$ rpki-client -vvf rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft File: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft (raw, json) Hash identifier: IEJm4wZ8Dtb7gF15DOCBeRroWOfAPxTS83f2s8F1BcA= Subject key identifier: F4:4B:3B:48:7C:AC:B7:A7:C0:98:7B:1D:29:3F:7C:DF:AB:EE:D7:39 Authority key identifier: F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B Certificate issuer: /CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft Manifest number: 0103 Signing time: Thu 21 Aug 2025 05:16:22 +0000 Manifest this update: Thu 21 Aug 2025 05:16:22 +0000 Manifest next update: Thu 28 Aug 2025 05:16:22 +0000 Files and hashes: 1: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl (hash: ekgoclfG30M+IXMIFQZmgEsQZcUjJCLzMDC0b+TPaMI=) 2: 9D50BCA4F64211EE9114A555C4F9AE02.roa (hash: 5CJbD7pKl6AqdADQ2DaLJ20RlS7MYpOoT15StrcsKuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911073A, serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Validity Not Before: Aug 21 05:16:22 2025 GMT Not After : Aug 28 05:16:22 2025 GMT Subject: CN=68a6aba6-87d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:24:36:88:74:ec:f8:c7:04:84:46:f9:85:fe: bc:3c:c2:00:df:5d:20:5e:c9:ae:78:5c:ed:5c:6a: 2f:0f:05:30:26:25:b6:29:48:0d:40:70:b3:ca:3a: 9d:30:30:3f:47:a7:8c:50:4e:12:55:6b:2a:34:e8: 0b:00:50:c7:19:d1:ad:dd:f7:db:0c:4e:ba:ec:e4: 15:0e:c7:17:9d:4d:45:43:27:1a:2e:40:e5:5c:60: fe:c6:fe:45:54:33:82:e8:c4:77:92:73:1d:eb:be: a7:8b:0e:74:14:ba:60:da:1d:84:43:c0:bb:9f:e3: af:40:1d:6c:5e:24:49:7d:16:5f:92:86:dc:b2:e4: 3d:c2:0e:f2:01:26:45:5f:4b:ee:f9:64:4b:be:29: f5:20:16:e2:e9:32:4c:59:c5:fc:26:38:23:96:ea: 35:7e:da:9c:56:a7:15:5a:cd:87:25:d3:36:6b:f8: 75:9d:e8:1f:e4:66:30:ea:d9:4c:65:2c:99:db:aa: 86:25:38:cb:2a:dd:0f:e2:54:1e:29:fb:59:95:70: f7:9c:8b:aa:c3:d7:f8:c8:73:de:de:b6:fc:82:3b: b1:f4:76:fa:72:ef:c3:fe:6f:01:23:49:30:bc:74: ba:24:04:9e:25:37:59:d2:1e:40:67:ba:7d:b1:b4: 80:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4B:3B:48:7C:AC:B7:A7:C0:98:7B:1D:29:3F:7C:DF:AB:EE:D7:39 X509v3 Authority Key Identifier: keyid:F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:fb:96:a1:d8:f6:cc:89:48:04:5b:da:08:81:81:c9:df:d2: 58:cf:94:45:1a:7b:d2:63:9a:75:a8:03:c4:48:38:a7:75:8a: 12:e8:ec:7b:ca:be:d7:98:65:9b:50:5e:83:74:7f:c5:b2:85: 8f:22:c8:b1:cd:8d:88:3e:16:17:2a:bc:e3:8e:41:53:f0:3c: c5:46:eb:91:42:ac:22:bd:b6:2f:90:2f:76:92:97:c0:c6:d9: f0:dc:b2:5c:48:6d:c1:7c:80:ef:a8:72:10:1c:14:b5:07:7f: dd:72:13:a4:e5:84:b2:73:11:e0:74:ec:2c:72:61:ad:15:f7: fc:51:7e:ba:47:58:b4:4f:c9:02:ad:71:c4:44:90:31:3b:56: 16:c9:08:4b:c6:a2:d8:05:16:a1:fa:0b:ef:2b:6c:d7:eb:b4: 99:9c:60:ec:86:6f:df:25:41:ef:0e:20:45:1a:8c:ac:e2:2e: 47:7a:6e:29:27:8c:e3:aa:04:23:97:75:b5:be:3e:5f:ba:fa: 3a:98:27:d0:3f:f8:44:5b:e7:1c:77:e0:34:f3:72:fb:db:8b: 85:11:e5:30:ce:3c:85:6b:7a:0a:97:66:81:2f:0b:cc:01:a4: e5:e5:75:bc:1f:11:0d:8f:b9:3c:16:e0:b8:57:eb:86:c9:8f: d9:8c:3d:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3M0ExMTAvBgNVBAUTKEY1NTAyQTREN0QxNEE2QUE2M0U1RkZBQkY5MzZFMTUy QThERjgwM0IwHhcNMjUwODIxMDUxNjIyWhcNMjUwODI4MDUxNjIyWjAYMRYwFAYD VQQDEw02OGE2YWJhNi04N2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6iQ2iHTs+McEhEb5hf68PMIA310gXsmueFztXGovDwUwJiW2KUgNQHCzyjqd MDA/R6eMUE4SVWsqNOgLAFDHGdGt3ffbDE667OQVDscXnU1FQycaLkDlXGD+xv5F VDOC6MR3knMd676niw50FLpg2h2EQ8C7n+OvQB1sXiRJfRZfkobcsuQ9wg7yASZF X0vu+WRLvin1IBbi6TJMWcX8Jjgjluo1ftqcVqcVWs2HJdM2a/h1negf5GYw6tlM ZSyZ26qGJTjLKt0P4lQeKftZlXD3nIuqw9f4yHPe3rb8gjux9Hb6cu/D/m8BI0kw vHS6JASeJTdZ0h5AZ7p9sbSAQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRLO0h8 rLenwJh7HSk/fN+r7tc5MB8GA1UdIwQYMBaAFPVQKk19FKaqY+X/q/k24VKo34A7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDczQS9FQjRBM0FEQUY2 NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBxcGo1Zi1yLVRiaFVxamZn RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWQXFUWDBVcHFwajVmLXItVGJoVXFqZmdEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDczQS9FQjRBM0FEQUY2NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBx cGo1Zi1yLVRiaFVxamZnRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY+5ah2PbMiUgEW9oIgYHJ39JYz5RFGnvSY5p1qAPESDindYoS6Ox7 yr7XmGWbUF6DdH/FsoWPIsixzY2IPhYXKrzjjkFT8DzFRuuRQqwivbYvkC92kpfA xtnw3LJcSG3BfIDvqHIQHBS1B3/dchOk5YSycxHgdOwscmGtFff8UX66R1i0T8kC rXHERJAxO1YWyQhLxqLYBRah+gvvK2zX67SZnGDshm/fJUHvDiBFGoys4i5Hem4p J4zjqgQjl3W1vj5fuvo6mCfQP/hEW+ccd+A083L724uFEeUwzjyFa3oKl2aBLwvM AaTl5XW8HxENj7k8FuC4V+uGyY/ZjD2o -----END CERTIFICATE-----Generated at Fri Aug 22 16:15:48 2025 by rpki-client