$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft File: s-AwGXTWpAg9ufSdWtbloVd5KgY.mft (raw, json) Hash identifier: WzsGSEaRUEAugXDMT8sNNhHH/C6VnDtsbNOKTzyf2ow= Subject key identifier: B9:3C:13:B1:E7:56:FA:B2:02:2D:3B:B8:A3:19:DA:63:F1:D7:F6:9B Authority key identifier: B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 Certificate issuer: /CN=A9116B43/serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft Manifest number: 067E Signing time: Sun 24 Aug 2025 14:50:49 +0000 Manifest this update: Sun 24 Aug 2025 14:50:49 +0000 Manifest next update: Sun 31 Aug 2025 14:50:49 +0000 Files and hashes: 1: s-AwGXTWpAg9ufSdWtbloVd5KgY.crl (hash: UYH0L7xg24tJ6jyMko/5LmtJV7c1f32YWUPzflHKB/o=) 2: 3A77AE12CB9C11EC9230F70BC4F9AE02.roa (hash: TwjuoGTydiIvsI8500O496Q/mOvNfgRtaZ3KwMAE5xE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B43, serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Validity Not Before: Aug 24 14:50:49 2025 GMT Not After : Aug 31 14:50:49 2025 GMT Subject: CN=68ab26c9-70b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:6d:24:2a:4d:02:87:ba:9f:7e:be:cc:1a: b2:24:6c:59:34:d2:67:9e:0e:08:26:ec:10:5b:50: 6e:a9:4a:97:6a:e4:09:b1:e7:0f:ae:9c:3d:b9:06: 98:4b:ef:28:e1:1b:07:77:3b:8f:e5:c4:c6:5a:06: 97:ee:3b:8d:e2:de:e0:c2:d3:42:42:62:41:c4:86: 56:99:ee:9c:83:68:41:c9:da:f7:36:ea:dc:44:81: ea:6c:bf:68:04:62:cd:92:a8:68:31:12:07:3a:b4: ae:75:2c:b5:58:38:af:be:f3:e8:1f:ae:41:c2:b7: ed:0b:f2:d7:9e:4e:de:a4:53:1a:dc:e3:bf:ce:32: a1:40:b4:01:0f:a3:09:02:e7:7b:c0:9c:e9:2b:bd: 61:93:07:6f:d9:4a:18:98:ec:19:8c:35:fe:e9:a8: 7d:07:02:75:ce:c0:68:08:e2:cf:b5:d2:ad:dd:6a: a7:5f:e2:12:f7:a8:fb:ff:01:f9:38:2e:e0:d2:a4: fb:83:ec:ca:5e:9a:06:a2:b2:c1:9f:ab:d7:34:4f: 4e:cf:5e:b6:0e:73:a1:b6:9d:7e:44:b9:0d:0e:ee: 08:30:12:61:7a:4f:45:92:0c:09:8e:39:85:f6:16: dd:b2:ea:99:3b:24:71:70:dd:69:3d:f8:96:cf:31: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3C:13:B1:E7:56:FA:B2:02:2D:3B:B8:A3:19:DA:63:F1:D7:F6:9B X509v3 Authority Key Identifier: keyid:B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:92:11:cb:ec:d0:de:b5:0b:39:2f:76:59:e3:be:65:01:b5: 48:ac:ac:e9:c7:f3:31:65:92:e2:26:0c:97:d1:7c:df:36:30: fa:16:2c:e7:a2:35:51:aa:ee:c9:d9:16:14:09:b2:ca:ff:7f: b5:7f:8b:fe:51:db:33:f6:0d:8e:1b:5f:86:80:73:46:37:af: 9b:8c:4c:7c:c1:b1:4a:3d:8d:db:ad:13:c1:e9:5b:e4:7b:70: 22:a2:ef:17:9d:e9:8a:92:fc:96:84:f2:bb:ee:78:91:08:62: dd:b2:02:ae:7c:cd:b1:f4:39:b1:7a:66:de:52:98:79:f5:97: a1:13:25:47:4e:26:f2:16:b8:7c:3d:2a:a0:60:da:e2:31:c2: 06:46:6d:87:95:07:18:de:c3:b7:b8:8f:95:d2:b2:7a:e2:17: 27:97:79:16:45:0b:e9:dc:50:64:a8:3d:70:39:ee:9a:9d:7e: a0:83:43:48:f0:5d:b7:0a:41:26:54:30:ac:75:7d:80:4c:4f: ae:ea:b9:8d:55:8d:ec:9c:96:ef:07:e0:0a:8e:b8:93:0d:56: 2a:41:93:5d:4b:0f:12:c8:f6:1b:ae:fd:a3:13:a5:43:2f:1d: 8d:5b:9c:3d:56:51:92:68:8b:37:77:35:83:9a:0d:26:ab:08: 30:9a:c2:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNDMxMTAvBgNVBAUTKEIzRTAzMDE5NzRENkE0MDgzREI5RjQ5RDVBRDZFNUEx NTc3OTJBMDYwHhcNMjUwODI0MTQ1MDQ5WhcNMjUwODMxMTQ1MDQ5WjAYMRYwFAYD VQQDEw02OGFiMjZjOS03MGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCFtJCpNAoe6n36+zBqyJGxZNNJnng4IJuwQW1BuqUqXauQJsecPrpw9uQaY S+8o4RsHdzuP5cTGWgaX7juN4t7gwtNCQmJBxIZWme6cg2hBydr3NurcRIHqbL9o BGLNkqhoMRIHOrSudSy1WDivvvPoH65BwrftC/LXnk7epFMa3OO/zjKhQLQBD6MJ Aud7wJzpK71hkwdv2UoYmOwZjDX+6ah9BwJ1zsBoCOLPtdKt3WqnX+IS96j7/wH5 OC7g0qT7g+zKXpoGorLBn6vXNE9Oz162DnOhtp1+RLkNDu4IMBJhek9FkgwJjjmF 9hbdsuqZOyRxcN1pPfiWzzEuswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLk8E7Hn VvqyAi07uKMZ2mPx1/abMB8GA1UdIwQYMBaAFLPgMBl01qQIPbn0nVrW5aFXeSoG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI0My81OTQyMUE0RThE N0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BBZzl1ZlNkV3RibG9WZDVL Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtQXdHWFRXcEFnOXVmU2RXdGJsb1ZkNUtnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI0My81OTQyMUE0RThEN0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BB Zzl1ZlNkV3RibG9WZDVLZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATkhHL7NDetQs5L3ZZ475lAbVIrKzpx/MxZZLiJgyX0XzfNjD6Fizn ojVRqu7J2RYUCbLK/3+1f4v+Udsz9g2OG1+GgHNGN6+bjEx8wbFKPY3brRPB6Vvk e3Aiou8XnemKkvyWhPK77niRCGLdsgKufM2x9DmxembeUph59ZehEyVHTibyFrh8 PSqgYNriMcIGRm2HlQcY3sO3uI+V0rJ64hcnl3kWRQvp3FBkqD1wOe6anX6gg0NI 8F23CkEmVDCsdX2ATE+u6rmNVY3snJbvB+AKjriTDVYqQZNdSw8SyPYbrv2jE6VD Lx2NW5w9VlGSaIs3dzWDmg0mqwgwmsI9 -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:13 2025 by rpki-client