$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft File: 44SqQCWhBrVHp8CJsd3-7mzLoi8.mft (raw, json) Hash identifier: 6Hdv59qZQssN59d7vtaIawiFz8qdFnJfwv8Fwc2Ubmk= Subject key identifier: 05:74:6B:8E:35:C7:9E:F4:05:69:06:FF:C0:7F:15:BF:07:40:4C:06 Authority key identifier: E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F Certificate issuer: /CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft Manifest number: 01B4 Signing time: Sat 23 Aug 2025 03:25:07 +0000 Manifest this update: Sat 23 Aug 2025 03:25:07 +0000 Manifest next update: Sat 30 Aug 2025 03:25:07 +0000 Files and hashes: 1: 44SqQCWhBrVHp8CJsd3-7mzLoi8.crl (hash: RtBJpHIRrocGyosm3KsNGg13pFvbTXwRp0LhzZMLjrQ=) 2: 3D940BFAC1A711EFAFD15F46C4F9AE02.roa (hash: aVU9JOEv5GYjCvTVv3rm3CjlRISRbtbgFsAh8ZW2TaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B4C, serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F Validity Not Before: Aug 23 03:25:07 2025 GMT Not After : Aug 30 03:25:07 2025 GMT Subject: CN=68a93493-8c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:2a:f9:f2:c9:64:9e:f5:23:22:47:b1:de: 14:af:73:ed:eb:30:9a:90:90:9a:d2:b9:61:ec:7e: 14:9f:0a:92:2e:2f:88:46:5e:e5:4c:fb:a9:89:a8: df:21:c3:b0:02:4a:5d:7f:f4:27:86:b2:31:63:5d: 20:48:6f:34:29:b2:ec:20:48:ba:8d:90:49:79:2f: 5b:e1:3a:d4:dd:8d:d1:b5:fd:4f:3f:0b:32:35:e7: 32:cc:ca:28:50:59:d5:11:7c:6e:39:2d:05:19:eb: 63:41:33:a8:c3:70:f2:20:da:04:47:fb:82:89:dd: 77:74:4b:b2:0f:97:86:79:74:80:52:68:d0:9b:5a: 70:65:8f:d7:2e:15:43:39:93:81:b1:93:96:08:03: a3:74:b7:cc:e1:93:8e:45:36:c9:01:60:49:43:95: 72:dd:31:42:a7:27:2b:e2:65:4c:ed:75:35:92:6d: 57:be:6b:ba:e0:23:3c:fd:a3:09:b8:85:71:07:c0: 6b:a5:05:fd:68:51:b4:98:96:4e:c9:05:08:79:b1: c4:55:74:ba:20:a2:a8:21:dc:73:54:00:b1:8c:27: 08:68:57:e0:03:01:41:64:2b:7d:5c:f4:83:aa:e9: 2d:b9:f3:2b:f0:6c:63:cc:8e:e8:08:a5:b5:55:33: cf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:74:6B:8E:35:C7:9E:F4:05:69:06:FF:C0:7F:15:BF:07:40:4C:06 X509v3 Authority Key Identifier: keyid:E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:29:0c:83:75:3d:1f:5d:98:71:25:3b:21:0a:c5:be:d8:b2: 22:2b:75:49:e4:4e:53:3c:e8:cb:e5:bc:42:d5:b4:43:c3:96: 35:03:dd:d9:a5:0b:a8:d5:44:7f:cc:96:67:19:58:86:cd:a2: b2:90:82:3d:0b:3a:86:7e:2f:df:64:75:3b:84:25:70:2d:d6: fd:ca:72:9b:a0:f2:e0:7d:19:2a:a9:04:62:3a:c6:88:46:4f: 51:df:90:ea:38:28:6b:b2:f5:92:d6:aa:b9:a6:24:36:74:c8: fb:c2:df:27:77:85:2d:d9:a3:32:c1:ff:de:71:a3:e3:5f:00: e5:fa:b2:ec:93:2b:47:dc:3b:c6:75:cc:e9:d0:c0:51:c9:ec: 4e:5c:7f:83:a9:4c:21:68:1b:a6:22:ff:b4:ab:a7:7f:70:b5: 40:73:b5:9d:c8:10:6d:cd:27:43:9b:c0:21:ad:f4:fd:4b:57: 83:72:88:45:49:c1:4d:f3:b6:17:f9:9b:1f:d2:20:63:bb:fa: 78:43:4c:17:89:6e:9a:ba:84:07:fb:15:1f:26:ae:5d:43:c0: d0:14:29:f1:4b:27:9e:73:8e:05:c1:73:ea:30:a7:a5:71:80: 43:4a:87:30:75:47:e6:1a:02:94:93:14:3a:9a:7d:ff:bf:9b: be:00:3d:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCNEMxMTAvBgNVBAUTKEUzODRBQTQwMjVBMTA2QjU0N0E3QzA4OUIxRERGRUVF NkNDQkEyMkYwHhcNMjUwODIzMDMyNTA3WhcNMjUwODMwMDMyNTA3WjAYMRYwFAYD VQQDEw02OGE5MzQ5My04Yzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Lkq+fLJZJ71IyJHsd4Ur3Pt6zCakJCa0rlh7H4UnwqSLi+IRl7lTPupiajf IcOwAkpdf/QnhrIxY10gSG80KbLsIEi6jZBJeS9b4TrU3Y3Rtf1PPwsyNecyzMoo UFnVEXxuOS0FGetjQTOow3DyINoER/uCid13dEuyD5eGeXSAUmjQm1pwZY/XLhVD OZOBsZOWCAOjdLfM4ZOORTbJAWBJQ5Vy3TFCpycr4mVM7XU1km1Xvmu64CM8/aMJ uIVxB8BrpQX9aFG0mJZOyQUIebHEVXS6IKKoIdxzVACxjCcIaFfgAwFBZCt9XPSD quktufMr8GxjzI7oCKW1VTPPQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAV0a441 x570BWkG/8B/Fb8HQEwGMB8GA1UdIwQYMBaAFOOEqkAloQa1R6fAibHd/u5sy6Iv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUI0Qy8yOTc5OTE1MjA0 MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJyVkhwOENKc2QzLTdtekxv aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0U3FRQ1doQnJWSHA4Q0pzZDMtN216TG9pOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUI0Qy8yOTc5OTE1MjA0MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJy VkhwOENKc2QzLTdtekxvaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9KQyDdT0fXZhxJTshCsW+2LIiK3VJ5E5TPOjL5bxC1bRDw5Y1A93Z pQuo1UR/zJZnGViGzaKykII9CzqGfi/fZHU7hCVwLdb9ynKboPLgfRkqqQRiOsaI Rk9R35DqOChrsvWS1qq5piQ2dMj7wt8nd4Ut2aMywf/ecaPjXwDl+rLskytH3DvG dczp0MBRyexOXH+DqUwhaBumIv+0q6d/cLVAc7WdyBBtzSdDm8AhrfT9S1eDcohF ScFN87YX+Zsf0iBju/p4Q0wXiW6auoQH+xUfJq5dQ8DQFCnxSyeec44FwXPqMKel cYBDSocwdUfmGgKUkxQ6mn3/v5u+AD0b -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:04 2025 by rpki-client