$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json) Hash identifier: UFZ2mjI1WpKlDgT0AQ1R2HLHm/SWoV2RzjRONNV2UTk= Subject key identifier: 99:CE:41:49:14:D2:39:DF:A4:AA:34:50:F3:CC:08:8A:DE:66:7C:68 Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft Manifest number: 0384 Signing time: Sat 23 Aug 2025 01:10:36 +0000 Manifest this update: Sat 23 Aug 2025 01:10:35 +0000 Manifest next update: Sat 30 Aug 2025 01:10:35 +0000 Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: Hod3yKgoUgHRvQ7Wv9X6506QrBaYHdzkpJwzXWRfaFk=) 2: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: ETk4yckaIN4zob6tGTfs6vKP9pAP7tygu9LlkOfrkSU=) 3: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: HgWyC5qLUIQClxHJEnvtF6CqTubXKBmljCRRSfRxHP0=) 4: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: BIcjECgUWsQ4hPpYoXe2O+HNYZxFLkHcHH/BGhRf0OQ=) 5: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: AVY0d5/NDiEX5/XcV/ITBN3dlkJ2RLeGLkg0Eo543zw=) 6: E0AE0960457811EDA501504AC4F9AE02.roa (hash: 1sOapiiUanKllNe/+g0UPifOXHz9i1edOTGe9WGOS80=) 7: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: R2unzPo0vV/yNS9/vpK5AzQ4ju39sQQVsnw2HUUIUOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: Aug 23 01:10:35 2025 GMT Not After : Aug 30 01:10:35 2025 GMT Subject: CN=68a9150c-eec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:15:af:86:69:66:7d:35:c8:27:8b:79:03: 82:d9:23:cd:50:e4:17:d9:dc:6e:26:41:5d:14:b5: 76:bf:12:94:bd:5c:f1:6a:b3:bc:dc:b6:e3:3a:61: 14:66:83:5b:02:83:c7:3d:69:1b:06:25:eb:49:b8: 04:f3:3e:6e:1e:3c:2c:d5:aa:51:59:29:da:82:8b: bb:d8:92:d9:65:25:14:05:97:f5:91:3f:50:ba:bd: 40:61:7d:29:95:0e:87:87:3e:55:5d:56:0f:b8:ea: 46:ca:92:d5:f3:8a:10:b4:0c:3d:74:25:29:ff:3a: 46:f5:96:e6:47:9e:8c:ba:ee:86:73:8f:8b:35:0d: 38:b1:f5:28:cf:e0:3d:ae:18:bd:9a:22:c7:54:59: 11:33:5a:40:26:71:22:5e:a3:2a:a6:e7:d3:48:f0: e7:eb:7f:bc:ab:58:23:e8:08:fb:34:9a:3d:fc:0a: 0d:e2:51:e2:b0:2e:5f:22:0c:f3:6d:62:4a:eb:c4: 8a:c2:a0:c7:27:bb:9f:6b:82:45:37:04:31:8d:69: 66:f0:59:a6:c6:3a:5f:a0:4c:46:18:09:f9:a1:1f: 08:7f:d6:ab:3a:db:87:6a:a8:b9:85:20:0d:5a:fc: bc:ca:6e:7c:c2:97:7e:83:ef:da:22:d9:36:17:ae: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CE:41:49:14:D2:39:DF:A4:AA:34:50:F3:CC:08:8A:DE:66:7C:68 X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:78:a3:85:f9:20:1c:95:0a:17:e2:af:84:62:e2:e7:71:7e: 60:aa:af:26:a0:c0:78:5e:60:83:53:ff:07:e0:51:36:5b:e8: 69:4b:7b:2b:e4:c9:a9:8a:78:0a:c8:8b:89:cb:91:71:10:1d: a3:0a:77:b2:35:59:82:43:41:b7:96:1d:c2:58:17:a5:8b:a8: b6:d0:88:9f:3a:11:35:34:e5:18:c2:a6:79:50:58:28:bd:d2: 25:14:9a:e2:1f:0f:ff:47:45:a4:02:8f:a6:bf:4c:af:ff:62: 76:f5:af:fd:4e:fa:a7:c8:4e:40:7a:1a:ad:75:e4:eb:e9:a9: 72:da:20:bd:bc:39:1b:d3:5b:cb:9f:2e:5a:10:0a:1d:5d:46: a7:53:e6:75:18:80:e1:7b:c3:f7:6e:cd:13:28:14:e6:ea:04: 5a:4c:3b:ad:ed:b0:fe:fe:16:4b:ff:12:be:33:fb:a3:a6:a4: 95:c4:c7:12:d2:51:84:82:5e:f3:95:cb:e4:5e:ce:6b:e2:d1: 3a:b6:a3:84:d9:c6:f8:87:f6:f3:f2:45:d5:b7:05:b5:c4:76: 49:57:8d:cc:4b:ce:ad:11:2a:17:56:ab:0f:3c:b0:f4:20:f9: fc:c8:8f:1c:16:92:a0:36:c4:e5:3a:c6:6e:da:57:8a:4a:35: 2f:6e:e1:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjUwODIzMDExMDM1WhcNMjUwODMwMDExMDM1WjAYMRYwFAYD VQQDEw02OGE5MTUwYy1lZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD0Vr4ZpZn01yCeLeQOC2SPNUOQX2dxuJkFdFLV2vxKUvVzxarO83LbjOmEU ZoNbAoPHPWkbBiXrSbgE8z5uHjws1apRWSnagou72JLZZSUUBZf1kT9Qur1AYX0p lQ6Hhz5VXVYPuOpGypLV84oQtAw9dCUp/zpG9ZbmR56Muu6Gc4+LNQ04sfUoz+A9 rhi9miLHVFkRM1pAJnEiXqMqpufTSPDn63+8q1gj6Aj7NJo9/AoN4lHisC5fIgzz bWJK68SKwqDHJ7ufa4JFNwQxjWlm8FmmxjpfoExGGAn5oR8If9arOtuHaqi5hSAN Wvy8ym58wpd+g+/aItk2F67VbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnOQUkU 0jnfpKo0UPPMCIreZnxoMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjgzNy85RDkwQUI2MkMxNUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRw Ymo2X09BTk95Z20tS3FDdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATeKOF+SAclQoX4q+EYuLncX5gqq8moMB4XmCDU/8H4FE2W+hpS3sr 5MmpingKyIuJy5FxEB2jCneyNVmCQ0G3lh3CWBeli6i20IifOhE1NOUYwqZ5UFgo vdIlFJriHw//R0WkAo+mv0yv/2J29a/9TvqnyE5AehqtdeTr6aly2iC9vDkb01vL ny5aEAodXUanU+Z1GIDhe8P3bs0TKBTm6gRaTDut7bD+/hZL/xK+M/ujpqSVxMcS 0lGEgl7zlcvkXs5r4tE6tqOE2cb4h/bz8kXVtwW1xHZJV43MS86tESoXVqsPPLD0 IPn8yI8cFpKgNsTlOsZu2leKSjUvbuEw -----END CERTIFICATE-----Generated at Sun Aug 24 00:51:57 2025 by rpki-client