$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json) Hash identifier: 4X02KSqtMpBGLGz9M4Iwif8d1PHKEL+XVp7bxJL0KJE= Subject key identifier: EF:2D:C1:1E:A9:55:14:1A:B7:07:1D:02:08:E9:50:7B:8D:BC:16:97 Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft Manifest number: 0157 Signing time: Sat 23 Aug 2025 04:18:32 +0000 Manifest this update: Sat 23 Aug 2025 04:18:31 +0000 Manifest next update: Sat 30 Aug 2025 04:18:31 +0000 Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: WOZkuQJ2xMyeGrQInr0WqcLiA6aVcWO5BYimjqNSMHY=) 2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: pB1reIfyHdxeUfXs+919CuRxWhrieVaoumr+2A452aM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Validity Not Before: Aug 23 04:18:31 2025 GMT Not After : Aug 30 04:18:31 2025 GMT Subject: CN=68a94117-165c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:61:89:d4:08:a2:f8:2c:5a:f4:e0:d8:8d:f5: 15:1c:3b:97:23:87:32:80:00:80:f3:09:6e:39:a1: c4:3c:a2:dc:18:fa:0d:d6:8e:77:12:31:f0:13:00: f3:d2:f4:fb:30:35:7b:f8:f3:c1:0f:5f:f4:bb:d3: 8f:71:58:83:4b:44:89:1c:e1:46:e4:2f:a7:26:7c: a5:7f:0f:a2:e6:35:31:5f:f6:1e:60:d0:5e:6f:69: c7:d4:28:ff:a2:46:41:d4:ab:7c:12:cb:52:23:85: 89:ef:7f:86:29:c3:68:26:2f:5e:e9:44:ef:99:be: b1:19:00:11:ac:62:88:5f:b9:df:c3:d2:a2:20:2f: 3c:92:4b:e9:e8:77:69:a1:c5:cd:c3:1b:41:28:e4: a3:28:3d:f1:65:63:b7:69:79:9c:d3:6a:9e:be:c1: cb:4d:52:e7:e9:e8:14:09:77:14:4a:b5:12:73:b5: d3:98:45:db:5f:77:e5:9b:7f:f2:e4:ad:67:8f:e8: f1:6d:96:0c:3e:80:a6:7b:93:5c:a9:46:52:4f:12: 47:cf:69:75:2b:52:f3:c0:25:c2:61:7e:10:23:5d: 39:24:29:33:88:96:3d:a6:8d:b1:8d:85:82:6d:12: 6a:48:61:25:f7:37:bc:d8:ca:b4:ed:79:8e:85:84: 7b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2D:C1:1E:A9:55:14:1A:B7:07:1D:02:08:E9:50:7B:8D:BC:16:97 X509v3 Authority Key Identifier: keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:09:56:a4:6d:9b:76:90:c2:10:83:9c:4e:07:bb:3e:d6:30: ed:11:20:ff:27:37:66:eb:6d:e2:c0:68:f3:af:a1:c7:64:de: a9:4d:fc:e6:9d:d0:2b:a1:8e:01:25:29:c7:31:d0:50:0e:3d: dc:0c:5f:78:f6:5b:a5:bb:35:5c:d1:57:81:3b:93:3f:af:0d: 4d:2c:b0:cc:a9:7d:78:e1:06:74:35:bf:26:d0:a2:6b:db:bb: a2:5a:30:83:c9:d1:01:db:3a:01:f1:f0:ab:74:cd:53:b7:cd: ac:e0:df:41:65:aa:f6:dc:c2:ef:3f:e5:db:26:08:9e:a3:a6: f8:69:00:7b:fd:9c:6c:d6:f8:3f:f2:4f:c8:e6:a8:d1:6e:98: b5:13:be:f7:21:58:98:fb:58:79:a3:c9:1b:82:c0:5e:81:82: 40:3e:5d:6e:6b:ea:55:dd:28:7c:61:dc:24:83:41:c1:e3:f4: 81:3c:05:0d:7c:e9:53:eb:6e:60:09:1e:45:f2:3b:b0:d9:6e: 21:62:e2:d4:fc:10:0e:fa:e9:a2:2a:ff:b1:ee:97:03:15:f6: c5:18:b5:9c:66:ed:5a:59:d0:bb:0b:0b:ce:86:00:ec:b9:78: e4:47:28:21:66:9b:72:f1:3f:17:e2:a4:0a:68:89:4f:7e:ae: f9:61:80:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZBQzYxMTAvBgNVBAUTKEI0RURCMEQ2Q0NCNUYwMEM5MzA0Mzc0RUU4MUY1RTI2 MUFFNjcxQzkwHhcNMjUwODIzMDQxODMxWhcNMjUwODMwMDQxODMxWjAYMRYwFAYD VQQDEw02OGE5NDExNy0xNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mGJ1Aii+Cxa9ODYjfUVHDuXI4cygACA8wluOaHEPKLcGPoN1o53EjHwEwDz 0vT7MDV7+PPBD1/0u9OPcViDS0SJHOFG5C+nJnylfw+i5jUxX/YeYNBeb2nH1Cj/ okZB1Kt8EstSI4WJ73+GKcNoJi9e6UTvmb6xGQARrGKIX7nfw9KiIC88kkvp6Hdp ocXNwxtBKOSjKD3xZWO3aXmc02qevsHLTVLn6egUCXcUSrUSc7XTmEXbX3flm3/y 5K1nj+jxbZYMPoCme5NcqUZSTxJHz2l1K1LzwCXCYX4QI105JCkziJY9po2xjYWC bRJqSGEl9ze82Mq07XmOhYR7AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8twR6p VRQatwcdAgjpUHuNvBaXMB8GA1UdIwQYMBaAFLTtsNbMtfAMkwQ3TugfXiYa5nHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkFDNi9BMUI2Q0JFQTc5 N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThBeVRCRGRPNkI5ZUpocm1j Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPMncxc3kxOEF5VEJEZE82QjllSmhybWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkFDNi9BMUI2Q0JFQTc5N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThB eVRCRGRPNkI5ZUpocm1jY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNCVakbZt2kMIQg5xOB7s+1jDtESD/Jzdm623iwGjzr6HHZN6pTfzm ndAroY4BJSnHMdBQDj3cDF949luluzVc0VeBO5M/rw1NLLDMqX144QZ0Nb8m0KJr 27uiWjCDydEB2zoB8fCrdM1Tt82s4N9BZar23MLvP+XbJgieo6b4aQB7/Zxs1vg/ 8k/I5qjRbpi1E773IViY+1h5o8kbgsBegYJAPl1ua+pV3Sh8Ydwkg0HB4/SBPAUN fOlT625gCR5F8juw2W4hYuLU/BAO+umiKv+x7pcDFfbFGLWcZu1aWdC7CwvOhgDs uXjkRyghZpty8T8X4qQKaIlPfq75YYD8 -----END CERTIFICATE-----Generated at Sun Aug 24 07:15:13 2025 by rpki-client