$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json) Hash identifier: ewNI+aG9WZuGe70msG56WRWsJm6hexFYYdlUMlDvSNg= Subject key identifier: C0:88:05:02:46:07:B1:C5:0B:6F:6A:6F:58:BB:F4:24:4A:51:75:90 Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 0302 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft Manifest number: 02FD Signing time: Sat 23 Aug 2025 01:29:07 +0000 Manifest this update: Sat 23 Aug 2025 01:29:07 +0000 Manifest next update: Sat 30 Aug 2025 01:29:07 +0000 Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: uMEm0n6FxoHckBSAdxglYh4rwnDJQr+ksFRlWroIF6w=) 2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: fawgiTLHzpx5EX5PXRfNoSCoBTl9+GYe2SP8BVC/WiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 770 (0x302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: Aug 23 01:29:07 2025 GMT Not After : Aug 30 01:29:07 2025 GMT Subject: CN=68a91963-6438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1f:c4:8d:b4:c8:de:40:da:fc:94:52:5f:e3: d9:bd:e4:db:a5:0d:42:5e:77:6d:48:ee:d2:37:4f: e4:a2:c2:f8:0f:b0:e1:fb:15:df:c6:56:b2:8c:12: dc:48:d2:c2:76:07:f2:f0:6e:b6:c0:d8:d3:b5:50: 2d:7f:cc:7e:55:7b:b3:db:07:ac:b2:d6:1b:c0:04: d1:52:f6:f6:72:dd:82:2b:7d:87:75:94:04:2d:f6: 8e:d6:5e:6c:97:a9:ef:0b:69:c9:3a:41:8c:d6:6f: 5d:32:43:b9:bf:a5:c4:a2:3b:23:83:3e:bd:7c:b0: 7a:a0:06:44:04:1d:b1:9b:40:70:d5:56:a0:4a:5a: e1:61:c8:1d:97:08:37:19:4d:32:57:b6:10:55:e7: 13:7e:ad:24:f5:c2:23:33:af:d6:e8:41:16:09:0e: e4:87:00:eb:dd:9f:30:84:18:b8:30:aa:19:99:77: ec:ec:9b:93:72:8e:d1:ab:84:4b:eb:cb:4e:4b:23: 4a:5d:89:38:f9:5a:ac:37:74:67:4c:89:bf:1c:7e: 97:30:69:7a:1b:82:c3:d1:b7:7e:1b:7b:f1:8a:50: 55:44:df:93:7c:19:1a:31:a6:9f:7c:25:fa:cb:3d: 44:6f:a2:40:1d:b2:d3:a9:0c:0a:38:e2:51:ae:fd: ec:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:88:05:02:46:07:B1:C5:0B:6F:6A:6F:58:BB:F4:24:4A:51:75:90 X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ef:1e:7a:d0:5c:84:97:47:3b:a6:16:5b:27:c1:94:e4:b8: 73:f9:3d:72:ab:20:11:55:48:7c:bc:73:32:21:e2:77:b9:f3: b8:49:be:13:12:89:b7:99:4c:12:2e:1e:e9:d5:3a:a4:f0:82: 39:6c:90:80:a4:f8:e1:dc:7e:d4:82:3d:65:35:2f:f9:d5:08: 37:7b:fc:52:b5:e4:00:45:cb:87:a1:e4:f0:fc:2c:ed:fb:f8: be:ed:8f:73:4f:20:fc:90:38:16:fc:85:6b:aa:f2:3b:1d:3a: b7:4a:67:15:7b:6a:4b:e1:87:ee:9d:bb:ab:62:18:38:04:f9: 9d:d1:89:9f:af:b9:87:5c:7d:cc:86:f1:15:78:e4:f0:8b:7a: 8e:71:7c:3e:4e:3b:69:a8:83:f2:2e:28:59:9f:1e:58:80:9b: 45:71:e5:ad:bf:fd:b4:68:21:48:0d:98:6b:f4:3e:c4:3d:f6: a3:ba:00:49:7f:cb:cf:48:0c:9b:ab:2c:61:d9:9f:e7:40:6f: ed:df:90:93:ce:db:8d:c2:ec:2d:43:32:b3:81:47:5f:14:c7: 29:f3:b4:f8:fd:4f:01:d7:0c:26:49:2f:90:44:88:51:dd:44: 1c:06:79:a9:13:23:21:84:3c:da:e3:29:e0:96:c8:fc:83:e8: 34:8a:e5:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjUwODIzMDEyOTA3WhcNMjUwODMwMDEyOTA3WjAYMRYwFAYD VQQDEw02OGE5MTk2My02NDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnB/EjbTI3kDa/JRSX+PZveTbpQ1CXndtSO7SN0/kosL4D7Dh+xXfxlayjBLc SNLCdgfy8G62wNjTtVAtf8x+VXuz2wesstYbwATRUvb2ct2CK32HdZQELfaO1l5s l6nvC2nJOkGM1m9dMkO5v6XEojsjgz69fLB6oAZEBB2xm0Bw1VagSlrhYcgdlwg3 GU0yV7YQVecTfq0k9cIjM6/W6EEWCQ7khwDr3Z8whBi4MKoZmXfs7JuTco7Rq4RL 68tOSyNKXYk4+VqsN3RnTIm/HH6XMGl6G4LD0bd+G3vxilBVRN+TfBkaMaaffCX6 yz1Eb6JAHbLTqQwKOOJRrv3s/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCIBQJG B7HFC29qb1i79CRKUXWQMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z dEU4RElOeDR5NEZNMUNwNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc7x560FyEl0c7phZbJ8GU5Lhz+T1yqyARVUh8vHMyIeJ3ufO4Sb4T Eom3mUwSLh7p1Tqk8II5bJCApPjh3H7Ugj1lNS/51Qg3e/xSteQARcuHoeTw/Czt +/i+7Y9zTyD8kDgW/IVrqvI7HTq3SmcVe2pL4YfunburYhg4BPmd0Ymfr7mHXH3M hvEVeOTwi3qOcXw+TjtpqIPyLihZnx5YgJtFceWtv/20aCFIDZhr9D7EPfajugBJ f8vPSAybqyxh2Z/nQG/t35CTztuNwuwtQzKzgUdfFMcp87T4/U8B1wwmSS+QRIhR 3UQcBnmpEyMhhDza4ynglsj8g+g0iuUa -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:06 2025 by rpki-client