$ rpki-client -vvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft File: cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json) Hash identifier: 39mUitfB+1bYJztnzw5HQb5hREjBjt1r3U9UdkH/edQ= Subject key identifier: B9:EE:1D:23:51:F8:AE:0F:3E:7A:CB:B1:B1:18:2D:93:67:9C:41:97 Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F Certificate issuer: /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F Certificate serial: 078C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft Manifest number: 0789 Signing time: Fri 22 Aug 2025 21:35:27 +0000 Manifest this update: Fri 22 Aug 2025 21:35:27 +0000 Manifest next update: Fri 29 Aug 2025 21:35:27 +0000 Files and hashes: 1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: /S8IgYX5/DD0q1KUWuQ5r/OwU6IzzLN9D/sFw01PllY=) 2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: q05bnDBuCJsrUlvlSely8w0jnLrUU3dVN/rTyJ4umLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186980, serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F Validity Not Before: Aug 22 21:35:27 2025 GMT Not After : Aug 29 21:35:27 2025 GMT Subject: CN=68a8e29f-4490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d6:49:fc:6b:01:d9:e5:77:df:c7:5b:07:01: 8b:95:80:05:c1:77:b5:e4:78:16:bb:6f:ec:a2:bd: 4e:33:2c:76:db:f7:b6:12:1c:32:0c:96:f4:f7:d2: f2:07:13:ed:ea:4f:1c:35:9c:f5:b1:59:31:ab:ac: 44:d6:db:1d:be:10:5d:f5:0a:92:10:21:6f:b8:16: 67:39:a5:8f:35:29:50:0d:20:60:b0:f5:d4:aa:a6: aa:64:02:66:8d:1a:88:d7:8f:c3:79:6b:bf:d7:6d: 76:83:2f:22:90:9e:17:5c:12:73:57:a6:23:d5:2f: 2e:19:33:35:9c:c2:5b:60:22:57:9d:2e:28:91:e2: e3:db:7a:f5:4c:53:95:08:21:dd:5e:60:b7:63:61: 88:05:db:90:c3:b1:ac:56:22:9c:4a:f6:67:ce:1a: 3d:19:67:71:92:6a:6f:35:93:36:a9:00:17:72:2e: 22:dd:52:d9:28:ba:24:af:78:9c:b7:de:62:4e:9b: 47:fc:02:b6:34:33:6b:65:40:99:1d:f4:78:24:0e: 1f:e3:d6:f2:aa:27:63:69:94:f0:ea:5f:26:fb:65: 4c:6b:1f:d0:16:b0:81:01:97:54:c5:91:9a:ee:0a: 3c:28:37:79:15:63:33:5f:95:0e:91:6f:83:04:2f: 7c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EE:1D:23:51:F8:AE:0F:3E:7A:CB:B1:B1:18:2D:93:67:9C:41:97 X509v3 Authority Key Identifier: keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:04:16:5c:9a:01:88:d2:9f:fb:d7:60:b0:0f:d6:47:9d:42: 0c:4c:1b:9b:74:4a:17:13:a7:52:57:c9:58:95:9e:4d:59:69: 37:2b:82:79:5e:bb:b6:ee:71:b1:90:3b:6e:96:0f:35:53:a6: 44:f6:eb:d5:50:94:d1:cb:9f:7b:65:9b:cc:9a:fe:95:13:82: c7:71:ae:ed:5d:b3:c0:f4:df:aa:79:bf:f8:3a:86:30:0a:26: aa:ae:49:9f:7c:46:e6:7d:0e:d6:5d:fe:f1:9d:79:1c:da:5e: cb:89:c6:59:5d:89:d6:05:dd:fe:a9:4b:4b:2d:d7:b8:be:2a: 04:e5:05:d4:bb:89:51:12:d8:f4:80:af:13:55:7d:49:4c:9f: ba:17:bf:28:97:73:7e:cb:46:9d:10:95:a3:b5:e0:38:1d:0f: a6:48:98:d5:db:bd:fb:14:5f:36:62:1c:86:c1:94:a4:96:bc: f7:dc:25:c1:f3:7e:53:be:30:42:f1:21:a3:01:7d:6e:e4:99: d7:de:e4:e1:6a:0a:bc:68:05:20:ab:b8:68:3e:e3:71:1a:d1: d5:cd:78:ab:2d:0f:3c:2a:40:4e:bc:5b:11:42:ca:6a:f6:cf: 10:d8:72:7e:4f:54:cc:14:97:07:a4:c0:74:47:0b:8c:c4:82: fa:aa:5c:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY5ODAxMTAvBgNVBAUTKDcwRDE2RDc3Mzc5ODlCMTVDNkM4REYxRENBMkE5ODBF MEJCRkJBMEYwHhcNMjUwODIyMjEzNTI3WhcNMjUwODI5MjEzNTI3WjAYMRYwFAYD VQQDEw02OGE4ZTI5Zi00NDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztZJ/GsB2eV338dbBwGLlYAFwXe15HgWu2/sor1OMyx22/e2EhwyDJb099Ly BxPt6k8cNZz1sVkxq6xE1tsdvhBd9QqSECFvuBZnOaWPNSlQDSBgsPXUqqaqZAJm jRqI14/DeWu/1212gy8ikJ4XXBJzV6Yj1S8uGTM1nMJbYCJXnS4okeLj23r1TFOV CCHdXmC3Y2GIBduQw7GsViKcSvZnzho9GWdxkmpvNZM2qQAXci4i3VLZKLokr3ic t95iTptH/AK2NDNrZUCZHfR4JA4f49byqidjaZTw6l8m+2VMax/QFrCBAZdUxZGa 7go8KDd5FWMzX5UOkW+DBC98IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnuHSNR +K4PPnrLsbEYLZNnnEGXMB8GA1UdIwQYMBaAFHDRbXc3mJsVxsjfHcoqmA4Lv7oP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njk4MC9DQjAwNkQ2MjFD RDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14WEd5TjhkeWlxWURndV91 ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NORnRkemVZbXhYR3lOOGR5aXFZRGd1X3VnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njk4MC9DQjAwNkQ2MjFDRDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14 WEd5TjhkeWlxWURndV91ZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIBBZcmgGI0p/712CwD9ZHnUIMTBubdEoXE6dSV8lYlZ5NWWk3K4J5 Xru27nGxkDtulg81U6ZE9uvVUJTRy597ZZvMmv6VE4LHca7tXbPA9N+qeb/4OoYw CiaqrkmffEbmfQ7WXf7xnXkc2l7LicZZXYnWBd3+qUtLLde4vioE5QXUu4lREtj0 gK8TVX1JTJ+6F78ol3N+y0adEJWjteA4HQ+mSJjV2737FF82YhyGwZSklrz33CXB 835TvjBC8SGjAX1u5JnX3uThagq8aAUgq7hoPuNxGtHVzXirLQ88KkBOvFsRQspq 9s8Q2HJ+T1TMFJcHpMB0RwuMxIL6qlz3 -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:10 2025 by rpki-client