$ rpki-client -vvf rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft File: R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft (raw, json) Hash identifier: Lv+pffGh/o4zQI1K/6sZCE1cChYldJ9LJuF3Ct4Jw1k= Subject key identifier: 64:9E:FB:4B:01:E0:EA:C3:69:26:9F:7A:93:73:AB:40:3B:D2:5D:B3 Authority key identifier: 47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65 Certificate issuer: /CN=A9166279/serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft Manifest number: 1D Signing time: Sat 23 Aug 2025 08:08:42 +0000 Manifest this update: Sat 23 Aug 2025 08:08:41 +0000 Manifest next update: Sat 30 Aug 2025 08:08:41 +0000 Files and hashes: 1: R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl (hash: bRqoeQjawQ0HwqlC79zmeVV0q3gRRITcNsX48RQLwhc=) 2: A7C3B19858CD11F083D7B477C4F9AE02.roa (hash: 8KYhw05nY7mchDEJfru3ck598S7WS2QrgetgJkL5mmM=) 3: 22CDB420688111F0ADE02116C4F9AE02.roa (hash: cU0btbGETNSiVfIPEybbQHdGLtibsKCuD5znry5aMpk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166279, serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765 Validity Not Before: Aug 23 08:08:41 2025 GMT Not After : Aug 30 08:08:41 2025 GMT Subject: CN=68a9770a-bf24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3b:d7:47:22:7e:d1:3d:6e:85:62:d1:b3:1f: 9b:36:af:ae:97:92:43:aa:e4:33:1d:1c:bb:4a:d9: 17:35:38:91:11:09:1c:fd:1f:a2:4c:77:13:a2:ba: f7:e8:31:d4:b7:38:f5:71:fe:5c:21:17:be:7d:2d: 75:dc:95:47:71:f1:66:58:62:cc:76:73:61:0a:50: 19:75:7f:0d:fe:be:0d:b8:a5:84:f4:05:e9:f2:2f: 77:5e:5e:f0:07:60:f9:ff:ad:e1:5d:a3:53:8e:20: 29:9d:ee:53:ca:0a:b4:c6:b0:90:a6:b8:8f:ac:b4: 48:47:69:4b:ea:31:25:95:e1:93:2e:0f:8d:70:3e: 61:24:ba:02:2e:06:95:41:ec:82:09:87:2d:bc:d0: 2a:ae:9b:c1:38:2d:32:06:61:5a:13:77:9b:1d:fc: 60:a9:09:7c:f7:6f:56:a9:93:1f:b5:15:85:dd:a0: 3f:14:9e:97:c4:c3:e5:9a:68:66:18:fc:d9:53:b9: 5b:98:26:1c:52:c5:fa:66:10:37:d9:4e:ea:f3:d2: 3c:14:61:19:cc:18:8e:0a:80:dd:05:80:be:56:a9: bb:1e:ee:45:3c:21:35:ba:24:c9:b0:ab:ae:80:5a: e4:09:37:16:8e:31:8e:7d:d1:64:ee:dc:a1:69:40: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9E:FB:4B:01:E0:EA:C3:69:26:9F:7A:93:73:AB:40:3B:D2:5D:B3 X509v3 Authority Key Identifier: keyid:47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ec:c5:6f:f6:40:70:3e:f3:22:db:b4:5e:10:ff:58:7e:0f: 03:5b:d7:4f:cd:9f:b6:77:0f:91:18:28:3f:61:74:72:a7:d0: be:6e:d0:3e:b1:f2:c8:1e:07:07:77:02:a8:6a:20:ba:93:4b: 08:74:6f:7b:00:bf:fe:e1:c5:f4:7c:77:50:a7:29:07:b9:aa: 9d:18:f1:9b:d4:dd:ec:e3:09:ac:56:93:24:18:b2:8f:ba:3c: 56:11:90:a9:30:76:a8:c4:16:39:67:29:ab:0c:7a:ec:bb:e2: 60:80:2c:d0:42:57:38:0a:5c:db:1e:7e:52:3b:09:5c:33:63: 6d:69:e4:c1:65:78:1d:59:e6:65:c2:69:49:37:b5:28:d8:23: b3:f0:c8:ec:ec:ac:58:14:99:c8:24:e2:16:b5:f7:4a:e4:50: 0e:6e:0c:a5:6d:d5:72:1c:9b:44:1f:d5:cf:c8:aa:2d:bb:8d: 42:0b:bb:74:30:75:7f:d7:d5:51:36:a5:c2:ed:34:10:2c:42: 0a:2d:86:fc:7c:70:1a:8f:89:2c:d7:42:04:02:35:1e:ef:b3: de:7e:73:01:a2:96:58:7d:e0:f7:67:f8:fe:63:68:27:74:22: d9:19:ed:13:45:a2:c5:1a:ca:94:10:bb:5a:f1:70:4f:28:e5: ab:42:b6:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NjI3OTExMC8GA1UEBRMoNDc0QkY3MzVFRDI4RjM1MThCQ0UwQUM0NjI5NThCRUM1 ODJDRDc2NTAeFw0yNTA4MjMwODA4NDFaFw0yNTA4MzAwODA4NDFaMBgxFjAUBgNV BAMTDTY4YTk3NzBhLWJmMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNO9dHIn7RPW6FYtGzH5s2r66XkkOq5DMdHLtK2Rc1OJERCRz9H6JMdxOiuvfo MdS3OPVx/lwhF759LXXclUdx8WZYYsx2c2EKUBl1fw3+vg24pYT0BenyL3deXvAH YPn/reFdo1OOICmd7lPKCrTGsJCmuI+stEhHaUvqMSWV4ZMuD41wPmEkugIuBpVB 7IIJhy280Cqum8E4LTIGYVoTd5sd/GCpCXz3b1apkx+1FYXdoD8UnpfEw+WaaGYY /NlTuVuYJhxSxfpmEDfZTurz0jwUYRnMGI4KgN0FgL5Wqbse7kU8ITW6JMmwq66A WuQJNxaOMY590WTu3KFpQGMfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZJ77SwHg 6sNpJp96k3OrQDvSXbMwHwYDVR0jBBgwFoAUR0v3Ne0o81GLzgrEYpWL7Fgs12Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2Mjc5LzM4QjJDN0JDNThD RDExRjBBRDEwMDg3N0M0RjlBRTAyL1IwdjNOZTBvODFHTHpnckVZcFdMN0ZnczEy VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUjB2M05lMG84MUdMemdyRVlwV0w3RmdzMTJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 Mjc5LzM4QjJDN0JDNThDRDExRjBBRDEwMDg3N0M0RjlBRTAyL1IwdjNOZTBvODFH THpnckVZcFdMN0ZnczEyVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG/sxW/2QHA+8yLbtF4Q/1h+DwNb10/Nn7Z3D5EYKD9hdHKn0L5u0D6x 8sgeBwd3AqhqILqTSwh0b3sAv/7hxfR8d1CnKQe5qp0Y8ZvU3ezjCaxWkyQYso+6 PFYRkKkwdqjEFjlnKasMeuy74mCALNBCVzgKXNseflI7CVwzY21p5MFleB1Z5mXC aUk3tSjYI7PwyOzsrFgUmcgk4ha190rkUA5uDKVt1XIcm0Qf1c/Iqi27jUILu3Qw dX/X1VE2pcLtNBAsQgothvx8cBqPiSzXQgQCNR7vs95+cwGillh94Pdn+P5jaCd0 ItkZ7RNFosUaypQQu1rxcE8o5atCttY= -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:03 2025 by rpki-client