$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft File: e0Coz49PGgbDbiA08Yo4v5jKWxg.mft (raw, json) Hash identifier: X5coMz1uNMG8DiG1Z9ALGpbd7L1R4FCvvvWIs/OEkoY= Subject key identifier: 9F:82:26:A3:95:5D:79:C2:F6:2F:C6:F5:6D:70:EF:AA:69:14:AF:93 Authority key identifier: 7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 Certificate issuer: /CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft Manifest number: 019C Signing time: Sat 19 Jul 2025 03:35:26 +0000 Manifest this update: Sat 19 Jul 2025 03:35:26 +0000 Manifest next update: Sat 26 Jul 2025 03:35:26 +0000 Files and hashes: 1: e0Coz49PGgbDbiA08Yo4v5jKWxg.crl (hash: a8Hawbl68c7T0EaqiIN1zbQGLSOz/pVCFWig8r92akM=) 2: A74C3132F49211ED8659177BC4F9AE02.roa (hash: 306udLdXsDXkERPewXDbNH98O47h8mfNTv4RCgj1cHQ=) 3: 2F9915D8718D11EE97E3E022C4F9AE02.roa (hash: coH1x8KY/cq3OGm3WBXbeivefI4OPLTpBCpIkFV1i7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123, serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18 Validity Not Before: Jul 19 03:35:26 2025 GMT Not After : Jul 26 03:35:26 2025 GMT Subject: CN=687b127e-3fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:94:ab:43:03:31:9d:03:1d:8a:8c:9f:0b:f3: b0:af:76:c9:7c:13:56:9f:34:59:5b:26:22:f0:ad: 3b:69:52:0d:b7:da:0b:6c:e5:a4:75:c8:79:d5:af: 6a:db:9c:c5:57:3c:67:95:4e:02:cd:0f:d9:88:3f: 04:88:cb:e9:b3:68:90:a9:61:f2:56:02:52:fb:ec: bf:38:8c:47:3e:c0:28:fe:4d:35:f4:61:ea:5d:97: 7f:9b:7c:28:f5:74:ee:58:7f:29:ed:ff:25:de:50: e3:5e:97:a0:34:e9:3b:84:f8:79:c0:2e:d4:b8:5f: 4f:ee:95:01:df:76:3d:30:75:8b:4a:cc:e2:ce:1b: 9f:b7:89:da:e4:03:d5:67:ee:e6:4d:0e:62:d7:07: 2a:15:e8:99:63:79:6a:a5:d1:f1:90:00:4f:f2:2d: 87:c3:54:20:b7:92:ea:f2:05:fd:c7:19:da:3f:78: 32:5c:f6:1a:4c:ea:15:d8:9c:43:0a:41:29:26:eb: 5c:48:6d:2e:e1:89:ee:cb:c4:22:38:27:d7:79:ca: 96:c3:60:bd:53:db:1f:0e:b8:df:d7:77:74:ba:1e: 52:1a:3a:91:58:75:51:e7:14:12:ee:3f:b4:42:c0: db:cb:f7:bd:d1:97:49:05:41:26:73:55:7e:17:51: 72:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:82:26:A3:95:5D:79:C2:F6:2F:C6:F5:6D:70:EF:AA:69:14:AF:93 X509v3 Authority Key Identifier: keyid:7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:9f:60:22:2c:d6:bb:f1:1d:39:a2:42:6f:b0:a1:fc:bc:cc: fb:a6:12:3d:12:27:aa:8c:39:71:b1:98:77:4b:bc:e2:40:a2: 8c:72:02:bb:b9:33:c9:d3:07:43:30:03:4f:af:e6:b1:b0:eb: 21:c0:a5:d4:b1:d2:27:32:f6:b5:97:2b:9a:1b:2a:15:27:34: 6d:21:7c:1e:87:a4:e3:08:ba:d1:2b:e8:ac:61:44:9e:2b:86: 2e:fd:d9:92:a9:02:f1:e6:7a:ae:5d:e7:cc:d9:ad:14:80:cf: f7:65:2e:02:7b:df:08:50:84:6c:c6:d3:24:65:52:28:60:57: 4b:bd:69:f6:44:3a:06:31:bc:44:84:25:c6:8e:5e:e5:2c:39: 6c:94:4d:16:41:77:90:6e:5e:86:f0:b6:9b:9e:77:2d:0e:e4: c6:17:21:59:db:5a:c8:87:9e:67:10:b4:de:c9:49:49:36:3b: 69:27:ed:2c:67:19:19:0e:b9:5a:5f:9f:47:bf:c2:a3:16:c8: ae:1b:f7:48:1d:a8:73:60:a4:47:17:79:45:a7:a1:39:8b:fb: 46:7a:95:8e:56:52:5b:49:1e:76:ef:49:49:e6:d2:94:7b:eb: 35:ea:b2:ba:47:42:ee:f6:92:02:69:a0:19:6c:fc:5e:ec:72: 50:d7:af:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDdCNDBBOENGOEY0RjFBMDZDMzZFMjAzNEYxOEEzOEJG OThDQTVCMTgwHhcNMjUwNzE5MDMzNTI2WhcNMjUwNzI2MDMzNTI2WjAYMRYwFAYD VQQDEw02ODdiMTI3ZS0zZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5SrQwMxnQMdioyfC/Owr3bJfBNWnzRZWyYi8K07aVINt9oLbOWkdch51a9q 25zFVzxnlU4CzQ/ZiD8EiMvps2iQqWHyVgJS++y/OIxHPsAo/k019GHqXZd/m3wo 9XTuWH8p7f8l3lDjXpegNOk7hPh5wC7UuF9P7pUB33Y9MHWLSszizhuft4na5APV Z+7mTQ5i1wcqFeiZY3lqpdHxkABP8i2Hw1Qgt5Lq8gX9xxnaP3gyXPYaTOoV2JxD CkEpJutcSG0u4Ynuy8QiOCfXecqWw2C9U9sfDrjf13d0uh5SGjqRWHVR5xQS7j+0 QsDby/e90ZdJBUEmc1V+F1Fy1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+CJqOV XXnC9i/G9W1w76ppFK+TMB8GA1UdIwQYMBaAFHtAqM+PTxoGw24gNPGKOL+YylsY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xQjAwRUFFOEY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdnYkRiaUEwOFlvNHY1aktX eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UwQ296NDlQR2diRGJpQTA4WW80djVqS1d4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xQjAwRUFFOEY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdn YkRiaUEwOFlvNHY1aktXeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDn2AiLNa78R05okJvsKH8vMz7phI9EieqjDlxsZh3S7ziQKKMcgK7 uTPJ0wdDMANPr+axsOshwKXUsdInMva1lyuaGyoVJzRtIXweh6TjCLrRK+isYUSe K4Yu/dmSqQLx5nquXefM2a0UgM/3ZS4Ce98IUIRsxtMkZVIoYFdLvWn2RDoGMbxE hCXGjl7lLDlslE0WQXeQbl6G8LabnnctDuTGFyFZ21rIh55nELTeyUlJNjtpJ+0s ZxkZDrlaX59Hv8KjFsiuG/dIHahzYKRHF3lFp6E5i/tGepWOVlJbSR5270lJ5tKU e+s16rK6R0Lu9pICaaAZbPxe7HJQ16/Y -----END CERTIFICATE-----Generated at Sun Jul 20 19:03:05 2025 by rpki-client