$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft File: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json) Hash identifier: vRhuLjFxiEwCffxQFy6Zjof4rf2YeqQ59JS2Gv9DqJY= Subject key identifier: 1C:A4:DA:AF:C3:CF:BD:6E:6E:13:D3:2D:2A:A2:EF:49:5A:9B:88:D1 Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Certificate serial: 08E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft Manifest number: 08C8 Signing time: Tue 22 Jul 2025 20:43:53 +0000 Manifest this update: Tue 22 Jul 2025 20:43:52 +0000 Manifest next update: Tue 29 Jul 2025 20:43:52 +0000 Files and hashes: 1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: D97kNM27Edb3VkN5kM/QXi1wmNmMgHnUVXksp21zdkA=) 2: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: Rbebv7a/3bjYuOYYlHIXr662xadEzX5etaY1VAtT19Q=) 3: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: unM5ewA/QOJvINE5uAU/tFjaV4piAYCJJAvmIWLeMb8=) 4: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: 2TPeWUxi8y2dJKsuFTVthNuMYrZypRCJy1Y/CFzYdHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 20:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2272 (0x8e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Validity Not Before: Jul 22 20:43:52 2025 GMT Not After : Jul 29 20:43:52 2025 GMT Subject: CN=687ff808-6039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:f6:db:1f:67:9b:db:29:47:c3:19:6c:d8: 0c:3c:95:65:59:f9:47:f3:6e:31:6d:4f:1a:cd:53: 00:f1:04:cc:48:3b:0a:57:8d:6e:b6:4f:bf:18:58: 94:ee:09:7b:ef:46:20:b0:10:20:4c:ed:08:60:7d: ed:c1:40:7c:e1:56:09:85:01:40:e0:44:84:fd:38: 61:9a:18:0b:db:2b:93:ac:3d:3c:55:b7:af:88:8a: db:44:5e:a8:e9:80:d1:ee:19:53:65:1f:e3:58:b0: f9:43:48:65:e9:f4:f2:9f:cb:0b:ab:02:fd:d1:c8: 8d:76:b8:22:a1:cb:bb:c1:77:50:07:08:26:c2:c4: 7e:25:87:95:70:0d:9e:a4:0e:e6:f7:b5:22:e4:3c: a3:ab:d7:92:76:18:85:48:ba:74:1b:64:8d:65:68: c9:84:0b:8b:11:0f:b6:6d:d8:b7:85:9d:17:a1:b9: ad:56:a1:ff:1d:37:99:d0:03:85:8e:8e:9e:ef:ff: 24:04:2e:d0:42:ca:24:e6:cd:bc:16:fe:b1:29:7f: 6b:e6:cb:e1:19:23:a5:d7:a5:61:e9:a8:d2:b2:92: eb:46:26:58:39:07:a0:8d:cd:6d:81:29:4b:f9:16: 77:fe:6d:28:19:2f:78:72:20:2c:f8:37:85:2c:aa: a4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A4:DA:AF:C3:CF:BD:6E:6E:13:D3:2D:2A:A2:EF:49:5A:9B:88:D1 X509v3 Authority Key Identifier: keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cb:8a:50:66:d3:bf:f2:d4:22:72:96:e4:dd:62:32:48:8d: 43:f7:5b:85:79:b8:22:60:5f:b7:a6:6e:b4:f1:af:f6:61:ac: de:c3:38:d1:5b:8a:e6:89:05:d6:ce:3e:4d:00:0e:1f:eb:01: eb:f3:8b:8d:48:be:21:1e:db:58:a4:7e:d2:63:0d:4c:e9:4f: e8:02:81:c5:b5:13:ea:93:06:64:9b:41:0f:7a:56:b1:85:0e: b3:69:35:6c:fa:5c:4f:ba:a2:1a:25:1b:a0:13:19:f8:9d:a4: e1:5f:59:22:e9:a6:f9:b1:d5:89:3d:b3:7c:29:c4:0b:b2:6d: db:0d:e8:3e:f2:be:56:26:11:7c:4e:9c:66:a0:50:da:60:60: 56:21:c9:1b:1c:f5:e9:c8:46:59:0c:95:fd:c9:30:72:40:8a: 33:db:67:96:a6:c0:74:0c:5c:b8:bd:04:49:1d:6c:2f:97:d2: 3c:8e:83:c1:05:a2:dc:d7:a6:19:00:25:de:65:3b:cd:a6:5c: fc:e4:0f:31:85:56:f5:c4:5b:77:d6:a5:01:36:4a:2f:97:09: fe:14:02:f5:c1:0b:0c:d8:63:1c:15:f0:d3:23:a8:fe:b9:8d: 5e:b5:f7:a1:44:5a:07:07:ed:de:be:15:7a:cd:95:df:1a:2e: bf:73:81:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB MjBDRkI1NEMwHhcNMjUwNzIyMjA0MzUyWhcNMjUwNzI5MjA0MzUyWjAYMRYwFAYD VQQDEw02ODdmZjgwOC02MDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBD22x9nm9spR8MZbNgMPJVlWflH824xbU8azVMA8QTMSDsKV41utk+/GFiU 7gl770YgsBAgTO0IYH3twUB84VYJhQFA4ESE/ThhmhgL2yuTrD08VbeviIrbRF6o 6YDR7hlTZR/jWLD5Q0hl6fTyn8sLqwL90ciNdrgiocu7wXdQBwgmwsR+JYeVcA2e pA7m97Ui5Dyjq9eSdhiFSLp0G2SNZWjJhAuLEQ+2bdi3hZ0XobmtVqH/HTeZ0AOF jo6e7/8kBC7QQsok5s28Fv6xKX9r5svhGSOl16Vh6ajSspLrRiZYOQegjc1tgSlL +RZ3/m0oGS94ciAs+DeFLKqkeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByk2q/D z71ubhPTLSqi70lam4jRMB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkMzOS8yN0VFQ0ZEMEJCOTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxq OVR2MW1xaE4yYXlpRFB0VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvy4pQZtO/8tQicpbk3WIySI1D91uFebgiYF+3pm608a/2YazewzjR W4rmiQXWzj5NAA4f6wHr84uNSL4hHttYpH7SYw1M6U/oAoHFtRPqkwZkm0EPelax hQ6zaTVs+lxPuqIaJRugExn4naThX1ki6ab5sdWJPbN8KcQLsm3bDeg+8r5WJhF8 TpxmoFDaYGBWIckbHPXpyEZZDJX9yTByQIoz22eWpsB0DFy4vQRJHWwvl9I8joPB BaLc16YZACXeZTvNplz85A8xhVb1xFt31qUBNkovlwn+FAL1wQsM2GMcFfDTI6j+ uY1etfehRFoHB+3evhV6zZXfGi6/c4Fk -----END CERTIFICATE-----Generated at Wed Jul 23 06:27:14 2025 by rpki-client