$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft File: -T76pqbQVK6ZfIo8_yXxacNvigw.mft (raw, json) Hash identifier: 05wq0IkTVc5BjsTOzXJjjglLl2vXAUHvCoLNEyVbQAo= Subject key identifier: 93:D9:DD:A0:02:21:26:E8:D9:AB:1B:25:F0:AB:84:5D:BD:4C:52:E3 Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C Certificate issuer: /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft Manifest number: 0122 Signing time: Sat 23 Aug 2025 04:53:34 +0000 Manifest this update: Sat 23 Aug 2025 04:53:34 +0000 Manifest next update: Sat 30 Aug 2025 04:53:34 +0000 Files and hashes: 1: -T76pqbQVK6ZfIo8_yXxacNvigw.crl (hash: /WS1NuC+URQ3FDqjszvBzeGoVciHKE7oy+CebYPDCWY=) 2: 395803C8CDD011EEB4E50681C4F9AE02.roa (hash: U+mu9E/7fBnjCJrDiP1cAMTZViiPy5KDtk1hEO7aXYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Validity Not Before: Aug 23 04:53:34 2025 GMT Not After : Aug 30 04:53:34 2025 GMT Subject: CN=68a9494e-3bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ae:ab:16:2c:73:5d:a6:62:38:2f:16:88:40: 1b:a4:ae:29:f6:b9:67:ea:76:0c:79:56:71:cd:11: 0b:a8:29:6a:ba:d3:cb:ca:ad:d5:77:8f:e0:fb:0d: 69:b6:bf:80:9b:04:af:91:5e:93:92:8d:23:37:04: 26:ac:10:3f:29:ff:83:39:8b:99:27:6e:6a:b3:aa: 4a:17:88:f4:20:b6:66:75:75:d8:0d:a1:b3:7b:a4: 0f:8b:72:49:e8:6b:2d:15:b1:29:72:d6:75:ad:bb: d9:e0:87:88:5e:49:a3:57:ed:79:c4:24:23:1f:8f: 38:00:b5:c2:5e:df:4f:0f:99:f8:92:47:f5:7b:a1: e5:3e:6c:15:a6:ed:d8:d5:f7:b9:aa:60:4a:bd:32: a4:26:be:25:bd:70:94:97:fe:8b:03:c0:8e:cb:f3: fe:3d:a2:d0:62:5e:c7:32:96:87:e2:64:1b:72:de: ee:36:de:84:f9:d7:42:1a:85:90:ca:ae:39:2d:fc: 17:5d:a3:58:3b:fe:aa:96:46:0b:5a:5a:d0:5f:87: be:f2:de:84:db:0c:9b:30:7d:8b:36:6b:a6:06:b7: e9:2c:81:7f:23:66:ba:99:d3:26:86:4d:82:c0:47: 06:8d:51:16:6d:cc:ea:41:31:bb:e0:96:a8:cc:4a: d8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D9:DD:A0:02:21:26:E8:D9:AB:1B:25:F0:AB:84:5D:BD:4C:52:E3 X509v3 Authority Key Identifier: keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:98:46:2e:3a:b3:ab:f6:97:4c:64:e5:5b:00:07:81:78:6d: f1:99:93:f6:48:7a:7d:16:52:75:e0:eb:0e:43:f5:fd:1f:3d: f1:fb:bc:76:49:79:bb:c7:f1:04:d4:c9:b1:b5:0d:f4:08:83: d1:86:ca:58:35:c4:bc:30:40:df:06:23:94:37:75:57:53:ab: f9:63:97:dd:4a:56:44:ea:d2:63:a6:70:cb:02:4c:bc:92:6c: 9f:4f:4b:80:aa:71:c2:8a:67:e1:0b:0d:39:40:c6:01:43:f4: c3:87:d4:d2:e4:e0:97:7a:70:6c:f0:0c:a0:a3:bd:ff:7c:0e: d9:f9:ce:81:a2:4d:85:40:d7:99:10:73:65:ad:41:52:6c:e6: 45:dc:86:af:a0:86:8a:78:73:92:0b:13:0a:dc:6e:75:5c:25: a7:db:ec:30:a6:ef:91:e1:e8:15:33:35:c3:f1:41:6b:7e:0f: e3:1a:d8:05:2b:9b:ae:7e:d7:ec:ad:41:a3:ad:fa:ff:be:e0: ee:22:ff:31:26:bb:8e:2e:e1:45:05:44:85:52:b2:83:62:84: ea:6b:a1:11:cf:80:f1:66:49:00:79:85:48:66:ee:f8:3b:43: a7:7c:14:fc:26:e5:a0:16:2d:07:04:86:2c:39:cc:49:3b:10: de:9e:46:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKEY5M0VGQUE2QTZEMDU0QUU5OTdDOEEzQ0ZGMjVGMTY5 QzM2RjhBMEMwHhcNMjUwODIzMDQ1MzM0WhcNMjUwODMwMDQ1MzM0WjAYMRYwFAYD VQQDEw02OGE5NDk0ZS0zYmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyq6rFixzXaZiOC8WiEAbpK4p9rln6nYMeVZxzRELqClqutPLyq3Vd4/g+w1p tr+AmwSvkV6Tko0jNwQmrBA/Kf+DOYuZJ25qs6pKF4j0ILZmdXXYDaGze6QPi3JJ 6GstFbEpctZ1rbvZ4IeIXkmjV+15xCQjH484ALXCXt9PD5n4kkf1e6HlPmwVpu3Y 1fe5qmBKvTKkJr4lvXCUl/6LA8COy/P+PaLQYl7HMpaH4mQbct7uNt6E+ddCGoWQ yq45LfwXXaNYO/6qlkYLWlrQX4e+8t6E2wybMH2LNmumBrfpLIF/I2a6mdMmhk2C wEcGjVEWbczqQTG74JaozErYNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPZ3aAC ISbo2asbJfCrhF29TFLjMB8GA1UdIwQYMBaAFPk++qam0FSumXyKPP8l8WnDb4oM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9COTg5RjhBMkM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZLNlpmSW84X3lYeGFjTnZp Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1UNzZwcWJRVks2WmZJbzhfeVh4YWNOdmlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9COTg5RjhBMkM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZL NlpmSW84X3lYeGFjTnZpZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBmEYuOrOr9pdMZOVbAAeBeG3xmZP2SHp9FlJ14OsOQ/X9Hz3x+7x2 SXm7x/EE1MmxtQ30CIPRhspYNcS8MEDfBiOUN3VXU6v5Y5fdSlZE6tJjpnDLAky8 kmyfT0uAqnHCimfhCw05QMYBQ/TDh9TS5OCXenBs8Aygo73/fA7Z+c6Bok2FQNeZ EHNlrUFSbOZF3IavoIaKeHOSCxMK3G51XCWn2+wwpu+R4egVMzXD8UFrfg/jGtgF K5uuftfsrUGjrfr/vuDuIv8xJruOLuFFBUSFUrKDYoTqa6ERz4DxZkkAeYVIZu74 O0OnfBT8JuWgFi0HBIYsOcxJOxDenkYL -----END CERTIFICATE-----Generated at Sat Aug 23 21:24:08 2025 by rpki-client