$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft File: 1AsQwSJMYeDTGML8YAOTeOz3LQA.mft (raw, json) Hash identifier: HaoKVlSFRzw7a/aGnir0J4IretbCxPCY4Pjxpd8KK38= Subject key identifier: A8:5F:3D:43:C8:54:9F:99:B5:18:44:7C:B9:CA:71:03:86:A0:DC:FF Authority key identifier: D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00 Certificate issuer: /CN=A9167C20/serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00 Certificate serial: 0AEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft Manifest number: 0AE3 Signing time: Fri 18 Jul 2025 19:37:47 +0000 Manifest this update: Fri 18 Jul 2025 19:37:46 +0000 Manifest next update: Fri 25 Jul 2025 19:37:46 +0000 Files and hashes: 1: 1AsQwSJMYeDTGML8YAOTeOz3LQA.crl (hash: uDAD8ZcD5PYnAlnzS0suLKaUWUVNmubI+fEnG+flQfY=) 2: AD35C0044EA511EAAB9DBE7DC4F9AE02.roa (hash: vRrkQ11gFoedPJsbqh7nQv1lr6X8LYa0tpYVg51dxDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2795 (0xaeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167C20, serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00 Validity Not Before: Jul 18 19:37:46 2025 GMT Not After : Jul 25 19:37:46 2025 GMT Subject: CN=687aa28b-da1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:73:54:32:9f:97:62:bf:74:e6:36:78:e0: cb:cf:9b:46:58:a3:25:2c:e8:07:a3:8d:32:17:6e: 25:6e:37:2b:98:d3:c3:a8:66:4b:03:de:48:db:d9: 50:5d:b2:38:b3:c2:6a:b5:23:d7:4d:e1:c1:8f:c0: 98:57:a5:c2:a5:c8:c7:55:29:f0:ac:f9:1a:9a:dd: 94:1d:f3:4f:3f:68:b9:e2:b2:1c:6d:ac:eb:a3:08: 66:19:de:4c:c0:13:5f:08:d3:e3:e6:5e:7b:f7:a5: af:75:95:3f:84:eb:c1:27:7f:ba:da:44:ed:c0:3d: b7:e2:4e:10:4d:1e:d6:97:75:6d:68:b1:62:88:94: 43:f6:8c:6c:e6:93:57:ab:f8:19:b1:d3:7d:2b:b8: ef:00:0e:76:81:f4:ae:fb:96:77:15:0f:33:b6:4a: 73:25:70:3a:83:64:91:99:8a:d7:bc:05:ea:82:9a: 15:fe:da:04:49:57:c8:c1:b6:61:2d:6d:f8:c5:f2: 5b:f5:58:02:2e:41:54:09:d4:60:46:d5:ed:dc:c2: 14:75:07:9f:7b:f5:c7:37:b9:f3:39:57:f5:44:bc: f9:16:5d:26:e0:17:1f:cb:93:9f:92:37:11:b5:2f: 76:06:74:28:5f:7d:17:90:38:eb:20:c0:8e:f1:7a: d8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5F:3D:43:C8:54:9F:99:B5:18:44:7C:B9:CA:71:03:86:A0:DC:FF X509v3 Authority Key Identifier: keyid:D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:98:96:92:34:ec:5d:6c:10:ec:86:14:24:6c:30:f3:af:7e: 7b:b0:a4:90:cb:58:60:d1:da:71:f8:20:84:d0:1a:f7:33:bc: db:c8:f9:31:b7:80:07:b9:2a:cd:f0:39:34:29:5f:0f:68:e3: d8:cd:17:af:33:20:2d:f9:da:62:ee:a4:86:90:ab:22:c8:dd: d6:d6:f4:aa:d4:df:74:52:17:43:0d:03:50:3a:42:9b:4b:3c: 46:6a:fc:f1:0d:df:44:a1:2b:13:12:bb:79:0d:7c:5b:d0:98: 61:2e:9b:af:d2:bb:41:05:32:bb:48:e6:d0:e5:88:20:07:d4: 98:cd:c0:4a:e0:08:0f:23:4d:93:01:b3:91:b7:40:c8:a2:e0: 58:05:10:45:25:da:dc:67:31:0e:04:7d:2b:cd:34:c3:f7:e4: a2:6c:37:17:7a:ff:b9:de:1f:d7:db:22:72:80:63:aa:00:0e: c7:58:63:25:ae:03:c3:24:0d:77:74:54:59:17:26:f9:f3:64: b3:ea:17:a0:b8:ff:27:ad:58:7f:2a:a0:da:4f:d3:e4:29:27: 56:27:50:37:6c:e7:6f:47:bd:80:99:5a:6d:bf:b8:0c:a6:d8: 67:aa:21:c9:99:8c:8a:31:84:a8:33:3b:82:d8:6f:e0:e4:b2: 49:d7:ce:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDMjAxMTAvBgNVBAUTKEQ0MEIxMEMxMjI0QzYxRTBEMzE4QzJGQzYwMDM5Mzc4 RUNGNzJEMDAwHhcNMjUwNzE4MTkzNzQ2WhcNMjUwNzI1MTkzNzQ2WjAYMRYwFAYD VQQDEw02ODdhYTI4Yi1kYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsARzVDKfl2K/dOY2eODLz5tGWKMlLOgHo40yF24lbjcrmNPDqGZLA95I29lQ XbI4s8JqtSPXTeHBj8CYV6XCpcjHVSnwrPkamt2UHfNPP2i54rIcbazrowhmGd5M wBNfCNPj5l5796WvdZU/hOvBJ3+62kTtwD234k4QTR7Wl3VtaLFiiJRD9oxs5pNX q/gZsdN9K7jvAA52gfSu+5Z3FQ8ztkpzJXA6g2SRmYrXvAXqgpoV/toESVfIwbZh LW34xfJb9VgCLkFUCdRgRtXt3MIUdQefe/XHN7nzOVf1RLz5Fl0m4Bcfy5OfkjcR tS92BnQoX30XkDjrIMCO8XrY1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhfPUPI VJ+ZtRhEfLnKcQOGoNz/MB8GA1UdIwQYMBaAFNQLEMEiTGHg0xjC/GADk3js9y0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0MyMC84NjU3MUMxMDRF QTIxMUVBODRDMDg4NzRDNEY5QUUwMi8xQXNRd1NKTVllRFRHTUw4WUFPVGVPejNM UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBc1F3U0pNWWVEVEdNTDhZQU9UZU96M0xRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0MyMC84NjU3MUMxMDRFQTIxMUVBODRDMDg4NzRDNEY5QUUwMi8xQXNRd1NKTVll RFRHTUw4WUFPVGVPejNMUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjmJaSNOxdbBDshhQkbDDzr357sKSQy1hg0dpx+CCE0Br3M7zbyPkx t4AHuSrN8Dk0KV8PaOPYzRevMyAt+dpi7qSGkKsiyN3W1vSq1N90UhdDDQNQOkKb SzxGavzxDd9EoSsTErt5DXxb0JhhLpuv0rtBBTK7SObQ5YggB9SYzcBK4AgPI02T AbORt0DIouBYBRBFJdrcZzEOBH0rzTTD9+SibDcXev+53h/X2yJygGOqAA7HWGMl rgPDJA13dFRZFyb582Sz6heguP8nrVh/KqDaT9PkKSdWJ1A3bOdvR72AmVptv7gM pthnqiHJmYyKMYSoMzuC2G/g5LJJ186/ -----END CERTIFICATE-----Generated at Sun Jul 20 07:35:29 2025 by rpki-client