$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft File: 9RwbzQ28E1ptm8RasFnm3ifpOwM.mft (raw, json) Hash identifier: THSqmaBkab/nxy0YhvgmEUVd/SdDyhb3ZlN+An4H+Ks= Subject key identifier: 2A:F7:2E:51:4D:9D:13:50:A1:44:A3:C1:3E:6B:BE:56:F0:83:14:FA Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 Certificate issuer: /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft Manifest number: 0166 Signing time: Sat 23 Aug 2025 04:05:05 +0000 Manifest this update: Sat 23 Aug 2025 04:05:05 +0000 Manifest next update: Sat 30 Aug 2025 04:05:05 +0000 Files and hashes: 1: 9RwbzQ28E1ptm8RasFnm3ifpOwM.crl (hash: Y8aeGWupxV3PT/8GHLIqEolmRKnKw+FQ6ehAPTlgQh8=) 2: 9EEDB94662C111EE8F200F60C4F9AE02.roa (hash: nyq8KHP8dGY9X8L7b113gFAzdF9IMtkS8NNdIrOA99k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1F9, serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Validity Not Before: Aug 23 04:05:05 2025 GMT Not After : Aug 30 04:05:05 2025 GMT Subject: CN=68a93df1-ff5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:c6:f7:05:79:94:61:1d:b9:0e:a7:41:4d: d1:e4:b9:96:26:c3:22:bf:54:00:a2:7c:d6:30:74: 23:c9:59:4e:20:a3:79:e1:de:51:8d:7b:96:78:a7: 1d:a5:ae:27:54:7e:b6:7c:23:8e:84:cf:27:74:ce: b3:1e:e1:67:53:bb:b0:2d:b7:e5:f6:97:b9:3e:91: 92:de:78:a2:fa:cf:59:46:15:02:c0:74:8d:7d:50: 33:91:74:51:2c:31:9d:cd:53:7a:f5:cf:8a:6b:50: aa:dd:70:ad:22:bb:49:e8:79:c9:0b:45:72:ad:c0: a8:d3:a1:d7:27:bd:30:40:fd:75:7c:bc:6c:9e:76: 4c:13:41:15:5b:0a:dc:b7:52:20:3b:d4:27:0d:1d: 28:b7:a3:9b:65:7c:94:49:b7:ad:09:d4:f1:2c:52: 71:ea:d7:8b:7c:b6:ee:31:7a:38:c2:bc:c3:eb:c0: 2d:45:86:d8:9d:60:13:74:db:e4:70:13:97:c0:03: c0:ed:1b:ea:be:41:25:7b:bf:38:ca:8d:18:7b:a0: 5e:d5:46:b9:41:e5:a1:cb:80:83:7b:c7:00:1d:20: 93:56:9b:f1:91:44:5b:19:00:f7:cd:32:30:e5:92: 04:a8:9e:65:cf:a4:ca:89:50:58:26:14:ce:c0:cb: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F7:2E:51:4D:9D:13:50:A1:44:A3:C1:3E:6B:BE:56:F0:83:14:FA X509v3 Authority Key Identifier: keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:f0:dd:2c:5a:81:5d:bf:2c:64:37:62:c3:ed:f0:b0:98:23: 50:1f:52:e8:e9:29:ed:b2:3c:47:50:7f:8d:2e:3d:2a:44:f4: 2e:7a:6f:11:8a:0f:c0:71:9c:aa:a2:ea:14:ee:34:3d:aa:56: 47:66:96:0b:29:02:9b:33:a9:41:b5:4f:12:1f:c9:ea:db:83: 02:ad:73:f9:95:b2:ea:76:be:67:b0:24:56:87:8d:aa:e1:f6: bc:02:fa:4f:3f:9e:88:9a:75:41:f6:5c:17:0e:3d:70:df:a9: 94:ca:78:6c:ae:fa:20:dc:a7:6c:62:b9:c8:8a:9f:41:82:41: 14:21:d6:6c:4e:40:af:fb:bf:b5:c1:3d:9c:54:a3:a9:c1:8b: 8c:6b:7e:ce:32:25:83:5f:1f:5d:7f:39:fa:af:f4:d5:82:a6: f7:51:9c:df:4b:e6:c7:b7:cf:32:48:8f:13:46:1c:2d:b3:4e: 00:5f:e4:82:d2:24:35:bc:17:9a:dd:e9:7a:99:c0:00:17:55: 32:64:66:81:5b:16:f1:8f:71:ba:72:60:5a:d4:01:7d:ea:cb: f4:94:c1:44:cb:8f:fb:76:b6:e4:6e:51:f9:d6:ea:e4:5e:eb: c4:00:f4:03:06:86:f3:fc:fd:1d:b6:af:e1:ed:87:66:47:a5: 25:8c:0f:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxRjkxMTAvBgNVBAUTKEY1MUMxQkNEMERCQzEzNUE2RDlCQzQ1QUIwNTlFNkRF MjdFOTNCMDMwHhcNMjUwODIzMDQwNTA1WhcNMjUwODMwMDQwNTA1WjAYMRYwFAYD VQQDEw02OGE5M2RmMS1mZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTLG9wV5lGEduQ6nQU3R5LmWJsMiv1QAonzWMHQjyVlOIKN54d5RjXuWeKcd pa4nVH62fCOOhM8ndM6zHuFnU7uwLbfl9pe5PpGS3nii+s9ZRhUCwHSNfVAzkXRR LDGdzVN69c+Ka1Cq3XCtIrtJ6HnJC0VyrcCo06HXJ70wQP11fLxsnnZME0EVWwrc t1IgO9QnDR0ot6ObZXyUSbetCdTxLFJx6teLfLbuMXo4wrzD68AtRYbYnWATdNvk cBOXwAPA7RvqvkEle784yo0Ye6Be1Ua5QeWhy4CDe8cAHSCTVpvxkURbGQD3zTIw 5ZIEqJ5lz6TKiVBYJhTOwMsoRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr3LlFN nRNQoUSjwT5rvlbwgxT6MB8GA1UdIwQYMBaAFPUcG80NvBNabZvEWrBZ5t4n6TsD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFGOS83RTQzN0QwNjVE M0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUxcHRtOFJhc0ZubTNpZnBP d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSd2J6UTI4RTFwdG04UmFzRm5tM2lmcE93TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFGOS83RTQzN0QwNjVEM0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUx cHRtOFJhc0ZubTNpZnBPd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA28N0sWoFdvyxkN2LD7fCwmCNQH1Lo6SntsjxHUH+NLj0qRPQuem8R ig/AcZyqouoU7jQ9qlZHZpYLKQKbM6lBtU8SH8nq24MCrXP5lbLqdr5nsCRWh42q 4fa8AvpPP56ImnVB9lwXDj1w36mUynhsrvog3KdsYrnIip9BgkEUIdZsTkCv+7+1 wT2cVKOpwYuMa37OMiWDXx9dfzn6r/TVgqb3UZzfS+bHt88ySI8TRhwts04AX+SC 0iQ1vBea3el6mcAAF1UyZGaBWxbxj3G6cmBa1AF96sv0lMFEy4/7drbkblH51urk XuvEAPQDBobz/P0dtq/h7YdmR6UljA/Q -----END CERTIFICATE-----Generated at Sat Aug 23 21:39:12 2025 by rpki-client