$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft File: scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json) Hash identifier: hkSA8Ddp6rkQ/HbNhVk6MJXKu0ePKA0CKbMrM02D+Ug= Subject key identifier: 54:16:D5:09:DD:17:8B:6A:CD:37:A1:09:21:6A:CE:21:C3:C1:E3:95 Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Certificate serial: 06FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft Manifest number: 06EA Signing time: Fri 22 Aug 2025 22:08:30 +0000 Manifest this update: Fri 22 Aug 2025 22:08:30 +0000 Manifest next update: Fri 29 Aug 2025 22:08:30 +0000 Files and hashes: 1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: dNjIgVVIBNvMJyFOy6p+2WJiil/KRKGVYyD0kpgLhPE=) 2: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: OYtL36rrodU22MW3AXpoCDtJg7l4ViMqS4bFk3tK5VQ=) 3: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: ivarDOVLEK1o/i2e326AVwZq4fhbkuq+7lnjx1EVCHE=) 4: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: gBF4oLr31oWPGA7GjogpSpsWc/XlGgo5urUgCfPiOZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1789 (0x6fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Validity Not Before: Aug 22 22:08:30 2025 GMT Not After : Aug 29 22:08:30 2025 GMT Subject: CN=68a8ea5e-30db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:41:a2:e5:dd:b3:d8:9f:16:48:47:5d:69:f7: a2:4e:3b:bf:ca:30:a3:43:9b:52:70:df:c9:1b:84: da:ae:9e:51:52:58:a9:f2:be:5d:4f:ab:35:d0:1e: ce:71:e4:f9:62:71:76:1e:c0:72:98:d0:69:b6:01: 4b:b6:43:38:bf:cb:b0:5f:c9:0d:93:50:64:9a:37: cc:f2:d7:92:61:dd:35:c1:cf:b6:96:19:c2:3c:73: a5:4e:da:56:f2:5b:57:d8:a8:91:02:24:55:72:39: 9a:4c:bb:8e:a0:0c:ec:c1:b9:c6:6b:c3:71:89:dc: 39:11:69:6c:6a:10:79:22:5c:bb:5f:66:1c:a3:a4: 63:8e:32:81:5e:e0:2e:69:bc:14:45:5b:3b:10:55: fc:3a:d3:20:c4:dc:3c:42:fe:81:7e:3f:48:2d:9c: bc:5a:2e:0d:ba:01:ff:d0:7d:ad:ca:ae:70:5f:c4: 9e:10:79:d2:3f:e6:81:7f:bc:d8:4c:5b:6a:dd:67: c6:a1:4a:9c:03:40:c7:dd:83:c8:c9:ff:fb:ef:70: df:0e:54:2d:ce:ce:c8:f6:bc:67:ae:99:83:2f:66: 1f:ef:28:27:cb:c0:86:86:d8:e2:38:6b:01:3f:34: a8:8d:cf:cc:f0:e9:b5:85:61:e5:1c:27:c3:45:e7: 70:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:16:D5:09:DD:17:8B:6A:CD:37:A1:09:21:6A:CE:21:C3:C1:E3:95 X509v3 Authority Key Identifier: keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:04:6d:ce:db:1d:6d:8e:93:4d:3d:88:cf:83:32:8b:11:dc: 5a:90:92:7a:5d:ac:e5:6d:08:d6:c8:2c:98:5f:65:58:78:b9: 56:e5:e4:4b:54:05:c1:20:1e:8a:25:4a:1b:a1:c6:7b:a0:c4: c7:33:d0:2a:65:5e:7c:41:17:95:7e:46:3b:39:a5:64:54:6f: 61:ef:c9:45:f6:e4:04:26:84:07:5a:d0:4d:9f:3f:e3:eb:9b: b7:50:15:5a:f6:2d:27:b8:e7:26:fd:5c:05:fe:cb:fc:03:a5: bd:c1:1b:dc:81:ae:ce:8e:e5:4a:70:24:e6:6b:1b:fd:f3:e2: 47:35:e9:cd:f0:30:db:41:f0:62:be:42:71:ea:b3:0a:09:bb: 7d:cf:a7:6e:91:55:c3:c0:64:88:a1:98:49:5e:d8:b2:37:73: 53:65:12:6d:46:7a:48:60:31:21:de:4d:82:30:e9:a0:84:2f: 8c:92:9e:0e:a3:02:b7:54:f6:98:99:9b:f2:24:7a:db:34:d1: 49:05:ff:a1:18:c4:19:19:0c:cb:2e:22:f7:24:00:30:48:3f: 16:c5:b3:0b:d8:98:50:6d:d0:0a:19:4c:d1:6c:f6:c9:a4:3e: 60:e0:ed:87:d5:1b:e5:41:cc:fe:f0:7f:b3:f2:f4:09:9d:1b: 44:ac:5c:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0MzgxMTAvBgNVBAUTKEIxQzM0NzQ1NkU1NEE0NjYyRTEwOTdFQ0QzMzRBQzEx QzAyQ0UwMEIwHhcNMjUwODIyMjIwODMwWhcNMjUwODI5MjIwODMwWjAYMRYwFAYD VQQDEw02OGE4ZWE1ZS0zMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UGi5d2z2J8WSEddafeiTju/yjCjQ5tScN/JG4Tarp5RUlip8r5dT6s10B7O ceT5YnF2HsBymNBptgFLtkM4v8uwX8kNk1BkmjfM8teSYd01wc+2lhnCPHOlTtpW 8ltX2KiRAiRVcjmaTLuOoAzswbnGa8Nxidw5EWlsahB5Ily7X2Yco6RjjjKBXuAu abwURVs7EFX8OtMgxNw8Qv6Bfj9ILZy8Wi4NugH/0H2tyq5wX8SeEHnSP+aBf7zY TFtq3WfGoUqcA0DH3YPIyf/773DfDlQtzs7I9rxnrpmDL2Yf7ygny8CGhtjiOGsB PzSojc/M8Om1hWHlHCfDRedw/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQW1Qnd F4tqzTehCSFqziHDweOVMB8GA1UdIwQYMBaAFLHDR0VuVKRmLhCX7NM0rBHALOAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQzOC9DNDUwOUQ1NDVF NzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBHWXVFSmZzMHpTc0VjQXM0 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjTkhSVzVVcEdZdUVKZnMwelNzRWNBczRBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDQzOC9DNDUwOUQ1NDVFNzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBH WXVFSmZzMHpTc0VjQXM0QXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuBG3O2x1tjpNNPYjPgzKLEdxakJJ6XazlbQjWyCyYX2VYeLlW5eRL VAXBIB6KJUobocZ7oMTHM9AqZV58QReVfkY7OaVkVG9h78lF9uQEJoQHWtBNnz/j 65u3UBVa9i0nuOcm/VwF/sv8A6W9wRvcga7OjuVKcCTmaxv98+JHNenN8DDbQfBi vkJx6rMKCbt9z6dukVXDwGSIoZhJXtiyN3NTZRJtRnpIYDEh3k2CMOmghC+Mkp4O owK3VPaYmZvyJHrbNNFJBf+hGMQZGQzLLiL3JAAwSD8WxbML2JhQbdAKGUzRbPbJ pD5g4O2H1RvlQcz+8H+z8vQJnRtErFyN -----END CERTIFICATE-----Generated at Sun Aug 24 06:30:05 2025 by rpki-client