$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json) Hash identifier: 0HCO4MPQUXD3Mj3i+6idWybuU1+mPMrgGJNXkhDVBnQ= Subject key identifier: 02:2D:39:BA:2F:E7:BB:56:67:79:F4:F2:0F:D9:FA:BD:DA:C9:50:22 Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft Manifest number: 97 Signing time: Sat 19 Jul 2025 06:42:28 +0000 Manifest this update: Sat 19 Jul 2025 06:42:27 +0000 Manifest next update: Sat 26 Jul 2025 06:42:27 +0000 Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: /rEcGpRqOq9cSdjGWjAIoryAbIHoEqRX80fz9N7ZMRA=) 2: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (hash: j4rFIHTNRhGLJLDjietaNGRc3CHg7H6921oZKrCNics=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Jul 19 06:42:27 2025 GMT Not After : Jul 26 06:42:27 2025 GMT Subject: CN=687b3e54-3680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:56:35:44:3e:c3:8a:94:70:de:39:02:c5: 12:14:b1:2f:37:0f:66:8c:86:2e:4e:20:87:be:69: 2c:3e:78:5c:f6:52:8c:b1:01:e7:29:dd:86:28:e5: 46:5e:2d:89:83:92:77:fe:03:5d:52:dc:59:56:0a: b0:ad:1b:bd:cb:96:bf:4a:61:9e:df:fa:d1:2f:77: a8:ae:6c:ae:fc:6f:fc:2b:55:cf:ee:cc:d8:15:bf: b4:48:ef:5a:ae:24:57:cd:68:bd:bb:2f:b4:ae:51: d8:73:88:1f:4f:fc:86:d1:1d:c0:0a:04:94:ad:37: 52:ef:5b:eb:4b:0d:c4:29:6c:29:fa:fa:65:49:07: 2a:f8:dc:78:eb:ce:b8:4d:b2:56:09:af:6b:d9:b9: 8e:9b:98:e2:e3:fe:72:ec:b6:da:50:62:51:7e:d2: b7:0f:36:e5:12:fc:dc:7a:63:8b:36:6f:8b:05:c5: 54:ed:3e:e1:4c:bc:f2:8a:ee:94:aa:52:e8:39:d3: f6:16:1a:0c:d4:9c:b8:f3:8f:91:8a:5b:64:52:8e: b4:aa:9d:e8:a7:fd:c9:2b:8c:95:09:e0:2b:65:bd: 99:78:43:b0:94:36:3c:9e:c0:4d:44:f9:18:76:00: 6f:60:b5:a7:55:14:a1:a8:a9:17:22:23:77:5a:c3: 53:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2D:39:BA:2F:E7:BB:56:67:79:F4:F2:0F:D9:FA:BD:DA:C9:50:22 X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:12:be:76:7c:ee:3b:5f:52:2a:df:8f:18:c9:be:90:3c:91: 70:2c:40:30:d9:97:5b:b1:ad:c1:78:46:e0:8f:2b:da:61:73: 1a:81:7f:24:54:23:25:b6:a1:01:f5:fc:8e:4c:f6:e9:f8:e6: 31:be:8f:45:98:9c:03:c4:3d:51:40:2f:23:74:63:bb:34:12: 6f:46:ec:77:e6:bc:95:d7:e4:1d:fd:f4:a5:80:19:2a:ac:b2: 6f:5c:4a:c9:aa:98:0c:d0:37:aa:84:36:30:5f:0a:de:6f:7d: 1a:c1:81:d6:f7:b0:30:75:c6:2e:60:8e:9f:9d:da:c1:67:69: 3f:4f:3c:98:d3:4f:0e:24:34:c7:23:61:80:d1:9d:a8:17:87: a8:b8:20:98:6e:25:66:5c:0a:94:e9:b3:04:78:d3:a1:9a:da: 2c:04:3f:2c:42:13:e1:a8:2f:e2:96:ce:62:e9:3a:b8:23:03: 25:11:79:2e:a7:ca:3e:5a:05:50:00:ac:35:79:85:e8:d3:94: 2a:9c:80:bf:df:2f:7d:e0:d5:0b:a7:26:20:8f:c7:b3:fd:45: 7c:28:88:a8:56:e0:cd:97:83:d1:e0:83:6c:d5:2a:fc:4d:bb: c7:0e:13:e0:af:56:4b:1c:14:fb:bd:c3:fe:56:10:32:db:f9: a5:fb:fe:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKEZEOUQ3RjY2MEYzQTEzMENBNDhCRUJCQTY2RTE2MkJE MzAzNEUzOEQwHhcNMjUwNzE5MDY0MjI3WhcNMjUwNzI2MDY0MjI3WjAYMRYwFAYD VQQDEw02ODdiM2U1NC0zNjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRNWNUQ+w4qUcN45AsUSFLEvNw9mjIYuTiCHvmksPnhc9lKMsQHnKd2GKOVG Xi2Jg5J3/gNdUtxZVgqwrRu9y5a/SmGe3/rRL3eormyu/G/8K1XP7szYFb+0SO9a riRXzWi9uy+0rlHYc4gfT/yG0R3ACgSUrTdS71vrSw3EKWwp+vplSQcq+Nx46864 TbJWCa9r2bmOm5ji4/5y7LbaUGJRftK3DzblEvzcemOLNm+LBcVU7T7hTLzyiu6U qlLoOdP2FhoM1Jy484+RiltkUo60qp3op/3JK4yVCeArZb2ZeEOwlDY8nsBNRPkY dgBvYLWnVRShqKkXIiN3WsNTCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAItObov 57tWZ3n08g/Z+r3ayVAiMB8GA1UdIwQYMBaAFP2df2YPOhMMpIvrumbhYr0wNOON MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS80RUZEMTVCNjhC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3eWtpLXU2WnVGaXZUQTA0 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS80RUZEMTVCNjhCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3 eWtpLXU2WnVGaXZUQTA0NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrEr52fO47X1Iq348Yyb6QPJFwLEAw2Zdbsa3BeEbgjyvaYXMagX8k VCMltqEB9fyOTPbp+OYxvo9FmJwDxD1RQC8jdGO7NBJvRux35ryV1+Qd/fSlgBkq rLJvXErJqpgM0DeqhDYwXwreb30awYHW97AwdcYuYI6fndrBZ2k/TzyY008OJDTH I2GA0Z2oF4eouCCYbiVmXAqU6bMEeNOhmtosBD8sQhPhqC/ils5i6Tq4IwMlEXku p8o+WgVQAKw1eYXo05QqnIC/3y994NULpyYgj8ez/UV8KIioVuDNl4PR4INs1Sr8 TbvHDhPgr1ZLHBT7vcP+VhAy2/ml+/4n -----END CERTIFICATE-----Generated at Sun Jul 20 03:50:12 2025 by rpki-client