$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json) Hash identifier: Sgtf/+u0ixwnEyOKL5e8FhN3XGCJkESdBbaaTLczi+U= Subject key identifier: 9A:9E:E7:A0:79:DC:C4:C8:30:75:96:FF:1D:2B:34:22:35:7D:19:19 Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Certificate serial: 0B7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft Manifest number: 0B71 Signing time: Sun 10 Aug 2025 19:04:34 +0000 Manifest this update: Sun 10 Aug 2025 19:04:33 +0000 Manifest next update: Sun 17 Aug 2025 19:04:33 +0000 Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: mEb8Cvd81okc5eKxrnKbmC0zDDAYwUz0MFH2ntHWGNg=) 2: A79D17F2361111EA95391375C4F9AE02.roa (hash: tDsZ4GzDIlAFVIQZZ0Fw0ct73AL//Nys5aPjeishX2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2940 (0xb7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Validity Not Before: Aug 10 19:04:33 2025 GMT Not After : Aug 17 19:04:33 2025 GMT Subject: CN=6898ed41-b6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:fe:13:20:57:9f:cf:94:97:f0:39:23:ed: fc:8a:67:a7:d0:fb:c3:81:7b:4e:95:11:ef:09:85: 36:84:f5:33:d9:73:20:01:fe:35:5c:c9:20:36:73: 70:5c:ce:c6:4a:87:75:d1:34:56:cf:ec:7f:52:f0: bd:94:a3:17:ce:d7:e4:3b:a4:06:5b:eb:cd:58:11: be:cf:e6:d2:0f:63:7f:d2:2f:4f:25:a3:14:4d:af: ba:07:83:fe:ed:3e:a5:75:1c:8c:6d:87:29:dd:43: 59:20:28:46:a0:87:80:2a:8f:b7:4d:7a:a2:c7:53: 70:1c:fd:9a:33:bb:5c:15:3e:b8:fd:cd:d7:53:b4: 6a:bb:9a:0c:69:e2:70:78:8c:ce:c9:d2:55:d8:8c: 66:a6:e7:c8:be:18:8a:6c:c4:27:77:c5:66:af:95: f6:c7:a7:38:cc:a5:23:15:7c:2f:95:a3:d2:2b:27: d7:17:14:f3:96:1f:86:c2:25:0d:f8:4c:db:ec:01: 80:dc:bb:d2:a1:b3:60:30:bd:76:0a:bd:ec:87:3f: c1:50:d6:44:cb:9e:a8:c2:a4:08:9b:34:c0:99:5c: df:44:a7:95:02:2c:c7:38:5b:06:2a:11:3f:57:26: d2:d1:cd:52:c9:79:1f:8a:47:c5:8c:62:3d:cb:33: c8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9E:E7:A0:79:DC:C4:C8:30:75:96:FF:1D:2B:34:22:35:7D:19:19 X509v3 Authority Key Identifier: keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:dc:a5:63:9f:fe:8e:30:a7:3b:b3:4f:64:c6:b6:94:6f:65: b7:63:9d:08:06:34:06:31:70:9e:a7:96:33:25:36:de:f6:47: 89:34:c9:15:23:6e:36:65:58:d2:cd:f0:48:52:90:ce:b6:52: cf:87:9d:72:4c:9d:da:99:0e:9d:05:dc:fa:ed:f5:91:a3:cd: 71:46:09:a3:c6:51:52:c5:7b:78:b8:f8:47:ec:27:59:4d:bb: 5d:d0:ff:2c:1c:23:1d:b1:a7:fc:25:dc:c6:d7:e4:5d:02:1d: 1f:3b:8d:06:ca:6a:2b:fd:fe:a5:95:41:6c:94:8d:7a:48:67: ef:2b:36:ea:2d:12:90:6c:bc:8a:ef:a6:a3:9b:01:d4:d1:17: 60:6c:9b:83:c0:35:51:39:1b:6e:28:63:6c:78:6a:82:cb:4e: 46:d6:dc:79:7d:6f:96:58:c2:0f:56:13:db:5c:4b:63:bc:80: ca:93:9a:9b:68:d8:ba:e6:82:6d:1a:f4:a7:00:36:f6:66:68: 16:20:d2:90:64:de:af:63:de:c8:11:b5:4a:20:c6:1f:9c:68: 2d:e5:19:e8:c3:76:d5:cc:74:9f:d9:54:63:fc:89:f9:ea:36: 77:c8:24:26:33:dd:22:1e:89:88:14:36:5d:68:4f:89:39:40: cd:3d:61:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNTExMTAvBgNVBAUTKEY0RUNCNTNFQzIzMDUzOUMwQjU3RTU5QjQ2N0QxNTRG QURFQjM5ODkwHhcNMjUwODEwMTkwNDMzWhcNMjUwODE3MTkwNDMzWjAYMRYwFAYD VQQDEw02ODk4ZWQ0MS1iNmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUX+EyBXn8+Ul/A5I+38imen0PvDgXtOlRHvCYU2hPUz2XMgAf41XMkgNnNw XM7GSod10TRWz+x/UvC9lKMXztfkO6QGW+vNWBG+z+bSD2N/0i9PJaMUTa+6B4P+ 7T6ldRyMbYcp3UNZIChGoIeAKo+3TXqix1NwHP2aM7tcFT64/c3XU7Rqu5oMaeJw eIzOydJV2IxmpufIvhiKbMQnd8Vmr5X2x6c4zKUjFXwvlaPSKyfXFxTzlh+GwiUN +Ezb7AGA3LvSobNgML12Cr3shz/BUNZEy56owqQImzTAmVzfRKeVAizHOFsGKhE/ VybS0c1SyXkfikfFjGI9yzPISwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqe56B5 3MTIMHWW/x0rNCI1fRkZMB8GA1UdIwQYMBaAFPTstT7CMFOcC1flm0Z9FU+t6zmJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE1MS9GOTI1QjM1MDM2 MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1d0xWLVdiUm4wVlQ2M3JP WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlPeTFQc0l3VTV3TFYtV2JSbjBWVDYzck9Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE1MS9GOTI1QjM1MDM2MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1 d0xWLVdiUm4wVlQ2M3JPWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi3KVjn/6OMKc7s09kxraUb2W3Y50IBjQGMXCep5YzJTbe9keJNMkV I242ZVjSzfBIUpDOtlLPh51yTJ3amQ6dBdz67fWRo81xRgmjxlFSxXt4uPhH7CdZ Tbtd0P8sHCMdsaf8JdzG1+RdAh0fO40Gymor/f6llUFslI16SGfvKzbqLRKQbLyK 76ajmwHU0RdgbJuDwDVRORtuKGNseGqCy05G1tx5fW+WWMIPVhPbXEtjvIDKk5qb aNi65oJtGvSnADb2ZmgWINKQZN6vY97IEbVKIMYfnGgt5Rnow3bVzHSf2VRj/In5 6jZ3yCQmM90iHomIFDZdaE+JOUDNPWE4 -----END CERTIFICATE-----Generated at Mon Aug 11 10:35:55 2025 by rpki-client