$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft File: b0XbXSi7uaZT-C0c94J6WYN2RfM.mft (raw, json) Hash identifier: YmRJXu53jijTiwTDShqnnl58cp/CqYfaB/VEK5dt6u4= Subject key identifier: 9B:07:22:4C:DF:68:C1:3E:13:E5:3C:FA:2B:30:8F:AF:0C:4F:60:C4 Authority key identifier: 6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3 Certificate issuer: /CN=A9159309/serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft Manifest number: 16 Signing time: Sat 23 Aug 2025 08:13:47 +0000 Manifest this update: Sat 23 Aug 2025 08:13:47 +0000 Manifest next update: Sat 30 Aug 2025 08:13:47 +0000 Files and hashes: 1: b0XbXSi7uaZT-C0c94J6WYN2RfM.crl (hash: usNbAdZqBZwfdvbvn9CFu9fNoiqwTu8avPH0FT81jd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3 Validity Not Before: Aug 23 08:13:47 2025 GMT Not After : Aug 30 08:13:47 2025 GMT Subject: CN=68a9783b-6052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:22:70:01:b6:54:3a:3d:7e:be:96:7d:db: ea:e4:6a:11:aa:71:6d:38:b0:db:f0:65:39:95:b1: 97:64:91:05:de:e5:09:71:0b:57:dd:66:81:9a:45: 1a:3b:a6:bf:c8:20:74:3d:43:fe:bd:f4:c5:97:10: 22:4f:9d:59:4c:35:0f:1e:71:b4:ef:f4:a5:fe:e9: 01:c3:3d:52:e4:11:4a:5a:4e:3e:44:0b:02:45:77: 2b:4e:83:ff:dd:e0:cb:38:66:db:30:f5:cc:dc:7b: c1:2f:f0:79:5b:f3:ea:27:bc:8d:0e:8a:ae:7b:a6: fc:7b:77:61:46:b9:9d:7d:61:96:ca:fa:b0:b9:2d: dc:8b:ef:4b:64:35:6c:2f:7b:85:12:5c:4d:6a:a6: 1b:2a:2e:06:52:e9:7a:e9:7b:7b:be:4d:e4:79:74: ac:2e:09:9c:bf:c4:d5:bc:e0:d1:39:78:3c:32:e7: c4:89:02:01:eb:f5:b7:cb:bb:76:71:32:95:0e:ec: 58:b6:a9:21:79:e4:74:51:41:67:dd:23:00:43:4e: 83:8e:eb:0b:48:1e:8e:18:57:77:55:11:03:ab:a4: 89:fa:97:4a:50:96:ed:ae:0b:d5:a0:71:f8:c9:01: 00:b0:04:88:35:fd:c1:80:21:f5:e3:eb:3f:a4:70: b1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:07:22:4C:DF:68:C1:3E:13:E5:3C:FA:2B:30:8F:AF:0C:4F:60:C4 X509v3 Authority Key Identifier: keyid:6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:5f:44:a3:b8:bd:98:ab:9a:97:e3:84:34:2e:46:2d:0f:f0: 0e:37:dc:4a:7c:f1:3e:05:9c:2f:9a:d4:5b:b4:a5:1a:fd:13: 16:18:a1:91:7d:ab:69:81:20:03:34:72:aa:d2:cb:b6:b8:cd: 9f:71:cd:67:d9:df:99:88:c1:08:24:11:fd:5c:64:68:11:0d: ed:ae:27:09:8a:eb:bd:ac:08:be:df:61:c5:30:cd:e3:24:6f: 4d:5e:11:b0:bc:82:ed:8e:d6:e4:bb:93:65:04:d3:1a:55:f5: 24:79:75:57:fe:b9:b7:ae:6d:18:4f:dc:e4:1d:25:91:84:8d: 3e:5f:1c:ed:5d:5c:15:fe:c4:23:ce:d8:02:df:c5:a4:02:98: 8c:da:a3:c0:cd:bf:b4:d1:46:28:35:15:cc:8a:fd:6e:8f:c9: da:ca:01:9a:ff:ec:b8:50:b3:22:d8:1b:6c:26:86:ac:a8:02: b5:04:b3:a8:de:7c:e6:83:df:ea:68:a7:c0:a1:48:85:6c:3c: 1b:20:a1:6b:a9:6c:26:3a:0c:ef:78:f4:88:c9:2f:ae:ed:40: 12:7d:0b:9d:b6:3b:37:86:a9:d0:00:eb:c8:d8:04:00:e9:38: 31:f4:fb:d9:ca:d7:27:98:58:cf:ef:5d:79:e6:61:8c:70:80: 4e:a8:c1:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTMwOTExMC8GA1UEBRMoNkY0NURCNUQyOEJCQjlBNjUzRjgyRDFDRjc4MjdBNTk4 Mzc2NDVGMzAeFw0yNTA4MjMwODEzNDdaFw0yNTA4MzAwODEzNDdaMBgxFjAUBgNV BAMTDTY4YTk3ODNiLTYwNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxzyJwAbZUOj1+vpZ92+rkahGqcW04sNvwZTmVsZdkkQXe5QlxC1fdZoGaRRo7 pr/IIHQ9Q/699MWXECJPnVlMNQ8ecbTv9KX+6QHDPVLkEUpaTj5ECwJFdytOg//d 4Ms4Ztsw9czce8Ev8Hlb8+onvI0Oiq57pvx7d2FGuZ19YZbK+rC5LdyL70tkNWwv e4USXE1qphsqLgZS6Xrpe3u+TeR5dKwuCZy/xNW84NE5eDwy58SJAgHr9bfLu3Zx MpUO7Fi2qSF55HRRQWfdIwBDToOO6wtIHo4YV3dVEQOrpIn6l0pQlu2uC9WgcfjJ AQCwBIg1/cGAIfXj6z+kcLGpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmwciTN9o wT4T5Tz6KzCPrwxPYMQwHwYDVR0jBBgwFoAUb0XbXSi7uaZT+C0c94J6WYN2RfMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5MzA5L0EyN0I4QkZDNjEz RDExRjBCMDM2QjgzNkM0RjlBRTAyL2IwWGJYU2k3dWFaVC1DMGM5NEo2V1lOMlJm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjBYYlhTaTd1YVpULUMwYzk0SjZXWU4yUmZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 MzA5L0EyN0I4QkZDNjEzRDExRjBCMDM2QjgzNkM0RjlBRTAyL2IwWGJYU2k3dWFa VC1DMGM5NEo2V1lOMlJmTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAINfRKO4vZirmpfjhDQuRi0P8A433Ep88T4FnC+a1Fu0pRr9ExYYoZF9 q2mBIAM0cqrSy7a4zZ9xzWfZ35mIwQgkEf1cZGgRDe2uJwmK672sCL7fYcUwzeMk b01eEbC8gu2O1uS7k2UE0xpV9SR5dVf+ubeubRhP3OQdJZGEjT5fHO1dXBX+xCPO 2ALfxaQCmIzao8DNv7TRRig1FcyK/W6PydrKAZr/7LhQsyLYG2wmhqyoArUEs6je fOaD3+pop8ChSIVsPBsgoWupbCY6DO949IjJL67tQBJ9C522OzeGqdAA68jYBADp ODH0+9nK1yeYWM/vXXnmYYxwgE6owfk= -----END CERTIFICATE-----Generated at Sun Aug 24 05:15:39 2025 by rpki-client