$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft File: fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json) Hash identifier: W/dyFniwxhXeDX+6JJgS9annWAwPt0czucNik5OmBPU= Subject key identifier: 38:B0:0D:3B:5A:0E:CE:46:0C:74:B2:87:AE:84:EC:F3:5F:5D:62:7C Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F Certificate issuer: /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Certificate serial: 0633 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft Manifest number: 062E Signing time: Fri 22 Aug 2025 22:55:19 +0000 Manifest this update: Fri 22 Aug 2025 22:55:19 +0000 Manifest next update: Fri 29 Aug 2025 22:55:19 +0000 Files and hashes: 1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: CMbotwsfL6wpKCO1eAq+eh3WSCRJ1BR/ou2Tb0+6PTI=) 2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: OhXdNxeZYZKsEh/kQY88PZgh8U46VN9OPBnD0qrSgNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1587 (0x633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170AF9, serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Validity Not Before: Aug 22 22:55:19 2025 GMT Not After : Aug 29 22:55:19 2025 GMT Subject: CN=68a8f557-be3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:59:6a:eb:1c:de:fa:6b:3b:2c:04:7b:41: d1:c9:0f:8d:38:fe:8e:5c:f2:65:69:d3:d3:ba:fd: 12:35:8f:db:cc:23:77:00:ef:44:2b:a9:2a:34:a3: 9f:27:e3:67:45:c8:95:b1:26:dd:ed:17:8b:89:24: 50:8a:1e:4b:d1:62:1e:07:4e:5b:27:3e:d1:f5:f7: 2d:37:e8:0b:39:83:52:0b:07:c6:24:05:21:6e:66: 16:6b:a1:c5:34:52:aa:1b:7b:ca:8d:64:66:f5:79: 5c:41:49:a0:be:d5:30:3a:66:79:a1:5e:a3:2e:58: 18:3a:82:d5:db:51:03:98:e1:b1:a6:24:ad:fc:ff: a5:db:f5:61:3f:08:74:38:cb:97:55:46:3a:ea:a3: 6f:50:07:ac:41:af:07:9d:85:39:1a:53:d0:c7:25: e1:4f:23:df:54:72:56:7f:23:4a:ac:c5:20:ff:7b: de:c8:8d:ce:2b:7e:84:f1:8a:f1:6c:51:42:22:8c: 90:6c:68:80:ee:56:20:fd:5f:52:43:db:22:6e:6b: 36:cb:15:ca:f6:f2:ca:4d:37:86:a2:54:8d:8c:2e: 57:f8:c7:3a:a0:58:c5:9c:29:bc:1b:98:94:14:a4: aa:dc:9e:f6:9d:8c:00:35:08:89:c4:c1:8d:66:e6: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B0:0D:3B:5A:0E:CE:46:0C:74:B2:87:AE:84:EC:F3:5F:5D:62:7C X509v3 Authority Key Identifier: keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:28:ba:4a:a2:da:8e:03:a5:e1:a1:bc:87:4c:c2:ef:38:a5: ae:c8:7b:d2:e5:0a:4a:74:ef:bd:24:a4:29:df:25:74:cc:86: 4c:e6:67:69:c3:b0:5a:ee:38:ac:ee:05:4a:f9:6d:3a:d6:8f: 33:b6:28:b5:23:d1:8a:00:af:e6:a7:45:c8:9d:2f:1c:46:33: 4c:85:6a:8a:f4:17:22:b5:e3:73:ad:23:4a:e4:5f:6b:65:a9: a8:57:cd:26:34:21:83:a5:51:01:61:18:40:9f:da:73:cd:0d: 73:39:9d:20:93:37:d4:52:72:be:19:c3:bc:cf:4e:9e:2b:a2: b3:16:3e:ec:f5:98:bf:05:ff:a0:61:b1:97:ba:24:ca:8a:a6: 03:68:22:51:d7:09:85:8b:2d:6c:20:61:e3:17:9b:b2:95:f6: 03:a5:6b:7a:c8:62:4d:37:7a:34:21:cb:d0:36:0f:bd:12:e4: 4a:35:e1:bc:54:6e:84:b4:ed:f9:8f:29:da:f7:99:21:0c:ab: 78:a0:82:04:54:f3:7d:d3:03:6b:28:63:fc:b5:b7:b8:9a:7e: b9:5e:6e:3f:b2:f0:de:d9:0d:1e:db:97:d0:fa:b0:8e:5b:73: c5:e4:f8:71:fe:bd:77:9e:0d:f4:c0:1f:af:88:d1:16:b6:a3: 3a:85:a3:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBRjkxMTAvBgNVBAUTKDdFRTNCODhGQjFBRjBEOTJEQkQyMTY2MTI1RkIwOUNC MjRGMTA4M0YwHhcNMjUwODIyMjI1NTE5WhcNMjUwODI5MjI1NTE5WjAYMRYwFAYD VQQDEw02OGE4ZjU1Ny1iZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7dZausc3vprOywEe0HRyQ+NOP6OXPJladPTuv0SNY/bzCN3AO9EK6kqNKOf J+NnRciVsSbd7ReLiSRQih5L0WIeB05bJz7R9fctN+gLOYNSCwfGJAUhbmYWa6HF NFKqG3vKjWRm9XlcQUmgvtUwOmZ5oV6jLlgYOoLV21EDmOGxpiSt/P+l2/VhPwh0 OMuXVUY66qNvUAesQa8HnYU5GlPQxyXhTyPfVHJWfyNKrMUg/3veyI3OK36E8Yrx bFFCIoyQbGiA7lYg/V9SQ9sibms2yxXK9vLKTTeGolSNjC5X+Mc6oFjFnCm8G5iU FKSq3J72nYwANQiJxMGNZub/5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiwDTta Ds5GDHSyh66E7PNfXWJ8MB8GA1UdIwQYMBaAFH7juI+xrw2S29IWYSX7Ccsk8Qg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFGOS8yOUNEQ0Q4RUE3 RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRaTGIwaFpoSmZzSnl5VHhD RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1TzRqN0d2RFpMYjBoWmhKZnNKeXlUeENEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFGOS8yOUNEQ0Q4RUE3RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRa TGIwaFpoSmZzSnl5VHhDRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdKLpKotqOA6XhobyHTMLvOKWuyHvS5QpKdO+9JKQp3yV0zIZM5mdp w7Ba7jis7gVK+W061o8ztii1I9GKAK/mp0XInS8cRjNMhWqK9BciteNzrSNK5F9r ZamoV80mNCGDpVEBYRhAn9pzzQ1zOZ0gkzfUUnK+GcO8z06eK6KzFj7s9Zi/Bf+g YbGXuiTKiqYDaCJR1wmFiy1sIGHjF5uylfYDpWt6yGJNN3o0IcvQNg+9EuRKNeG8 VG6EtO35jyna95khDKt4oIIEVPN90wNrKGP8tbe4mn65Xm4/svDe2Q0e25fQ+rCO W3PF5Phx/r13ng30wB+viNEWtqM6haMe -----END CERTIFICATE-----Generated at Sat Aug 23 15:13:25 2025 by rpki-client