$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft File: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json) Hash identifier: SBkkUTpI+xFZwzpQ64hRKC9NFs3XtqiM3jTv3BG9mn4= Subject key identifier: 59:77:D7:21:B7:4A:68:C5:E4:30:EC:08:6D:63:11:27:5E:17:2E:5A Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 Certificate issuer: /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft Manifest number: D9 Signing time: Sat 23 Aug 2025 05:42:38 +0000 Manifest this update: Sat 23 Aug 2025 05:42:38 +0000 Manifest next update: Sat 30 Aug 2025 05:42:38 +0000 Files and hashes: 1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: ZO0dh3U9ZzlSoqP6RMOVFT/kqjZwCAnG++s4gV46Rx4=) 2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: J7/kiN3L5QvG4wInB+6wlLOPrN0QJOnlQzSphywWm/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Validity Not Before: Aug 23 05:42:38 2025 GMT Not After : Aug 30 05:42:38 2025 GMT Subject: CN=68a954ce-0b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:26:44:13:de:46:c6:a5:1c:6e:76:87:51: ea:ef:cc:39:57:7f:2a:99:e1:a4:6d:a1:4f:62:10: 02:5c:54:30:bc:01:0e:c4:9b:b1:e1:95:66:8a:53: 87:69:3d:f5:42:13:34:e9:2a:b1:28:4e:e8:5b:34: f6:2b:d5:34:48:8d:3b:68:c5:c1:01:55:a9:f8:e8: c6:38:20:a5:28:ed:b4:3b:1a:7b:11:92:97:80:76: 90:0b:c2:12:d3:d9:13:00:1a:51:ca:b1:f8:6a:3a: 6c:b2:3d:ba:73:80:20:16:c2:18:9b:0c:e1:92:b5: af:ee:52:7f:56:8f:43:e3:6f:bd:3c:2b:76:b0:92: 66:2a:45:f5:89:b6:7e:69:a6:54:88:b3:d9:02:17: dd:bf:75:aa:b6:57:21:71:db:52:7d:df:5a:df:24: bc:7a:1b:15:97:d5:65:ed:33:92:17:08:e0:f8:df: c9:45:90:5d:92:f5:e7:d0:4b:af:90:64:f2:99:92: 6b:c6:8f:02:2d:76:ef:c7:75:7f:5f:41:1c:de:64: 74:fa:25:dd:5f:4e:48:5e:e3:35:e3:a1:fc:7d:fd: f7:65:d0:80:20:ce:dd:80:48:30:7b:1c:9a:30:8a: da:b1:ab:59:81:96:57:11:5e:3c:64:a8:39:c4:c4: c4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:77:D7:21:B7:4A:68:C5:E4:30:EC:08:6D:63:11:27:5E:17:2E:5A X509v3 Authority Key Identifier: keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:9b:87:d8:1f:b7:9c:23:3c:da:e2:2c:d5:55:1a:79:6f:cd: a7:9d:3c:ad:e0:cb:30:27:1f:f7:1b:d6:08:ee:e8:27:13:4f: 6f:05:42:8d:ec:db:a1:8d:7e:31:83:3b:16:26:34:51:39:eb: 21:9f:46:59:3a:d6:65:e9:26:9f:d7:9d:5b:f9:51:a8:bf:7e: fc:7e:d1:25:40:10:18:36:d6:bf:35:81:b2:30:83:f8:0f:ee: 79:a6:10:5b:8b:49:49:20:bf:1d:50:c5:c3:37:4c:be:8d:a2: bf:2d:d0:7a:cf:fb:b6:5d:9b:51:76:54:a7:63:3e:b3:1c:c5: 56:66:30:b0:9f:2b:ef:0d:6e:94:78:43:ec:d2:d5:a2:e5:3d: c0:ae:53:56:a1:42:46:93:95:d0:02:fa:34:17:51:19:d5:72: 7c:2b:4f:69:2f:30:3b:4c:d0:e7:9f:28:73:80:e0:00:ab:f8: 0c:3c:95:03:0e:89:f7:a7:ee:ec:94:aa:95:10:c6:17:ba:6a: fb:29:e7:ad:c0:3b:4b:31:82:9b:03:23:0f:00:01:5b:ef:34: 82:18:9d:bc:ee:f4:36:41:f3:02:f5:f1:8d:d1:4f:ea:73:ce: f3:ca:54:ff:6c:55:fb:88:9f:42:28:dd:fb:92:07:ff:b6:ca: ad:31:71:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYzMDIxMTAvBgNVBAUTKDIxQkU4QzhGRTk1M0Y2RUM5N0I3RjEyMTYxN0VEOTEw NDdEQUE1QTQwHhcNMjUwODIzMDU0MjM4WhcNMjUwODMwMDU0MjM4WjAYMRYwFAYD VQQDEw02OGE5NTRjZS0wYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4ImRBPeRsalHG52h1Hq78w5V38qmeGkbaFPYhACXFQwvAEOxJux4ZVmilOH aT31QhM06SqxKE7oWzT2K9U0SI07aMXBAVWp+OjGOCClKO20Oxp7EZKXgHaQC8IS 09kTABpRyrH4ajpssj26c4AgFsIYmwzhkrWv7lJ/Vo9D42+9PCt2sJJmKkX1ibZ+ aaZUiLPZAhfdv3WqtlchcdtSfd9a3yS8ehsVl9Vl7TOSFwjg+N/JRZBdkvXn0Euv kGTymZJrxo8CLXbvx3V/X0Ec3mR0+iXdX05IXuM146H8ff33ZdCAIM7dgEgwexya MIrasatZgZZXEV48ZKg5xMTEnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFl31yG3 SmjF5DDsCG1jESdeFy5aMB8GA1UdIwQYMBaAFCG+jI/pU/bsl7fxIWF+2RBH2qWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjMwMi9BMzJGREZERTM3 NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1eVh0X0VoWVg3WkVFZmFw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liNk1qLWxUOXV5WHRfRWhZWDdaRUVmYXBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjMwMi9BMzJGREZERTM3NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1 eVh0X0VoWVg3WkVFZmFwYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwm4fYH7ecIzza4izVVRp5b82nnTyt4MswJx/3G9YI7ugnE09vBUKN 7NuhjX4xgzsWJjRROeshn0ZZOtZl6Saf151b+VGov378ftElQBAYNta/NYGyMIP4 D+55phBbi0lJIL8dUMXDN0y+jaK/LdB6z/u2XZtRdlSnYz6zHMVWZjCwnyvvDW6U eEPs0tWi5T3ArlNWoUJGk5XQAvo0F1EZ1XJ8K09pLzA7TNDnnyhzgOAAq/gMPJUD Don3p+7slKqVEMYXumr7KeetwDtLMYKbAyMPAAFb7zSCGJ287vQ2QfMC9fGN0U/q c87zylT/bFX7iJ9CKN37kgf/tsqtMXHw -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:39 2025 by rpki-client