$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft File: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json) Hash identifier: MSEJP4wMFGnGvF50lz4Q59Emk0JOchPhvcqBvEbb6lQ= Subject key identifier: 89:80:C8:8F:79:E5:60:F4:0B:80:90:39:6A:4A:3C:11:AD:B7:5F:DC Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft Manifest number: 9D Signing time: Sat 23 Aug 2025 06:36:19 +0000 Manifest this update: Sat 23 Aug 2025 06:36:19 +0000 Manifest next update: Sat 30 Aug 2025 06:36:18 +0000 Files and hashes: 1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: 6rdZcbJPfT6UW+ZxzNErGaVzDkETSBcIJwQzTpsIibA=) 2: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: h0Ix2v/co1mQt8N7/1X7T+jzKKiC9C9BGQ0eCb34Oxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Validity Not Before: Aug 23 06:36:19 2025 GMT Not After : Aug 30 06:36:18 2025 GMT Subject: CN=68a96163-200f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:f7:5f:5b:08:7d:cf:87:d3:9c:1f:60:f6: 34:7d:81:13:2b:92:a0:1a:a2:64:67:5c:d7:de:83: fe:53:5a:8d:a0:27:71:16:7d:d0:12:72:f9:7e:a1: f8:f7:a4:24:e8:a1:93:b5:7e:40:25:24:eb:09:4b: f9:8c:ca:9a:ef:38:45:c9:e3:7f:61:d2:d5:9b:51: f9:5f:4f:4e:1f:cb:4c:59:e7:90:87:92:f0:2b:c8: 2d:9d:d4:29:f1:92:0a:ed:94:4f:18:fc:ef:c0:33: a7:3a:1e:e6:1c:8d:0b:05:10:9d:79:c7:32:a8:08: 95:de:5c:3c:27:f8:05:ad:d6:31:72:21:95:b6:78: 8d:06:88:7f:d8:d0:cc:a3:3f:9b:ad:69:0f:22:a7: 56:61:ae:ea:bc:d8:9f:8b:c8:b9:80:7b:0f:64:66: 6a:1c:11:bb:cb:ad:a2:f0:17:49:11:b0:d2:1e:4c: ee:02:68:6b:cd:e1:a2:44:ce:ee:0f:1d:b2:eb:ab: 37:38:e3:f9:79:87:78:b3:c0:ba:6e:09:c5:6b:04: 34:2f:12:4e:0d:c0:71:31:d1:b7:17:de:46:b8:63: 24:19:8a:8c:fc:78:cb:bc:c7:72:71:74:56:a7:77: ef:4e:d9:ab:ed:fa:33:dd:45:d3:d9:9c:32:ce:a5: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:80:C8:8F:79:E5:60:F4:0B:80:90:39:6A:4A:3C:11:AD:B7:5F:DC X509v3 Authority Key Identifier: keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:68:8f:0e:2e:42:cf:d2:9e:2c:fa:b3:77:91:f7:78:b2:61: 23:99:21:c0:a5:a6:d1:ea:0a:b4:e9:a8:d5:b3:81:9e:a3:3b: 7f:04:ce:90:0a:dd:41:c8:54:a9:62:2b:8b:42:c7:3d:ac:e4: f8:b8:2b:14:63:a7:05:8a:bc:8e:bb:76:a1:b0:fb:5a:4c:1f: cb:cc:2e:d5:f0:f5:75:14:0f:6c:36:53:be:b5:d1:21:a6:59: d8:b8:07:3c:3a:27:e4:3d:e9:ed:cf:d4:ae:00:9e:a0:5d:78: 2a:48:6b:37:48:a4:45:ee:b0:fa:c5:0e:89:62:5f:c0:5d:02: 3b:cb:dc:4a:09:95:fb:52:4c:3f:4b:a2:c0:6d:e0:5f:fa:e9: 26:3b:bd:31:ac:be:38:0a:9a:58:fb:6f:41:01:d4:95:ad:82: 61:0d:cf:3d:92:5c:1e:85:48:f4:4a:65:e3:8a:4c:7f:fa:b5: 2f:e3:fb:5f:1b:a7:63:f5:e1:28:24:6d:58:f2:98:45:b9:76: b4:22:32:b2:30:6e:8c:64:d4:38:e9:c4:f4:55:8a:b1:f7:b9: 90:48:5c:e9:e8:9d:b0:f6:ba:6b:09:99:7b:74:0c:06:2e:2e: 97:c5:4d:e0:60:75:72:9e:47:7f:b3:62:c1:62:6c:b5:7a:a8: 88:58:c2:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0REODcxMTAvBgNVBAUTKEYzN0YyMzRGM0E4N0QxOEZDQzY3MTNFNDUxMDY3OENB MDU2MUMyRkMwHhcNMjUwODIzMDYzNjE5WhcNMjUwODMwMDYzNjE4WjAYMRYwFAYD VQQDEw02OGE5NjE2My0yMDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN/3X1sIfc+H05wfYPY0fYETK5KgGqJkZ1zX3oP+U1qNoCdxFn3QEnL5fqH4 96Qk6KGTtX5AJSTrCUv5jMqa7zhFyeN/YdLVm1H5X09OH8tMWeeQh5LwK8gtndQp 8ZIK7ZRPGPzvwDOnOh7mHI0LBRCdeccyqAiV3lw8J/gFrdYxciGVtniNBoh/2NDM oz+brWkPIqdWYa7qvNifi8i5gHsPZGZqHBG7y62i8BdJEbDSHkzuAmhrzeGiRM7u Dx2y66s3OOP5eYd4s8C6bgnFawQ0LxJODcBxMdG3F95GuGMkGYqM/HjLvMdycXRW p3fvTtmr7foz3UXT2ZwyzqUQqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImAyI95 5WD0C4CQOWpKPBGtt1/cMB8GA1UdIwQYMBaAFPN/I086h9GPzGcT5FEGeMoFYcL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ4Ny9FQzU2QjcyMDk3 RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZX01aeFBrVVFaNHlnVmh3 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzOGpUenFIMFlfTVp4UGtVUVo0eWdWaHd2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REQ4Ny9FQzU2QjcyMDk3RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZ X01aeFBrVVFaNHlnVmh3dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPaI8OLkLP0p4s+rN3kfd4smEjmSHApabR6gq06ajVs4Geozt/BM6Q Ct1ByFSpYiuLQsc9rOT4uCsUY6cFiryOu3ahsPtaTB/LzC7V8PV1FA9sNlO+tdEh plnYuAc8OifkPentz9SuAJ6gXXgqSGs3SKRF7rD6xQ6JYl/AXQI7y9xKCZX7Ukw/ S6LAbeBf+ukmO70xrL44CppY+29BAdSVrYJhDc89klwehUj0SmXjikx/+rUv4/tf G6dj9eEoJG1Y8phFuXa0IjKyMG6MZNQ46cT0VYqx97mQSFzp6J2w9rprCZl7dAwG Li6XxU3gYHVynkd/s2LBYmy1eqiIWMK0 -----END CERTIFICATE-----Generated at Sun Aug 24 05:08:03 2025 by rpki-client