$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft File: m0YBtrC3j7j-njkzSoG1pd1ZVik.mft (raw, json) Hash identifier: k90rhNeqYP9PCEKSjDf3lZGwnDhb/MiyDyo5T6OLeko= Subject key identifier: 04:E0:31:66:A2:D2:50:28:7F:6A:C1:48:85:E7:58:C2:4B:45:82:9C Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 0811 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft Manifest number: 07EB Signing time: Sat 06 Sep 2025 21:15:39 +0000 Manifest this update: Sat 06 Sep 2025 21:15:38 +0000 Manifest next update: Sat 13 Sep 2025 21:15:38 +0000 Files and hashes: 1: m0YBtrC3j7j-njkzSoG1pd1ZVik.crl (hash: mPn+AtBaqbeJWyFj/Qdy+UUms2ycFPz3QYF4C9YHn1c=) 2: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (hash: JxqBCjBT9K2ryaUj1ZqNSpK/pt6W0FIjzbMts6xP/O4=) 3: 1F046D5EAD5311EBA93CEB69C4F9AE02.roa (hash: QsOZtg7wgKPEMzZpQNjN0cwc1dkJJaHe5vPoUHzDi2E=) 4: 2B67707C449911EC873EEE33C4F9AE02.roa (hash: dfHP081F3AjgTxtk/Kol9IWl1ohuGadWFkcTnhyHleE=) 5: 1E69B82CAD5311EBA93CEB69C4F9AE02.roa (hash: BiwvJd+dCFyWKlGsVpLMc1ZbpjUFsliw37pP+lj/D+c=) 6: 202D8382AD5311EBA93CEB69C4F9AE02.roa (hash: 9CVFCRxGd96rDHgxt1WsX71RS0A2IwtDONeOpXumo3o=) 7: F4DFF910CB0311EC817AED0BC4F9AE02.roa (hash: 3EaaIhegA520f9Jq9jn6VCkgAQsJfc5446BLnaSLsuo=) 8: 1DC10D94AD5311EBA93CEB69C4F9AE02.roa (hash: lLU3brsFcJmxfza+HPsqiH2/FCfohQp/aB2RU3YA2bQ=) 9: 20BC506CAD5311EBA93CEB69C4F9AE02.roa (hash: FAebLgMlFuIn+Jv3/Kno5dJ1sOWIko5p1IcZ8bmbDwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2065 (0x811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7, serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: Sep 6 21:15:38 2025 GMT Not After : Sep 13 21:15:38 2025 GMT Subject: CN=68bca47a-03ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:58:4d:2e:7d:55:92:57:6d:28:c4:42:77: 1a:9a:40:c6:0a:67:9a:d3:4b:7c:44:58:97:1f:79: cb:6e:32:b0:d5:bd:62:1c:0a:96:18:01:ef:fd:6d: 98:93:d9:ea:1d:e9:5f:0e:3d:3f:74:2e:fe:43:ec: 24:4d:13:65:40:58:3a:81:52:94:49:cc:3a:f4:ae: 03:a4:cd:58:02:ac:ff:0f:32:f2:85:09:b5:2d:f3: ec:19:e6:9f:03:4b:9d:b6:da:e7:22:27:c5:7f:9a: da:98:f3:26:95:0e:bc:ef:5a:fb:95:b2:28:3c:07: 64:3a:8d:f2:80:eb:85:eb:58:44:ea:17:ae:bb:f9: b5:03:00:90:8e:c8:77:c4:a8:c9:f9:34:ff:9e:99: c3:a6:db:a9:c7:7a:fb:10:08:7b:68:03:7a:87:a6: be:83:87:1b:00:1d:4b:b0:58:46:a3:74:8b:9e:ac: 5f:61:48:45:9b:cd:90:1e:93:3e:6a:0e:6d:7e:d3: 39:df:9d:8a:bc:92:0c:bf:e1:98:47:b3:70:01:4c: 64:7b:60:a4:81:a8:f7:1e:f0:f5:cb:ea:a6:88:28: de:c5:bf:fa:a1:f2:61:51:1b:cb:47:1c:5c:e1:a4: 7e:d1:dc:e5:40:b8:cd:18:a8:c8:17:d2:76:79:5a: e7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E0:31:66:A2:D2:50:28:7F:6A:C1:48:85:E7:58:C2:4B:45:82:9C X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ac:6c:dd:45:ef:82:02:76:d9:41:e1:c7:58:ec:52:5b:d8: 0c:c1:3b:29:0a:80:7b:43:af:b8:e2:16:e4:ae:0c:2d:bc:25: b3:03:69:f1:06:3d:22:92:7c:bb:5b:12:d9:d5:be:87:5a:0a: a2:7d:93:bd:f9:79:23:09:e8:0e:a9:0f:1f:48:3f:60:a1:b1: ed:23:16:fb:20:26:55:d8:7d:79:ea:c4:84:62:f2:23:3b:c4: b5:48:bc:4a:bf:40:2e:92:4c:2f:0c:eb:d1:db:6d:d7:f1:4c: a9:d3:bb:33:b3:56:05:f6:7f:2a:6b:28:34:b8:c1:ef:47:91: 1d:5f:21:6e:af:bc:d9:40:52:be:39:db:a7:2f:5f:97:93:ae: 71:c9:71:d1:ae:7f:3a:51:d5:3d:82:d7:73:f1:fd:18:fb:0d: 8c:9b:29:24:5b:d0:5d:21:db:85:31:ea:18:c0:8b:6c:9f:a6: 96:32:12:65:cc:f8:50:88:e6:78:fc:f8:e5:34:9d:17:f0:6d: 0e:df:83:84:8b:7e:5c:13:5e:2a:9b:4e:ae:6e:a7:b6:9f:be: 89:43:e6:fd:34:97:bd:f5:a3:ea:0e:d5:23:6c:aa:f9:a6:f2: e1:2d:09:52:77:77:73:e8:63:ab:55:45:d6:8f:94:ff:ab:ba: c7:da:5b:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjUwOTA2MjExNTM4WhcNMjUwOTEzMjExNTM4WjAYMRYwFAYD VQQDEw02OGJjYTQ3YS0wM2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaJYTS59VZJXbSjEQncamkDGCmea00t8RFiXH3nLbjKw1b1iHAqWGAHv/W2Y k9nqHelfDj0/dC7+Q+wkTRNlQFg6gVKUScw69K4DpM1YAqz/DzLyhQm1LfPsGeaf A0udttrnIifFf5ramPMmlQ6871r7lbIoPAdkOo3ygOuF61hE6heuu/m1AwCQjsh3 xKjJ+TT/npnDptupx3r7EAh7aAN6h6a+g4cbAB1LsFhGo3SLnqxfYUhFm82QHpM+ ag5tftM5352KvJIMv+GYR7NwAUxke2Ckgaj3HvD1y+qmiCjexb/6ofJhURvLRxxc 4aR+0dzlQLjNGKjIF9J2eVrniwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATgMWai 0lAof2rBSIXnWMJLRYKcMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JGNy9BRDJBQzcyRUZCRUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3 ai1uamt6U29HMXBkMVpWaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtrGzdRe+CAnbZQeHHWOxSW9gMwTspCoB7Q6+44hbkrgwtvCWzA2nx Bj0ikny7WxLZ1b6HWgqifZO9+XkjCegOqQ8fSD9gobHtIxb7ICZV2H156sSEYvIj O8S1SLxKv0AukkwvDOvR223X8Uyp07szs1YF9n8qayg0uMHvR5EdXyFur7zZQFK+ OdunL1+Xk65xyXHRrn86UdU9gtdz8f0Y+w2MmykkW9BdIduFMeoYwItsn6aWMhJl zPhQiOZ4/PjlNJ0X8G0O34OEi35cE14qm06ubqe2n76JQ+b9NJe99aPqDtUjbKr5 pvLhLQlSd3dz6GOrVUXWj5T/q7rH2lsf -----END CERTIFICATE-----Generated at Sun Sep 7 14:25:41 2025 by rpki-client