$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft File: mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json) Hash identifier: Q0WfZQEitWcqAwoI8xvRuSh0Q6g3s9yDQJEHD0s1S1s= Subject key identifier: B6:6F:D9:9A:4C:79:69:4B:1B:CF:21:6E:4D:46:25:F7:57:C3:DA:85 Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft Manifest number: 0149 Signing time: Sat 23 Aug 2025 04:24:59 +0000 Manifest this update: Sat 23 Aug 2025 04:24:58 +0000 Manifest next update: Sat 30 Aug 2025 04:24:58 +0000 Files and hashes: 1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: Yywbyu81mizvLn6xO7XXHdjLv4yIc5AFvpDf/622KYM=) 2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: WCeA5fOBWFOKkLb8P073mp5LsBAsFbEzZHlJDI60+6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Validity Not Before: Aug 23 04:24:58 2025 GMT Not After : Aug 30 04:24:58 2025 GMT Subject: CN=68a9429b-9381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:81:7b:f9:30:30:d7:2b:71:33:12:50:3e: 2a:dc:6b:40:11:6d:85:ed:0d:ed:67:35:12:11:2b: 15:eb:9b:9e:af:26:a7:a1:14:55:75:74:6a:0a:20: 89:61:c3:5d:9f:b5:63:5f:25:ee:73:b8:0a:08:a5: bd:ab:36:b3:b6:bc:39:e8:1f:2f:95:b1:a3:78:19: be:64:e7:d5:89:92:22:1c:11:a3:96:59:fe:7f:50: ad:4b:dc:5e:12:b8:46:4c:ac:73:bc:b9:b5:e2:80: 64:eb:3b:43:ef:cc:61:65:ce:9a:16:32:99:01:5a: fe:50:25:28:b8:30:7d:88:22:26:7f:9b:1a:66:cb: d3:00:46:56:71:ab:b6:ce:ad:28:3a:8e:08:79:eb: 42:8c:fa:aa:8c:06:42:49:b0:fa:ba:2e:94:29:44: 2e:4a:0f:67:35:ea:2a:22:55:38:b3:b5:1f:05:df: 6b:04:e8:66:52:2f:bc:a3:a3:8f:17:f8:77:33:02: 14:a0:14:a4:7d:ac:ae:f4:29:30:e1:d6:a0:6f:9f: 48:75:17:ff:f5:16:39:2d:fb:1e:c5:ce:29:1a:d3: 72:61:1f:b3:8f:cc:bf:a0:ea:26:f2:22:7c:96:28: 4d:00:0f:c8:87:14:54:62:8e:6e:64:32:14:f8:5a: ba:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6F:D9:9A:4C:79:69:4B:1B:CF:21:6E:4D:46:25:F7:57:C3:DA:85 X509v3 Authority Key Identifier: keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d2:0b:7c:59:6a:30:bf:ed:09:8d:fc:a5:87:72:3b:05:38: 93:b2:23:02:fb:49:51:65:b4:5f:2c:e2:a6:4c:1d:0b:41:8d: 0a:e0:a5:81:2f:f6:5d:8e:a5:de:4f:00:7f:6c:1c:29:4d:cd: 09:d9:6a:ba:5d:20:3c:f1:26:94:76:f0:d1:03:7b:9d:5d:cf: 66:55:58:0c:56:dd:f1:cd:1e:35:e1:2f:d3:c0:53:d8:67:f6: f6:e3:05:1d:cf:90:89:e4:4d:5d:24:04:a5:f4:25:7b:4e:28: 5b:b8:1c:91:2b:38:5a:bb:ec:bc:46:f4:4f:db:b8:0b:06:15: 99:5a:d4:9d:88:2f:ad:c8:2f:9d:0c:0f:af:2c:70:9e:55:bc: 26:ee:62:e2:47:4c:86:a8:4d:f9:bc:58:c9:10:59:4f:a2:b5: 56:7b:1a:1b:0e:d4:62:e6:58:de:72:87:ef:a8:f1:2d:3d:e3: 62:13:dc:d3:b1:f6:3e:17:89:e2:c0:9c:3f:e3:73:86:68:3d: 87:a3:18:d2:74:bb:c6:c4:0c:41:cd:58:6f:4b:67:0a:d6:fb: 3e:69:9d:8b:e4:d5:09:0f:cf:54:02:50:76:41:6e:d6:6e:a6: b3:7b:3d:00:82:c7:53:44:54:1d:ff:16:d1:d4:f4:d8:e7:65: 10:41:97:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk1OTExMTAvBgNVBAUTKDlBRDM0OUY0NTQ4NTNCQjE4OTJBRkVGNjA0OEMxODcy NTgwNTc3NjEwHhcNMjUwODIzMDQyNDU4WhcNMjUwODMwMDQyNDU4WjAYMRYwFAYD VQQDEw02OGE5NDI5Yi05MzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4emBe/kwMNcrcTMSUD4q3GtAEW2F7Q3tZzUSESsV65ueryanoRRVdXRqCiCJ YcNdn7VjXyXuc7gKCKW9qzaztrw56B8vlbGjeBm+ZOfViZIiHBGjlln+f1CtS9xe ErhGTKxzvLm14oBk6ztD78xhZc6aFjKZAVr+UCUouDB9iCImf5saZsvTAEZWcau2 zq0oOo4IeetCjPqqjAZCSbD6ui6UKUQuSg9nNeoqIlU4s7UfBd9rBOhmUi+8o6OP F/h3MwIUoBSkfayu9Ckw4dagb59IdRf/9RY5Lfsexc4pGtNyYR+zj8y/oOom8iJ8 lihNAA/IhxRUYo5uZDIU+Fq6qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZv2ZpM eWlLG88hbk1GJfdXw9qFMB8GA1UdIwQYMBaAFJrTSfRUhTuxiSr+9gSMGHJYBXdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTU5MS9ERUQ4MzU2ODg5 MkMxMUVFOTQ3NzgxNkRDNEY5QUUwMi9tdE5KOUZTRk83R0pLdjcyQkl3WWNsZ0Zk MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL210Tko5RlNGTzdHSkt2NzJCSXdZY2xnRmQyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTU5MS9ERUQ4MzU2ODg5MkMxMUVFOTQ3NzgxNkRDNEY5QUUwMi9tdE5KOUZTRk83 R0pLdjcyQkl3WWNsZ0ZkMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv0gt8WWowv+0Jjfylh3I7BTiTsiMC+0lRZbRfLOKmTB0LQY0K4KWB L/ZdjqXeTwB/bBwpTc0J2Wq6XSA88SaUdvDRA3udXc9mVVgMVt3xzR414S/TwFPY Z/b24wUdz5CJ5E1dJASl9CV7TihbuByRKzhau+y8RvRP27gLBhWZWtSdiC+tyC+d DA+vLHCeVbwm7mLiR0yGqE35vFjJEFlPorVWexobDtRi5ljecofvqPEtPeNiE9zT sfY+F4niwJw/43OGaD2HoxjSdLvGxAxBzVhvS2cK1vs+aZ2L5NUJD89UAlB2QW7W bqazez0AgsdTRFQd/xbR1PTY52UQQZcc -----END CERTIFICATE-----Generated at Sun Aug 24 00:41:59 2025 by rpki-client