$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft File: rN0Hh_30YaFfcqHizj449FTtIHI.mft (raw, json) Hash identifier: M9jQ4xpLdj+hlZSeX+/qiVOP8xhfEzvNuxzfqGhK3x4= Subject key identifier: 5F:4D:2B:AE:36:B7:5C:A5:5F:A0:9F:55:EA:6F:91:79:9B:EC:6A:39 Authority key identifier: AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72 Certificate issuer: /CN=A9116D68/serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072 Certificate serial: 0F2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft Manifest number: 17A9 Signing time: Fri 22 Aug 2025 17:43:29 +0000 Manifest this update: Fri 22 Aug 2025 17:43:29 +0000 Manifest next update: Fri 29 Aug 2025 17:43:29 +0000 Files and hashes: 1: rN0Hh_30YaFfcqHizj449FTtIHI.crl (hash: n49bd/UUpvLziOxpn7nbpvf9ttmMQikAEqgB2XTCA3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3887 (0xf2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68, serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072 Validity Not Before: Aug 22 17:43:29 2025 GMT Not After : Aug 29 17:43:29 2025 GMT Subject: CN=68a8ac41-85f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:75:43:f1:bb:86:4d:dc:b1:e0:0f:35:bd:81: c7:c2:00:a3:f9:15:66:d4:fe:87:68:a6:45:67:0a: 99:38:f4:04:3e:64:78:25:d6:61:11:55:83:25:df: 54:9d:af:72:0c:14:9b:ce:f4:88:42:1b:25:75:2e: ca:6a:47:34:f7:b7:7d:02:11:ae:81:54:fb:43:62: 0d:b3:ba:77:76:5e:b4:aa:ff:e2:9a:9c:f3:ff:2c: c2:10:82:1b:6b:31:ae:ef:5f:b9:28:18:de:8d:b9: ca:48:fe:85:a6:77:04:af:fc:4e:ba:43:cf:0e:22: 0d:27:9f:67:38:84:50:3e:f3:e3:ad:f2:8c:2c:b0: b9:58:52:e4:88:59:5e:aa:89:19:5e:a5:bb:cc:7d: 38:c0:4e:34:b3:22:bd:7e:e4:3d:e9:93:4a:3e:db: e4:ba:f2:73:91:73:e9:ef:07:ff:f4:f3:b0:b5:9c: bd:e6:7d:eb:10:19:78:8e:f1:06:1c:4b:8d:2a:5a: d0:1b:6b:58:61:45:a4:f5:26:65:88:be:e4:33:6a: 50:c9:bc:9b:28:9b:fd:af:48:f9:fa:ec:cc:8e:1b: 3e:f0:f1:90:d2:a5:c5:a1:e4:15:e9:ff:ee:3b:b7: d2:f6:07:3c:6a:ed:81:e1:b9:55:e6:b3:cc:b9:1c: be:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4D:2B:AE:36:B7:5C:A5:5F:A0:9F:55:EA:6F:91:79:9B:EC:6A:39 X509v3 Authority Key Identifier: keyid:AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:b6:ff:d2:02:78:87:04:58:28:b6:34:5d:f6:54:21:49:96: 81:b9:6d:fe:06:f6:5f:89:4f:21:e5:f1:df:5a:79:ee:27:97: 64:0b:ac:53:d9:cc:16:ca:d8:41:46:c0:9b:fc:78:c7:c4:db: 61:86:80:54:ba:9e:03:78:d2:ad:11:8f:92:68:e2:a5:f7:70: 38:f9:91:ac:5c:69:bb:7c:47:38:2c:98:2a:70:44:28:20:ef: 46:43:09:0b:f0:0d:5f:63:2a:d6:40:57:ce:85:57:d4:47:87: 41:95:ae:54:7e:48:2d:9e:f2:3e:fb:51:38:33:9e:99:19:90: 7c:64:d4:7e:8b:ba:7f:f6:42:8e:f5:ff:e1:29:29:b7:8b:21: a4:5d:4c:aa:9c:75:1d:e1:19:c7:1e:c9:41:5b:5d:c5:fc:4f: 47:bd:34:6f:20:38:10:57:cd:9f:91:fd:73:05:13:ee:93:43: a2:46:07:c5:e9:d6:70:90:f9:93:0c:2d:ca:33:65:ff:0e:7d: e6:14:16:45:f4:ec:07:bf:39:3d:72:bf:17:60:70:0c:3f:94: da:1d:b4:92:95:8e:93:84:58:32:f2:d6:53:51:2c:9e:bc:40: 9c:42:87:b0:7a:49:19:b9:9a:d9:21:8f:e6:ed:01:44:20:c8: c5:8a:88:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKEFDREQwNzg3RkRGNDYxQTE1RjcyQTFFMkNFM0UzOEY0 NTRFRDIwNzIwHhcNMjUwODIyMTc0MzI5WhcNMjUwODI5MTc0MzI5WjAYMRYwFAYD VQQDEw02OGE4YWM0MS04NWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nVD8buGTdyx4A81vYHHwgCj+RVm1P6HaKZFZwqZOPQEPmR4JdZhEVWDJd9U na9yDBSbzvSIQhsldS7Kakc097d9AhGugVT7Q2INs7p3dl60qv/impzz/yzCEIIb azGu71+5KBjejbnKSP6FpncEr/xOukPPDiINJ59nOIRQPvPjrfKMLLC5WFLkiFle qokZXqW7zH04wE40syK9fuQ96ZNKPtvkuvJzkXPp7wf/9POwtZy95n3rEBl4jvEG HEuNKlrQG2tYYUWk9SZliL7kM2pQybybKJv9r0j5+uzMjhs+8PGQ0qXFoeQV6f/u O7fS9gc8au2B4blV5rPMuRy+nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9NK642 t1ylX6CfVepvkXmb7Go5MB8GA1UdIwQYMBaAFKzdB4f99GGhX3Kh4s4+OPRU7SBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9yTjBIaF8zMFlhRmZjcUhpemo0NDlGVHRJ SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOMEhoXzMwWWFGZmNxSGl6ajQ0OUZUdElISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9yTjBIaF8zMFlh RmZjcUhpemo0NDlGVHRJSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDItv/SAniHBFgotjRd9lQhSZaBuW3+BvZfiU8h5fHfWnnuJ5dkC6xT 2cwWythBRsCb/HjHxNthhoBUup4DeNKtEY+SaOKl93A4+ZGsXGm7fEc4LJgqcEQo IO9GQwkL8A1fYyrWQFfOhVfUR4dBla5UfkgtnvI++1E4M56ZGZB8ZNR+i7p/9kKO 9f/hKSm3iyGkXUyqnHUd4RnHHslBW13F/E9HvTRvIDgQV82fkf1zBRPuk0OiRgfF 6dZwkPmTDC3KM2X/Dn3mFBZF9OwHvzk9cr8XYHAMP5TaHbSSlY6ThFgy8tZTUSye vECcQoewekkZuZrZIY/m7QFEIMjFioj0 -----END CERTIFICATE-----Generated at Sat Aug 23 21:29:26 2025 by rpki-client