$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json) Hash identifier: 1Gx/l0Wx6iJQdqKlMJcZQNMr5ikLGk1K/xT9X4araoM= Subject key identifier: 0C:55:3C:72:13:D2:4A:D7:AF:86:0A:BA:91:CE:1A:DC:9F:D0:EE:C6 Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft Manifest number: 0116 Signing time: Sat 23 Aug 2025 05:00:04 +0000 Manifest this update: Sat 23 Aug 2025 05:00:04 +0000 Manifest next update: Sat 30 Aug 2025 05:00:04 +0000 Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: ES3KJbcNMRt5cCR+D9wNJbo71zR4nDPjBDTOpnoiRBg=) 2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: p/CKDmdi14SpnAXglq6STJnT5JwJ1Aph3AE4B1BxPGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Validity Not Before: Aug 23 05:00:04 2025 GMT Not After : Aug 30 05:00:04 2025 GMT Subject: CN=68a94ad4-0e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:95:33:85:32:74:b0:b0:27:1d:11:0e:d7: 4e:06:96:d1:68:fb:42:64:12:3d:6c:f0:cd:41:ed: d0:61:c1:58:0d:65:9c:5e:ee:b4:f7:8d:f0:d5:27: 68:1a:9f:45:1e:4e:7a:3c:05:98:73:ec:66:07:90: 3f:78:97:60:0f:ff:07:5e:bd:fd:c9:a3:43:3f:bb: ee:44:58:1b:0a:8a:e5:48:48:b6:ba:30:bf:d3:a9: 6c:82:6a:19:31:b3:ef:8e:01:51:75:70:5d:4d:4e: 54:31:6f:4f:fa:4a:ea:d7:cd:9a:1e:40:21:71:e3: 46:35:4c:4a:e3:ea:62:f5:37:72:5a:eb:e2:70:43: ab:94:28:0d:d2:27:0d:da:d7:27:49:94:4a:14:68: dd:2a:a3:f9:15:44:90:ca:6e:95:87:f9:7f:79:8b: 74:08:aa:9f:59:0e:ce:7d:bf:a0:ec:c8:6f:5d:4e: 47:78:a9:06:bb:a7:1e:48:d3:16:f6:00:d8:24:0e: cb:62:ff:e8:45:0e:94:a2:a4:91:fd:41:c2:b1:f4: 9e:79:45:9a:64:f9:81:b5:2b:e9:68:6e:7e:97:cb: dc:9a:7c:93:cd:3e:9d:0f:cf:df:de:c3:35:34:6f: 3b:d7:dd:af:e3:aa:2a:c9:90:11:1d:c4:e2:d1:d8: d3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:55:3C:72:13:D2:4A:D7:AF:86:0A:BA:91:CE:1A:DC:9F:D0:EE:C6 X509v3 Authority Key Identifier: keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8a:bd:e6:c9:1f:97:d4:ed:90:48:3e:24:4f:ef:7e:29:0e: bd:97:86:cb:4d:6e:f7:f2:50:ed:4e:51:f3:b6:6f:bb:cb:94: 42:6b:b7:6d:9f:0c:c8:84:9e:70:ce:4f:83:c1:f4:00:ef:2a: 95:dd:a2:58:d1:9a:4e:e2:6f:da:a8:77:96:34:70:a8:aa:92: 78:d2:92:18:70:c5:33:ec:14:66:6c:7a:d9:5e:7f:6b:db:05: 61:db:91:86:46:31:e2:84:51:f6:de:a4:37:b6:dc:53:c8:76: 88:b1:ab:ef:ed:1b:b4:a1:fe:b0:b9:c4:ad:19:45:eb:76:1f: 7f:e5:3d:a4:05:d6:d5:07:80:54:5e:5c:b6:6d:a1:8d:0f:a7: a4:a3:7a:34:01:0e:e6:e1:7f:d5:9e:54:59:37:a2:b4:6e:16: 55:f7:e7:de:77:f2:ee:13:3d:ef:dd:20:c2:8f:41:14:38:bb: 6d:46:98:ab:2e:57:d4:6c:43:82:e9:d3:c3:29:68:ee:0f:d9: a1:51:bc:a6:56:b5:5d:52:21:12:fd:9a:be:a1:30:83:97:dd: 91:62:b0:d8:55:66:e4:94:13:fb:eb:70:72:ab:a7:43:a9:6d: 26:83:f2:87:c8:05:5f:2d:7b:00:96:bb:90:a5:61:7c:b8:ac: 56:20:de:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw OUY1RjVCOTMwHhcNMjUwODIzMDUwMDA0WhcNMjUwODMwMDUwMDA0WjAYMRYwFAYD VQQDEw02OGE5NGFkNC0wZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA152VM4UydLCwJx0RDtdOBpbRaPtCZBI9bPDNQe3QYcFYDWWcXu60943w1Sdo Gp9FHk56PAWYc+xmB5A/eJdgD/8HXr39yaNDP7vuRFgbCorlSEi2ujC/06lsgmoZ MbPvjgFRdXBdTU5UMW9P+krq182aHkAhceNGNUxK4+pi9TdyWuvicEOrlCgN0icN 2tcnSZRKFGjdKqP5FUSQym6Vh/l/eYt0CKqfWQ7Ofb+g7MhvXU5HeKkGu6ceSNMW 9gDYJA7LYv/oRQ6UoqSR/UHCsfSeeUWaZPmBtSvpaG5+l8vcmnyTzT6dD8/f3sM1 NG87192v46oqyZARHcTi0djTYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxVPHIT 0krXr4YKupHOGtyf0O7GMB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5 QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9BRUY3MDQ5MEQ5QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10 RURDWnVuaWdLTTBKOWZXNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgir3myR+X1O2QSD4kT+9+KQ69l4bLTW738lDtTlHztm+7y5RCa7dt nwzIhJ5wzk+DwfQA7yqV3aJY0ZpO4m/aqHeWNHCoqpJ40pIYcMUz7BRmbHrZXn9r 2wVh25GGRjHihFH23qQ3ttxTyHaIsavv7Ru0of6wucStGUXrdh9/5T2kBdbVB4BU Xly2baGND6eko3o0AQ7m4X/VnlRZN6K0bhZV9+fed/LuEz3v3SDCj0EUOLttRpir LlfUbEOC6dPDKWjuD9mhUbymVrVdUiES/Zq+oTCDl92RYrDYVWbklBP763Byq6dD qW0mg/KHyAVfLXsAlruQpWF8uKxWIN42 -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:45 2025 by rpki-client