$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft File: 10dAEUy69PWZqn5dw0EuEi-ocUw.mft (raw, json) Hash identifier: 1amRyuEFLUS/zcgE/Rp/v/02dY25kHCOuE+He46RwZw= Subject key identifier: CC:7C:07:B7:F2:A4:E6:B3:FE:2A:9A:1F:00:B7:24:EB:9A:AC:D1:91 Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C Certificate issuer: /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft Manifest number: 011F Signing time: Sat 23 Aug 2025 05:00:07 +0000 Manifest this update: Sat 23 Aug 2025 05:00:07 +0000 Manifest next update: Sat 30 Aug 2025 05:00:07 +0000 Files and hashes: 1: 10dAEUy69PWZqn5dw0EuEi-ocUw.crl (hash: 61rOPnl0epjoHX3IFcfzlbtytRq1+ANdmuWJe/mo7og=) 2: 1416035CD22C11EE891B4A44C4F9AE02.roa (hash: LAsIeNhYt5BHF0IaKn+G+8QXRLdvDCA/uEEEFG9I+DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C Validity Not Before: Aug 23 05:00:07 2025 GMT Not After : Aug 30 05:00:07 2025 GMT Subject: CN=68a94ad7-b628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7b:b3:2a:2c:94:e6:dd:bf:92:6c:80:66:ed: 99:97:b5:ca:dc:63:b4:11:bb:0d:71:4e:1a:34:32: a9:a1:2c:a1:88:25:d8:cc:f3:9b:1c:a9:ea:69:ce: d7:65:7d:cb:31:a9:9d:a1:41:66:7c:b7:e7:7c:1f: f0:cc:c7:5c:6e:2c:07:0c:c5:cd:81:e0:ec:10:f0: be:65:0b:25:56:e1:fc:2b:35:e3:a9:f6:02:a4:28: c0:00:0e:0b:85:15:26:af:48:04:22:44:eb:e1:c0: 25:46:a5:01:44:d8:1f:4c:6b:34:2f:2a:a1:36:8e: cd:3c:58:eb:c1:de:0a:ad:83:0d:92:46:4d:db:a7: 85:4d:7c:3d:5c:71:90:bc:bb:91:9e:4c:12:a7:0c: 19:4d:a8:3e:4c:f7:aa:d4:6a:55:82:53:a4:3f:9c: ef:07:20:5e:41:34:7a:9c:b9:31:90:a5:76:75:50: e2:32:38:39:6b:b6:cb:b6:91:41:6b:85:37:e4:7b: 77:5c:36:d7:44:e0:ad:1d:2c:9a:84:9d:e9:05:f7: be:2f:6a:03:71:ba:0f:21:fa:e2:31:dc:67:39:88: 4b:a1:d2:2d:94:ce:d5:71:3b:e2:ce:5d:33:c3:3f: 80:dc:1a:55:9a:bd:ea:53:c2:cc:e3:52:50:a3:8d: 20:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7C:07:B7:F2:A4:E6:B3:FE:2A:9A:1F:00:B7:24:EB:9A:AC:D1:91 X509v3 Authority Key Identifier: keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:92:9a:e1:cc:1e:0e:11:88:9a:47:d9:64:18:32:05:cb:10: d7:09:6c:79:4e:94:4a:04:6f:bd:7c:03:7a:27:8d:7c:8d:e2: e7:31:71:8b:2a:8c:19:7d:77:31:41:d0:2d:05:14:a2:d3:e6: 60:8b:62:06:f2:e9:c3:89:f3:e2:92:45:90:50:a5:f1:9d:07: 05:04:f3:e7:eb:b1:d0:fa:8f:75:9a:bc:c0:e7:5c:a9:f5:93: 97:13:c1:3c:3f:e6:f8:23:a5:06:34:26:b9:1a:6b:5c:f2:7b: 9f:3a:9e:4e:31:d7:c3:50:0a:b1:59:49:c8:7f:6f:f9:0a:ae: 7f:4d:3b:a3:d4:cb:3e:63:96:fb:96:72:d0:83:8b:3f:6c:4a: f1:13:29:58:54:4a:29:43:fa:04:88:77:f8:4e:cc:85:12:95: 8a:bb:ce:e1:42:73:16:43:f7:4f:9d:21:5d:ad:61:6a:59:49: 0f:2e:28:d3:25:e0:70:6e:75:bf:e0:fa:ff:01:99:2a:41:06: ca:42:91:97:2c:d0:a4:82:20:60:fb:88:07:75:50:c4:69:48: 28:5a:70:44:fd:13:b3:f7:3d:72:44:e1:79:a3:6c:2a:c5:7e: 75:73:78:f0:c5:91:b9:f5:b1:8d:3b:17:42:a9:c1:6a:17:14: 6a:56:b6:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEQ3NDc0MDExNENCQUY0RjU5OUFBN0U1REMzNDEyRTEy MkZBODcxNEMwHhcNMjUwODIzMDUwMDA3WhcNMjUwODMwMDUwMDA3WjAYMRYwFAYD VQQDEw02OGE5NGFkNy1iNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nuzKiyU5t2/kmyAZu2Zl7XK3GO0EbsNcU4aNDKpoSyhiCXYzPObHKnqac7X ZX3LMamdoUFmfLfnfB/wzMdcbiwHDMXNgeDsEPC+ZQslVuH8KzXjqfYCpCjAAA4L hRUmr0gEIkTr4cAlRqUBRNgfTGs0LyqhNo7NPFjrwd4KrYMNkkZN26eFTXw9XHGQ vLuRnkwSpwwZTag+TPeq1GpVglOkP5zvByBeQTR6nLkxkKV2dVDiMjg5a7bLtpFB a4U35Ht3XDbXROCtHSyahJ3pBfe+L2oDcboPIfriMdxnOYhLodItlM7VcTvizl0z wz+A3BpVmr3qU8LM41JQo40g6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMx8B7fy pOaz/iqaHwC3JOuarNGRMB8GA1UdIwQYMBaAFNdHQBFMuvT1map+XcNBLhIvqHFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9DREYzREExNkQy MkIxMUVFOThBQ0RCNDNDNEY5QUUwMi8xMGRBRVV5NjlQV1pxbjVkdzBFdUVpLW9j VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwZEFFVXk2OVBXWnFuNWR3MEV1RWktb2NVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9DREYzREExNkQyMkIxMUVFOThBQ0RCNDNDNEY5QUUwMi8xMGRBRVV5NjlQ V1pxbjVkdzBFdUVpLW9jVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1kprhzB4OEYiaR9lkGDIFyxDXCWx5TpRKBG+9fAN6J418jeLnMXGL KowZfXcxQdAtBRSi0+Zgi2IG8unDifPikkWQUKXxnQcFBPPn67HQ+o91mrzA51yp 9ZOXE8E8P+b4I6UGNCa5Gmtc8nufOp5OMdfDUAqxWUnIf2/5Cq5/TTuj1Ms+Y5b7 lnLQg4s/bErxEylYVEopQ/oEiHf4TsyFEpWKu87hQnMWQ/dPnSFdrWFqWUkPLijT JeBwbnW/4Pr/AZkqQQbKQpGXLNCkgiBg+4gHdVDEaUgoWnBE/ROz9z1yROF5o2wq xX51c3jwxZG59bGNOxdCqcFqFxRqVrZF -----END CERTIFICATE-----Generated at Sat Aug 23 23:54:04 2025 by rpki-client