$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json) Hash identifier: FnKufQWDk3+iTLRf/OG4Q5dhp9zryMAkGFS+D6JOGxM= Subject key identifier: CC:9B:E8:98:98:B7:46:13:3F:36:82:2A:D1:86:BE:3A:4E:F9:23:5C Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft Manifest number: 0142 Signing time: Sat 23 Aug 2025 04:53:56 +0000 Manifest this update: Sat 23 Aug 2025 04:53:55 +0000 Manifest next update: Sat 30 Aug 2025 04:53:55 +0000 Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: yfnSpFreCudJIjSIYjFmb+I1iq9yV+QkH1z2rizMkIo=) 2: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VGbwSs+xYuuT82QPTEDjBRASIfWEGELF9LE6WDBK6Cw=) 3: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: bw0f6KbJYjRey2+KDVpK9dBW3Yh7Jdgva8k4Bt7aCcM=) 4: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: LTeECQk5/azIOJTf8rGaT2gWz1Gmd2inlmhftO85Egc=) 5: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: FkwQRUxW28jIhJPhgvAtX7RxgLtIHLVcqsk+XhOm1NE=) 6: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: stQvqSgEe9eoYY5+iLzps6D0J/Yk9AXd8PNpZXOA3CY=) 7: BB17221E211611F08D31C34DC4F9AE02.roa (hash: fycljHXNnk59uPrb51pHFnfOpO9Hxutgas1w6IAJ3gA=) 8: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: Yun2AD2EJLYSRV9yxmCnTJUpxZFk9/O+PcxovQCtz2I=) 9: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: xaEZeRSS7SPLQpFTKRrqHdI+Z44FtJElJm/n+VPX6m4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Aug 23 04:53:55 2025 GMT Not After : Aug 30 04:53:55 2025 GMT Subject: CN=68a94963-7c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:bb:eb:2a:f0:39:a8:6f:16:74:7a:bf:7d: f4:b2:b4:41:07:82:5e:3c:df:7a:8c:a3:d5:c4:66: 06:e4:74:4d:d3:9c:ad:57:c3:26:58:14:21:ed:9d: 67:fe:5a:53:db:79:d2:46:07:aa:75:c4:b5:d5:30: dd:c3:33:ae:82:59:5c:b7:76:d1:a6:63:70:0f:16: 66:00:db:66:62:a5:ea:5d:61:06:a0:93:e8:65:e8: 15:c8:85:05:e9:3e:67:a4:4e:c9:88:dc:dd:08:e2: 20:dc:5f:25:c7:c8:2d:91:03:a9:f8:6c:00:b9:3d: a9:f0:78:bd:f0:82:f6:e4:bf:ba:13:cd:d0:5b:16: 9e:69:5f:2c:99:a2:3c:5d:a1:1f:2d:92:c5:74:9d: 12:41:d9:98:3f:76:95:0f:79:67:84:28:f7:7b:b5: d3:44:99:b8:c4:17:3e:9f:c1:58:18:40:93:3f:ac: a8:2c:58:37:f1:24:b6:02:a4:c0:00:bd:14:b0:5b: db:62:90:a6:31:10:2d:06:75:2d:a3:0b:48:5d:1c: c8:06:0c:7d:ff:96:14:e7:62:4a:14:d9:c7:6e:a2: 32:de:a4:f0:c7:63:f3:c3:01:91:cc:f7:f6:75:d1: b9:c4:cc:f3:09:c2:5a:a5:0c:82:36:00:1f:13:68: 7e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9B:E8:98:98:B7:46:13:3F:36:82:2A:D1:86:BE:3A:4E:F9:23:5C X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:df:ce:b2:ad:53:72:75:d4:12:98:97:7f:0d:89:85:52:f3: b0:d4:5a:6f:06:14:67:28:8d:82:94:3f:a2:10:67:18:bb:26: 84:58:a7:49:98:46:03:81:a3:bf:be:b0:8f:d0:2d:7b:db:4b: f2:bc:cc:38:fc:31:e7:8a:2f:1e:89:a7:5a:99:f9:f8:4a:a7: 9e:62:01:22:a5:91:ea:9c:11:f5:be:04:d8:e0:b0:8b:da:47: 40:17:2e:a7:25:34:3c:2c:84:9e:93:82:31:6e:b6:17:0c:73: e1:45:9d:b0:ca:85:c3:f9:05:fd:e0:71:69:af:a8:70:fd:34: 58:43:b4:2d:81:8e:d7:81:e6:9d:43:59:53:cf:96:96:01:62: 06:c9:56:67:37:e2:c5:c1:50:5b:91:4c:65:b5:61:20:b5:5a: e2:b3:f7:7e:66:26:ae:c6:67:86:53:ca:c9:6b:a1:e0:dc:1e: 5d:43:35:a6:02:d3:ac:2e:c3:4f:cd:67:8e:80:45:9e:b5:87: e8:52:b4:e5:50:5e:39:57:89:b7:8c:59:5d:60:48:1b:6b:e6: a1:9a:67:c2:da:9f:7c:3d:58:bb:50:9c:83:4e:4f:fc:d4:3a: 17:5f:39:19:0e:a5:d8:0d:e9:51:60:8e:1e:09:f5:97:09:e7: be:71:48:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwODIzMDQ1MzU1WhcNMjUwODMwMDQ1MzU1WjAYMRYwFAYD VQQDEw02OGE5NDk2My03YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscu76yrwOahvFnR6v330srRBB4JePN96jKPVxGYG5HRN05ytV8MmWBQh7Z1n /lpT23nSRgeqdcS11TDdwzOugllct3bRpmNwDxZmANtmYqXqXWEGoJPoZegVyIUF 6T5npE7JiNzdCOIg3F8lx8gtkQOp+GwAuT2p8Hi98IL25L+6E83QWxaeaV8smaI8 XaEfLZLFdJ0SQdmYP3aVD3lnhCj3e7XTRJm4xBc+n8FYGECTP6yoLFg38SS2AqTA AL0UsFvbYpCmMRAtBnUtowtIXRzIBgx9/5YU52JKFNnHbqIy3qTwx2PzwwGRzPf2 ddG5xMzzCcJapQyCNgAfE2h+GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyb6JiY t0YTPzaCKtGGvjpO+SNcMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGta U0dvLVllalhpSkk1SXI5cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG386yrVNyddQSmJd/DYmFUvOw1FpvBhRnKI2ClD+iEGcYuyaEWKdJ mEYDgaO/vrCP0C1720vyvMw4/DHnii8eiadamfn4SqeeYgEipZHqnBH1vgTY4LCL 2kdAFy6nJTQ8LISek4IxbrYXDHPhRZ2wyoXD+QX94HFpr6hw/TRYQ7QtgY7Xgead Q1lTz5aWAWIGyVZnN+LFwVBbkUxltWEgtVris/d+ZiauxmeGU8rJa6Hg3B5dQzWm AtOsLsNPzWeOgEWetYfoUrTlUF45V4m3jFldYEgba+ahmmfC2p98PVi7UJyDTk/8 1DoXXzkZDqXYDelRYI4eCfWXCee+cUjA -----END CERTIFICATE-----Generated at Sat Aug 23 23:57:47 2025 by rpki-client