$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json) Hash identifier: RP7a21jXyXB21olyzmUEJfHcDZvvsmJM26eRpzyOs7Q= Subject key identifier: A7:87:01:79:5E:F2:51:96:E8:02:74:2B:8D:BF:BC:36:37:4F:51:CE Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft Manifest number: 0162 Signing time: Sat 09 Aug 2025 04:21:16 +0000 Manifest this update: Sat 09 Aug 2025 04:21:15 +0000 Manifest next update: Sat 16 Aug 2025 04:21:15 +0000 Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: Hxp5K5oIEVESYHsDD7CutfuGfEHgy5v0CkmVxszTtG4=) 2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: lw98bEtKYAV3W3eLzVIhHAUrtXOXdYQymX4EcxFqPzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Validity Not Before: Aug 9 04:21:15 2025 GMT Not After : Aug 16 04:21:15 2025 GMT Subject: CN=6896ccbb-c9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:b4:24:36:a5:39:56:e7:88:b9:7c:2d:30: 01:1f:93:0a:43:7a:d8:d4:9f:8d:f2:ba:79:70:41: 22:2d:fb:d4:df:88:72:44:52:ad:13:9e:88:79:ad: 02:e1:59:40:9b:8a:fc:7c:58:7f:3d:b6:b4:ce:e5: 0b:1a:0e:16:f7:51:6e:a7:c9:d2:16:eb:07:b5:3e: e1:9c:1c:1c:3d:e7:15:9f:81:92:2e:58:42:7e:80: d6:f4:93:95:6b:55:0b:b0:c1:e2:89:9d:51:de:4c: 61:25:35:fd:9d:47:21:78:b2:94:8e:1b:a3:2f:a7: b8:d7:59:a8:70:e3:e5:31:d7:8c:d0:e9:ea:15:9c: 9d:2b:f4:56:d0:12:f2:51:96:0d:49:0c:e0:52:a1: 69:5f:32:3b:b2:8a:7a:02:72:a0:78:13:af:bb:33: 12:28:d0:29:99:8e:d1:4a:ae:92:bb:e4:20:df:2c: fa:27:ec:81:b6:68:d5:07:30:41:e4:1e:b8:e1:a0: d7:22:88:e9:8f:f7:6e:ea:99:b2:b4:2c:bb:f1:69: 11:92:fd:15:36:c9:f4:8c:5e:b9:9c:f3:52:85:1c: 8b:30:ae:a5:37:2f:87:a4:20:42:9c:b3:1d:48:d1: 4d:cc:e4:14:b8:09:4b:00:d2:c2:4d:6f:ee:71:b9: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:87:01:79:5E:F2:51:96:E8:02:74:2B:8D:BF:BC:36:37:4F:51:CE X509v3 Authority Key Identifier: keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a8:68:38:28:d5:74:17:1a:33:63:af:ab:3d:68:58:2c:e3: 37:3b:a6:a7:88:e0:9b:a7:19:fc:5c:4c:5e:23:41:2f:f6:2a: 09:46:6d:b0:37:cb:dd:66:62:a3:b2:2a:9d:2c:83:2f:0b:6c: cc:f8:b1:2d:89:bc:0c:8b:17:24:e6:56:95:4b:ec:80:99:42: 2e:36:43:24:d9:9e:98:8e:65:b8:27:f5:1e:9f:90:1c:40:20: ec:ab:58:e8:cd:92:14:d5:a6:d5:22:19:ab:73:b3:ee:f7:5c: 9a:61:07:dc:f3:f2:f4:0f:b8:a5:45:07:f7:16:f8:73:7f:cb: 5f:c9:24:59:dd:7e:0a:17:06:55:29:2a:b4:de:ad:9a:30:4d: 35:b5:46:50:36:f2:f0:ee:5d:5b:e0:f6:b4:fa:7c:bb:39:0d: e7:cb:f0:24:78:6b:d5:ee:40:a0:7f:d6:77:58:03:64:47:c5: 4b:72:9c:49:fe:80:59:12:22:f2:ff:61:c3:06:61:95:5b:d0: 23:9e:b4:53:7d:d8:8a:d4:31:84:39:af:46:06:64:a7:d2:8e: 3c:0b:71:92:95:6b:c6:c7:d8:ac:10:f9:cf:1a:16:23:7a:28: cd:60:ec:97:73:e9:be:ba:f8:31:1b:2b:7a:82:74:e3:89:f9: 99:bc:3d:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFRjUxMTAvBgNVBAUTKDk4RjRFRDFFQTU2RUZFMzdDQTEzNEY4NzZBOTY1RjJB QzZGQTM3NDgwHhcNMjUwODA5MDQyMTE1WhcNMjUwODE2MDQyMTE1WjAYMRYwFAYD VQQDEw02ODk2Y2NiYi1jOWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxK0JDalOVbniLl8LTABH5MKQ3rY1J+N8rp5cEEiLfvU34hyRFKtE56Iea0C 4VlAm4r8fFh/Pba0zuULGg4W91Fup8nSFusHtT7hnBwcPecVn4GSLlhCfoDW9JOV a1ULsMHiiZ1R3kxhJTX9nUcheLKUjhujL6e411mocOPlMdeM0OnqFZydK/RW0BLy UZYNSQzgUqFpXzI7sop6AnKgeBOvuzMSKNApmY7RSq6Su+Qg3yz6J+yBtmjVBzBB 5B644aDXIojpj/du6pmytCy78WkRkv0VNsn0jF65nPNShRyLMK6lNy+HpCBCnLMd SNFNzOQUuAlLANLCTW/ucbmufQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeHAXle 8lGW6AJ0K42/vDY3T1HOMB8GA1UdIwQYMBaAFJj07R6lbv43yhNPh2qWXyrG+jdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEVGNS85NDA2NjI4RTU3 NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9qZktFMC1IYXBaZktzYjZO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEVGNS85NDA2NjI4RTU3NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9q ZktFMC1IYXBaZktzYjZOMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaqGg4KNV0FxozY6+rPWhYLOM3O6aniOCbpxn8XExeI0Ev9ioJRm2w N8vdZmKjsiqdLIMvC2zM+LEtibwMixck5laVS+yAmUIuNkMk2Z6YjmW4J/Uen5Ac QCDsq1jozZIU1abVIhmrc7Pu91yaYQfc8/L0D7ilRQf3Fvhzf8tfySRZ3X4KFwZV KSq03q2aME01tUZQNvLw7l1b4Pa0+ny7OQ3ny/AkeGvV7kCgf9Z3WANkR8VLcpxJ /oBZEiLy/2HDBmGVW9AjnrRTfdiK1DGEOa9GBmSn0o48C3GSlWvGx9isEPnPGhYj eijNYOyXc+m+uvgxGyt6gnTjifmZvD1a -----END CERTIFICATE-----Generated at Sun Aug 10 16:10:55 2025 by rpki-client