$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft File: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft (raw, json) Hash identifier: +ruujwOJrYjwyXjfZVSSUtBu0K38CVaUnqkz8Izl63o= Subject key identifier: 7B:4E:12:7D:C9:0A:82:BB:37:50:15:40:E0:8C:67:0B:30:15:5F:AD Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C Certificate issuer: /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C Certificate serial: 0609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft Manifest number: 05FF Signing time: Fri 22 Aug 2025 23:04:15 +0000 Manifest this update: Fri 22 Aug 2025 23:04:14 +0000 Manifest next update: Fri 29 Aug 2025 23:04:14 +0000 Files and hashes: 1: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl (hash: 6JZGXbZtrtMoxb3DIN+L8Pgpv9AA6JIenoHTGMyRDMo=) 2: 3C2408105CBF11ECACDFE47BC4F9AE02.roa (hash: 0H9iVWOcGuVvN/MVa3XeV+I+PG+LvrsVTNSfk98zbHw=) 3: B3DED5C6BAC911EB8533B615C4F9AE02.roa (hash: DsgHJydaVuiP2/JOiaGz7+8hzbblvMVmJcBWMtJLoOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1545 (0x609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C95, serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C Validity Not Before: Aug 22 23:04:14 2025 GMT Not After : Aug 29 23:04:14 2025 GMT Subject: CN=68a8f76f-b565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:bd:55:00:5c:07:7b:48:48:b3:48:ec:f1: 3b:02:b0:99:c2:2c:30:7c:f2:5d:4c:03:c9:b0:28: 42:31:aa:01:fa:bb:db:46:02:6e:bf:62:a4:11:51: 80:0d:77:90:d9:ac:7f:9d:c1:3f:b1:88:dd:25:a4: 21:8f:af:86:0c:4b:e6:68:d2:66:20:a5:f3:ba:7e: 1c:8d:6a:f4:22:ab:6b:43:3a:a6:4c:05:5a:86:59: 8f:f5:eb:97:65:d5:9c:83:93:07:2f:c9:13:16:0c: b4:bc:39:8a:b4:82:69:6d:08:97:36:c9:d7:d0:90: cf:eb:68:0e:68:18:52:a8:d4:cd:c7:02:97:63:4a: 77:50:5e:9b:41:95:d6:38:f4:69:80:2a:ba:ed:c2: 93:27:50:83:f7:00:02:ee:5a:e3:77:e2:1d:ce:95: 52:75:40:a0:c6:98:00:3b:1a:8a:17:c6:e1:76:2c: 0f:23:f5:73:9f:11:8a:fa:47:7c:d2:e7:d0:02:ae: 89:6f:58:f2:77:6b:57:39:74:e4:d0:bf:9e:0e:2b: 9e:86:8c:d9:ca:50:49:89:36:b4:54:a9:d5:92:9e: a0:68:b5:47:a2:66:24:5b:73:00:de:22:11:67:b5: 15:d8:fc:7e:24:37:18:8f:38:ca:e6:dd:cd:12:53: cb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4E:12:7D:C9:0A:82:BB:37:50:15:40:E0:8C:67:0B:30:15:5F:AD X509v3 Authority Key Identifier: keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a0:ef:44:11:f7:95:b4:d9:4a:46:a5:75:d4:ad:d5:c7:5f: 63:b3:d3:5f:8d:78:49:c1:b0:84:09:07:ad:3d:0d:19:d1:0f: f8:63:e6:23:59:04:75:f4:aa:b4:f6:b6:ce:53:b1:6e:e4:d5: 0d:a0:24:17:16:ef:08:b1:d2:4c:42:54:d4:17:bb:08:2f:40: ad:ba:34:ba:c3:c0:de:f4:01:d5:1d:1b:31:1b:08:5a:93:1c: cb:24:f5:a2:ca:28:5a:6a:14:22:8d:8c:e1:d8:32:56:cc:f0: 4b:f4:46:c5:85:92:02:c9:dd:25:71:a3:47:90:26:9b:15:5c: a9:80:07:47:8b:fe:36:66:dd:36:30:9f:c8:91:1e:76:63:ed: 73:69:6b:ab:2f:40:29:39:79:be:46:f5:b8:f2:2b:cb:b0:d5: 25:5d:4e:ed:4c:f1:11:90:30:16:5a:f7:89:f6:6e:ea:9a:c7: 14:49:ef:9c:c2:d5:6f:83:99:c0:d9:7a:c0:00:a8:16:d9:dc: cd:ab:ee:9e:78:50:23:3a:2f:d0:37:38:94:87:21:42:00:df: 86:4d:25:20:7d:49:24:8d:8f:19:e3:03:00:d4:02:27:9e:c0: 23:85:4f:b5:2e:40:16:6c:a8:7a:be:dc:8c:61:73:6b:ad:e5: 69:d6:9e:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOTUxMTAvBgNVBAUTKEI0OEU0MDczQjgxMEJDRjlDNzk0ODE5QzgwRkRFNzFE NTNGMkRFMkMwHhcNMjUwODIyMjMwNDE0WhcNMjUwODI5MjMwNDE0WjAYMRYwFAYD VQQDEw02OGE4Zjc2Zi1iNTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY+9VQBcB3tISLNI7PE7ArCZwiwwfPJdTAPJsChCMaoB+rvbRgJuv2KkEVGA DXeQ2ax/ncE/sYjdJaQhj6+GDEvmaNJmIKXzun4cjWr0IqtrQzqmTAVahlmP9euX ZdWcg5MHL8kTFgy0vDmKtIJpbQiXNsnX0JDP62gOaBhSqNTNxwKXY0p3UF6bQZXW OPRpgCq67cKTJ1CD9wAC7lrjd+IdzpVSdUCgxpgAOxqKF8bhdiwPI/VznxGK+kd8 0ufQAq6Jb1jyd2tXOXTk0L+eDiuehozZylBJiTa0VKnVkp6gaLVHomYkW3MA3iIR Z7UV2Px+JDcYjzjK5t3NElPLwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtOEn3J CoK7N1AVQOCMZwswFV+tMB8GA1UdIwQYMBaAFLSOQHO4ELz5x5SBnID95x1T8t4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5NS9ERTJGRjFGNEJB QzcxMUVCQUYyRTY4MTNDNEY5QUUwMi90STVBYzdnUXZQbkhsSUdjZ1AzbkhWUHkz aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJNUFjN2dRdlBuSGxJR2NnUDNuSFZQeTNpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5NS9ERTJGRjFGNEJBQzcxMUVCQUYyRTY4MTNDNEY5QUUwMi90STVBYzdnUXZQ bkhsSUdjZ1AzbkhWUHkzaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfoO9EEfeVtNlKRqV11K3Vx19js9NfjXhJwbCECQetPQ0Z0Q/4Y+Yj WQR19Kq09rbOU7Fu5NUNoCQXFu8IsdJMQlTUF7sIL0CtujS6w8De9AHVHRsxGwha kxzLJPWiyihaahQijYzh2DJWzPBL9EbFhZICyd0lcaNHkCabFVypgAdHi/42Zt02 MJ/IkR52Y+1zaWurL0ApOXm+RvW48ivLsNUlXU7tTPERkDAWWveJ9m7qmscUSe+c wtVvg5nA2XrAAKgW2dzNq+6eeFAjOi/QNziUhyFCAN+GTSUgfUkkjY8Z4wMA1AIn nsAjhU+1LkAWbKh6vtyMYXNrreVp1p6j -----END CERTIFICATE-----Generated at Sun Aug 24 06:47:41 2025 by rpki-client