$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft File: 7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json) Hash identifier: xWt2w3xvjJsJnIX9lWhNocYiF4WfpbyXs66xxLOB+as= Subject key identifier: 66:80:98:16:B1:2C:FA:85:C5:32:CF:CF:D3:29:3C:23:3C:69:5D:DE Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B Certificate issuer: /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft Manifest number: 0164 Signing time: Sat 23 Aug 2025 04:04:19 +0000 Manifest this update: Sat 23 Aug 2025 04:04:19 +0000 Manifest next update: Sat 30 Aug 2025 04:04:19 +0000 Files and hashes: 1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: 8Z/LuaMLX70PJ3sfr1hrK5fkRlcbHCo4r1Nb0NuCydk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Validity Not Before: Aug 23 04:04:19 2025 GMT Not After : Aug 30 04:04:19 2025 GMT Subject: CN=68a93dc3-9a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:c3:15:36:c0:49:51:a5:32:6f:e3:8c:6f: 3f:40:c8:7b:5a:7b:1e:46:06:cb:db:3b:21:62:62: c8:77:f2:66:81:d6:35:1b:48:54:14:4f:1c:b2:12: 99:af:a3:84:e7:4d:d8:9b:e6:6d:61:88:d1:ca:f7: 33:2c:43:98:db:be:a3:76:47:8e:ab:6b:2e:49:8f: 04:77:93:c2:ad:08:8b:b6:56:4c:f3:ac:7c:73:18: a4:91:94:26:9e:b9:23:8b:e2:47:aa:bd:1a:1e:8e: 3d:39:54:60:78:d8:26:b5:0f:6f:c6:43:aa:28:33: aa:c2:21:bb:1d:e2:5f:3f:f0:79:24:74:50:b9:4a: 80:2b:cd:06:2e:2b:78:c1:95:1c:c6:20:ab:0b:3d: c1:e2:9b:a7:9a:94:d3:fc:6b:cd:6a:d7:4e:dc:73: 68:e1:a4:e9:1d:6c:ba:05:21:96:9f:eb:42:db:92: dd:f5:5e:e2:17:d8:c2:a5:d8:a2:e0:c1:cf:d0:2e: 0d:83:bb:30:7b:6e:ef:47:8f:b6:7f:d2:33:35:7e: bb:9d:29:9a:5c:40:e6:22:b1:c5:ca:17:b6:73:ca: 8b:a4:40:20:ad:af:3c:8b:ce:f9:08:13:6d:cf:a6: 63:b4:24:0d:c4:43:76:9c:83:72:84:8e:22:a4:c1: 21:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:80:98:16:B1:2C:FA:85:C5:32:CF:CF:D3:29:3C:23:3C:69:5D:DE X509v3 Authority Key Identifier: keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:bb:e5:e2:97:ff:72:63:18:ab:c4:7f:fb:7d:00:99:e3:fd: 57:42:42:81:56:41:57:f6:b5:9e:65:8d:16:90:1e:3e:30:16: f4:19:05:cb:3c:16:bb:76:21:36:0f:02:41:78:49:44:80:ce: aa:73:34:aa:27:37:7a:cf:13:dd:15:31:66:77:7e:02:29:e0: e8:0d:05:b5:c4:87:52:35:f3:01:c6:e6:2c:57:e5:e2:0d:3e: 94:a5:c4:68:77:00:a2:e2:67:d6:8c:a4:8c:d4:65:aa:5d:35: 5f:c0:18:f8:41:10:2d:0c:69:e9:97:82:5c:1d:c2:51:40:cc: 55:73:52:87:3e:e6:6c:be:51:6e:c8:8d:40:e8:c6:61:21:77: fb:5d:15:27:d9:59:4d:12:48:f0:59:b0:5a:ff:db:c6:22:b1: 98:82:f2:d3:78:75:1e:52:58:87:b9:4e:70:25:2a:eb:56:80: 95:99:f8:51:29:bc:80:ca:d9:d5:be:67:71:75:1c:40:5b:fb: b9:75:3d:a7:97:13:03:81:01:60:5b:93:28:44:8c:a2:0d:0f: 3c:98:b0:d1:56:5e:37:94:04:6f:41:17:c7:92:f7:86:06:b3: 79:a3:e6:7f:c2:a9:81:98:2d:0e:67:e0:c4:b6:cd:fa:47:a5: 84:94:a7:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKEVFMjRDOThCOTYxMzEwRjUwREYwRENCMkQyNzY5NkJB MEVCRDdENEIwHhcNMjUwODIzMDQwNDE5WhcNMjUwODMwMDQwNDE5WjAYMRYwFAYD VQQDEw02OGE5M2RjMy05YTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZLDFTbASVGlMm/jjG8/QMh7WnseRgbL2zshYmLId/JmgdY1G0hUFE8cshKZ r6OE503Ym+ZtYYjRyvczLEOY276jdkeOq2suSY8Ed5PCrQiLtlZM86x8cxikkZQm nrkji+JHqr0aHo49OVRgeNgmtQ9vxkOqKDOqwiG7HeJfP/B5JHRQuUqAK80GLit4 wZUcxiCrCz3B4punmpTT/GvNatdO3HNo4aTpHWy6BSGWn+tC25Ld9V7iF9jCpdii 4MHP0C4Ng7swe27vR4+2f9IzNX67nSmaXEDmIrHFyhe2c8qLpEAgra88i875CBNt z6ZjtCQNxEN2nINyhI4ipMEhowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaAmBax LPqFxTLPz9MpPCM8aV3eMB8GA1UdIwQYMBaAFO4kyYuWExD1DfDcstJ2lroOvX1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9BODhGRkNGODVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQVU44Tnl5MG5hV3VnNjlm VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdpVEppNVlURVBVTjhOeXkwbmFXdWc2OWZVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9BODhGRkNGODVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQ VU44Tnl5MG5hV3VnNjlmVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIu+Xil/9yYxirxH/7fQCZ4/1XQkKBVkFX9rWeZY0WkB4+MBb0GQXL PBa7diE2DwJBeElEgM6qczSqJzd6zxPdFTFmd34CKeDoDQW1xIdSNfMBxuYsV+Xi DT6UpcRodwCi4mfWjKSM1GWqXTVfwBj4QRAtDGnpl4JcHcJRQMxVc1KHPuZsvlFu yI1A6MZhIXf7XRUn2VlNEkjwWbBa/9vGIrGYgvLTeHUeUliHuU5wJSrrVoCVmfhR KbyAytnVvmdxdRxAW/u5dT2nlxMDgQFgW5MoRIyiDQ88mLDRVl43lARvQRfHkveG BrN5o+Z/wqmBmC0OZ+DEts36R6WElKfY -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:56 2025 by rpki-client