$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft File: m0YBtrC3j7j-njkzSoG1pd1ZVik.mft (raw, json) Hash identifier: sM+eovsjOYTxcgEyPqpv2yk6HF3yzQN1TJoW0GUrjHQ= Subject key identifier: 0B:76:AA:03:CA:4B:97:BE:AA:EC:87:31:56:0C:83:E6:B5:27:05:26 Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft Manifest number: 07E3 Signing time: Fri 22 Aug 2025 21:10:37 +0000 Manifest this update: Fri 22 Aug 2025 21:10:37 +0000 Manifest next update: Fri 29 Aug 2025 21:10:37 +0000 Files and hashes: 1: m0YBtrC3j7j-njkzSoG1pd1ZVik.crl (hash: qzrQa2fKttWIyytjA4r522IQ+NrAM283yVEBdouzvpc=) 2: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (hash: JxqBCjBT9K2ryaUj1ZqNSpK/pt6W0FIjzbMts6xP/O4=) 3: 1F046D5EAD5311EBA93CEB69C4F9AE02.roa (hash: QsOZtg7wgKPEMzZpQNjN0cwc1dkJJaHe5vPoUHzDi2E=) 4: 2B67707C449911EC873EEE33C4F9AE02.roa (hash: dfHP081F3AjgTxtk/Kol9IWl1ohuGadWFkcTnhyHleE=) 5: 1E69B82CAD5311EBA93CEB69C4F9AE02.roa (hash: BiwvJd+dCFyWKlGsVpLMc1ZbpjUFsliw37pP+lj/D+c=) 6: 202D8382AD5311EBA93CEB69C4F9AE02.roa (hash: 9CVFCRxGd96rDHgxt1WsX71RS0A2IwtDONeOpXumo3o=) 7: F4DFF910CB0311EC817AED0BC4F9AE02.roa (hash: 3EaaIhegA520f9Jq9jn6VCkgAQsJfc5446BLnaSLsuo=) 8: 1DC10D94AD5311EBA93CEB69C4F9AE02.roa (hash: lLU3brsFcJmxfza+HPsqiH2/FCfohQp/aB2RU3YA2bQ=) 9: 20BC506CAD5311EBA93CEB69C4F9AE02.roa (hash: FAebLgMlFuIn+Jv3/Kno5dJ1sOWIko5p1IcZ8bmbDwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7, serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: Aug 22 21:10:37 2025 GMT Not After : Aug 29 21:10:37 2025 GMT Subject: CN=68a8dccd-56ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:93:4b:b9:ae:87:26:8c:b9:61:c7:a0:22: fa:ae:3a:89:13:f1:bb:8f:f9:6d:92:d7:42:7e:f2: fb:a0:b1:81:c8:c4:e3:ab:d6:c2:aa:e6:f7:5c:da: 0c:a5:f0:cb:32:62:26:62:58:db:2e:b3:3d:39:9e: 7d:9f:40:27:e4:80:6b:b9:c3:8a:08:80:bb:ab:bf: af:1d:f1:e3:c5:f7:6d:98:21:cc:3d:dc:fe:df:32: c3:84:5a:70:d7:91:47:67:96:61:61:2d:74:c7:ed: 2d:8f:15:f8:01:a0:df:6e:a3:3e:91:99:5c:50:04: dc:8b:08:ea:59:cb:05:ed:0b:28:dd:33:f7:66:08: c6:b0:05:48:36:2b:36:a2:37:b5:53:c9:05:f5:fc: dc:30:23:56:dc:1f:e1:db:0d:fd:6e:17:e2:53:74: 7f:8e:88:ed:31:4e:7e:72:84:f3:e4:e3:e9:1a:02: 29:e1:0b:1d:dd:c7:cc:31:ac:92:49:b6:e7:4d:01: 9b:3e:1b:d4:1c:b4:a8:32:69:29:f6:da:80:0a:f5: ad:d2:14:e6:26:64:85:ae:e5:c9:0d:24:95:f5:9e: 2f:9d:11:07:24:53:12:ba:f5:77:f1:92:f4:5f:05: 35:95:b3:3e:65:67:fd:dd:fa:e4:01:03:c1:b0:84: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:76:AA:03:CA:4B:97:BE:AA:EC:87:31:56:0C:83:E6:B5:27:05:26 X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:a1:0a:bf:6c:4f:93:84:01:fe:fd:ad:31:08:51:a0:28:23: 53:72:68:26:81:3d:d5:6d:65:15:f4:aa:25:f8:85:eb:b9:b6: 20:99:e4:17:62:fe:9b:d5:6c:34:6d:ae:39:b5:75:fe:0b:c5: cd:27:fc:99:c3:fb:4c:02:bc:be:58:c9:56:21:42:df:0e:48: b7:74:ce:c5:8b:b4:0c:6d:72:5d:35:89:08:6b:b0:85:dd:a0: 49:cc:68:02:7a:8b:39:69:9d:ae:eb:d3:b7:b5:1a:1e:f5:25: 4b:7e:c5:ba:3a:c1:da:4d:39:4b:c7:bd:6f:c8:7b:45:2e:31: 0b:45:f5:02:12:72:6f:f8:17:35:6c:cf:9b:c1:6c:60:dd:8f: 67:10:22:1a:66:5d:2e:2f:d6:a3:6e:7e:ad:e6:96:17:ca:2c: f0:7e:8d:d0:8f:e2:7b:df:af:f9:11:b5:00:ee:35:31:a0:2f: 71:43:c8:ba:1f:80:1a:2f:a2:56:13:8e:6c:bd:62:b1:ac:ea: bf:22:77:9a:e1:cd:a0:aa:24:f8:a5:30:1f:6e:75:d2:d3:69: 8b:d5:53:97:6f:98:3c:7c:b8:67:a9:83:81:7e:9d:55:d2:aa: 8f:69:72:a6:d7:94:c3:ed:61:ce:ce:07:50:c0:fe:44:33:2a: 83:8e:ad:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjUwODIyMjExMDM3WhcNMjUwODI5MjExMDM3WjAYMRYwFAYD VQQDEw02OGE4ZGNjZC01NmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkCTS7muhyaMuWHHoCL6rjqJE/G7j/ltktdCfvL7oLGByMTjq9bCqub3XNoM pfDLMmImYljbLrM9OZ59n0An5IBrucOKCIC7q7+vHfHjxfdtmCHMPdz+3zLDhFpw 15FHZ5ZhYS10x+0tjxX4AaDfbqM+kZlcUATciwjqWcsF7Qso3TP3ZgjGsAVINis2 oje1U8kF9fzcMCNW3B/h2w39bhfiU3R/jojtMU5+coTz5OPpGgIp4Qsd3cfMMayS SbbnTQGbPhvUHLSoMmkp9tqACvWt0hTmJmSFruXJDSSV9Z4vnREHJFMSuvV38ZL0 XwU1lbM+ZWf93frkAQPBsITMZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAt2qgPK S5e+quyHMVYMg+a1JwUmMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JGNy9BRDJBQzcyRUZCRUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3 ai1uamt6U29HMXBkMVpWaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFoQq/bE+ThAH+/a0xCFGgKCNTcmgmgT3VbWUV9Kol+IXrubYgmeQX Yv6b1Ww0ba45tXX+C8XNJ/yZw/tMAry+WMlWIULfDki3dM7Fi7QMbXJdNYkIa7CF 3aBJzGgCeos5aZ2u69O3tRoe9SVLfsW6OsHaTTlLx71vyHtFLjELRfUCEnJv+Bc1 bM+bwWxg3Y9nECIaZl0uL9ajbn6t5pYXyizwfo3Qj+J736/5EbUA7jUxoC9xQ8i6 H4AaL6JWE45svWKxrOq/Inea4c2gqiT4pTAfbnXS02mL1VOXb5g8fLhnqYOBfp1V 0qqPaXKm15TD7WHOzgdQwP5EMyqDjq3I -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:50 2025 by rpki-client