$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: ZMKthbYhVlI2l35bfRK4oGEJKoXerFeQOZ5pSB/TDT4= Subject key identifier: 0A:E2:C2:65:D8:BE:9C:EA:2E:87:9D:E8:43:FE:02:64:79:B8:CB:36 Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 351D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 34EC Signing time: Fri 22 Aug 2025 14:22:07 +0000 Manifest this update: Fri 22 Aug 2025 14:22:06 +0000 Manifest next update: Fri 29 Aug 2025 14:22:06 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: ER32gKfOH1vbYb+epB0MKrEmgYlnYnqPZ095dcCaXOQ=) 2: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: yQ9Zz2wr8tjKdfaxVczUpLIfv3iNt/pg9a1JKFuCtos=) 3: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: z0+u6Iw9nBsWkBxEBsOze7XPIpbGqUrpaAbGEfXztn0=) 4: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: C0b11kHxUkGRgJNkSLgXVrGvFc4MAtKBux3nfA6wsg8=) 5: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: SUsUIXE/tKa73O2xJJTZ5W41hRd+PFlpRhUTlZjlrnU=) 6: A82F26B0466911F0ACD64867C4F9AE02.roa (hash: 2ZVWAkjDpndv3LhT9XdZy2paoKqw+nEDo6qJplPnRnM=) 7: 30941278EF2011EF9264077FC4F9AE02.roa (hash: dH1BFoeKKcX/dB6MDpyS3SQGnjUCambU+BCLw/wlqFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13597 (0x351d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Aug 22 14:22:06 2025 GMT Not After : Aug 29 14:22:06 2025 GMT Subject: CN=68a87d0e-8817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ae:a5:55:62:11:d6:bd:8a:ab:62:7f:6a:e3: 55:39:f9:9b:11:97:51:61:51:a0:f5:0e:3e:1e:be: ef:21:43:ab:06:ad:e1:6e:ca:40:3a:e2:1f:e5:83: 21:14:e3:ab:f6:12:15:5f:43:5c:ff:80:49:f7:75: 0a:3e:13:b1:f5:5e:0d:12:fc:42:27:02:f7:9b:03: e3:0e:fc:d4:c4:6e:9c:36:3a:13:10:6e:04:46:dc: 48:95:bb:a8:33:f9:24:36:5e:6d:e0:3c:e8:4e:7a: 17:1d:e7:95:c9:63:7e:00:cb:58:3d:aa:5a:b2:9b: f3:53:a9:bf:80:48:3b:92:04:71:da:e3:81:2d:5e: 28:8f:0c:ab:6a:d0:12:e0:1a:e8:53:a3:bd:d8:2a: a3:a3:ac:b1:3d:e4:47:0f:c9:a4:c0:e6:0b:1f:bd: 8d:1a:aa:ba:d5:36:aa:b0:82:fb:9d:52:fb:9b:29: 69:2f:90:05:30:8c:ba:18:e2:20:56:2a:16:9f:f3: a1:5f:b2:bf:42:a7:9a:39:25:bf:61:f9:0c:55:ba: 4f:32:00:3b:b2:17:a4:94:1c:5f:2d:6a:af:b1:12: c6:0c:48:e6:68:dc:f6:57:20:c0:67:0b:4c:94:ba: e4:ca:75:b7:6e:9c:d1:a5:b0:ce:c4:9e:58:e9:08: 3f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E2:C2:65:D8:BE:9C:EA:2E:87:9D:E8:43:FE:02:64:79:B8:CB:36 X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:92:d9:72:7a:3e:b5:03:70:ae:81:93:9c:46:90:86:26:c2: 6f:03:ef:41:65:74:68:cd:fc:bf:4c:4e:79:22:9f:28:df:c8: 71:0e:be:50:94:05:3e:7b:71:c6:14:41:b2:7d:8d:17:78:18: 57:e8:9e:89:0a:80:d3:6c:89:0c:b7:a3:d2:6b:51:a6:47:ea: ea:3e:b8:24:da:fd:da:88:09:d6:b7:d3:ca:f5:e6:cf:86:c3: ff:9c:f8:b0:6b:26:fe:86:c0:5b:aa:11:9d:62:7d:84:7e:fe: bd:9b:2e:58:d6:58:5b:9e:0d:c2:3d:03:33:0e:fe:d5:06:17: c3:ce:29:26:1c:04:6e:c7:10:34:13:f0:a2:91:07:4e:28:28: 49:70:c6:b5:58:77:cd:f3:73:90:ac:32:b9:6d:ac:7d:60:60: 32:dc:49:10:6a:04:36:39:61:13:f5:5a:d5:4e:1d:00:06:d0: 23:bf:61:f0:15:45:6e:cd:bd:de:6e:02:54:9a:43:57:f3:85: 35:a9:f2:dd:a3:5c:73:46:b4:fd:a4:05:9d:23:03:96:2b:c0: 6d:10:47:75:3c:17:02:08:88:c7:2c:64:66:e7:a7:de:a1:08: d5:20:1d:95:d6:2e:37:97:ed:ea:bf:11:9f:a2:51:8f:d3:4b: 41:f6:02:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjUwODIyMTQyMjA2WhcNMjUwODI5MTQyMjA2WjAYMRYwFAYD VQQDEw02OGE4N2QwZS04ODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAra6lVWIR1r2Kq2J/auNVOfmbEZdRYVGg9Q4+Hr7vIUOrBq3hbspAOuIf5YMh FOOr9hIVX0Nc/4BJ93UKPhOx9V4NEvxCJwL3mwPjDvzUxG6cNjoTEG4ERtxIlbuo M/kkNl5t4DzoTnoXHeeVyWN+AMtYPapaspvzU6m/gEg7kgRx2uOBLV4ojwyratAS 4BroU6O92Cqjo6yxPeRHD8mkwOYLH72NGqq61TaqsIL7nVL7mylpL5AFMIy6GOIg VioWn/OhX7K/QqeaOSW/YfkMVbpPMgA7sheklBxfLWqvsRLGDEjmaNz2VyDAZwtM lLrkynW3bpzRpbDOxJ5Y6Qg/xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAriwmXY vpzqLoed6EP+AmR5uMs2MB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEktlyej61A3CugZOcRpCGJsJvA+9BZXRozfy/TE55Ip8o38hxDr5Q lAU+e3HGFEGyfY0XeBhX6J6JCoDTbIkMt6PSa1GmR+rqPrgk2v3aiAnWt9PK9ebP hsP/nPiwayb+hsBbqhGdYn2Efv69my5Y1lhbng3CPQMzDv7VBhfDzikmHARuxxA0 E/CikQdOKChJcMa1WHfN83OQrDK5bax9YGAy3EkQagQ2OWET9VrVTh0ABtAjv2Hw FUVuzb3ebgJUmkNX84U1qfLdo1xzRrT9pAWdIwOWK8BtEEd1PBcCCIjHLGRm56fe oQjVIB2V1i43l+3qvxGfolGP00tB9gI8 -----END CERTIFICATE-----Generated at Sat Aug 23 21:27:22 2025 by rpki-client