$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json) Hash identifier: NhhfPBWkPv5ODBUbW0lFqMqIIGZOcNaARxvrHR5D33Y= Subject key identifier: A5:F8:99:C4:B0:CD:C8:DA:1D:77:6D:48:92:0F:11:9B:C0:E0:AE:20 Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Certificate serial: 0BDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft Manifest number: 0BC9 Signing time: Fri 22 Aug 2025 19:02:32 +0000 Manifest this update: Fri 22 Aug 2025 19:02:32 +0000 Manifest next update: Fri 29 Aug 2025 19:02:32 +0000 Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: eZ82l97BLCmXKV/IbAQzlEAzeyTATaMqZfb3hneZrjg=) 2: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: dh5ymVZvIc7FqFzTtBzYEQEIMygfVmNQaVU/qA2YVgE=) 3: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: K2Zxx9ME49vXDeg1Ffdf+j0UFdQqBnMUQi0IozP8thk=) 4: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: W6nL3EukqFE9RFLXXry6g4CH+1Dbd14zPnwD38PnUxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3035 (0xbdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Validity Not Before: Aug 22 19:02:32 2025 GMT Not After : Aug 29 19:02:32 2025 GMT Subject: CN=68a8bec8-7241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2e:46:c0:04:04:86:84:4f:35:19:3b:7f:70: 48:94:02:09:8a:e7:5c:fb:61:5b:7c:c4:d7:18:93: d8:1a:e4:06:b0:59:3e:8c:c0:ed:5e:ef:66:87:a1: 7a:a4:dd:04:9e:d7:68:f4:f5:5e:61:63:fa:a5:45: 32:24:61:d4:6b:02:79:43:80:56:e7:53:a3:30:9e: 04:f6:9e:aa:8c:a8:61:69:24:77:1c:5e:1f:ba:49: 93:5b:e2:ea:64:62:b5:d9:63:66:8a:be:63:bb:8c: 92:ce:3b:4f:3e:ac:62:0f:c4:ec:90:49:5e:25:29: a5:94:64:3b:ea:46:73:8e:65:cf:10:35:ca:3d:67: 13:41:c9:3c:63:78:46:1b:d3:fc:cc:93:30:5a:01: 58:01:52:49:00:13:97:20:40:7a:c6:9e:9f:e8:da: 6f:05:d4:c5:d4:66:b8:3b:92:56:25:67:5a:e8:06: 34:f3:d8:d3:94:cd:a6:e7:50:af:42:6b:9b:c9:9a: 65:48:19:54:02:61:f0:a8:4c:c1:ee:04:5b:d7:55: dc:a6:ae:f3:0d:3a:96:17:c9:6c:7b:eb:1e:0a:8e: e6:77:05:3f:4c:2c:b3:d9:b2:79:b0:fc:26:f8:d5: 68:ab:9a:6c:01:7b:90:9f:48:c1:e1:f2:55:c3:32: 64:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F8:99:C4:B0:CD:C8:DA:1D:77:6D:48:92:0F:11:9B:C0:E0:AE:20 X509v3 Authority Key Identifier: keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8c:67:27:bd:f0:38:4b:5e:02:3b:0e:2f:3b:a4:ef:c7:e6: 89:78:45:6b:93:0b:e5:d7:84:e8:f9:f4:df:a7:2d:22:d3:28: 79:ea:2e:a1:e8:b5:63:31:88:d1:a9:fa:ae:e4:ef:61:bb:c7: 67:22:2f:36:b1:11:86:09:1d:1d:b0:c2:d1:23:27:ea:cc:3f: c0:ed:35:0e:39:ab:8d:a9:23:be:56:55:3a:cc:82:3f:1f:b7: e1:2f:af:80:30:b7:40:42:00:36:d4:92:b4:70:18:fb:bc:b8: 61:0d:dd:1a:da:2a:48:b5:4c:4a:14:7c:3a:e5:83:b4:7a:04: 66:e0:20:03:ad:87:88:5e:4e:28:b6:7e:64:01:45:04:cd:fe: ff:d1:4e:f0:b7:d0:33:39:c6:c2:22:1b:77:5d:53:d0:f7:20: ad:64:21:ab:a6:c9:14:39:13:5b:1d:a2:81:47:70:63:70:3c: ca:39:af:f3:d5:a5:f8:f7:5a:48:f4:67:85:98:0f:49:2a:81: 35:9c:c0:e1:18:d3:1f:cd:2d:ae:a9:5f:af:69:82:9d:7f:42: ee:97:50:a3:4f:c0:12:00:46:a8:69:60:63:a5:d9:69:a2:99: bf:69:61:39:96:36:5c:80:26:43:9f:e2:39:77:45:e4:34:6a: 43:59:33:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFOUIxMTAvBgNVBAUTKDk3NDk1ODE2RDZEQjQ5REZFREVBQzRDMTc0MjkxMjZG RTNERjk3RkIwHhcNMjUwODIyMTkwMjMyWhcNMjUwODI5MTkwMjMyWjAYMRYwFAYD VQQDEw02OGE4YmVjOC03MjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4C5GwAQEhoRPNRk7f3BIlAIJiudc+2FbfMTXGJPYGuQGsFk+jMDtXu9mh6F6 pN0Entdo9PVeYWP6pUUyJGHUawJ5Q4BW51OjMJ4E9p6qjKhhaSR3HF4fukmTW+Lq ZGK12WNmir5ju4ySzjtPPqxiD8TskEleJSmllGQ76kZzjmXPEDXKPWcTQck8Y3hG G9P8zJMwWgFYAVJJABOXIEB6xp6f6NpvBdTF1Ga4O5JWJWda6AY089jTlM2m51Cv QmubyZplSBlUAmHwqEzB7gRb11Xcpq7zDTqWF8lse+seCo7mdwU/TCyz2bJ5sPwm +NVoq5psAXuQn0jB4fJVwzJkIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKX4mcSw zcjaHXdtSJIPEZvA4K4gMB8GA1UdIwQYMBaAFJdJWBbW20nf7erEwXQpEm/j35f7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU5Qi83QTUzQTYxODI1 QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNkX3Q2c1RCZENrU2ItUGZs X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwbFlGdGJiU2RfdDZzVEJkQ2tTYi1QZmxfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU5Qi83QTUzQTYxODI1QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNk X3Q2c1RCZENrU2ItUGZsX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdjGcnvfA4S14COw4vO6Tvx+aJeEVrkwvl14To+fTfpy0i0yh56i6h 6LVjMYjRqfqu5O9hu8dnIi82sRGGCR0dsMLRIyfqzD/A7TUOOauNqSO+VlU6zII/ H7fhL6+AMLdAQgA21JK0cBj7vLhhDd0a2ipItUxKFHw65YO0egRm4CADrYeIXk4o tn5kAUUEzf7/0U7wt9AzOcbCIht3XVPQ9yCtZCGrpskUORNbHaKBR3BjcDzKOa/z 1aX491pI9GeFmA9JKoE1nMDhGNMfzS2uqV+vaYKdf0Lul1CjT8ASAEaoaWBjpdlp opm/aWE5ljZcgCZDn+I5d0XkNGpDWTPy -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:54 2025 by rpki-client