$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json) Hash identifier: yw1lCX4TDn2J6+DCOPWi/P3GMtX85UzPW8tUC7obD9Q= Subject key identifier: C2:F0:E9:9B:59:51:ED:F3:D1:29:DA:32:40:43:9A:F9:04:9E:A0:04 Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft Manifest number: 0169 Signing time: Sat 23 Aug 2025 04:01:49 +0000 Manifest this update: Sat 23 Aug 2025 04:01:48 +0000 Manifest next update: Sat 30 Aug 2025 04:01:48 +0000 Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: ZJX+N8FDMb4U9e5RUCHblfQ7JN6pd+eiQX0q2Xl60go=) 2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: lw98bEtKYAV3W3eLzVIhHAUrtXOXdYQymX4EcxFqPzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Validity Not Before: Aug 23 04:01:48 2025 GMT Not After : Aug 30 04:01:48 2025 GMT Subject: CN=68a93d2c-c2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:20:2d:6e:52:a6:cb:01:dc:12:4d:87:a1:9c: 72:dd:87:78:58:58:4d:d5:1b:56:99:bb:87:ec:2d: 85:2d:63:16:91:21:e3:59:01:01:d4:3a:41:81:96: 53:dd:a2:de:5a:d0:d0:af:97:b3:0b:62:e8:ae:a2: a9:2f:0b:59:7a:6e:f2:cd:e3:7a:a8:14:c8:7a:19: 3c:a5:02:d8:ef:cc:a9:02:c8:91:3f:62:26:40:25: 33:36:e2:c2:ea:9f:d5:5f:0f:8a:46:0e:00:5b:c6: c3:48:bf:d1:08:6f:fa:42:39:65:9a:ce:07:f5:e9: d1:62:37:17:49:42:c1:0e:96:10:96:58:54:d9:55: 19:f0:7a:05:80:e6:b7:b8:82:a5:0d:78:82:b3:88: 84:6f:78:16:e1:26:f1:69:37:79:31:10:ee:13:4a: 19:a7:55:c5:64:f8:db:1d:e6:2e:b3:52:9f:a7:4b: 2a:88:b3:2f:11:c6:d3:5c:e7:23:bf:55:45:ba:5f: 91:f3:1e:b1:94:30:28:41:58:4d:f7:6c:34:83:5e: 62:e3:fa:d9:57:be:b5:15:a7:63:7b:87:f3:cd:13: d8:d3:2d:68:14:3c:ec:f4:9f:3f:fa:b1:f5:57:3f: db:12:3a:b3:d5:ee:bc:e3:b8:cc:14:12:fe:a0:99: ef:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F0:E9:9B:59:51:ED:F3:D1:29:DA:32:40:43:9A:F9:04:9E:A0:04 X509v3 Authority Key Identifier: keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1c:c5:26:3a:20:4f:5c:0a:85:0f:7f:26:db:6e:47:12:60: 01:cf:86:e3:2b:55:54:49:48:e4:50:1e:b7:9f:f1:3a:59:a5: 09:0a:7a:e1:64:88:91:4a:22:ef:fc:49:ba:c0:0f:3b:60:f0: e2:d9:45:f3:7c:00:41:7e:36:1c:06:1a:8f:dd:2b:97:0a:a2: 67:a7:c4:ae:cf:11:47:39:a1:b7:dc:1e:09:41:48:13:a1:87: 58:4f:32:06:0b:c6:ed:4d:76:fc:ae:cd:bb:e0:1f:d9:2f:f8: 37:33:e7:38:0c:8a:84:28:c4:f4:1b:67:b3:a1:62:77:df:33: 8c:d0:9c:3a:de:5a:54:8b:98:f1:13:0a:1b:e4:f7:b5:cd:29: a6:d8:64:37:81:e8:ce:7c:ec:a4:bf:3e:2b:1a:a9:bd:20:45: ab:0f:a3:8b:f0:17:42:bd:42:f5:fd:1b:a4:a5:f0:9d:e0:5b: 87:f4:6b:b9:e8:db:5b:10:06:de:94:92:68:3b:9d:40:ac:09: 1b:50:c1:ab:9a:18:14:6e:f2:48:88:fe:25:b6:34:01:00:d2: 15:3d:b1:95:74:7e:f2:2a:c6:13:24:95:e5:1d:b6:7a:55:9f: 7c:e7:cf:06:11:76:14:36:3b:8c:b2:80:b8:70:eb:d2:ee:d5: 6c:72:70:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFRjUxMTAvBgNVBAUTKDk4RjRFRDFFQTU2RUZFMzdDQTEzNEY4NzZBOTY1RjJB QzZGQTM3NDgwHhcNMjUwODIzMDQwMTQ4WhcNMjUwODMwMDQwMTQ4WjAYMRYwFAYD VQQDEw02OGE5M2QyYy1jMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8iAtblKmywHcEk2HoZxy3Yd4WFhN1RtWmbuH7C2FLWMWkSHjWQEB1DpBgZZT 3aLeWtDQr5ezC2LorqKpLwtZem7yzeN6qBTIehk8pQLY78ypAsiRP2ImQCUzNuLC 6p/VXw+KRg4AW8bDSL/RCG/6Qjllms4H9enRYjcXSULBDpYQllhU2VUZ8HoFgOa3 uIKlDXiCs4iEb3gW4SbxaTd5MRDuE0oZp1XFZPjbHeYus1Kfp0sqiLMvEcbTXOcj v1VFul+R8x6xlDAoQVhN92w0g15i4/rZV761Fadje4fzzRPY0y1oFDzs9J8/+rH1 Vz/bEjqz1e6847jMFBL+oJnvXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLw6ZtZ Ue3z0SnaMkBDmvkEnqAEMB8GA1UdIwQYMBaAFJj07R6lbv43yhNPh2qWXyrG+jdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEVGNS85NDA2NjI4RTU3 NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9qZktFMC1IYXBaZktzYjZO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEVGNS85NDA2NjI4RTU3NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9q ZktFMC1IYXBaZktzYjZOMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAHMUmOiBPXAqFD38m225HEmABz4bjK1VUSUjkUB63n/E6WaUJCnrh ZIiRSiLv/Em6wA87YPDi2UXzfABBfjYcBhqP3SuXCqJnp8SuzxFHOaG33B4JQUgT oYdYTzIGC8btTXb8rs274B/ZL/g3M+c4DIqEKMT0G2ezoWJ33zOM0Jw63lpUi5jx Ewob5Pe1zSmm2GQ3gejOfOykvz4rGqm9IEWrD6OL8BdCvUL1/RukpfCd4FuH9Gu5 6NtbEAbelJJoO51ArAkbUMGrmhgUbvJIiP4ltjQBANIVPbGVdH7yKsYTJJXlHbZ6 VZ98588GEXYUNjuMsoC4cOvS7tVscnCM -----END CERTIFICATE-----Generated at Sat Aug 23 21:28:16 2025 by rpki-client