$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json) Hash identifier: 4Xv8uU7PZiX+YFOHSdxoyC9jNDPunlsQsuSatxVc3i4= Subject key identifier: BE:49:D5:E3:A7:28:A1:83:C6:4F:78:70:38:E7:A5:C2:5C:9C:7D:2C Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft Manifest number: 0164 Signing time: Wed 03 Sep 2025 04:54:54 +0000 Manifest this update: Wed 03 Sep 2025 04:54:53 +0000 Manifest next update: Wed 10 Sep 2025 04:54:53 +0000 Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: qNoOXjyYWDF7WAbhadKT8TShsxHZL+6Yz8OiXuuLbGc=) 2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: gez5Qlcfm6c6NA79ftuR/sN6GbAgowRygpjom7unUmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Validity Not Before: Sep 3 04:54:53 2025 GMT Not After : Sep 10 04:54:53 2025 GMT Subject: CN=68b7ca1d-c40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:af:91:d1:8f:75:f0:e3:9d:e0:a2:77:5e: 86:43:87:60:e1:c0:1f:29:f8:21:88:1a:2e:26:19: 54:51:19:45:2e:52:46:54:9f:8f:9f:ff:0b:35:9d: 5c:d0:ac:09:b7:00:cd:ff:3a:92:aa:04:02:59:20: f3:25:b2:9a:29:c7:72:5a:2c:f8:5e:a9:75:3d:56: 6d:b5:d2:a4:35:4f:b5:17:4c:f0:d9:9c:a6:12:e7: 6a:8a:e5:4b:15:64:79:87:46:62:0d:d9:e4:00:ec: 37:da:44:9c:36:03:c7:0e:77:64:94:80:11:36:32: 97:18:57:c1:27:6c:42:be:0f:55:09:9b:10:9d:f2: b5:94:08:9e:01:56:84:1c:41:1b:a3:86:26:49:c2: 06:1e:01:0b:49:da:7e:11:de:a3:1a:42:9c:bf:fb: 5e:df:3a:f0:b6:3b:21:86:81:2b:1a:84:5f:e6:98: 03:93:4f:07:7d:e4:b0:0a:19:57:f1:84:ba:42:05: b0:e5:c2:a0:8d:89:df:ec:e1:ff:90:38:ca:ef:ec: 83:d1:3d:b7:f8:ea:cc:43:c5:06:d1:5e:7e:09:cf: 53:ed:dc:df:0f:d9:e3:14:2e:e7:2b:04:21:81:f3: 07:74:c9:5d:7b:37:4d:7b:84:27:16:90:7f:f5:48: 4b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:49:D5:E3:A7:28:A1:83:C6:4F:78:70:38:E7:A5:C2:5C:9C:7D:2C X509v3 Authority Key Identifier: keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b5:78:ce:53:ae:ec:98:9b:77:71:af:fc:be:dd:2c:25:fb: 7d:0e:46:4b:96:52:c6:63:4a:4a:46:cf:71:28:db:8a:7d:ee: c6:2b:49:82:f5:e4:cc:ff:0d:dc:82:20:9f:8c:e6:e4:44:d9: 59:61:ff:6e:a6:99:05:ab:14:69:d0:b1:85:ca:9e:20:cd:52: 7a:fe:ca:9d:b3:80:a5:60:4f:95:60:0e:2b:3a:87:16:4e:1a: ca:df:1a:0f:84:39:28:e6:72:b4:a1:8b:a5:da:4f:7f:e5:03: cb:68:d7:5d:95:9a:4c:23:20:3a:87:82:62:a7:97:a6:1b:a7: 57:84:e5:c9:c8:80:6b:b9:d7:5b:ca:84:4c:0f:10:fc:37:35: 26:66:37:fb:05:69:e2:0d:32:1a:82:4c:8b:d1:b5:91:c8:0c: 50:12:d3:1b:3e:33:85:20:a2:cf:29:c9:cb:52:24:3c:70:4b: b1:db:9b:08:da:3f:b7:62:ee:1f:be:78:0b:21:0a:6b:ed:68: fd:4f:a6:35:30:a7:34:88:33:34:52:3f:1b:f4:90:bd:38:ce: 51:c1:2d:6e:72:7b:bd:56:10:7d:ae:aa:04:7a:6f:b3:dc:69: 4f:38:f5:d5:cb:dc:4a:bf:5e:50:0e:1c:33:12:81:16:0e:de: 50:69:e4:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKEMzRDg5M0IyMjkxQjNBMUUxQkY1RjRGMDQxRDEwNTJF MkNDQkIyNUEwHhcNMjUwOTAzMDQ1NDUzWhcNMjUwOTEwMDQ1NDUzWjAYMRYwFAYD VQQDEw02OGI3Y2ExZC1jNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQSvkdGPdfDjneCid16GQ4dg4cAfKfghiBouJhlUURlFLlJGVJ+Pn/8LNZ1c 0KwJtwDN/zqSqgQCWSDzJbKaKcdyWiz4Xql1PVZttdKkNU+1F0zw2ZymEudqiuVL FWR5h0ZiDdnkAOw32kScNgPHDndklIARNjKXGFfBJ2xCvg9VCZsQnfK1lAieAVaE HEEbo4YmScIGHgELSdp+Ed6jGkKcv/te3zrwtjshhoErGoRf5pgDk08HfeSwChlX 8YS6QgWw5cKgjYnf7OH/kDjK7+yD0T23+OrMQ8UG0V5+Cc9T7dzfD9njFC7nKwQh gfMHdMldezdNe4QnFpB/9UhLhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5J1eOn KKGDxk94cDjnpcJcnH0sMB8GA1UdIwQYMBaAFMPYk7IpGzoeG/X08EHRBS4sy7Ja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC8yRkE0MzRDQUFB QTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9oNGI5ZlR3UWRFRkxpekxz bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QURDNC8yRkE0MzRDQUFBQTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9o NGI5ZlR3UWRFRkxpekxzbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0tXjOU67smJt3ca/8vt0sJft9DkZLllLGY0pKRs9xKNuKfe7GK0mC 9eTM/w3cgiCfjObkRNlZYf9uppkFqxRp0LGFyp4gzVJ6/sqds4ClYE+VYA4rOocW ThrK3xoPhDko5nK0oYul2k9/5QPLaNddlZpMIyA6h4Jip5emG6dXhOXJyIBruddb yoRMDxD8NzUmZjf7BWniDTIagkyL0bWRyAxQEtMbPjOFIKLPKcnLUiQ8cEux25sI 2j+3Yu4fvngLIQpr7Wj9T6Y1MKc0iDM0Uj8b9JC9OM5RwS1ucnu9VhB9rqoEem+z 3GlPOPXVy9xKv15QDhwzEoEWDt5QaeRu -----END CERTIFICATE-----Generated at Thu Sep 4 13:58:36 2025 by rpki-client