$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft File: a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft (raw, json) Hash identifier: BxLi01Anr5XriJk5apT5pnP2uXpgDdJD4yf52nIA5Wc= Subject key identifier: F8:C9:BE:90:7D:18:0B:01:A2:B6:66:D3:4D:6A:D1:C5:F0:A7:32:9B Authority key identifier: 6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 Certificate issuer: /CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft Manifest number: 0164 Signing time: Sat 23 Aug 2025 04:04:08 +0000 Manifest this update: Sat 23 Aug 2025 04:04:08 +0000 Manifest next update: Sat 30 Aug 2025 04:04:08 +0000 Files and hashes: 1: a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl (hash: b3UgDtv1wz6K/kcci5TWmWWbHVuXBKk8++B8eDqbYeY=) 2: 8A389AC25C4811EEBE1CF06BC4F9AE02.roa (hash: 9QttLF7HMnJDx+HbQAXC0YtWXOJ+pz+cgouITeRm1GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AAA, serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Validity Not Before: Aug 23 04:04:08 2025 GMT Not After : Aug 30 04:04:08 2025 GMT Subject: CN=68a93db8-7607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:21:0e:f4:7f:6a:56:68:c8:8f:52:27:55:3f: 2e:84:41:3b:c5:f9:4a:99:36:65:ae:75:77:11:5d: 76:17:d2:16:2c:a9:c8:09:f3:58:f0:a2:23:a7:db: 2d:5f:06:a8:a4:24:cd:4a:1b:32:68:f1:1f:44:f0: 4f:78:0d:b1:7b:f4:da:e3:d2:95:5b:ac:2d:c6:9f: c3:d6:4f:3e:60:e3:f8:96:39:f7:c8:37:de:7a:f6: 81:fa:9e:73:41:a0:ae:98:48:d2:14:c0:d1:14:f8: 42:1e:0f:bf:11:94:ca:0b:bf:a6:d8:9b:8c:8f:6d: 6e:40:ca:e6:9d:dc:bd:81:a7:a1:71:1b:9c:f9:cf: f3:10:00:ae:c7:46:2d:c3:c3:3d:dc:63:4b:54:9e: a2:fc:f1:95:d4:09:62:20:af:54:97:b1:8d:3e:ac: f7:aa:cd:72:e4:a1:01:2c:d8:c1:41:53:d1:65:97: 58:2e:51:59:ba:10:61:34:8d:ad:6f:1a:9c:8e:d7: 3c:70:97:15:32:eb:2b:f7:40:00:45:00:dd:3f:fc: 8c:2f:92:02:55:12:5d:e8:c4:cb:cd:05:6e:db:c5: 34:da:a5:24:cf:78:80:73:19:28:7d:ea:ef:c1:ec: 97:eb:0e:4a:eb:56:fe:71:5e:fe:ba:55:2a:0b:f4: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C9:BE:90:7D:18:0B:01:A2:B6:66:D3:4D:6A:D1:C5:F0:A7:32:9B X509v3 Authority Key Identifier: keyid:6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:e3:a1:e7:2d:08:37:22:43:75:6a:d6:68:d7:52:16:6e:1c: f0:47:c8:fa:57:d4:13:78:db:f7:5a:0b:ed:38:0b:65:62:d7: ee:88:e9:b9:1a:7f:14:94:4e:d1:be:ca:eb:e3:92:2b:09:b7: 2a:c0:fb:75:c2:d3:12:46:3b:0b:0a:69:0c:1e:af:cf:55:7e: bc:c4:6f:8b:fe:63:ad:d8:e5:ce:6a:c7:e3:76:69:0d:85:6a: 7b:f3:a9:b6:09:47:e6:12:8c:0c:bd:0b:1d:64:c1:a8:35:43: 3c:1f:43:4b:8a:4b:58:84:89:9e:c1:c1:c3:e8:0e:6c:44:38: 8f:45:67:62:12:0a:23:93:b5:3e:4c:bd:81:3b:d8:69:e4:67: 88:45:da:06:bf:eb:2c:8f:dd:05:aa:a2:10:df:d2:bd:4f:82: 66:cc:6d:5d:b5:e7:f3:ea:18:44:87:56:bc:d7:d0:71:43:fb: 23:6f:08:08:ce:c7:6f:bd:92:31:39:0e:e9:52:1e:7c:d4:d9: 2e:a8:c9:cf:57:d5:ee:0b:dc:c5:d4:a8:88:d7:e7:db:f2:ee: 13:dc:a9:d3:dc:3d:67:f1:74:04:26:20:be:1e:49:77:fd:b2: 6e:d0:13:5d:9d:cd:2c:2b:a4:2c:06:2d:2e:26:f7:eb:e2:5a: 79:36:2d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQUExMTAvBgNVBAUTKDZCNTcwOTMyOTBEMTFGNjVDRkI5MUYxMjEyQzI4Q0Y3 MzNGOUMyQjUwHhcNMjUwODIzMDQwNDA4WhcNMjUwODMwMDQwNDA4WjAYMRYwFAYD VQQDEw02OGE5M2RiOC03NjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCEO9H9qVmjIj1InVT8uhEE7xflKmTZlrnV3EV12F9IWLKnICfNY8KIjp9st XwaopCTNShsyaPEfRPBPeA2xe/Ta49KVW6wtxp/D1k8+YOP4ljn3yDfeevaB+p5z QaCumEjSFMDRFPhCHg+/EZTKC7+m2JuMj21uQMrmndy9gaehcRuc+c/zEACux0Yt w8M93GNLVJ6i/PGV1AliIK9Ul7GNPqz3qs1y5KEBLNjBQVPRZZdYLlFZuhBhNI2t bxqcjtc8cJcVMusr90AARQDdP/yML5ICVRJd6MTLzQVu28U02qUkz3iAcxkoferv weyX6w5K61b+cV7+ulUqC/S5dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjJvpB9 GAsBorZm001q0cXwpzKbMB8GA1UdIwQYMBaAFGtXCTKQ0R9lz7kfEhLCjPcz+cK1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFBQS8wQ0E3N0M4MjVD NDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgyWFB1UjhTRXNLTTl6UDV3 clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExY0pNcERSSDJYUHVSOFNFc0tNOXpQNXdyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFBQS8wQ0E3N0M4MjVDNDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgy WFB1UjhTRXNLTTl6UDV3clUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB246HnLQg3IkN1atZo11IWbhzwR8j6V9QTeNv3WgvtOAtlYtfuiOm5 Gn8UlE7Rvsrr45IrCbcqwPt1wtMSRjsLCmkMHq/PVX68xG+L/mOt2OXOasfjdmkN hWp786m2CUfmEowMvQsdZMGoNUM8H0NLiktYhImewcHD6A5sRDiPRWdiEgojk7U+ TL2BO9hp5GeIRdoGv+ssj90FqqIQ39K9T4JmzG1dtefz6hhEh1a819BxQ/sjbwgI zsdvvZIxOQ7pUh581NkuqMnPV9XuC9zF1KiI1+fb8u4T3KnT3D1n8XQEJiC+Hkl3 /bJu0BNdnc0sK6QsBi0uJvfr4lp5Ni2T -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:08 2025 by rpki-client