$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json) Hash identifier: ON4i+WnBytqSYq16eoRKhj43RpycuFc3TA3bHJ1fIyA= Subject key identifier: C4:D8:8F:10:05:45:0A:86:BE:CD:87:10:72:58:75:98:B2:04:22:49 Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft Manifest number: 89 Signing time: Sat 09 Aug 2025 07:02:07 +0000 Manifest this update: Sat 09 Aug 2025 07:02:07 +0000 Manifest next update: Sat 16 Aug 2025 07:02:07 +0000 Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: +4W6dWFe3C0lF8wUecXKbjXHzzbhbMbKmBiEqt2ZWV0=) 2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: 9YzGJkxen0bF7ZOSO15+u2xKU2H/RKyzN947mBYbnYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Validity Not Before: Aug 9 07:02:07 2025 GMT Not After : Aug 16 07:02:07 2025 GMT Subject: CN=6896f26f-aaf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:4e:8d:81:6f:94:b4:91:3a:50:ba:11:5b: 60:48:91:5b:48:68:50:0f:0d:c4:87:5d:ab:6e:cc: 95:5c:ce:51:fc:55:1e:34:5f:55:3f:60:b1:cf:d7: c4:66:04:ea:6e:11:f7:ef:9a:ee:9f:02:44:74:b8: 89:5e:6c:c4:e0:04:e2:df:90:88:22:5d:bc:ab:10: 9c:05:a0:1b:70:d5:2b:eb:10:47:34:28:16:14:b3: f8:43:b0:51:90:f6:24:9c:a6:b5:84:55:91:76:d6: 32:d5:1e:74:22:8c:bc:53:78:99:50:92:23:e9:9f: 16:db:88:6e:77:e1:47:38:7a:00:5a:a3:e1:55:03: 75:2e:60:2e:7f:72:5f:0b:89:e5:de:09:5c:2f:e1: bb:87:95:78:cc:b5:7a:3a:4d:90:c3:d0:e0:45:ab: 2d:94:12:69:46:af:6c:64:47:5e:dd:61:e4:b0:f0: 7b:77:3f:d2:e6:b7:58:90:10:1f:84:80:76:be:44: ba:ab:5c:89:5d:c3:39:21:19:5a:7b:0a:ab:8b:8c: f6:a0:6e:29:a4:b8:45:dd:63:25:03:a6:49:da:49: ce:f6:d4:7b:db:db:f5:33:82:4f:43:3f:2c:0d:ec: ce:d3:8d:37:ae:c3:88:db:53:81:9d:3f:7d:e6:46: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D8:8F:10:05:45:0A:86:BE:CD:87:10:72:58:75:98:B2:04:22:49 X509v3 Authority Key Identifier: keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:cb:e7:53:f8:bc:62:4a:05:67:1b:55:13:71:90:e4:bd:c6: e1:6a:08:7f:6a:41:8c:a1:f8:72:9d:81:cd:86:53:79:d0:17: 3e:93:5a:7d:01:72:43:cc:19:33:78:14:17:e4:b5:d7:8c:68: 83:6e:13:d0:f8:cb:d2:85:72:83:68:46:21:b1:8c:3e:51:e4: 82:f5:d1:bf:c0:3a:40:4e:f5:89:a6:25:e2:42:17:03:03:f9: 39:e0:09:0a:46:ce:81:7f:80:55:f2:55:a0:af:f6:85:55:b8: 40:ef:0f:f1:2e:ff:15:0a:5e:a5:30:10:8a:0e:12:ae:4d:53: f9:6c:36:ba:79:90:04:f9:d5:4e:60:d2:6a:3b:35:16:91:7f: 5d:13:83:7c:c4:cf:d0:6e:dd:a0:12:42:a4:f8:f4:d3:ab:c7: 2b:6b:0d:b2:53:d2:d4:28:6c:a3:7f:ae:0d:38:8e:27:81:27: 15:37:06:4e:4f:e0:6d:a7:34:36:a5:0f:ee:a6:a3:cc:29:6a: dd:f5:e9:e0:53:80:e5:99:71:96:fb:82:02:ef:71:e2:01:e9: cb:7f:52:ed:91:6b:30:da:08:ce:68:1e:ec:5e:64:79:07:f5: cf:b8:8d:e4:6c:1d:bd:09:5c:49:0e:af:3d:0a:40:76:6d:8d: 53:ed:ea:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKERCM0RGRDg2Q0VCRkVBRUQzQUFGMTVERUFFRTY5NjUy MzQ3NDZBMjkwHhcNMjUwODA5MDcwMjA3WhcNMjUwODE2MDcwMjA3WjAYMRYwFAYD VQQDEw02ODk2ZjI2Zi1hYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKZOjYFvlLSROlC6EVtgSJFbSGhQDw3Eh12rbsyVXM5R/FUeNF9VP2Cxz9fE ZgTqbhH375runwJEdLiJXmzE4ATi35CIIl28qxCcBaAbcNUr6xBHNCgWFLP4Q7BR kPYknKa1hFWRdtYy1R50Ioy8U3iZUJIj6Z8W24hud+FHOHoAWqPhVQN1LmAuf3Jf C4nl3glcL+G7h5V4zLV6Ok2Qw9DgRastlBJpRq9sZEde3WHksPB7dz/S5rdYkBAf hIB2vkS6q1yJXcM5IRlaewqri4z2oG4ppLhF3WMlA6ZJ2knO9tR729v1M4JPQz8s DezO0403rsOI21OBnT995kbfJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTYjxAF RQqGvs2HEHJYdZiyBCJJMB8GA1UdIwQYMBaAFNs9/YbOv+rtOq8V3q7mllI0dGop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC9BNzhGMUIxMkE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1MDZyeFhlcnVhV1VqUjBh aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6MzloczZfNnUwNnJ4WGVydWFXVWpSMGFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC9BNzhGMUIxMkE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1 MDZyeFhlcnVhV1VqUjBhaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5y+dT+LxiSgVnG1UTcZDkvcbhagh/akGMofhynYHNhlN50Bc+k1p9 AXJDzBkzeBQX5LXXjGiDbhPQ+MvShXKDaEYhsYw+UeSC9dG/wDpATvWJpiXiQhcD A/k54AkKRs6Bf4BV8lWgr/aFVbhA7w/xLv8VCl6lMBCKDhKuTVP5bDa6eZAE+dVO YNJqOzUWkX9dE4N8xM/Qbt2gEkKk+PTTq8craw2yU9LUKGyjf64NOI4ngScVNwZO T+BtpzQ2pQ/upqPMKWrd9engU4DlmXGW+4IC73HiAenLf1LtkWsw2gjOaB7sXmR5 B/XPuI3kbB29CVxJDq89CkB2bY1T7eoK -----END CERTIFICATE-----Generated at Mon Aug 11 02:03:38 2025 by rpki-client