$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft File: scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json) Hash identifier: lbVH0vMF0OZVpJ3SxNcSMTDXXF3Pu6bH1SbVCQYopDc= Subject key identifier: EC:EB:D0:F5:04:D3:2D:7D:31:07:62:0A:5C:5D:00:CB:A6:46:F7:BE Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Certificate serial: 06EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft Manifest number: 06D9 Signing time: Sun 20 Jul 2025 22:10:15 +0000 Manifest this update: Sun 20 Jul 2025 22:10:14 +0000 Manifest next update: Sun 27 Jul 2025 22:10:14 +0000 Files and hashes: 1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: SzmAG2RMI49MzsLRUSACB+gscueA3yRiIJ3b544qDdk=) 2: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: OYtL36rrodU22MW3AXpoCDtJg7l4ViMqS4bFk3tK5VQ=) 3: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: ivarDOVLEK1o/i2e326AVwZq4fhbkuq+7lnjx1EVCHE=) 4: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: gBF4oLr31oWPGA7GjogpSpsWc/XlGgo5urUgCfPiOZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1772 (0x6ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Validity Not Before: Jul 20 22:10:14 2025 GMT Not After : Jul 27 22:10:14 2025 GMT Subject: CN=687d6947-a962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b0:23:15:65:1d:bb:7e:e6:e1:c5:41:34:e7: d7:27:e0:75:77:58:e3:79:79:0e:70:77:3e:e4:67: db:74:73:a6:24:7f:40:51:8a:f9:d1:15:86:31:06: df:eb:f1:b7:16:7e:44:fd:53:f7:8b:bc:53:66:7b: 6c:9f:9d:16:c0:d3:9b:62:f3:91:d5:03:28:07:ca: 62:84:e5:ab:ac:d6:ce:cb:fa:85:63:82:9e:e9:16: c5:d3:63:98:a0:b2:50:cd:59:05:40:3f:65:ed:36: 33:58:3d:56:59:6e:10:6b:df:ac:98:7f:0f:11:9f: cb:2d:d8:6f:bc:c9:76:55:2e:93:d3:0c:a2:03:5c: d7:16:d2:96:e3:51:b7:6b:27:aa:1c:47:4a:b8:6f: 70:a9:99:7c:a6:88:36:ff:54:8d:fd:84:b1:2c:ae: 22:f2:b5:bd:7f:0f:a3:fc:59:be:c9:62:81:53:77: 33:9e:89:db:a3:67:e0:62:0e:2d:cd:ad:6b:5e:b7: d3:29:13:86:43:7c:ba:7d:4e:48:11:d7:54:ca:89: c4:2b:83:d9:87:26:6e:25:00:e1:fd:8b:19:88:87: ef:f3:ab:68:cb:20:d8:4c:19:80:43:c8:36:35:64: 25:c5:11:01:4c:fb:ed:60:b7:36:cf:20:ef:a3:41: 46:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EB:D0:F5:04:D3:2D:7D:31:07:62:0A:5C:5D:00:CB:A6:46:F7:BE X509v3 Authority Key Identifier: keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:8c:1e:0d:2d:e0:c5:85:8c:12:e1:f1:7f:53:0e:1c:7d:ce: 0f:d4:79:61:fa:2c:de:57:0c:a4:d4:53:c8:8e:19:a6:91:8b: c1:8e:f3:07:37:25:f0:88:e5:72:90:dd:f8:e4:f9:bd:11:9f: fd:93:d7:d3:9b:03:87:ca:72:24:99:34:de:49:dd:23:b1:74: 97:54:cf:76:8c:2b:da:54:3e:ed:d5:62:56:b8:74:26:17:69: 4a:3f:6b:5f:37:8b:b7:77:8a:b4:e7:5f:63:18:8b:0c:89:63: 11:ea:97:88:b0:25:5d:37:0a:25:42:e6:32:39:46:65:b9:4b: a9:79:3d:1c:b4:e5:34:96:c3:44:1b:8d:40:42:6f:f2:49:b6: 41:d8:97:73:69:f4:71:8d:1d:63:42:fb:96:1d:5c:5c:03:86: 6d:e1:ff:cb:aa:ba:58:0e:a1:b0:cb:50:c1:f0:18:ce:45:2f: 1f:5a:54:15:63:8d:e8:02:92:ae:fd:9c:08:64:db:19:98:d9: 96:3a:e5:6c:ee:6b:c5:a4:83:e4:74:1f:70:7e:24:ee:71:7e: 76:94:f3:47:2f:7b:ce:b4:0f:98:a3:5c:d7:45:68:a6:78:f8: 5f:f7:ff:71:82:d2:45:f1:de:56:e3:26:69:1d:aa:5b:59:74: b0:18:65:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0MzgxMTAvBgNVBAUTKEIxQzM0NzQ1NkU1NEE0NjYyRTEwOTdFQ0QzMzRBQzEx QzAyQ0UwMEIwHhcNMjUwNzIwMjIxMDE0WhcNMjUwNzI3MjIxMDE0WjAYMRYwFAYD VQQDEw02ODdkNjk0Ny1hOTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bAjFWUdu37m4cVBNOfXJ+B1d1jjeXkOcHc+5GfbdHOmJH9AUYr50RWGMQbf 6/G3Fn5E/VP3i7xTZntsn50WwNObYvOR1QMoB8pihOWrrNbOy/qFY4Ke6RbF02OY oLJQzVkFQD9l7TYzWD1WWW4Qa9+smH8PEZ/LLdhvvMl2VS6T0wyiA1zXFtKW41G3 ayeqHEdKuG9wqZl8pog2/1SN/YSxLK4i8rW9fw+j/Fm+yWKBU3cznonbo2fgYg4t za1rXrfTKROGQ3y6fU5IEddUyonEK4PZhyZuJQDh/YsZiIfv86toyyDYTBmAQ8g2 NWQlxREBTPvtYLc2zyDvo0FGJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzr0PUE 0y19MQdiClxdAMumRve+MB8GA1UdIwQYMBaAFLHDR0VuVKRmLhCX7NM0rBHALOAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQzOC9DNDUwOUQ1NDVF NzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBHWXVFSmZzMHpTc0VjQXM0 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjTkhSVzVVcEdZdUVKZnMwelNzRWNBczRBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDQzOC9DNDUwOUQ1NDVFNzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBH WXVFSmZzMHpTc0VjQXM0QXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZjB4NLeDFhYwS4fF/Uw4cfc4P1Hlh+izeVwyk1FPIjhmmkYvBjvMH NyXwiOVykN345Pm9EZ/9k9fTmwOHynIkmTTeSd0jsXSXVM92jCvaVD7t1WJWuHQm F2lKP2tfN4u3d4q0519jGIsMiWMR6peIsCVdNwolQuYyOUZluUupeT0ctOU0lsNE G41AQm/ySbZB2JdzafRxjR1jQvuWHVxcA4Zt4f/LqrpYDqGwy1DB8BjORS8fWlQV Y43oApKu/ZwIZNsZmNmWOuVs7mvFpIPkdB9wfiTucX52lPNHL3vOtA+Yo1zXRWim ePhf9/9xgtJF8d5W4yZpHapbWXSwGGV6 -----END CERTIFICATE-----Generated at Mon Jul 21 12:34:13 2025 by rpki-client