$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft File: 4Loijq-YEvBn0v87-AaJVpjJOXc.mft (raw, json) Hash identifier: o6KSADSJDJ4TZwYj+d+GA0PgpKRxwHKZMstCkgANIWQ= Subject key identifier: EA:68:AF:0A:A0:6A:20:49:A8:60:D4:1B:C6:85:10:4B:EF:3A:D7:06 Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Certificate serial: 06CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft Manifest number: 066D Signing time: Fri 22 Aug 2025 23:00:28 +0000 Manifest this update: Fri 22 Aug 2025 23:00:27 +0000 Manifest next update: Fri 29 Aug 2025 23:00:27 +0000 Files and hashes: 1: 4Loijq-YEvBn0v87-AaJVpjJOXc.crl (hash: Y9qRIZdnGD4cvHmdwEpsTNGJZpjsTVgJCk9dI0r/dHc=) 2: 5D81DB7C51B611ECA674F080C4F9AE02.roa (hash: P2a+kPtjJ6yhmcNIHbs+Vm7Ygg7MHd+sRsHHDgTnLWA=) 3: D396006E251C11EEAB8BE444C4F9AE02.roa (hash: aw/mMcLGZFpDDulSaY/b/FllgryrbPv9l31A9Fqr2ho=) 4: B91AACE86C8A11EEA934912FC4F9AE02.roa (hash: 2i7Zy6YTNDUm3q2k9+7q5qaY4ohOTEgm7A4bQdJMwCc=) 5: D304973AC1E011EE81429B3EC4F9AE02.roa (hash: 9FIxKZess48cgYzpbCKgWUSjt13PFUPPV98OXdhIeTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Validity Not Before: Aug 22 23:00:27 2025 GMT Not After : Aug 29 23:00:27 2025 GMT Subject: CN=68a8f68b-f69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:96:80:6b:9c:f3:80:0a:45:2d:d8:df:91:1e: 1e:e8:bf:94:a1:a3:e1:fd:38:4f:d2:88:68:82:80: 4d:f4:2f:11:80:cb:ab:b4:e6:f6:c3:b3:59:9e:31: f6:6f:ce:2d:99:fd:3a:00:93:aa:73:e8:ee:91:30: 47:64:b8:95:1c:1d:b2:87:bc:8e:13:97:08:fd:64: ec:f5:a3:33:16:7b:1c:2b:04:f1:9d:12:83:34:f5: 02:a8:e4:42:db:75:06:33:73:9d:1f:c8:9f:d6:cc: 53:1f:ca:97:48:02:cd:4b:b2:f1:a9:9d:29:53:0e: cf:6f:41:8b:68:a5:22:96:ef:87:6d:81:5c:36:33: 40:92:87:ac:0b:7d:3a:30:eb:25:43:fd:87:7c:ec: 39:29:ee:19:53:42:4e:fc:d2:34:aa:c0:47:55:fb: 46:c6:df:e8:3b:f1:36:a0:ee:59:7e:c4:99:72:ce: db:2b:39:06:59:35:69:23:62:40:be:2b:8c:c3:78: e5:cb:17:13:d5:36:5d:88:11:d2:73:cd:97:69:86: 5d:9c:07:5e:50:20:b2:8d:50:da:f0:63:42:a6:26: f8:2a:20:15:62:5b:cc:e3:76:dc:ee:e5:ce:c1:48: a4:ba:c1:fb:4c:bd:4a:81:a3:6f:d4:ab:59:f1:a4: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:68:AF:0A:A0:6A:20:49:A8:60:D4:1B:C6:85:10:4B:EF:3A:D7:06 X509v3 Authority Key Identifier: keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:60:54:40:b0:df:42:7e:e0:ec:39:1d:9a:9c:e6:83:b7:32: 37:fb:18:c2:37:16:a0:4a:bf:ad:97:80:3b:d5:80:7a:a4:21: 37:94:9e:90:6f:5b:6e:82:f3:5e:dd:52:52:66:b9:a6:c7:a5: 34:7a:78:2c:98:77:06:9a:8b:37:4a:2c:10:fb:b7:93:e9:5e: 8b:12:a1:e1:d2:0d:0a:ef:58:2c:91:ee:ed:f3:7c:50:7d:a5: 6d:97:9f:6c:a1:2c:5a:e8:73:e6:f6:9e:92:fa:1d:3e:22:dd: 9b:d3:9b:29:a0:bc:42:d3:e3:f0:4f:be:30:42:4a:80:6c:f3: 8d:c2:0a:52:48:61:c3:44:69:9f:b1:95:9f:bf:f5:3a:f9:96: 02:e2:31:38:59:e0:35:fd:3e:ad:63:1d:08:19:49:c3:ed:a4: 5a:e6:94:8b:5c:d9:3e:72:f7:2e:25:c7:47:2f:1e:f6:f8:3a: 66:c6:ea:6f:8a:25:37:22:b2:e7:a7:cd:9b:17:6a:7e:0d:e7: 22:3f:6e:86:7f:55:24:d7:a8:84:5c:1b:11:4d:e9:ee:e5:38: 43:d2:32:9e:51:4e:ef:33:25:c9:b9:c4:31:33:8b:d9:27:06: 46:8d:7d:c2:6a:0e:17:fb:89:dc:b7:23:78:73:de:e9:4d:03: b8:a9:54:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2 OThDOTM5NzcwHhcNMjUwODIyMjMwMDI3WhcNMjUwODI5MjMwMDI3WjAYMRYwFAYD VQQDEw02OGE4ZjY4Yi1mNjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1paAa5zzgApFLdjfkR4e6L+UoaPh/ThP0ohogoBN9C8RgMurtOb2w7NZnjH2 b84tmf06AJOqc+jukTBHZLiVHB2yh7yOE5cI/WTs9aMzFnscKwTxnRKDNPUCqORC 23UGM3OdH8if1sxTH8qXSALNS7LxqZ0pUw7Pb0GLaKUilu+HbYFcNjNAkoesC306 MOslQ/2HfOw5Ke4ZU0JO/NI0qsBHVftGxt/oO/E2oO5ZfsSZcs7bKzkGWTVpI2JA viuMw3jlyxcT1TZdiBHSc82XaYZdnAdeUCCyjVDa8GNCpib4KiAVYlvM43bc7uXO wUikusH7TL1KgaNv1KtZ8aT+cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOporwqg aiBJqGDUG8aFEEvvOtcGMB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0 NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEQ2MC85RTBERTM5MkI0NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2 Qm4wdjg3LUFhSlZwakpPWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIYFRAsN9CfuDsOR2anOaDtzI3+xjCNxagSr+tl4A71YB6pCE3lJ6Q b1tugvNe3VJSZrmmx6U0engsmHcGmos3SiwQ+7eT6V6LEqHh0g0K71gske7t83xQ faVtl59soSxa6HPm9p6S+h0+It2b05spoLxC0+PwT74wQkqAbPONwgpSSGHDRGmf sZWfv/U6+ZYC4jE4WeA1/T6tYx0IGUnD7aRa5pSLXNk+cvcuJcdHLx72+Dpmxupv iiU3IrLnp82bF2p+DeciP26Gf1Uk16iEXBsRTenu5ThD0jKeUU7vMyXJucQxM4vZ JwZGjX3Cag4X+4nctyN4c97pTQO4qVSo -----END CERTIFICATE-----Generated at Sat Aug 23 21:39:35 2025 by rpki-client