$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: R0s/Mt3jxzhq6UoCXsVo8/Al9cRrJgTGhEu4hiF+pN0= Subject key identifier: 27:51:83:9D:B0:7F:91:46:98:B5:DD:1B:F5:53:2B:14:B8:BA:C8:82 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 04BA Signing time: Sat 23 Aug 2025 00:06:28 +0000 Manifest this update: Sat 23 Aug 2025 00:06:27 +0000 Manifest next update: Sat 30 Aug 2025 00:06:27 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: 6wozuAS8s/cD+p3vW7HgE5S2iz/oit46OWiXsd7DsRo=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: Sfq7zwsHIT4LApgTVDRFHk10JkrfthfbYhUwRPOBCl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Aug 23 00:06:27 2025 GMT Not After : Aug 30 00:06:27 2025 GMT Subject: CN=68a90604-9dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:92:81:5b:bc:20:31:b2:f5:2b:0e:38:c8: c6:53:ae:7b:d3:24:24:19:e3:4a:ee:1c:de:91:7d: 41:f8:51:49:fa:1f:78:e6:a2:c5:d5:75:de:b7:64: 20:ee:ed:06:c7:01:54:a3:4a:24:c2:8b:00:ef:f2: ec:8b:62:18:27:a2:31:8a:60:33:82:a1:2b:5e:f1: 70:5e:3a:43:62:b5:01:35:54:aa:0f:9e:80:fa:94: 2a:fc:8b:b4:5e:f6:4e:5f:ae:2d:bf:21:78:e6:38: 08:35:de:1e:c0:74:99:27:cd:97:bd:c8:15:19:c8: f4:25:fd:21:04:ba:7c:03:e5:83:a5:34:cc:f3:02: c3:f8:42:d7:7e:41:b9:0c:87:4a:3b:83:b6:94:4c: 5f:d0:20:3e:5b:f8:ca:ba:33:7d:c7:93:ec:59:3d: 2d:ea:cc:66:fb:39:bc:3b:a6:58:40:9e:ed:23:07: 1c:e9:4b:4b:d3:b7:11:8c:0e:34:7e:ef:f4:d2:22: 56:dd:9a:1a:8f:f2:37:97:fb:4e:e4:aa:67:27:9a: 3d:cd:c7:74:6b:5e:47:8a:31:ce:3d:12:dc:de:9a: 74:43:93:4a:da:26:b4:c3:0e:ac:a2:2c:20:c3:13: 03:93:f0:55:35:e9:df:59:b5:12:32:0d:40:64:8a: 45:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:51:83:9D:B0:7F:91:46:98:B5:DD:1B:F5:53:2B:14:B8:BA:C8:82 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:11:f0:60:a1:5b:48:67:30:56:72:e7:f8:05:94:ea:a0:e4: 9b:8b:d5:21:c2:75:99:f4:cd:9b:17:0e:f1:3d:b1:13:8f:82: e0:98:3a:59:c5:6d:31:99:3e:2a:84:c4:35:e9:16:50:2d:66: aa:ba:cb:24:0f:8b:8b:34:cf:30:c4:ba:ae:fe:e1:be:89:39: f0:35:42:38:ef:cc:3a:7e:c4:cc:94:1f:af:05:80:04:c0:7d: d4:c4:cf:c0:8c:77:bb:04:51:92:e8:74:b6:ff:34:30:db:fb: 25:96:bd:8e:09:c7:95:9b:d1:3d:18:dc:10:e6:9c:06:b1:44: 3b:02:3d:ca:89:4e:00:4b:ee:34:88:dc:2a:69:21:15:02:91: 74:eb:f6:28:b8:55:62:33:9c:c2:72:67:05:43:08:72:ed:46: 09:06:3b:c3:71:91:bf:40:c6:4f:79:6f:4b:3e:88:68:36:9e: ea:2b:e3:0f:4d:d6:ad:9f:fa:56:c3:47:0e:c3:ae:cf:48:55: 78:39:1b:5b:03:fb:b9:8c:3b:e2:57:31:d3:d5:a1:b9:30:f8: 06:d7:fb:62:1c:db:1c:25:aa:d9:9d:54:3f:6b:3f:9c:e6:4e: 82:36:25:05:99:f7:ec:f4:7d:63:5e:3a:a2:75:cc:b9:ee:64: 9b:9f:ef:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjUwODIzMDAwNjI3WhcNMjUwODMwMDAwNjI3WjAYMRYwFAYD VQQDEw02OGE5MDYwNC05ZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyROSgVu8IDGy9SsOOMjGU6570yQkGeNK7hzekX1B+FFJ+h945qLF1XXet2Qg 7u0GxwFUo0okwosA7/Lsi2IYJ6IximAzgqErXvFwXjpDYrUBNVSqD56A+pQq/Iu0 XvZOX64tvyF45jgINd4ewHSZJ82XvcgVGcj0Jf0hBLp8A+WDpTTM8wLD+ELXfkG5 DIdKO4O2lExf0CA+W/jKujN9x5PsWT0t6sxm+zm8O6ZYQJ7tIwcc6UtL07cRjA40 fu/00iJW3Zoaj/I3l/tO5KpnJ5o9zcd0a15HijHOPRLc3pp0Q5NK2ia0ww6soiwg wxMDk/BVNenfWbUSMg1AZIpF3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdRg52w f5FGmLXdG/VTKxS4usiCMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuEfBgoVtIZzBWcuf4BZTqoOSbi9UhwnWZ9M2bFw7xPbETj4LgmDpZ xW0xmT4qhMQ16RZQLWaqusskD4uLNM8wxLqu/uG+iTnwNUI478w6fsTMlB+vBYAE wH3UxM/AjHe7BFGS6HS2/zQw2/sllr2OCceVm9E9GNwQ5pwGsUQ7Aj3KiU4AS+40 iNwqaSEVApF06/YouFViM5zCcmcFQwhy7UYJBjvDcZG/QMZPeW9LPohoNp7qK+MP Tdatn/pWw0cOw67PSFV4ORtbA/u5jDviVzHT1aG5MPgG1/tiHNscJarZnVQ/az+c 5k6CNiUFmffs9H1jXjqidcy57mSbn+8M -----END CERTIFICATE-----Generated at Sun Aug 24 05:16:34 2025 by rpki-client