$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json) Hash identifier: gcYKMpOmdyRZWntykPKUHPOGwaiNA66ixIPjHtucCsw= Subject key identifier: 6C:47:4C:57:82:76:8D:E8:82:C7:DB:FE:66:DB:36:5F:55:E8:BB:78 Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft Manifest number: FC Signing time: Thu 03 Jul 2025 05:19:55 +0000 Manifest this update: Thu 03 Jul 2025 05:19:54 +0000 Manifest next update: Thu 10 Jul 2025 05:19:54 +0000 Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: NUvJFTkSvFsXCBGbqlWFVk6/incp4Q/+8qHg83n4eSc=) 2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: p/CKDmdi14SpnAXglq6STJnT5JwJ1Aph3AE4B1BxPGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Validity Not Before: Jul 3 05:19:54 2025 GMT Not After : Jul 10 05:19:54 2025 GMT Subject: CN=686612fa-c1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:0e:49:3c:4d:cc:a3:fb:06:52:a8:da:73: 6e:19:6e:18:01:65:73:1f:56:cb:6f:88:64:a7:a1: 2d:84:94:5b:05:8c:90:88:4c:ea:da:3d:34:05:5d: 7c:b3:c3:e7:45:c1:ec:bc:88:72:81:ec:f3:c1:b8: 12:ef:8c:9e:61:ce:84:05:5b:36:a1:32:ad:b6:0e: 08:50:12:2c:72:58:c9:e5:f0:b2:92:ee:eb:73:84: 53:44:ed:ed:fc:db:41:46:4b:a1:e6:05:d1:b2:43: 6c:29:33:ae:d4:f8:eb:09:d8:52:74:aa:ab:09:d8: cb:02:53:71:d9:b3:ad:31:0f:75:9f:6a:c4:0e:ff: f6:31:1e:2e:3d:b0:c7:ab:c7:55:73:fb:bf:13:27: de:d7:43:e3:8e:fc:e0:00:99:c3:d7:e3:be:c5:c2: 26:d0:a2:c1:73:c6:e4:36:c6:5d:c3:1f:36:6b:9d: 40:a1:90:82:8f:90:32:39:22:29:d2:92:2d:58:e0: 2e:75:9a:63:d2:97:99:5d:dc:64:ae:1e:c5:8e:5a: 6a:fa:50:ea:bd:dc:ad:20:28:96:fa:ec:59:58:f3: b7:94:90:ec:4f:3a:55:bc:b6:b3:71:97:ad:8b:a1: 2f:17:47:e2:fd:f6:b8:31:8c:09:39:e4:e7:1d:07: 2c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:47:4C:57:82:76:8D:E8:82:C7:DB:FE:66:DB:36:5F:55:E8:BB:78 X509v3 Authority Key Identifier: keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9d:c0:2d:c3:ac:7b:c2:5a:5d:f7:9d:30:40:04:b8:e9:b1: 22:a3:b9:fe:84:b7:9b:db:58:1c:16:bb:09:32:9a:e3:e3:82: a8:58:af:64:22:57:86:9b:2c:22:c3:e5:e2:0c:a2:94:9c:69: 95:46:41:ed:73:13:68:88:b9:c2:6e:2b:4c:ff:00:46:39:76: a1:96:cb:fa:fa:da:7b:5d:33:95:2e:5d:54:71:13:d0:7e:4a: 72:9a:d4:99:a6:da:47:31:31:47:76:02:be:54:96:10:fe:09: 3f:f5:8c:01:fc:9e:d2:44:38:81:c8:d4:fb:b9:e9:45:73:e3: 20:b5:7e:a8:36:35:6c:0e:01:d6:91:49:61:64:59:73:b5:de: 42:7b:40:20:64:62:89:c2:f7:4d:12:f8:76:95:f2:b2:e5:6f: 07:f4:38:f6:3d:78:6b:84:9a:06:70:71:7c:ab:c7:67:73:b3: 3d:c7:e2:04:9b:16:31:9f:c6:d1:b1:42:9d:9d:9e:a5:99:da: c4:d1:ed:3a:4f:f4:ec:90:89:9c:7c:c7:fb:9d:66:25:ec:9a: a6:97:99:52:44:32:73:18:1d:a6:dc:c5:54:ae:8a:6e:cc:e6: ae:5a:8d:70:e8:b9:44:07:bd:60:24:15:95:36:f8:28:9c:2d: 92:e4:c5:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw OUY1RjVCOTMwHhcNMjUwNzAzMDUxOTU0WhcNMjUwNzEwMDUxOTU0WjAYMRYwFAYD VQQDEw02ODY2MTJmYS1jMWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdAOSTxNzKP7BlKo2nNuGW4YAWVzH1bLb4hkp6EthJRbBYyQiEzq2j00BV18 s8PnRcHsvIhygezzwbgS74yeYc6EBVs2oTKttg4IUBIscljJ5fCyku7rc4RTRO3t /NtBRkuh5gXRskNsKTOu1PjrCdhSdKqrCdjLAlNx2bOtMQ91n2rEDv/2MR4uPbDH q8dVc/u/Eyfe10PjjvzgAJnD1+O+xcIm0KLBc8bkNsZdwx82a51AoZCCj5AyOSIp 0pItWOAudZpj0peZXdxkrh7Fjlpq+lDqvdytICiW+uxZWPO3lJDsTzpVvLazcZet i6EvF0fi/fa4MYwJOeTnHQcs+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxHTFeC do3ogsfb/mbbNl9V6Lt4MB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5 QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9BRUY3MDQ5MEQ5QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10 RURDWnVuaWdLTTBKOWZXNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNncAtw6x7wlpd950wQAS46bEio7n+hLeb21gcFrsJMprj44KoWK9k IleGmywiw+XiDKKUnGmVRkHtcxNoiLnCbitM/wBGOXahlsv6+tp7XTOVLl1UcRPQ fkpymtSZptpHMTFHdgK+VJYQ/gk/9YwB/J7SRDiByNT7uelFc+MgtX6oNjVsDgHW kUlhZFlztd5Ce0AgZGKJwvdNEvh2lfKy5W8H9Dj2PXhrhJoGcHF8q8dnc7M9x+IE mxYxn8bRsUKdnZ6lmdrE0e06T/TskImcfMf7nWYl7Jqml5lSRDJzGB2m3MVUropu zOauWo1w6LlEB71gJBWVNvgonC2S5MVN -----END CERTIFICATE-----Generated at Thu Jul 3 23:34:49 2025 by rpki-client