$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: 9rQYX38ZiK2t2C938Kk4iMGMHdawG7YHb/CBCKrLN/I= Subject key identifier: 7B:F9:51:D3:DE:0E:6E:B5:7D:BF:2C:43:00:5A:93:9C:66:AE:58:01 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 141D Signing time: Mon 30 Jun 2025 17:06:56 +0000 Manifest this update: Mon 30 Jun 2025 17:06:55 +0000 Manifest next update: Mon 07 Jul 2025 17:06:55 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: sHXoQuRAwjFLMcnR4L8vvNwGxJ2vBDazBL7hsDdSP54=) 2: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: 3UDqux2pyFF/Bk7qZfNBKUplKVtNPBgZPpnXk8snk4g=) 3: 983A5536450611F093EC3A65C4F9AE02.roa (hash: pEec0R62Bj3aymINooi97WOwxIJFlmEKrKBXY5Z0JM8=) 4: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: OwQjzjq4z1p3OKHRKYKyS/M55XVWZ+v6tClUy+yiWnc=) 5: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: qHB1qFpvB/X4qPBj+yXYeUW8QRac4CCty8+o9xHqsdY=) 6: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: PdnkTM08eG2sjPAy8+yW/MtnozIOdAkbD6OPtta7i0w=) 7: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: Ufe911ZYJ83uxaf/Sv2kXJTQ07JYf4WZldXiZBe6G2M=) 8: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: TNsMJFZbcdKegim5sz+iSFbDGvmlLTbjneRhrtC2NlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5171 (0x1433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jun 30 17:06:55 2025 GMT Not After : Jul 7 17:06:55 2025 GMT Subject: CN=6862c42f-8efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:35:87:06:ae:13:4d:99:aa:19:76:13:3a:77: 06:24:da:79:53:98:e4:69:7e:c4:d4:68:a4:8e:b9: 07:29:7a:b5:14:40:a6:21:47:3c:ab:4d:f7:ba:86: be:2e:28:bd:b7:99:a0:17:91:b2:e5:44:20:44:aa: 94:71:8d:5d:b6:b0:ed:34:0e:6e:60:b4:23:f6:e3: 04:8f:c3:b2:34:6b:32:a3:4f:97:aa:b3:78:a7:de: 1e:9e:97:33:60:44:ce:20:2c:72:b3:8e:7f:fa:a4: 52:6c:7e:fc:ca:08:20:2f:a2:54:98:6d:b5:80:06: 20:a1:30:20:63:42:ce:3d:2b:e8:ca:e7:68:c7:d7: 86:db:11:8f:40:88:d1:e2:6b:3a:ad:a3:62:b1:ed: 84:21:57:e2:f0:9c:00:d8:58:40:88:84:8b:13:51: ed:24:16:d5:95:89:10:4b:04:29:ba:49:3c:12:2c: 2c:39:dd:90:d8:98:48:95:d3:72:07:5a:f7:d7:2b: df:7a:db:10:ba:17:e9:cc:fa:89:5e:ce:12:25:f7: 8b:47:b4:21:5f:78:09:86:94:cb:2d:98:fe:db:af: e6:a6:e0:74:bd:a1:2c:26:bd:4d:00:05:e3:82:2f: 8b:74:03:7d:fa:66:b8:b4:94:aa:e0:78:c7:14:31: 88:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F9:51:D3:DE:0E:6E:B5:7D:BF:2C:43:00:5A:93:9C:66:AE:58:01 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:56:b8:20:eb:79:1c:d2:3a:ca:c2:33:49:eb:10:1b:41:93: 07:bc:3d:3b:07:78:91:f3:14:d8:7e:9d:38:b3:32:7c:c7:48: 38:42:7a:8f:ba:bf:47:f7:d0:cc:aa:a9:02:5c:3d:17:ce:b9: c5:6d:5e:cf:e5:f2:fe:54:71:3e:6e:bb:64:12:64:30:5a:c9: b2:63:aa:ea:90:f0:c0:1d:93:99:44:c7:27:65:99:65:4d:5f: 70:51:bd:07:38:94:3c:c5:e1:e6:36:b4:83:ed:d2:37:aa:d9: 8e:83:9e:3d:51:c1:7f:70:66:36:81:ba:cc:25:6e:f7:ab:b5: e1:1d:e0:21:43:eb:08:42:14:2d:46:b9:bc:c8:9c:d8:37:b7: 00:30:70:dd:0e:45:91:2c:dc:e0:85:1c:08:2a:a3:33:a7:27: ad:2b:b2:96:12:b9:66:2d:c1:e1:3b:6b:30:5d:2a:28:cd:e9: 35:a1:34:72:e8:f6:a7:55:b5:7b:07:0b:e5:0a:09:f6:a7:ed: 44:be:40:b6:80:64:b9:e3:61:e2:a8:74:52:85:4e:e7:00:6a: 7d:db:79:27:6f:d0:17:62:14:fe:37:0f:6e:d7:76:48:60:d5: 02:6f:bb:38:6a:7c:ab:af:b7:c8:9b:23:0c:04:ea:28:c8:21: 36:71:69:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNjMwMTcwNjU1WhcNMjUwNzA3MTcwNjU1WjAYMRYwFAYD VQQDEw02ODYyYzQyZi04ZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDWHBq4TTZmqGXYTOncGJNp5U5jkaX7E1GikjrkHKXq1FECmIUc8q033uoa+ Lii9t5mgF5Gy5UQgRKqUcY1dtrDtNA5uYLQj9uMEj8OyNGsyo0+XqrN4p94enpcz YETOICxys45/+qRSbH78ygggL6JUmG21gAYgoTAgY0LOPSvoyudox9eG2xGPQIjR 4ms6raNise2EIVfi8JwA2FhAiISLE1HtJBbVlYkQSwQpukk8EiwsOd2Q2JhIldNy B1r31yvfetsQuhfpzPqJXs4SJfeLR7QhX3gJhpTLLZj+26/mpuB0vaEsJr1NAAXj gi+LdAN9+ma4tJSq4HjHFDGIHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHv5UdPe Dm61fb8sQwBak5xmrlgBMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKVrgg63kc0jrKwjNJ6xAbQZMHvD07B3iR8xTYfp04szJ8x0g4QnqP ur9H99DMqqkCXD0XzrnFbV7P5fL+VHE+brtkEmQwWsmyY6rqkPDAHZOZRMcnZZll TV9wUb0HOJQ8xeHmNrSD7dI3qtmOg549UcF/cGY2gbrMJW73q7XhHeAhQ+sIQhQt Rrm8yJzYN7cAMHDdDkWRLNzghRwIKqMzpyetK7KWErlmLcHhO2swXSoozek1oTRy 6PanVbV7BwvlCgn2p+1EvkC2gGS542HiqHRShU7nAGp923knb9AXYhT+Nw9u13ZI YNUCb7s4anyrr7fImyMMBOooyCE2cWmf -----END CERTIFICATE-----Generated at Wed Jul 2 03:39:39 2025 by rpki-client