$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft File: AQMtnfw2KpWHQ-htPI0GEaatsFs.mft (raw, json) Hash identifier: CMvrpmxSBm1JieBntGp7CXt8zMmX1/rnWu/ilZvtnC0= Subject key identifier: A5:41:AD:21:24:9F:98:65:A4:DD:2E:09:D2:A2:DD:A3:AD:63:80:41 Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B Certificate issuer: /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Certificate serial: 0C57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft Manifest number: 0C40 Signing time: Sun 20 Jul 2025 18:40:53 +0000 Manifest this update: Sun 20 Jul 2025 18:40:52 +0000 Manifest next update: Sun 27 Jul 2025 18:40:52 +0000 Files and hashes: 1: AQMtnfw2KpWHQ-htPI0GEaatsFs.crl (hash: 0nG1+FvgBBtRZxyTqrFM46Butdd3UIJozG/B90AYtP4=) 2: 2D0509BC078511ED87041524C4F9AE02.roa (hash: OhD3vjT84Ykw6Uqb+DhKbwC3X7GSCVv4M4crx5/Gxaw=) 3: 8045C26A3B3E11EC94B9CE0BC4F9AE02.roa (hash: vgsaHMq0GVrMBtLHSxA4DIo5o6Z/utFxMjwmHJobHXU=) 4: 2BA0624C078511ED87041524C4F9AE02.roa (hash: OgDpE/kLbNvrNHxmlaFE7wjr3tmLX0c3S1JS4qIXLMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Validity Not Before: Jul 20 18:40:52 2025 GMT Not After : Jul 27 18:40:52 2025 GMT Subject: CN=687d3835-d53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:cb:97:79:38:32:d5:be:6c:17:37:ea:53: 31:b7:d6:37:f8:ac:98:4e:56:79:3c:ca:26:c9:06: 92:82:5a:0c:bd:47:a1:55:e2:dd:ce:cc:9d:fa:54: ae:b0:17:47:ef:f3:66:95:82:c7:7c:ef:cd:a4:0f: 98:0a:2a:c4:3d:cf:6c:1d:99:4f:02:02:bf:24:57: 32:53:e9:05:87:3b:77:eb:ec:92:6e:bd:92:2f:61: d1:50:1b:4e:92:78:f7:70:56:6a:bc:6f:71:eb:87: c2:77:fe:8f:a8:46:7a:4d:52:a9:40:f0:a1:9e:4c: ca:e3:73:cb:c9:68:10:c4:25:1e:c7:09:5f:5f:33: cc:93:4a:0a:e7:70:8b:e6:14:b0:26:13:df:e5:13: 79:7e:f3:94:10:95:fd:7e:d2:5e:7a:18:aa:5c:3f: 0e:ca:04:1e:77:8a:ac:c1:48:a0:70:ac:b4:f1:f2: ab:ff:f3:df:66:48:21:50:59:0c:7b:21:12:65:99: e5:81:4b:c6:88:1b:c9:5f:ec:c9:be:aa:c2:9f:f0: 20:e7:98:35:5c:33:3f:31:c5:aa:66:6e:a3:bf:24: 72:77:11:13:72:41:48:4a:b5:62:04:65:52:ed:d0: 9b:27:30:c3:2f:39:64:fc:39:bf:a7:73:43:e2:f7: d1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:41:AD:21:24:9F:98:65:A4:DD:2E:09:D2:A2:DD:A3:AD:63:80:41 X509v3 Authority Key Identifier: keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:41:31:71:34:88:f6:ae:18:5c:a4:b7:f5:78:b8:db:50:8e: 23:1a:56:d4:58:a0:35:99:5c:fc:31:9e:3f:ec:9b:9c:9e:0e: 8a:0a:84:96:c6:bd:c6:f2:48:ff:c3:57:a2:2f:10:4b:7c:93: d4:f8:53:10:7c:e4:fc:85:db:f5:98:5f:6d:f5:15:4e:60:d1: 2d:15:3d:17:86:d9:dc:3f:18:1c:92:02:5b:8d:85:ac:55:06: 45:50:d6:68:3d:37:3a:20:8b:cf:1b:f6:07:e3:22:52:8c:01: 65:93:06:c0:7c:fa:e8:2a:fe:94:9b:81:2e:7e:c5:34:c6:d4: 7a:7e:43:68:51:9a:f8:5b:81:78:68:f3:fd:17:30:be:da:2f: 93:de:e0:12:4b:d0:8a:90:3f:fa:43:22:4a:ad:aa:0f:9c:1d: 7e:55:b0:a3:b6:46:66:c4:e7:5e:df:92:c8:19:7b:2b:51:73: 62:c3:63:06:df:54:33:54:b9:40:8c:5b:5d:9a:b9:01:db:7a: 9c:62:f6:4e:e6:10:9f:2a:46:c3:7a:a2:83:db:68:d0:88:91: e9:f2:6b:7d:ef:33:97:82:2a:df:c2:39:24:56:19:03:e5:ea: 97:9d:4e:93:87:f6:52:f3:92:b1:d2:26:38:72:ce:74:22:41: 1e:ae:48:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZFMkIxMTAvBgNVBAUTKDAxMDMyRDlERkMzNjJBOTU4NzQzRTg2RDNDOEQwNjEx QTZBREIwNUIwHhcNMjUwNzIwMTg0MDUyWhcNMjUwNzI3MTg0MDUyWjAYMRYwFAYD VQQDEw02ODdkMzgzNS1kNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyPLl3k4MtW+bBc36lMxt9Y3+KyYTlZ5PMomyQaSgloMvUehVeLdzsyd+lSu sBdH7/NmlYLHfO/NpA+YCirEPc9sHZlPAgK/JFcyU+kFhzt36+ySbr2SL2HRUBtO knj3cFZqvG9x64fCd/6PqEZ6TVKpQPChnkzK43PLyWgQxCUexwlfXzPMk0oK53CL 5hSwJhPf5RN5fvOUEJX9ftJeehiqXD8OygQed4qswUigcKy08fKr//PfZkghUFkM eyESZZnlgUvGiBvJX+zJvqrCn/Ag55g1XDM/McWqZm6jvyRydxETckFISrViBGVS 7dCbJzDDLzlk/Dm/p3ND4vfRvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVBrSEk n5hlpN0uCdKi3aOtY4BBMB8GA1UdIwQYMBaAFAEDLZ38NiqVh0PobTyNBhGmrbBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUyQi8yN0U3Q0FBNjBD MkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3MktwV0hRLWh0UEkwR0VhYXRz RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRTXRuZncyS3BXSFEtaHRQSTBHRWFhdHNGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkUyQi8yN0U3Q0FBNjBDMkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3Mktw V0hRLWh0UEkwR0VhYXRzRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5QTFxNIj2rhhcpLf1eLjbUI4jGlbUWKA1mVz8MZ4/7Jucng6KCoSW xr3G8kj/w1eiLxBLfJPU+FMQfOT8hdv1mF9t9RVOYNEtFT0XhtncPxgckgJbjYWs VQZFUNZoPTc6IIvPG/YH4yJSjAFlkwbAfProKv6Um4EufsU0xtR6fkNoUZr4W4F4 aPP9FzC+2i+T3uASS9CKkD/6QyJKraoPnB1+VbCjtkZmxOde35LIGXsrUXNiw2MG 31QzVLlAjFtdmrkB23qcYvZO5hCfKkbDeqKD22jQiJHp8mt97zOXgirfwjkkVhkD 5eqXnU6Th/ZS85Kx0iY4cs50IkEerkje -----END CERTIFICATE-----Generated at Mon Jul 21 12:43:35 2025 by rpki-client