$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft File: eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json) Hash identifier: 5hkzzOstd1uChaj/jfyT34uAfrQ8f1DW+vp1p54r6gc= Subject key identifier: 87:28:F5:21:2E:33:61:32:C7:87:B2:0F:C4:41:A2:36:65:F7:AA:15 Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 Certificate issuer: /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Certificate serial: 044E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft Manifest number: 0449 Signing time: Sat 23 Aug 2025 00:29:37 +0000 Manifest this update: Sat 23 Aug 2025 00:29:37 +0000 Manifest next update: Sat 30 Aug 2025 00:29:37 +0000 Files and hashes: 1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: LX0+9BxrAWZp9dsA0XZTjVFc46Z6giLY79FrWXj7oyw=) 2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: hAIkEeLEWcB2wcEGanDh+e9b0MM5CnTkz5SOu7dH+to=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F52, serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Validity Not Before: Aug 23 00:29:37 2025 GMT Not After : Aug 30 00:29:37 2025 GMT Subject: CN=68a90b71-bf55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:50:a9:44:e6:28:84:c0:b7:45:14:47:2f: 71:44:f6:06:d3:e2:a3:e6:e8:3c:5d:5b:94:80:0f: dc:00:e9:06:b9:d7:34:e5:fa:3b:4d:04:a7:c5:69: 14:da:95:54:59:0a:2f:ac:fa:7d:7d:b4:af:6b:1f: 9a:dd:d8:bd:04:28:9d:be:39:23:be:9b:78:86:e0: c8:d8:73:27:a8:98:a1:0a:07:d6:22:31:5f:cd:5c: 12:42:09:d5:81:b9:41:e8:61:78:cb:01:98:cc:e9: fb:37:b0:59:62:6a:2f:83:83:87:84:91:aa:fd:62: 24:15:ea:08:db:86:21:ca:9c:cd:1d:a6:4b:11:1b: 9c:cb:83:ff:f1:ed:47:fc:f9:d8:6f:73:1b:01:0b: ba:a1:a0:b2:ed:70:9c:4d:80:71:b5:a1:d5:1a:50: 44:84:78:b8:c3:84:b0:31:b3:44:8c:05:aa:de:f1: 12:6e:8e:1c:38:f7:60:65:73:30:50:89:b5:60:be: c9:83:29:a8:5e:57:71:4e:68:ff:0d:59:3d:16:45: 86:02:5b:2f:7a:6c:ff:82:19:fa:8a:4b:87:09:59: 0e:d9:bd:bd:65:45:0b:b3:ff:32:c2:db:c4:5f:e1: f8:84:9c:9a:09:b8:62:42:06:66:03:18:6c:b2:2c: 74:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:28:F5:21:2E:33:61:32:C7:87:B2:0F:C4:41:A2:36:65:F7:AA:15 X509v3 Authority Key Identifier: keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b7:ac:43:b7:f7:a5:06:5f:13:60:aa:4d:d0:79:43:18:ec: 41:fa:ec:f1:dd:e1:b7:03:bd:a9:d3:59:2e:aa:2c:bc:15:d9: c4:b9:b7:a1:e8:39:f6:b4:ff:98:02:ed:34:8a:de:63:76:ed: 6d:b4:c3:b2:6d:08:f8:de:06:fd:c6:5e:3b:32:71:a8:c0:22: 42:e5:df:f8:cc:89:83:cc:32:39:29:e6:22:b9:3b:86:61:40: 28:da:f3:20:6d:79:41:71:67:e5:42:d7:7d:f0:16:81:ac:66: 2f:db:d6:84:31:b1:e9:05:dd:8a:18:e4:81:dc:df:22:68:72: 02:0a:56:48:95:9a:17:89:71:74:e4:24:2a:7b:ba:6b:65:ef: 7c:3e:e5:e5:5d:39:37:7f:67:aa:bd:46:18:59:d0:b5:38:5b: 86:ed:ae:ca:81:cf:db:7d:50:b6:ec:02:23:c0:36:98:4f:bc: 9e:07:5f:24:b6:e9:f2:44:7c:91:c1:e2:c0:16:ec:09:b4:8c: ec:8f:ab:55:c0:ba:65:61:42:0e:25:af:31:f1:e3:63:1a:5a: 87:8d:9e:5f:af:22:8d:50:39:02:4f:2a:25:90:71:31:8d:1a: aa:f6:b4:09:be:8c:5d:90:48:74:1f:75:c0:03:a4:3b:8f:8f: 5c:ff:fa:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGNTIxMTAvBgNVBAUTKDc5N0RGQTE4ODM5Rjg3RDEzMTBFOUNBOUMzNDEwQUJF QjY4MzlFNzQwHhcNMjUwODIzMDAyOTM3WhcNMjUwODMwMDAyOTM3WjAYMRYwFAYD VQQDEw02OGE5MGI3MS1iZjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGFQqUTmKITAt0UURy9xRPYG0+Kj5ug8XVuUgA/cAOkGudc05fo7TQSnxWkU 2pVUWQovrPp9fbSvax+a3di9BCidvjkjvpt4huDI2HMnqJihCgfWIjFfzVwSQgnV gblB6GF4ywGYzOn7N7BZYmovg4OHhJGq/WIkFeoI24YhypzNHaZLERucy4P/8e1H /PnYb3MbAQu6oaCy7XCcTYBxtaHVGlBEhHi4w4SwMbNEjAWq3vESbo4cOPdgZXMw UIm1YL7JgymoXldxTmj/DVk9FkWGAlsvemz/ghn6ikuHCVkO2b29ZUULs/8ywtvE X+H4hJyaCbhiQgZmAxhssix0hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIco9SEu M2Eyx4eyD8RBojZl96oVMB8GA1UdIwQYMBaAFHl9+hiDn4fRMQ6cqcNBCr62g550 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Y1Mi9FOTQ2NjZDQzY4 QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5RXhEcHlwdzBFS3ZyYURu blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYMzZHSU9maDlFeERweXB3MEVLdnJhRG5uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Y1Mi9FOTQ2NjZDQzY4QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5 RXhEcHlwdzBFS3ZyYURublEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMt6xDt/elBl8TYKpN0HlDGOxB+uzx3eG3A72p01kuqiy8FdnEubeh 6Dn2tP+YAu00it5jdu1ttMOybQj43gb9xl47MnGowCJC5d/4zImDzDI5KeYiuTuG YUAo2vMgbXlBcWflQtd98BaBrGYv29aEMbHpBd2KGOSB3N8iaHICClZIlZoXiXF0 5CQqe7prZe98PuXlXTk3f2eqvUYYWdC1OFuG7a7Kgc/bfVC27AIjwDaYT7yeB18k tunyRHyRweLAFuwJtIzsj6tVwLplYUIOJa8x8eNjGlqHjZ5fryKNUDkCTyolkHEx jRqq9rQJvoxdkEh0H3XAA6Q7j49c//ot -----END CERTIFICATE-----Generated at Sat Aug 23 16:43:49 2025 by rpki-client