$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: IHssbeRlPBfnsf099Su6N/mV7VNS1VKyjy3bKI53anc= Subject key identifier: 3C:E6:A7:58:E8:DA:FC:7A:0B:6D:7A:F6:B9:95:EA:55:10:81:3F:2E Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 145F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 143E Signing time: Fri 22 Aug 2025 17:02:48 +0000 Manifest this update: Fri 22 Aug 2025 17:02:48 +0000 Manifest next update: Fri 29 Aug 2025 17:02:48 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: AgXJZcGHi0jnfMhcHtRxexFAKCNPQATRmVkWoOSXqJ8=) 2: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: FOnoWXzG/xzvG2wY9SEKlskrDJv5q/5MAP/jyysv8e0=) 3: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: iaZ3s82xkjY2XfRTWiPnjnqnF2ySFKKm+AeAW0yRT+E=) 4: 983A5536450611F093EC3A65C4F9AE02.roa (hash: jXDJFKBYyl2AMr2aBeeaX3dJKta1vZTtNnECUVWIxl8=) 5: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: Z27ILnU+TOqVLLhIyXtiXXV0PlnGYmkYaaio5+3e2ug=) 6: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: U8BSX2DX6JtfXzvuoqYA9Tm3bqF1pxPrmS12/E0gdmw=) 7: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: 8uWfW9Bx2UJleM0TwlNLkikjSTgRwN2eIHzYdV+mzGQ=) 8: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: mH5FkT85wXX1fDkYIcXzDeEU3PHEwchgtocWPplcMrs=) 9: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: 3SvNLk7hW+Uo3wG2xJFv1wsrHQt1APNp92391QdFtgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5215 (0x145f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Aug 22 17:02:48 2025 GMT Not After : Aug 29 17:02:48 2025 GMT Subject: CN=68a8a2b8-1c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d3:b0:12:98:54:67:d1:0e:f3:3c:60:89:18: e5:50:41:04:b9:c8:06:de:a4:cd:25:f0:10:7b:3a: b6:aa:94:dc:4d:b5:88:62:29:cf:94:4b:27:89:c5: ef:ef:53:05:0e:47:03:2c:d6:ce:b8:7a:da:27:2c: 1b:53:b5:df:b4:5c:37:07:24:31:b0:e3:6f:a6:34: 5d:cc:a3:4c:b6:a4:9d:dd:98:d4:fc:80:1d:a6:1e: dc:07:0d:a7:14:bb:fd:9a:4f:d6:94:f8:b1:1a:1f: 55:87:2f:9d:5b:dd:a7:6e:bd:9a:16:11:f1:13:db: 79:56:ed:59:20:71:db:4b:8e:80:64:c9:9b:85:22: 5f:f7:8c:bf:de:c5:79:6d:4a:81:fe:1d:2a:15:f9: 8b:4b:7f:aa:e6:77:06:cc:bc:93:a9:11:b1:87:2b: 15:43:79:09:a3:54:01:1d:8f:a0:dd:53:9d:ce:02: ee:32:43:f2:95:3b:a1:fc:74:0f:29:44:e3:16:d3: af:24:c7:d6:95:14:ef:07:36:4b:e0:86:59:74:ff: a1:5c:a4:90:3f:3f:c7:74:02:ea:0a:09:76:da:3e: a0:7f:23:ba:36:ad:e0:76:23:a0:c8:6e:7b:42:f6: 23:d5:4d:25:0a:70:4d:cc:51:05:33:25:5d:35:3a: 8a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E6:A7:58:E8:DA:FC:7A:0B:6D:7A:F6:B9:95:EA:55:10:81:3F:2E X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cb:83:a9:a0:63:b6:8c:23:a7:6f:cd:ce:6f:6a:c4:c8:56: c3:77:66:04:ae:24:45:14:c9:18:b4:b0:c1:df:94:6b:ad:38: c1:f3:fe:46:a0:48:ef:2e:8a:93:c9:e0:77:df:62:a8:9a:04: 6d:61:39:2b:0c:8d:98:cb:51:01:a5:ed:96:75:2f:bb:b2:23: 30:bb:ea:b4:7b:b4:43:bc:ee:d8:0e:b6:2f:94:bb:92:43:44: cf:1a:1b:11:d2:52:fb:ff:c1:47:37:05:36:6c:cb:98:9a:c6: 54:b1:59:fa:fe:3f:77:5d:1b:9b:a3:6f:d8:d4:30:97:07:b5: 08:4a:46:85:c1:bb:31:be:78:b4:8a:33:a8:c7:52:92:7d:a4: 79:52:80:8c:bd:71:b7:9a:bc:5d:51:62:82:47:50:02:52:d6: d8:d7:2c:d4:80:1a:d1:db:77:42:ed:31:3f:32:9f:9c:f4:14: 32:2a:d1:0f:da:6e:a3:78:fe:64:3a:bb:4e:e8:98:5c:ad:5e: db:35:d3:ff:ae:3a:51:db:e6:30:24:e1:8c:47:81:1a:14:03: 99:ec:11:82:88:76:90:97:86:1b:35:3a:06:b2:5a:51:39:e5: 0a:01:b2:c0:b6:e7:0f:08:fa:c7:92:6a:dd:43:16:e7:a8:aa: 32:4d:25:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwODIyMTcwMjQ4WhcNMjUwODI5MTcwMjQ4WjAYMRYwFAYD VQQDEw02OGE4YTJiOC0xYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdOwEphUZ9EO8zxgiRjlUEEEucgG3qTNJfAQezq2qpTcTbWIYinPlEsnicXv 71MFDkcDLNbOuHraJywbU7XftFw3ByQxsONvpjRdzKNMtqSd3ZjU/IAdph7cBw2n FLv9mk/WlPixGh9Vhy+dW92nbr2aFhHxE9t5Vu1ZIHHbS46AZMmbhSJf94y/3sV5 bUqB/h0qFfmLS3+q5ncGzLyTqRGxhysVQ3kJo1QBHY+g3VOdzgLuMkPylTuh/HQP KUTjFtOvJMfWlRTvBzZL4IZZdP+hXKSQPz/HdALqCgl22j6gfyO6Nq3gdiOgyG57 QvYj1U0lCnBNzFEFMyVdNTqKtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzmp1jo 2vx6C2169rmV6lUQgT8uMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBby4OpoGO2jCOnb83Ob2rEyFbDd2YEriRFFMkYtLDB35RrrTjB8/5G oEjvLoqTyeB332KomgRtYTkrDI2Yy1EBpe2WdS+7siMwu+q0e7RDvO7YDrYvlLuS Q0TPGhsR0lL7/8FHNwU2bMuYmsZUsVn6/j93XRubo2/Y1DCXB7UISkaFwbsxvni0 ijOox1KSfaR5UoCMvXG3mrxdUWKCR1ACUtbY1yzUgBrR23dC7TE/Mp+c9BQyKtEP 2m6jeP5kOrtO6JhcrV7bNdP/rjpR2+YwJOGMR4EaFAOZ7BGCiHaQl4YbNToGslpR OeUKAbLAtucPCPrHkmrdQxbnqKoyTSX+ -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:33 2025 by rpki-client