$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json) Hash identifier: QFAnXBNiAlEjNMvQnWrF6kUdC6DTTRHcEQBe2IB3hB4= Subject key identifier: E8:E2:A3:9F:9E:54:44:84:A8:70:0F:6F:91:ED:D7:3A:73:E7:5C:9A Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft Manifest number: 0132 Signing time: Wed 23 Jul 2025 05:12:14 +0000 Manifest this update: Wed 23 Jul 2025 05:12:14 +0000 Manifest next update: Wed 30 Jul 2025 05:12:14 +0000 Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: T4vxfh2jQ+xPh9SmiAkRmdvLxc6UqylBPKfqPUexNys=) 2: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VGbwSs+xYuuT82QPTEDjBRASIfWEGELF9LE6WDBK6Cw=) 3: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: bw0f6KbJYjRey2+KDVpK9dBW3Yh7Jdgva8k4Bt7aCcM=) 4: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: LTeECQk5/azIOJTf8rGaT2gWz1Gmd2inlmhftO85Egc=) 5: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: FkwQRUxW28jIhJPhgvAtX7RxgLtIHLVcqsk+XhOm1NE=) 6: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: stQvqSgEe9eoYY5+iLzps6D0J/Yk9AXd8PNpZXOA3CY=) 7: BB17221E211611F08D31C34DC4F9AE02.roa (hash: fycljHXNnk59uPrb51pHFnfOpO9Hxutgas1w6IAJ3gA=) 8: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: Yun2AD2EJLYSRV9yxmCnTJUpxZFk9/O+PcxovQCtz2I=) 9: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: xaEZeRSS7SPLQpFTKRrqHdI+Z44FtJElJm/n+VPX6m4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 05:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Jul 23 05:12:14 2025 GMT Not After : Jul 30 05:12:14 2025 GMT Subject: CN=68806f2e-4d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:1f:9a:79:23:46:2d:95:39:30:60:66:b5: 72:0a:8b:e4:8b:ab:0e:a8:3f:0d:dc:32:37:04:27: 15:b5:2f:12:f0:9f:10:11:e8:2a:f6:8e:56:07:60: 50:d2:70:f9:80:7f:7f:19:58:87:0d:b4:1c:4e:f1: df:8c:98:0f:b3:29:49:05:77:7b:e6:0a:44:d0:85: 81:b9:aa:2c:22:88:ac:33:9e:f3:d4:56:84:a8:58: 28:4b:81:73:58:31:a1:44:c0:11:c7:63:2d:2f:60: 20:e2:ed:35:b3:54:63:2f:52:a0:79:c7:af:28:a6: d6:c2:d9:eb:a3:3b:53:06:27:ef:e8:a8:b6:8c:82: 1e:93:cd:8a:57:af:c9:49:45:ab:6d:f6:9c:40:9d: 29:43:b6:2e:d2:81:77:30:64:fa:a2:5f:7c:62:10: 13:90:66:aa:c9:1f:20:ff:29:86:ba:b5:d1:fd:4f: 3e:33:46:57:43:42:6c:72:0e:45:d0:78:ca:54:f1: 20:73:63:9b:ea:11:32:fa:a4:9c:63:bb:50:8d:73: 72:67:23:3d:9a:8c:9b:91:d1:6a:f7:81:6c:1a:18: 24:f7:74:95:42:4c:59:09:d0:b6:15:c1:28:99:48: c4:08:08:89:76:43:06:86:47:04:11:29:32:c0:09: d0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E2:A3:9F:9E:54:44:84:A8:70:0F:6F:91:ED:D7:3A:73:E7:5C:9A X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:b6:db:27:af:2b:ad:32:a0:ff:c6:ff:e9:89:09:25:5a:5b: dd:29:7d:42:f3:76:d9:97:6a:c4:db:3a:d3:75:88:88:0c:fb: 04:1b:4a:e8:dc:a7:71:f3:22:c7:9e:77:e3:3a:75:cc:e4:7f: 81:9b:12:9f:08:ed:08:1d:8d:39:c0:75:98:13:e3:f4:06:67: 32:70:af:73:96:42:9d:c9:81:27:5f:cb:2d:b5:f8:72:9a:0d: ad:0e:63:b7:7a:8d:c3:8c:74:a5:bf:16:2e:fa:db:f7:8f:75: 65:0a:88:2b:21:b9:a1:56:f9:9d:d2:e8:6e:b7:a0:5b:1e:fc: ee:70:b7:46:23:8d:0f:9e:f0:96:40:c4:66:85:41:76:7a:02: 54:38:56:30:92:a0:f1:72:99:a8:91:ed:c9:2f:10:6e:22:33: 05:05:9b:fe:61:4d:c5:5b:80:c5:fb:4f:6d:38:53:32:da:00: 5a:f1:41:4e:79:dc:b4:c9:d7:ac:f5:ff:c4:59:90:29:44:22: b5:33:7e:81:16:e1:ff:15:6a:aa:4e:dd:9c:62:82:b3:27:02: 0d:c1:d6:90:4f:f1:55:6c:e3:f1:eb:94:45:78:c5:3f:0b:69: 4f:de:5f:2a:b2:1c:b7:8b:58:34:9e:07:9e:79:c0:91:cc:ca: 85:d9:0a:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwNzIzMDUxMjE0WhcNMjUwNzMwMDUxMjE0WjAYMRYwFAYD VQQDEw02ODgwNmYyZS00ZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXIfmnkjRi2VOTBgZrVyCovki6sOqD8N3DI3BCcVtS8S8J8QEegq9o5WB2BQ 0nD5gH9/GViHDbQcTvHfjJgPsylJBXd75gpE0IWBuaosIoisM57z1FaEqFgoS4Fz WDGhRMARx2MtL2Ag4u01s1RjL1KgecevKKbWwtnroztTBifv6Ki2jIIek82KV6/J SUWrbfacQJ0pQ7Yu0oF3MGT6ol98YhATkGaqyR8g/ymGurXR/U8+M0ZXQ0Jscg5F 0HjKVPEgc2Ob6hEy+qScY7tQjXNyZyM9moybkdFq94FsGhgk93SVQkxZCdC2FcEo mUjECAiJdkMGhkcEESkywAnQwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjio5+e VESEqHAPb5Ht1zpz51yaMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGta U0dvLVllalhpSkk1SXI5cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMttsnryutMqD/xv/piQklWlvdKX1C83bZl2rE2zrTdYiIDPsEG0ro 3Kdx8yLHnnfjOnXM5H+BmxKfCO0IHY05wHWYE+P0BmcycK9zlkKdyYEnX8sttfhy mg2tDmO3eo3DjHSlvxYu+tv3j3VlCogrIbmhVvmd0uhut6BbHvzucLdGI40PnvCW QMRmhUF2egJUOFYwkqDxcpmoke3JLxBuIjMFBZv+YU3FW4DF+09tOFMy2gBa8UFO edy0ydes9f/EWZApRCK1M36BFuH/FWqqTt2cYoKzJwINwdaQT/FVbOPx65RFeMU/ C2lP3l8qshy3i1g0ngeeecCRzMqF2Qpp -----END CERTIFICATE-----Generated at Thu Jul 24 13:12:56 2025 by rpki-client