$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json) Hash identifier: MpNTQ3eWT+8Gej20VYwf/B+HUC+lZ2ekHjIaMlATtec= Subject key identifier: 21:9F:BB:0E:92:FF:C8:39:6C:C7:4A:15:CB:BB:27:F5:50:33:A7:41 Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft Manifest number: 36 Signing time: Sat 23 Aug 2025 07:51:50 +0000 Manifest this update: Sat 23 Aug 2025 07:51:50 +0000 Manifest next update: Sat 30 Aug 2025 07:51:50 +0000 Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: GonvgVdr77sxYRFU+T4/pwOrbVEwwzcs8qcOmug/n2w=) 2: C100F8FE385D11F0B165166CC4F9AE02.roa (hash: X4yO+2uZWy3hhNHPg2Botaoo1uuwNwgNw2Z5oY+nYVw=) 3: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: Q/Q2sUKmgFU8L5pYFoikcLW7y4sJztj/yUCaAVnv9mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Validity Not Before: Aug 23 07:51:50 2025 GMT Not After : Aug 30 07:51:50 2025 GMT Subject: CN=68a97316-474c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:ef:5a:18:27:c2:06:47:df:18:ab:0c:6b: 09:6b:76:d4:e0:a7:6f:38:5f:3e:90:65:d0:9e:95: a2:cb:57:67:b2:fa:ed:91:bb:0c:c4:b3:b6:4d:5b: 4b:b4:80:d6:f9:fd:52:4b:72:b9:61:62:c9:3b:c9: 8b:84:94:b2:54:7c:51:3f:a3:04:dd:55:58:3f:93: ee:4f:e4:e8:e3:cd:4f:09:75:f4:cd:c6:00:22:2c: a0:45:78:8a:1a:9f:6f:1e:6b:e0:0d:8c:8c:f3:b2: f8:04:d4:c6:d3:dd:1c:fb:8e:5a:6f:8b:94:09:b1: 36:77:ee:30:be:f8:c2:01:a4:d5:f9:ac:1b:94:ae: 65:4a:7e:01:39:04:1d:54:0c:bc:1b:83:95:83:9b: 42:82:9f:05:a2:5e:40:b9:c7:fd:9d:6d:7d:8e:63: c6:03:d2:e4:b0:43:e2:29:33:0f:3c:8d:70:56:eb: cb:ed:17:90:66:09:57:f1:b1:cc:1a:1e:80:f9:47: 0f:a4:8f:b1:44:f5:8d:b2:35:0a:b8:8b:87:75:d3: d9:ae:07:58:59:e3:0f:11:a2:8f:c7:fe:30:95:5d: 47:03:86:2b:81:5f:eb:b6:ca:3a:fe:d4:c4:b3:c8: d6:4f:d3:fa:32:08:80:66:06:d7:29:10:11:55:a1: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9F:BB:0E:92:FF:C8:39:6C:C7:4A:15:CB:BB:27:F5:50:33:A7:41 X509v3 Authority Key Identifier: keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:33:97:ef:41:bf:c8:49:06:9e:03:50:20:16:1f:31:a6:07: 54:2f:97:2d:ca:6d:ee:fb:7f:72:1d:97:3d:77:5e:94:b5:d4: ee:38:a4:1d:dd:a2:87:7e:db:78:72:d7:cf:e3:7c:5c:79:62: 78:75:8e:67:2e:79:3b:e4:e3:23:22:c9:1d:4b:d8:f9:a8:e2: d7:c9:9b:3c:81:0f:1f:0b:5a:b2:89:1c:10:d3:87:72:b1:19: 42:5c:c6:f5:78:e2:3c:d0:f6:16:1a:51:53:05:28:de:38:a2: 7f:b6:3d:a4:92:6a:de:0d:ae:bc:9e:cc:18:2a:12:be:5a:49: 8d:0e:bc:7d:67:29:95:1e:fe:68:59:07:e6:a1:81:3a:fe:d7: 6b:31:29:5d:c9:a1:f6:46:23:62:b7:63:5d:d2:fb:fa:94:37: 73:82:f9:86:be:af:d9:d9:01:14:ec:dc:9a:76:03:32:ee:3a: 84:30:1f:8b:57:66:6a:1f:14:f5:43:7c:4b:b7:a3:c3:17:00: af:4a:7e:10:a3:7d:ca:ba:0b:f3:41:6c:56:ee:ff:e3:16:28: 19:81:c3:e1:df:9f:d4:93:f3:56:72:07:b4:95:8c:02:f3:6f: 37:2c:f2:bc:26:a6:df:e8:ad:ef:e8:6a:3b:de:63:c3:e5:10: 17:43:4e:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0JCMDExMC8GA1UEBRMoNDVCMThFMjA5RUNGRERBNUNFRDc4Q0Y5RDk4MTBENjEx RTZENDEyNDAeFw0yNTA4MjMwNzUxNTBaFw0yNTA4MzAwNzUxNTBaMBgxFjAUBgNV BAMTDTY4YTk3MzE2LTQ3NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD7u9aGCfCBkffGKsMawlrdtTgp284Xz6QZdCelaLLV2ey+u2RuwzEs7ZNW0u0 gNb5/VJLcrlhYsk7yYuElLJUfFE/owTdVVg/k+5P5OjjzU8JdfTNxgAiLKBFeIoa n28ea+ANjIzzsvgE1MbT3Rz7jlpvi5QJsTZ37jC++MIBpNX5rBuUrmVKfgE5BB1U DLwbg5WDm0KCnwWiXkC5x/2dbX2OY8YD0uSwQ+IpMw88jXBW68vtF5BmCVfxscwa HoD5Rw+kj7FE9Y2yNQq4i4d109muB1hZ4w8Roo/H/jCVXUcDhiuBX+u2yjr+1MSz yNZP0/oyCIBmBtcpEBFVoVlTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIZ+7DpL/ yDlsx0oVy7sn9VAzp0EwHwYDVR0jBBgwFoAURbGOIJ7P3aXO14z52YENYR5tQSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwLzlGRkRBQjc2MzIz QTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FYTzE0ejUyWUVOWVI1dFFT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUmJHT0lKN1AzYVhPMTR6NTJZRU5ZUjV0UVNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QkIwLzlGRkRBQjc2MzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FY TzE0ejUyWUVOWVI1dFFTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADYzl+9Bv8hJBp4DUCAWHzGmB1Qvly3Kbe77f3Idlz13XpS11O44pB3d ood+23hy18/jfFx5Ynh1jmcueTvk4yMiyR1L2Pmo4tfJmzyBDx8LWrKJHBDTh3Kx GUJcxvV44jzQ9hYaUVMFKN44on+2PaSSat4NrryezBgqEr5aSY0OvH1nKZUe/mhZ B+ahgTr+12sxKV3JofZGI2K3Y13S+/qUN3OC+Ya+r9nZARTs3Jp2AzLuOoQwH4tX ZmofFPVDfEu3o8MXAK9KfhCjfcq6C/NBbFbu/+MWKBmBw+Hfn9ST81ZyB7SVjALz bzcs8rwmpt/ore/oajveY8PlEBdDThk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:29 2025 by rpki-client