd:da:de:30:aa:a4:1d: 69:6f:00:c2:1a:82:0a:52:d6:15:74:2f:6c:f9:07:01:65:47: 2f:e1:a7:df:d1:2c:a1:75:cd:e1:8c:15:08:98:1a:72:7c:8e: ae:79:02:23:d1:12:31:aa:c6:7c:92:ae:b8:8f:60:ed:98:10: 74:d3:a0:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjUwODExMDEwOTE2WhcNMjUwODE4MDEwOTE2WjAYMRYwFAYD VQQDEw02ODk5NDJiYy0yYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7CBNAUiMmgq6ak//q1mcHw3DSLL2BRon//PYjvx18fPxdY4RoD4oxYO680FE D/5TCZ2w81zDJXf6/LfNaJjcQsLgTQWBiHUJ6sO1JXCg9LpGj2vCeO8HOBSQF15R ueeFyXT2Cnq5abNt0iAt1YXNgHenvCzFvHFl2l0LgKE2zXDEVmX1hJAufmiWOvuD tRVcGRclLfjYo25/xat684JZ0+QNyRMdxcuD8QYtGVsY6Uxms9iwfK2yndCnCGDU mqe10DKp+Q/U+wFm32fb08KlQG7ZTJpRfd3iR0gU87I9pJ8UbA8TuowmmYWk4L9b 1sg+FXqPjqgk65sDnuPl8KOx5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKZ9fiq BG2TePWTH1IJHeG4fr8iMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjgzNy85RDkwQUI2MkMxNUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRw Ymo2X09BTk95Z20tS3FDdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0QIq8tOvmVSCsQshlRnu00fmuUInJWRoDS1b2Zm54CdsEjAtkNu/r VCScFXY+1Xn0CgUdiOEp6Iu4XjMrssmoF4Ww4TgEwm/QDvwX1B2N1NWXRb+PiIWH IWZvlgpAOCsfgsPD53dydr1Q7uXvg5wk6iEu0ellx08eU5VbXt7sKAIIGt2Zt7VH /pBw1VZjU2xWq/ykr7/FvwpGrCXcEhI9RuC1z8paVEciencP1xMDFEcsmo+mWR/p R8T7FOuli83a3jCqpB1pbwDCGoIKUtYVdC9s+QcBZUcv4aff0Syhdc3hjBUImBpy fI6ueQIj0RIxqsZ8kq64j2DtmBB006Bb -----END CERTIFICATE-----Generated at Mon Aug 11 07:34:22 2025 by rpki-client