$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft File: 9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json) Hash identifier: 536TZq+wP11WpoMFqse2CRldTOhIDwn2Do4hcGAoFzI= Subject key identifier: 06:DC:C9:C5:92:67:43:3E:2E:1A:1D:EC:CB:08:57:7A:EB:30:51:2A Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Certificate serial: 0490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft Manifest number: 0452 Signing time: Sat 09 Aug 2025 00:57:29 +0000 Manifest this update: Sat 09 Aug 2025 00:57:29 +0000 Manifest next update: Sat 16 Aug 2025 00:57:29 +0000 Files and hashes: 1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: lcgYK+xRkKG71qUa0GY4bQ7hEVURt6CdPEt4O6KzhtA=) 2: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (hash: jw0OS28NBUixcPBkwOHR1vk2bGtDUl1DjQdu4UsyyXU=) 3: 976C4E84F72711EFB800B84BC4F9AE02.roa (hash: yyqYiyN6Yt2drA5esyg23pSPV3UCCGrSIBo6P8TjMZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Validity Not Before: Aug 9 00:57:29 2025 GMT Not After : Aug 16 00:57:29 2025 GMT Subject: CN=68969cf9-fe6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:d7:32:e3:88:82:a8:f0:b9:48:3d:70:4e: d4:2b:27:fc:84:16:23:35:90:e5:22:4d:65:fa:e1: b4:56:97:73:35:38:89:e2:38:bb:2f:6b:b8:43:b7: 5a:18:2d:4c:47:e7:65:5d:f1:83:0d:cf:54:cd:84: a7:f5:d7:0f:cd:39:50:30:11:ce:1c:cc:08:32:ac: 88:aa:05:75:b6:b7:9a:65:6b:dd:11:d1:da:de:24: 1a:0d:96:5c:9b:5e:71:70:0c:df:57:0f:09:32:eb: 37:fd:96:02:5b:06:59:09:33:92:12:96:6c:85:ff: 81:eb:df:36:8e:ab:54:a3:dd:be:ba:08:db:09:03: 30:2d:54:b0:82:8c:d2:ac:63:aa:1a:ba:67:ec:76: 4f:25:d3:03:84:3b:41:a5:4f:20:71:bc:01:79:55: 26:bf:a6:d2:7c:8e:4b:1e:51:36:95:41:84:ff:97: af:77:46:92:04:08:6f:d0:44:8d:bf:b8:a4:c4:29: 23:11:e7:bf:79:e1:d7:f7:1e:19:1e:58:cb:86:66: dc:ce:5a:88:fc:52:9c:7f:b7:f5:19:e7:f6:af:d4: 1b:2d:58:a0:4a:97:06:cf:ff:91:86:29:38:a5:fd: c2:a0:22:ad:6a:c9:d7:e0:85:5a:a5:bc:69:17:9f: 51:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DC:C9:C5:92:67:43:3E:2E:1A:1D:EC:CB:08:57:7A:EB:30:51:2A X509v3 Authority Key Identifier: keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b4:9d:fa:e5:ea:43:68:a4:c4:37:e5:4b:6f:b2:53:c4:17: 60:0c:45:26:ac:a0:a3:62:3a:c0:a6:1f:c3:fc:2c:01:01:47: 64:1b:41:e4:2d:4e:34:c3:cc:2c:b0:e4:d4:f3:36:89:e3:9d: a8:65:21:09:cd:ec:d6:ce:d0:6d:c4:d6:d5:57:20:71:d9:41: 8f:fb:c3:14:9f:5f:ce:cb:0e:07:e5:95:66:d4:47:af:fc:d4: b3:3f:bf:1b:13:66:19:2d:d8:4f:ce:44:e7:4b:ce:dc:21:de: c5:aa:28:f1:f2:14:6f:08:60:c8:4d:6f:4f:33:64:84:c3:d0: 13:d1:6b:1e:93:8a:05:a5:72:2d:a0:02:15:40:cb:ac:ce:55: 92:05:fc:e7:b3:c7:4b:0a:c4:d0:71:4c:c0:df:6c:cd:63:2d: 9c:2a:62:45:98:0a:b1:cc:b6:94:e6:3b:9d:1d:0d:01:47:a3: 5d:05:c7:af:2a:2d:52:ba:d5:c7:26:51:80:41:f8:d6:87:70: 29:fd:4c:72:ff:d9:20:b3:46:2e:40:af:d1:c2:db:e5:ad:fb: 2d:1b:65:30:6f:9b:fd:bf:5f:90:f5:95:df:8b:79:22:80:3b: 1e:66:40:fd:d1:fb:3e:35:27:a3:20:3e:bd:48:78:b7:aa:b9: 75:d5:d1:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2MUIxMTAvBgNVBAUTKEY1MzkyOTE5MTlDREUxNDRCMDM0RUYyODhCMEE2MzQ3 ODNFODJDN0YwHhcNMjUwODA5MDA1NzI5WhcNMjUwODE2MDA1NzI5WjAYMRYwFAYD VQQDEw02ODk2OWNmOS1mZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5LXMuOIgqjwuUg9cE7UKyf8hBYjNZDlIk1l+uG0VpdzNTiJ4ji7L2u4Q7da GC1MR+dlXfGDDc9UzYSn9dcPzTlQMBHOHMwIMqyIqgV1treaZWvdEdHa3iQaDZZc m15xcAzfVw8JMus3/ZYCWwZZCTOSEpZshf+B6982jqtUo92+ugjbCQMwLVSwgozS rGOqGrpn7HZPJdMDhDtBpU8gcbwBeVUmv6bSfI5LHlE2lUGE/5evd0aSBAhv0ESN v7ikxCkjEee/eeHX9x4ZHljLhmbczlqI/FKcf7f1Gef2r9QbLVigSpcGz/+Rhik4 pf3CoCKtasnX4IVapbxpF59R4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbcycWS Z0M+Lhod7MsIV3rrMFEqMB8GA1UdIwQYMBaAFPU5KRkZzeFEsDTvKIsKY0eD6Cx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzYxQi81MUVGRkEzMDgy NjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRVU3dOTzhvaXdwalI0UG9M SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUa3BHUm5ONFVTd05POG9pd3BqUjRQb0xIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzYxQi81MUVGRkEzMDgyNjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRV U3dOTzhvaXdwalI0UG9MSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKtJ365epDaKTEN+VLb7JTxBdgDEUmrKCjYjrAph/D/CwBAUdkG0Hk LU40w8wssOTU8zaJ452oZSEJzezWztBtxNbVVyBx2UGP+8MUn1/Oyw4H5ZVm1Eev /NSzP78bE2YZLdhPzkTnS87cId7Fqijx8hRvCGDITW9PM2SEw9AT0Wsek4oFpXIt oAIVQMuszlWSBfzns8dLCsTQcUzA32zNYy2cKmJFmAqxzLaU5judHQ0BR6NdBcev Ki1SutXHJlGAQfjWh3Ap/Uxy/9kgs0YuQK/RwtvlrfstG2Uwb5v9v1+Q9ZXfi3ki gDseZkD90fs+NSejID69SHi3qrl11dHN -----END CERTIFICATE-----Generated at Sat Aug 9 02:59:19 2025 by rpki-client