$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json) Hash identifier: otbQmUdHJMqZVhsKm2kbeH/ISbpEti3CbY4QLJExqr4= Subject key identifier: 19:77:65:11:18:64:E1:3C:9A:50:A6:34:37:D5:93:A6:C3:20:B3:44 Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft Manifest number: 0168 Signing time: Sat 23 Aug 2025 04:03:39 +0000 Manifest this update: Sat 23 Aug 2025 04:03:38 +0000 Manifest next update: Sat 30 Aug 2025 04:03:38 +0000 Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: YpCeQm+i9XmWbwnVUzYFwcrCaqa7plPXFM6GGtO/5LU=) 2: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: hNwMkMdjh5wXeGCbclXCuLBfGgwTuq5lN97tlwCY1b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Validity Not Before: Aug 23 04:03:38 2025 GMT Not After : Aug 30 04:03:38 2025 GMT Subject: CN=68a93d9a-c2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:71:61:74:9b:e7:7c:9f:d6:20:a3:c4:22: cb:42:93:a4:72:f2:36:b5:5c:12:f5:2b:2e:ca:56: 2e:3e:a6:67:19:79:1a:37:1c:37:d4:2f:77:b1:27: 17:8c:58:33:6d:fa:ba:9d:79:91:2b:9a:50:34:e5: 00:9f:4a:a1:52:57:c8:34:f9:fb:db:fa:57:a6:8a: 8b:a3:ed:93:5e:21:1d:c0:c0:62:97:24:92:cc:b4: 4a:db:18:cc:c8:f9:41:73:40:5c:c1:7c:24:1b:bc: 67:aa:50:fa:b3:d9:21:5f:44:12:85:30:e2:ec:73: f0:2b:8f:dd:32:24:43:ec:73:01:f7:17:30:e9:ca: 9c:66:89:ca:db:12:71:2a:91:e6:ac:a3:cd:93:12: fe:88:24:fb:ae:a4:70:51:bb:74:bf:16:54:6f:c6: 18:c2:b2:08:86:0f:f3:2b:fa:d5:41:59:2a:cf:e9: 87:44:66:28:a0:66:0d:3a:38:bb:05:6e:64:02:12: c4:f7:d6:ee:d8:7d:d9:9e:2d:c1:d6:a9:14:8c:89: f2:00:27:35:e2:36:46:28:f1:86:3f:0a:bb:48:6f: 86:34:b7:e9:1e:df:69:eb:ee:80:77:9f:71:79:8b: ca:e7:ef:72:60:b2:85:60:ea:79:2a:45:80:2f:83: a0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:77:65:11:18:64:E1:3C:9A:50:A6:34:37:D5:93:A6:C3:20:B3:44 X509v3 Authority Key Identifier: keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:29:5f:3c:c2:43:27:e8:c3:fd:bb:3e:e9:15:cd:8e:5c:f4: 36:31:1e:1a:18:af:3d:45:39:c8:ea:5a:07:75:90:d8:92:b6: f7:cc:12:13:0e:63:3e:0a:19:04:dc:07:7d:49:16:53:12:d3: 84:70:8a:e4:69:95:de:ae:d9:05:4c:eb:8c:42:58:f7:7a:84: ed:b5:35:43:81:7e:63:6c:9b:9f:89:41:86:e8:0d:16:f7:b3: 49:44:9e:83:d8:39:4c:15:b9:06:64:32:87:99:ea:3c:42:e4: ab:53:41:2a:a9:d5:91:0e:13:7d:82:f5:09:50:5a:b8:99:39: da:99:e1:51:3f:7a:25:cd:de:32:fe:30:26:b2:98:dc:80:11: ae:a4:63:7c:eb:8b:b6:f7:10:2b:8f:fa:b0:08:ca:92:52:a4: 67:6f:6b:a2:ce:40:14:59:60:57:d4:d4:ba:2e:0e:98:84:5f: ce:20:ab:84:54:75:48:46:44:24:ff:7c:db:09:55:a4:1b:5d: a5:27:ed:71:c7:f3:dc:a5:96:fb:33:d9:c1:65:00:bd:3a:87: da:3f:c9:e9:a6:1e:2a:55:c1:bf:e1:57:e5:52:f2:0d:4e:72: 5a:51:cb:55:a8:f4:e2:68:f3:91:10:5a:bd:ba:9d:ea:e7:b4: 1e:e3:73:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA3NTMxMTAvBgNVBAUTKERBRDc4Q0FDMzZEMTQzRjE3NEFCRTExMkQ0OTVFRDVB MDZFQ0E3NDAwHhcNMjUwODIzMDQwMzM4WhcNMjUwODMwMDQwMzM4WjAYMRYwFAYD VQQDEw02OGE5M2Q5YS1jMmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ddxYXSb53yf1iCjxCLLQpOkcvI2tVwS9SsuylYuPqZnGXkaNxw31C93sScX jFgzbfq6nXmRK5pQNOUAn0qhUlfINPn72/pXpoqLo+2TXiEdwMBilySSzLRK2xjM yPlBc0BcwXwkG7xnqlD6s9khX0QShTDi7HPwK4/dMiRD7HMB9xcw6cqcZonK2xJx KpHmrKPNkxL+iCT7rqRwUbt0vxZUb8YYwrIIhg/zK/rVQVkqz+mHRGYooGYNOji7 BW5kAhLE99bu2H3Zni3B1qkUjInyACc14jZGKPGGPwq7SG+GNLfpHt9p6+6Ad59x eYvK5+9yYLKFYOp5KkWAL4OgrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBl3ZREY ZOE8mlCmNDfVk6bDILNEMB8GA1UdIwQYMBaAFNrXjKw20UPxdKvhEtSV7VoG7KdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDc1My84RUYyNEExMjVC NkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFfRjBxLUVTMUpYdFdnYnNw MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0ZU1yRGJSUV9GMHEtRVMxSlh0V2dic3AwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDc1My84RUYyNEExMjVCNkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFf RjBxLUVTMUpYdFdnYnNwMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1KV88wkMn6MP9uz7pFc2OXPQ2MR4aGK89RTnI6loHdZDYkrb3zBIT DmM+ChkE3Ad9SRZTEtOEcIrkaZXertkFTOuMQlj3eoTttTVDgX5jbJufiUGG6A0W 97NJRJ6D2DlMFbkGZDKHmeo8QuSrU0EqqdWRDhN9gvUJUFq4mTnameFRP3olzd4y /jAmspjcgBGupGN864u29xArj/qwCMqSUqRnb2uizkAUWWBX1NS6Lg6YhF/OIKuE VHVIRkQk/3zbCVWkG12lJ+1xx/PcpZb7M9nBZQC9OofaP8npph4qVcG/4VflUvIN TnJaUctVqPTiaPOREFq9up3q57Qe43OA -----END CERTIFICATE-----Generated at Sat Aug 23 21:36:40 2025 by rpki-client