$ rpki-client -vvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft File: RByw2GqSzt--gIPe1peibWI-5lU.mft (raw, json) Hash identifier: vbSH62MzanaE3/85CktaWT16gbDjaDSvLxsfFXZpWWM= Subject key identifier: 32:D9:79:D5:1E:39:2F:B4:8E:66:55:A6:0E:0E:63:58:DF:53:9B:BC Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 Certificate issuer: /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft Manifest number: 035A Signing time: Sat 23 Aug 2025 01:11:58 +0000 Manifest this update: Sat 23 Aug 2025 01:11:58 +0000 Manifest next update: Sat 30 Aug 2025 01:11:58 +0000 Files and hashes: 1: RByw2GqSzt--gIPe1peibWI-5lU.crl (hash: WYN2FweWw9VeE2IASymcCx1mEjBKO3uypO2MUx5iS5A=) 2: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (hash: /wLCOfPhuY3TbRlUp4zKmXpIpLo+qttM1HDHUEGC0Us=) 3: 9CD74392C9E411EC956B0A3CC4F9AE02.roa (hash: qvqgBUl0a4zKeWl1I3fwpsPKJV0El11IrKtIQQYLmrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171235, serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Validity Not Before: Aug 23 01:11:58 2025 GMT Not After : Aug 30 01:11:58 2025 GMT Subject: CN=68a9155e-e0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:a7:0f:3d:02:40:93:60:10:bd:3d:11:92: 02:77:0a:f6:71:a0:06:b6:5e:f0:bd:c0:87:6e:53: 25:67:59:f0:a8:59:28:7d:fb:45:98:60:61:1f:52: 38:d0:ce:ec:da:0e:24:ea:a2:f9:43:71:10:54:2d: 8a:4a:77:02:2c:04:43:34:48:1a:98:1a:f5:a2:31: ee:c8:0d:25:89:62:2e:bf:45:42:c3:85:7c:8f:9d: 4b:83:6a:77:c6:b9:e1:09:50:4d:e4:5b:d9:90:dd: ff:4b:d5:44:0b:11:86:0c:6f:71:dc:f1:df:71:bd: 88:f9:81:64:dc:72:aa:3b:ef:71:5a:2c:60:d2:37: ba:c5:31:6c:c7:ec:99:5d:d3:9c:0a:7a:30:c1:0c: 0d:e1:78:ee:50:53:e2:b4:b8:5c:cc:b7:25:5e:33: 22:9f:be:82:0b:ee:0a:73:82:4e:0b:3b:3d:14:2e: c9:59:89:b3:c4:32:da:df:5a:de:5f:2f:88:28:4f: 28:c1:42:de:f9:76:be:96:ac:dd:68:0e:19:4e:ea: 8e:80:39:0c:1c:29:0f:31:65:5a:51:93:13:4f:ea: ba:93:e5:b6:d0:9a:6f:34:9e:bd:91:61:47:d6:76: b8:5c:a2:d9:e9:df:9b:c5:cb:6a:ca:55:1e:96:35: d6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D9:79:D5:1E:39:2F:B4:8E:66:55:A6:0E:0E:63:58:DF:53:9B:BC X509v3 Authority Key Identifier: keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:56:2c:0e:a4:ed:c6:f3:27:f0:6e:1d:6b:46:2a:ff:ff:11: 25:62:ee:5f:32:6f:d2:9b:84:22:92:c0:64:45:d6:e7:bc:83: 79:32:c2:9f:18:dc:8f:6d:4f:b8:76:67:95:a6:c9:ba:b7:41: 08:47:50:87:d0:0d:1f:a2:0e:b5:41:5b:11:64:f4:c8:b3:d7: e4:15:18:32:6e:a7:44:64:14:cd:a9:1a:6f:8c:db:d9:1b:8a: 74:60:93:d0:05:1f:52:7e:77:f0:62:ed:09:c6:87:2b:81:04: 9a:5c:10:a6:3e:48:e3:62:c4:07:ad:fd:23:48:cb:42:78:0b: 58:b6:7b:2c:94:1d:76:46:6e:a4:ca:39:0c:8c:6b:72:76:93: d5:e5:49:bf:29:a0:72:38:05:56:1e:8f:c2:88:af:7b:d7:1c: 5e:64:55:aa:16:3d:37:1b:43:1b:1d:d7:17:1a:0d:9e:75:5f: 2f:44:5c:4e:b8:7b:9d:4d:ce:dd:51:d4:cb:34:08:c0:0b:b1: 81:3c:47:a6:d7:8b:30:e8:ca:7a:58:79:db:f1:e1:93:51:3e: a1:2d:db:a0:6a:e9:6c:f7:f0:d0:0a:1f:47:c4:ac:13:69:25: 23:bc:dc:39:1e:88:d5:55:d3:21:2f:26:cb:7d:4c:97:ab:09: a8:3f:3e:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyMzUxMTAvBgNVBAUTKDQ0MUNCMEQ4NkE5MkNFREZCRTgwODNERUQ2OTdBMjZE NjIzRUU2NTUwHhcNMjUwODIzMDExMTU4WhcNMjUwODMwMDExMTU4WjAYMRYwFAYD VQQDEw02OGE5MTU1ZS1lMGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3mnDz0CQJNgEL09EZICdwr2caAGtl7wvcCHblMlZ1nwqFkofftFmGBhH1I4 0M7s2g4k6qL5Q3EQVC2KSncCLARDNEgamBr1ojHuyA0liWIuv0VCw4V8j51Lg2p3 xrnhCVBN5FvZkN3/S9VECxGGDG9x3PHfcb2I+YFk3HKqO+9xWixg0je6xTFsx+yZ XdOcCnowwQwN4XjuUFPitLhczLclXjMin76CC+4Kc4JOCzs9FC7JWYmzxDLa31re Xy+IKE8owULe+Xa+lqzdaA4ZTuqOgDkMHCkPMWVaUZMTT+q6k+W20JpvNJ69kWFH 1na4XKLZ6d+bxctqylUeljXWSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLZedUe OS+0jmZVpg4OY1jfU5u8MB8GA1UdIwQYMBaAFEQcsNhqks7fvoCD3taXom1iPuZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTIzNS9ERDYxRTIyRUM1 REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0LS1nSVBlMXBlaWJXSS01 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCeXcyR3FTenQtLWdJUGUxcGVpYldJLTVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTIzNS9ERDYxRTIyRUM1REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0 LS1nSVBlMXBlaWJXSS01bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGViwOpO3G8yfwbh1rRir//xElYu5fMm/Sm4QiksBkRdbnvIN5MsKf GNyPbU+4dmeVpsm6t0EIR1CH0A0fog61QVsRZPTIs9fkFRgybqdEZBTNqRpvjNvZ G4p0YJPQBR9SfnfwYu0JxocrgQSaXBCmPkjjYsQHrf0jSMtCeAtYtnsslB12Rm6k yjkMjGtydpPV5Um/KaByOAVWHo/CiK971xxeZFWqFj03G0MbHdcXGg2edV8vRFxO uHudTc7dUdTLNAjAC7GBPEem14sw6Mp6WHnb8eGTUT6hLdugauls9/DQCh9HxKwT aSUjvNw5HojVVdMhLybLfUyXqwmoPz76 -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:14 2025 by rpki-client