$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft File: s-AwGXTWpAg9ufSdWtbloVd5KgY.mft (raw, json) Hash identifier: qeCs7bVJOjvLo6P0qwZdw4yO/j3Fpu7SrRd0S7LyaU4= Subject key identifier: 1C:08:49:84:BD:E8:D6:2A:15:EE:55:0E:C9:62:AF:D0:F7:D3:DE:B4 Authority key identifier: B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 Certificate issuer: /CN=A9116B43/serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft Manifest number: 067D Signing time: Fri 22 Aug 2025 14:52:36 +0000 Manifest this update: Fri 22 Aug 2025 14:52:36 +0000 Manifest next update: Fri 29 Aug 2025 14:52:36 +0000 Files and hashes: 1: s-AwGXTWpAg9ufSdWtbloVd5KgY.crl (hash: Ghc2CJnMxW82pxDhiuGjQpJqgZ4K51+GhncnWYTlzDM=) 2: 3A77AE12CB9C11EC9230F70BC4F9AE02.roa (hash: TwjuoGTydiIvsI8500O496Q/mOvNfgRtaZ3KwMAE5xE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B43, serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Validity Not Before: Aug 22 14:52:36 2025 GMT Not After : Aug 29 14:52:36 2025 GMT Subject: CN=68a88434-d9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:96:a5:00:ba:bd:21:f8:2e:6f:5e:f8:25: 6f:af:63:bd:8b:25:4d:8a:15:05:e9:96:a1:c3:c2: 30:ae:ea:4e:77:cd:08:49:ec:c4:7f:db:81:74:9c: dd:16:cc:85:ea:c1:72:a5:3f:d3:68:f1:55:0b:d1: 84:2b:ff:86:a6:f9:ce:87:c9:b2:af:b3:3e:4d:c2: ad:d0:d5:89:c5:d9:6f:bd:68:ca:67:13:6f:23:5c: 05:ff:0f:51:0e:63:8f:8c:26:41:58:fb:53:4d:b9: 95:d3:bb:7b:58:72:23:19:84:fb:00:7d:a3:5d:9f: 9d:ab:d7:6f:71:5f:cc:11:06:79:70:77:97:26:5c: ea:06:30:a4:70:35:e7:ad:a0:c9:0f:9d:3a:50:14: 08:6b:c6:ba:ae:1f:6d:4a:41:b2:08:f9:15:a0:c5: 35:36:80:b0:b4:77:b2:25:5a:1f:f1:20:be:6a:e6: 47:da:23:ef:d0:47:d0:7d:5c:2c:a6:bf:df:5e:7e: d4:91:e9:70:39:90:73:8a:18:6a:92:ab:2a:48:17: 89:79:3f:63:26:ff:34:53:96:ab:93:93:56:e7:e0: ca:c7:58:04:7d:01:2f:f7:e1:47:ee:5d:d0:4c:ca: ed:42:6a:45:58:2b:9b:3a:ed:67:00:d8:90:55:39: 9d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:08:49:84:BD:E8:D6:2A:15:EE:55:0E:C9:62:AF:D0:F7:D3:DE:B4 X509v3 Authority Key Identifier: keyid:B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:8a:2c:d2:67:7b:0c:b7:26:88:db:b5:1b:a2:0a:3b:e2:1f: 2c:9d:4a:00:1a:40:73:09:81:9f:36:e3:c2:79:ac:3c:67:f7: 86:5a:42:c3:cc:9b:6a:ce:be:fa:bf:00:8e:f5:cc:4d:c8:2c: 57:bd:cc:44:02:d3:f9:cd:d8:77:a7:ee:e0:77:b1:e8:e0:79: 90:78:3f:fc:94:be:36:31:49:d4:a2:a3:d8:1f:90:e9:f6:6f: 94:2b:44:71:1a:e7:04:db:c1:3c:71:81:0f:88:61:b3:73:0c: e0:a4:6e:b7:8d:3b:7e:c6:d4:b7:77:6a:6a:4c:04:e2:73:7a: 3d:4a:a3:96:9b:8a:df:fb:e8:e2:83:82:f6:ae:43:71:a1:2d: 68:ae:f8:42:da:90:ec:5d:49:fa:4d:85:8a:60:bc:ae:ea:42: 18:c0:38:24:e2:6a:df:57:e5:f8:0d:02:8a:f8:91:12:db:f1: f8:83:ef:a5:78:bf:d4:f0:85:38:36:1d:57:b8:14:db:57:56: b0:81:65:9d:b9:4d:39:1a:94:32:67:75:d8:8f:9d:8d:0c:ce: 33:cd:73:dc:d3:e1:cd:03:b8:db:5b:f9:e1:7d:7f:66:99:9b: 29:5e:c6:b5:c1:49:99:57:fa:47:c1:ca:32:bb:5f:97:28:61: 10:be:cd:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNDMxMTAvBgNVBAUTKEIzRTAzMDE5NzRENkE0MDgzREI5RjQ5RDVBRDZFNUEx NTc3OTJBMDYwHhcNMjUwODIyMTQ1MjM2WhcNMjUwODI5MTQ1MjM2WjAYMRYwFAYD VQQDEw02OGE4ODQzNC1kOWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1h+WpQC6vSH4Lm9e+CVvr2O9iyVNihUF6Zahw8IwrupOd80ISezEf9uBdJzd FsyF6sFypT/TaPFVC9GEK/+GpvnOh8myr7M+TcKt0NWJxdlvvWjKZxNvI1wF/w9R DmOPjCZBWPtTTbmV07t7WHIjGYT7AH2jXZ+dq9dvcV/MEQZ5cHeXJlzqBjCkcDXn raDJD506UBQIa8a6rh9tSkGyCPkVoMU1NoCwtHeyJVof8SC+auZH2iPv0EfQfVws pr/fXn7UkelwOZBzihhqkqsqSBeJeT9jJv80U5ark5NW5+DKx1gEfQEv9+FH7l3Q TMrtQmpFWCubOu1nANiQVTmdLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwISYS9 6NYqFe5VDslir9D30960MB8GA1UdIwQYMBaAFLPgMBl01qQIPbn0nVrW5aFXeSoG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI0My81OTQyMUE0RThE N0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BBZzl1ZlNkV3RibG9WZDVL Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtQXdHWFRXcEFnOXVmU2RXdGJsb1ZkNUtnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI0My81OTQyMUE0RThEN0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BB Zzl1ZlNkV3RibG9WZDVLZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjiizSZ3sMtyaI27Ubogo74h8snUoAGkBzCYGfNuPCeaw8Z/eGWkLD zJtqzr76vwCO9cxNyCxXvcxEAtP5zdh3p+7gd7Ho4HmQeD/8lL42MUnUoqPYH5Dp 9m+UK0RxGucE28E8cYEPiGGzcwzgpG63jTt+xtS3d2pqTATic3o9SqOWm4rf++ji g4L2rkNxoS1orvhC2pDsXUn6TYWKYLyu6kIYwDgk4mrfV+X4DQKK+JES2/H4g++l eL/U8IU4Nh1XuBTbV1awgWWduU05GpQyZ3XYj52NDM4zzXPc0+HNA7jbW/nhfX9m mZspXsa1wUmZV/pHwcoyu1+XKGEQvs1p -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:36 2025 by rpki-client