$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft File: AWZvx92HXf-g4ZvHPLrajs-aWCc.mft (raw, json) Hash identifier: vyotogUd9y20APXs9vRxfuG9sZEa7ozgtSX21Ze7YVo= Subject key identifier: 85:EB:41:7F:F0:8C:3A:D4:8E:D7:49:1F:5A:AB:31:FF:7F:08:B6:2F Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 Certificate issuer: /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft Manifest number: 01BF Signing time: Tue 07 Oct 2025 03:30:02 +0000 Manifest this update: Tue 07 Oct 2025 03:30:01 +0000 Manifest next update: Tue 14 Oct 2025 03:30:01 +0000 Files and hashes: 1: AWZvx92HXf-g4ZvHPLrajs-aWCc.crl (hash: A/doeEz+QVgg1jL8c6VJVH3EYwOpurnyNJe3tKuzdCU=) 2: 36E93942D6C511EEB512CC7FC4F9AE02.roa (hash: J/FdYg39XgCJ8nqyyiXOfjFTbprUGYfmqvQJ8jAj03A=) 3: 37649AB0D6C511EEB512CC7FC4F9AE02.roa (hash: Yf3syhODw0cAx33YmQD7J4oKJN2R4/9xKFbcxAFrzEc=) 4: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (hash: v8hFecBZJ729gEYkG3Fnm3Jj8x8TqXCpRI+hn3vItOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Oct 2025 03:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Validity Not Before: Oct 7 03:30:01 2025 GMT Not After : Oct 14 03:30:01 2025 GMT Subject: CN=68e4893a-e065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:24:c3:95:78:36:b7:e3:72:93:bf:70:d2: 49:ee:e5:72:27:2f:02:6c:28:a7:8e:b5:1a:71:b1: 5d:0b:03:58:bc:07:75:ab:8a:69:fe:79:4f:2f:6e: 2f:27:4a:6d:8d:26:a8:59:63:44:f3:02:10:64:2c: 05:3e:d0:e8:c9:eb:77:1c:aa:bb:be:22:7f:c3:7c: 89:d6:d6:48:2c:05:76:d8:20:7b:fc:c5:a5:5e:48: a4:9e:96:f5:92:71:20:45:a9:7d:88:be:69:64:cc: ce:a8:7c:39:ce:13:59:43:35:81:a7:5c:44:cb:c6: f5:dc:3a:23:3a:2e:09:ce:2b:a4:a7:3b:73:ce:df: 8f:1d:13:9c:0d:e5:0e:57:c8:86:13:43:91:b6:0d: 3f:6e:08:1b:6a:71:fb:bd:07:be:8b:cb:7f:92:96: fb:8d:76:7d:a6:25:f0:3f:75:47:12:86:a0:d5:ca: 38:18:51:c5:23:c9:b4:c8:25:e4:dd:fb:24:59:bb: ff:88:e1:53:89:80:87:92:63:0c:84:3c:0f:69:7b: 8b:1a:4f:21:30:05:ed:02:be:24:fb:af:ea:f5:bd: 2f:bc:c3:43:26:b6:1a:22:4f:9e:9f:6d:c1:07:cb: 45:db:74:8d:e5:22:53:f3:88:a7:c7:ac:1b:50:e4: b6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EB:41:7F:F0:8C:3A:D4:8E:D7:49:1F:5A:AB:31:FF:7F:08:B6:2F X509v3 Authority Key Identifier: keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:91:2e:3f:be:6e:fb:46:5e:ca:e3:ce:a5:e4:e3:c0:78:b4: 6e:3d:9d:0c:5d:9a:e3:ba:6e:cd:22:d7:97:be:3d:a7:c8:eb: 5b:02:48:7a:fd:ec:41:4e:88:33:11:0d:c1:dd:48:c3:75:1e: 97:3b:9d:a7:96:14:35:77:3e:36:fe:f1:fc:e5:3a:43:24:38: 76:ca:84:5f:60:c7:df:05:1a:8a:09:a7:13:fe:0d:52:1d:36: 05:66:51:db:4e:f0:45:07:8d:b9:97:cc:ef:d5:49:8c:9e:f0: d0:94:d2:53:16:11:66:c9:ad:d3:1b:1b:52:9b:f6:98:50:99: 96:79:88:19:5d:9a:cd:8f:ec:62:e9:e7:d5:a4:4f:a3:fa:c5: 19:1c:5a:43:a3:cc:d5:6b:ca:4e:3c:67:2d:26:71:43:52:c4: 37:67:86:f3:80:e5:1a:c3:e1:31:36:82:3c:30:b5:0d:20:57: 58:7e:91:15:46:ac:f1:f3:1d:89:c1:69:7f:ae:7b:b1:c6:a1: 6d:f8:21:e0:69:c3:c2:7a:09:7a:58:10:08:a1:dd:f8:6f:17: a9:ba:68:46:f9:8d:a8:8b:7e:ba:47:87:64:f4:1c:a7:41:c9: fe:75:2e:ee:46:a5:56:4b:2e:65:bc:31:b4:9e:54:99:04:35: 01:38:a6:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NjkxMTAvBgNVBAUTKDAxNjY2RkM3REQ4NzVERkZBMEUxOUJDNzNDQkFEQThF Q0Y5QTU4MjcwHhcNMjUxMDA3MDMzMDAxWhcNMjUxMDE0MDMzMDAxWjAYMRYwFAYD VQQDEw02OGU0ODkzYS1lMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxP4kw5V4NrfjcpO/cNJJ7uVyJy8CbCinjrUacbFdCwNYvAd1q4pp/nlPL24v J0ptjSaoWWNE8wIQZCwFPtDoyet3HKq7viJ/w3yJ1tZILAV22CB7/MWlXkiknpb1 knEgRal9iL5pZMzOqHw5zhNZQzWBp1xEy8b13DojOi4Jziukpztzzt+PHROcDeUO V8iGE0ORtg0/bggbanH7vQe+i8t/kpb7jXZ9piXwP3VHEoag1co4GFHFI8m0yCXk 3fskWbv/iOFTiYCHkmMMhDwPaXuLGk8hMAXtAr4k+6/q9b0vvMNDJrYaIk+en23B B8tF23SN5SJT84inx6wbUOS24wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXrQX/w jDrUjtdJH1qrMf9/CLYvMB8GA1UdIwQYMBaAFAFmb8fdh13/oOGbxzy62o7Pmlgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk2OS9DRjM5NUMzODFD NkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhmLWc0WnZIUExyYWpzLWFX Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FXWnZ4OTJIWGYtZzRadkhQTHJhanMtYVdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk2OS9DRjM5NUMzODFDNkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhm LWc0WnZIUExyYWpzLWFXQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTkS4/vm77Rl7K486l5OPAeLRuPZ0MXZrjum7NIteXvj2nyOtbAkh6 /exBTogzEQ3B3UjDdR6XO52nlhQ1dz42/vH85TpDJDh2yoRfYMffBRqKCacT/g1S HTYFZlHbTvBFB425l8zv1UmMnvDQlNJTFhFmya3TGxtSm/aYUJmWeYgZXZrNj+xi 6efVpE+j+sUZHFpDo8zVa8pOPGctJnFDUsQ3Z4bzgOUaw+ExNoI8MLUNIFdYfpEV Rqzx8x2JwWl/rnuxxqFt+CHgacPCegl6WBAIod34bxepumhG+Y2oi366R4dk9Byn Qcn+dS7uRqVWSy5lvDG0nlSZBDUBOKbR -----END CERTIFICATE-----Generated at Thu Oct 9 01:19:44 2025 by rpki-client