$ rpki-client -vvf rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft File: A6AuL12r8P85OGKLxP9fthZT8EU.mft (raw, json) Hash identifier: 1DYnUyog7IxYfi8jF8Fd3vymlpwPzdyBRiaFxeD4yQY= Subject key identifier: 95:32:E5:97:20:4F:A8:F8:32:48:AB:65:5B:31:D5:F5:AF:10:13:41 Authority key identifier: 03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 Certificate issuer: /CN=A9161099/serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft Manifest number: 0109 Signing time: Sat 23 Aug 2025 05:24:20 +0000 Manifest this update: Sat 23 Aug 2025 05:24:20 +0000 Manifest next update: Sat 30 Aug 2025 05:24:20 +0000 Files and hashes: 1: A6AuL12r8P85OGKLxP9fthZT8EU.crl (hash: GAx531jGtC+RTjRwQ1Hq8fGjesbjHbuVVxgN5GPWwkQ=) 2: 4335BE9C0D0611EFA3ECB057C4F9AE02.roa (hash: 3QaIs0MEQTp5+WPYR1WYTiWl+pbfn1qVb0U7KbrgNTE=) 3: 42D4C3BC0D0611EFA3ECB057C4F9AE02.roa (hash: culo+SXGLXhoFYc+j6cile+BQd4b8OQlh1GlcQ7YkOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161099, serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045 Validity Not Before: Aug 23 05:24:20 2025 GMT Not After : Aug 30 05:24:20 2025 GMT Subject: CN=68a95084-b8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:26:7e:5a:cb:7c:af:d7:de:91:64:3e:b8: 5c:64:17:65:4f:f9:18:8f:57:e5:90:99:23:a8:b1: bc:55:3d:a7:f4:2f:55:66:2f:a0:2b:d2:87:a9:cd: 71:fa:75:a8:58:48:ca:af:8c:22:ae:7e:29:c5:4f: 4e:0f:98:45:3e:1d:06:ef:2c:c2:db:7b:0a:0d:80: 3e:18:4d:8d:e2:a2:0e:f4:8f:91:ed:18:1b:2b:91: 5a:eb:39:c2:37:3c:b9:f3:cc:6f:7e:11:18:8f:b2: 0e:80:cd:18:6a:f5:70:e3:eb:05:d6:5f:7c:41:dc: ba:21:cc:af:b9:db:0b:b9:4e:d2:45:3a:88:c2:1a: f3:88:56:a0:0a:80:61:d9:59:4c:7f:5c:ac:b0:9e: b2:9a:c5:60:a4:28:94:15:78:4e:7e:31:9d:d1:22: af:2a:51:7a:f1:e9:d5:18:0b:27:6c:1e:9b:16:91: 32:58:f8:b0:26:a2:82:49:8f:7c:33:48:51:fe:86: 23:1b:23:a3:88:d4:9c:f6:f0:cc:68:c1:d3:b0:e0: 65:d3:35:96:af:44:cb:33:cc:29:a4:bd:3f:b1:d1: 2b:80:4f:be:ff:09:85:4b:87:7f:8c:5a:1a:2b:82: 21:7c:97:c9:49:55:4c:2a:b7:6d:53:dc:a0:f6:fa: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:32:E5:97:20:4F:A8:F8:32:48:AB:65:5B:31:D5:F5:AF:10:13:41 X509v3 Authority Key Identifier: keyid:03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:65:f6:15:5b:a3:08:e3:56:6f:a4:2f:09:ee:ce:fe:a5:8e: cb:2c:61:14:fe:b8:a8:9e:7f:69:90:48:99:14:2e:1c:68:fa: 69:99:0b:1a:55:76:18:6c:f3:08:ba:f6:12:89:e5:f4:6c:03: d6:df:b5:5f:50:b8:9d:e0:9a:11:bc:96:2b:3d:5f:f5:c0:4f: 3f:ab:97:3c:e4:2e:d6:d4:dc:b5:58:36:c5:01:a4:98:58:5c: 9e:cd:ba:3c:dd:1d:97:14:0f:dc:5d:8e:96:a0:5e:13:92:23: 5b:50:0e:8a:43:48:de:41:bd:b8:f9:03:f7:a8:1c:0f:8c:b9: e5:a1:aa:71:e8:43:d9:cb:1e:8e:d0:63:81:d3:e1:e8:6b:f0: d9:b8:dd:50:2d:b0:09:fa:88:de:97:8d:95:57:f3:02:64:0f: 08:eb:94:61:5e:09:7e:e8:59:5c:a8:e1:c9:0e:ea:38:50:5b: fe:69:7e:17:39:86:f2:de:67:b8:e8:74:8f:c7:0a:c6:6f:ef: 49:df:3f:c7:bd:6c:fc:3a:04:9e:7c:e7:f8:85:1b:ca:2c:8f: 2d:bd:34:27:d3:c0:b9:f8:1f:f1:20:92:ab:eb:76:16:34:4b: 17:f5:88:e9:96:f6:95:9a:5f:38:49:22:ee:c0:fa:48:b3:bc: 48:8a:68:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwOTkxMTAvBgNVBAUTKDAzQTAyRTJGNURBQkYwRkYzOTM4NjI4QkM0RkY1RkI2 MTY1M0YwNDUwHhcNMjUwODIzMDUyNDIwWhcNMjUwODMwMDUyNDIwWjAYMRYwFAYD VQQDEw02OGE5NTA4NC1iOGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmQmflrLfK/X3pFkPrhcZBdlT/kYj1flkJkjqLG8VT2n9C9VZi+gK9KHqc1x +nWoWEjKr4wirn4pxU9OD5hFPh0G7yzC23sKDYA+GE2N4qIO9I+R7RgbK5Fa6znC Nzy588xvfhEYj7IOgM0YavVw4+sF1l98Qdy6IcyvudsLuU7SRTqIwhrziFagCoBh 2VlMf1yssJ6ymsVgpCiUFXhOfjGd0SKvKlF68enVGAsnbB6bFpEyWPiwJqKCSY98 M0hR/oYjGyOjiNSc9vDMaMHTsOBl0zWWr0TLM8wppL0/sdErgE++/wmFS4d/jFoa K4IhfJfJSVVMKrdtU9yg9voNfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUy5Zcg T6j4MkirZVsx1fWvEBNBMB8GA1UdIwQYMBaAFAOgLi9dq/D/OThii8T/X7YWU/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA5OS9GRDM2N0M3MDBE MDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQODVPR0tMeFA5ZnRoWlQ4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2QXVMMTJyOFA4NU9HS0x4UDlmdGhaVDhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTA5OS9GRDM2N0M3MDBEMDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQ ODVPR0tMeFA5ZnRoWlQ4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmZfYVW6MI41ZvpC8J7s7+pY7LLGEU/rionn9pkEiZFC4caPppmQsa VXYYbPMIuvYSieX0bAPW37VfULid4JoRvJYrPV/1wE8/q5c85C7W1Ny1WDbFAaSY WFyezbo83R2XFA/cXY6WoF4TkiNbUA6KQ0jeQb24+QP3qBwPjLnloapx6EPZyx6O 0GOB0+Hoa/DZuN1QLbAJ+ojel42VV/MCZA8I65RhXgl+6FlcqOHJDuo4UFv+aX4X OYby3me46HSPxwrGb+9J3z/HvWz8OgSefOf4hRvKLI8tvTQn08C5+B/xIJKr63YW NEsX9YjplvaVml84SSLuwPpIs7xIimj8 -----END CERTIFICATE-----Generated at Sat Aug 23 10:29:55 2025 by rpki-client