$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft File: 79iPiiibFMeUQxKLu7eRtS2lEa0.mft (raw, json) Hash identifier: gHsv8QeeRjJTsG650t2q5la6O530gmsR6A1woxZu7do= Subject key identifier: F2:CC:F0:40:01:E8:8E:10:A6:AC:9F:74:C3:1C:A4:4A:0D:4F:72:2E Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD Certificate issuer: /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft Manifest number: 01D6 Signing time: Sat 23 Aug 2025 02:52:59 +0000 Manifest this update: Sat 23 Aug 2025 02:52:58 +0000 Manifest next update: Sat 30 Aug 2025 02:52:58 +0000 Files and hashes: 1: 79iPiiibFMeUQxKLu7eRtS2lEa0.crl (hash: bclC8f31cbI6spBMDQYt9D1FfdoY3tIzoWvGKkmwHp8=) 2: 9344B512B1BA11ED8DC4D42EC4F9AE02.roa (hash: 05FYul9tCmnEluZqc+GxuuNUpvwFpQ5F6tjIORKsJIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Validity Not Before: Aug 23 02:52:58 2025 GMT Not After : Aug 30 02:52:58 2025 GMT Subject: CN=68a92d0b-065a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:a9:6f:9a:61:17:df:5a:4c:4c:b1:72:15: 83:1a:2f:c7:ec:b7:e3:80:34:03:ca:c4:0f:84:dd: 46:e6:32:ab:4e:ed:71:33:15:28:f5:04:d3:84:b4: 0d:e5:97:9c:40:99:62:cf:d7:c4:dc:b9:b9:72:54: 55:a5:12:92:58:85:09:e0:38:f9:38:28:96:85:f0: 4f:18:f5:b9:85:1b:3a:24:9c:dd:c9:df:44:b7:04: 26:71:4c:03:a7:e5:db:de:5c:fb:59:43:27:99:ec: 82:0d:a2:75:ef:41:be:09:41:13:c7:0b:08:dc:f6: ed:dc:0c:0d:f7:6c:1e:78:ab:27:75:06:01:5c:d6: 65:7c:1b:9a:a5:44:50:13:b2:67:f1:a0:d8:a3:76: 6e:97:a3:54:8b:4b:81:20:b3:c3:0f:55:08:2b:25: f7:74:4d:40:80:b2:f0:61:f2:3f:96:0f:ff:91:43: 05:be:d4:ef:05:ea:4a:31:23:fe:f7:9a:58:ce:e3: 36:c5:2f:20:f5:c7:6c:bb:99:35:74:8c:23:0b:76: 28:c8:c2:cc:c6:1e:67:19:d7:f5:1b:f9:b7:90:3d: 32:f3:f7:69:bb:d6:57:0d:d9:95:3d:6f:71:92:91: fb:43:eb:88:a2:1d:9d:da:ac:6a:47:a2:b6:7f:bc: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CC:F0:40:01:E8:8E:10:A6:AC:9F:74:C3:1C:A4:4A:0D:4F:72:2E X509v3 Authority Key Identifier: keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:39:40:d2:e8:69:ae:59:22:84:2d:e9:42:f2:ab:b4:e8:10: 7b:10:dc:dd:77:d8:2e:d4:5c:5f:e4:3e:e7:9d:49:c1:2c:a9: 93:ce:56:68:0d:e5:41:69:89:5b:10:6d:8e:a0:c9:28:d8:78: cd:3c:5c:d4:c5:2d:6b:07:27:bc:f8:16:31:36:50:ad:d9:13: 16:27:85:34:a2:61:18:74:c6:1c:f2:60:5b:d6:0d:35:a4:dd: 21:5c:bd:f2:ee:ea:f5:0c:d3:cd:8a:0f:6e:40:77:e4:59:0e: f3:1b:fe:3a:94:68:4a:9e:01:80:26:ed:5c:c9:6f:67:62:b0: d4:b5:66:51:99:f7:26:71:69:1f:64:53:ae:a0:53:05:13:fc: ff:eb:f6:a5:fc:5d:ae:30:1d:09:47:b8:3a:da:0c:8f:ca:a3: 3e:be:f4:5a:44:cf:06:93:ca:c2:af:82:47:60:34:4d:a6:a1: 0e:26:4c:c9:20:da:8c:bb:7b:6f:dd:69:df:5b:59:85:46:49: 5d:20:4e:ba:db:47:ff:e4:c2:09:1f:33:8e:88:94:49:fe:82: 4e:ab:8a:5b:a5:06:0c:a9:e2:67:8a:46:56:56:fa:02:bc:cd: e8:5f:d4:15:8a:f6:5d:79:c0:06:f7:45:77:ef:e1:06:68:64: 89:88:85:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0YxMTAvBgNVBAUTKEVGRDg4RjhBMjg5QjE0Qzc5NDQzMTI4QkJCQjc5MUI1 MkRBNTExQUQwHhcNMjUwODIzMDI1MjU4WhcNMjUwODMwMDI1MjU4WjAYMRYwFAYD VQQDEw02OGE5MmQwYi0wNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBipb5phF99aTEyxchWDGi/H7LfjgDQDysQPhN1G5jKrTu1xMxUo9QTThLQN 5ZecQJliz9fE3Lm5clRVpRKSWIUJ4Dj5OCiWhfBPGPW5hRs6JJzdyd9EtwQmcUwD p+Xb3lz7WUMnmeyCDaJ170G+CUETxwsI3Pbt3AwN92weeKsndQYBXNZlfBuapURQ E7Jn8aDYo3Zul6NUi0uBILPDD1UIKyX3dE1AgLLwYfI/lg//kUMFvtTvBepKMSP+ 95pYzuM2xS8g9cdsu5k1dIwjC3YoyMLMxh5nGdf1G/m3kD0y8/dpu9ZXDdmVPW9x kpH7Q+uIoh2d2qxqR6K2f7wsyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLM8EAB 6I4QpqyfdMMcpEoNT3IuMB8GA1UdIwQYMBaAFO/Yj4oomxTHlEMSi7u3kbUtpRGt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzRi85QjlDOEU2QUIx QjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZNZVVReEtMdTdlUnRTMmxF YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc5aVBpaWliRk1lVVF4S0x1N2VSdFMybEVhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzRi85QjlDOEU2QUIxQjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZN ZVVReEtMdTdlUnRTMmxFYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCOUDS6GmuWSKELelC8qu06BB7ENzdd9gu1Fxf5D7nnUnBLKmTzlZo DeVBaYlbEG2OoMko2HjNPFzUxS1rBye8+BYxNlCt2RMWJ4U0omEYdMYc8mBb1g01 pN0hXL3y7ur1DNPNig9uQHfkWQ7zG/46lGhKngGAJu1cyW9nYrDUtWZRmfcmcWkf ZFOuoFMFE/z/6/al/F2uMB0JR7g62gyPyqM+vvRaRM8Gk8rCr4JHYDRNpqEOJkzJ INqMu3tv3WnfW1mFRkldIE6620f/5MIJHzOOiJRJ/oJOq4pbpQYMqeJnikZWVvoC vM3oX9QVivZdecAG90V37+EGaGSJiIWn -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:45 2025 by rpki-client