$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft File: e0Coz49PGgbDbiA08Yo4v5jKWxg.mft (raw, json) Hash identifier: GT1MdBCXuedlPJp6C5VLGWgiORK3DFQve04ZiNEe430= Subject key identifier: 9E:C5:54:EC:41:EF:A6:51:D5:25:B4:B0:55:C2:22:9C:16:BD:A3:5B Authority key identifier: 7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 Certificate issuer: /CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft Manifest number: 01AE Signing time: Sat 23 Aug 2025 03:19:14 +0000 Manifest this update: Sat 23 Aug 2025 03:19:14 +0000 Manifest next update: Sat 30 Aug 2025 03:19:14 +0000 Files and hashes: 1: e0Coz49PGgbDbiA08Yo4v5jKWxg.crl (hash: uuusH/5wyq7WQ8HAbXfHW4eiG+pw4MNTsBc2GTpMEmE=) 2: A74C3132F49211ED8659177BC4F9AE02.roa (hash: 306udLdXsDXkERPewXDbNH98O47h8mfNTv4RCgj1cHQ=) 3: 2F9915D8718D11EE97E3E022C4F9AE02.roa (hash: coH1x8KY/cq3OGm3WBXbeivefI4OPLTpBCpIkFV1i7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123, serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18 Validity Not Before: Aug 23 03:19:14 2025 GMT Not After : Aug 30 03:19:14 2025 GMT Subject: CN=68a93332-d3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:42:10:2e:5f:c0:69:85:2c:46:67:b2:73: 3a:52:f7:80:76:1a:81:4b:c3:6a:4b:ea:db:63:b6: 35:e2:07:3b:38:f6:df:6c:8f:c8:1f:94:15:ca:f9: 79:b5:e7:d4:17:5a:53:8e:d9:88:7a:34:17:44:c2: 22:6f:1d:41:2e:c6:5d:fc:d3:23:30:56:47:a6:57: ed:72:49:c7:92:02:bd:4e:0c:65:e7:4c:72:de:62: a7:7f:fc:43:e6:b0:9a:e2:a2:23:e8:22:d9:af:99: e2:e3:06:1f:2b:b7:d4:c3:c5:78:94:87:15:80:af: 56:d1:f7:98:ec:53:13:f3:a4:15:30:7c:fb:ab:83: aa:19:78:95:a2:d8:7c:b3:0e:36:b0:0b:31:09:5a: 8c:69:aa:14:1d:b5:f3:4d:7f:7b:67:f5:3b:7b:1a: 34:82:d2:aa:d7:8f:d5:05:ad:b8:b1:54:58:ee:f4: 01:e8:25:e7:27:0b:20:f4:b5:e3:52:7e:ea:77:a5: 97:e3:0b:f4:6c:d1:ec:26:59:c7:a0:e7:f7:32:f6: e9:af:fb:7d:15:b3:7d:81:a4:c3:7f:67:62:71:70: 8c:c9:5c:c4:81:b2:f7:82:21:e4:db:7b:55:b2:0c: cd:db:42:20:90:65:23:ab:20:cc:ee:89:f1:50:63: b4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C5:54:EC:41:EF:A6:51:D5:25:B4:B0:55:C2:22:9C:16:BD:A3:5B X509v3 Authority Key Identifier: keyid:7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:49:f1:d8:e8:69:a6:cc:7a:1f:25:c2:94:b2:8f:61:be:81: ba:42:a5:1c:92:64:e3:b0:3d:90:5e:ab:70:ac:1d:3f:e9:ed: 82:b0:d2:a0:82:36:15:a5:eb:5b:98:2e:9d:c4:c9:a8:90:97: 85:cb:d2:fd:11:c5:30:66:b6:d2:7d:67:a5:b8:4e:d3:16:12: c8:ab:8a:73:71:37:20:6a:19:27:69:28:9a:3e:3d:ce:f8:cb: 81:2d:b4:09:51:de:a4:69:a0:fb:c7:e4:f2:1b:17:e4:32:fd: 4c:23:ee:36:29:e7:db:ba:3d:7b:59:80:bf:0a:f9:58:29:9c: 89:60:fd:e7:e8:7a:78:56:57:0f:36:1b:1a:87:b2:ae:22:85: 9e:c3:2e:ad:b8:86:83:cc:a8:6c:79:a4:a8:b9:27:d0:ba:9a: f8:d1:61:3d:ff:24:6f:68:52:82:99:ca:6a:94:40:4b:31:27: 8f:1b:18:65:8a:33:5f:ce:4d:72:39:65:0d:69:b3:86:dc:c5: 10:fa:c1:d4:1c:a9:e4:9c:fe:de:6d:2a:04:e2:cc:d9:18:fc: 5f:48:cf:52:bd:f1:98:b8:e9:28:6d:60:de:6e:54:28:8e:c1: 16:36:c7:3b:15:02:0e:9b:a3:f6:4b:d5:da:01:68:13:49:76: 2c:6b:5d:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDdCNDBBOENGOEY0RjFBMDZDMzZFMjAzNEYxOEEzOEJG OThDQTVCMTgwHhcNMjUwODIzMDMxOTE0WhcNMjUwODMwMDMxOTE0WjAYMRYwFAYD VQQDEw02OGE5MzMzMi1kM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNtCEC5fwGmFLEZnsnM6UveAdhqBS8NqS+rbY7Y14gc7OPbfbI/IH5QVyvl5 tefUF1pTjtmIejQXRMIibx1BLsZd/NMjMFZHplftcknHkgK9Tgxl50xy3mKnf/xD 5rCa4qIj6CLZr5ni4wYfK7fUw8V4lIcVgK9W0feY7FMT86QVMHz7q4OqGXiVoth8 sw42sAsxCVqMaaoUHbXzTX97Z/U7exo0gtKq14/VBa24sVRY7vQB6CXnJwsg9LXj Un7qd6WX4wv0bNHsJlnHoOf3Mvbpr/t9FbN9gaTDf2dicXCMyVzEgbL3giHk23tV sgzN20IgkGUjqyDM7onxUGO0LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7FVOxB 76ZR1SW0sFXCIpwWvaNbMB8GA1UdIwQYMBaAFHtAqM+PTxoGw24gNPGKOL+YylsY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xQjAwRUFFOEY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdnYkRiaUEwOFlvNHY1aktX eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UwQ296NDlQR2diRGJpQTA4WW80djVqS1d4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xQjAwRUFFOEY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdn YkRiaUEwOFlvNHY1aktXeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTSfHY6GmmzHofJcKUso9hvoG6QqUckmTjsD2QXqtwrB0/6e2CsNKg gjYVpetbmC6dxMmokJeFy9L9EcUwZrbSfWeluE7TFhLIq4pzcTcgahknaSiaPj3O +MuBLbQJUd6kaaD7x+TyGxfkMv1MI+42Kefbuj17WYC/CvlYKZyJYP3n6Hp4VlcP Nhsah7KuIoWewy6tuIaDzKhseaSouSfQupr40WE9/yRvaFKCmcpqlEBLMSePGxhl ijNfzk1yOWUNabOG3MUQ+sHUHKnknP7ebSoE4szZGPxfSM9SvfGYuOkobWDeblQo jsEWNsc7FQIOm6P2S9XaAWgTSXYsa13v -----END CERTIFICATE-----Generated at Sat Aug 23 12:50:00 2025 by rpki-client