$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft File: scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json) Hash identifier: TNFZo6wisgOdzHjMXNVyMWv+9LEXf9SeLXVo+Ld9hdQ= Subject key identifier: AB:51:A6:60:45:45:AC:E9:B9:26:53:51:D4:31:26:CC:67:37:9E:F7 Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Certificate serial: 070F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft Manifest number: 06FB Signing time: Thu 18 Sep 2025 22:12:56 +0000 Manifest this update: Thu 18 Sep 2025 22:12:56 +0000 Manifest next update: Thu 25 Sep 2025 22:12:56 +0000 Files and hashes: 1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: QD4rmVn0R28tx5A7uIPuWOXXrSUAJlLvrvGngUBLOGA=) 2: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: 3pZFB7pMfCt+Nb4YQaCn5c2ZIXFgDeE9u77BOFaXST0=) 3: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: ivarDOVLEK1o/i2e326AVwZq4fhbkuq+7lnjx1EVCHE=) 4: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: gBF4oLr31oWPGA7GjogpSpsWc/XlGgo5urUgCfPiOZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Validity Not Before: Sep 18 22:12:56 2025 GMT Not After : Sep 25 22:12:56 2025 GMT Subject: CN=68cc83e8-be87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e5:a5:ba:44:4c:c4:71:64:1b:c6:a3:2c:cb: 37:30:02:13:52:98:5e:51:75:68:c9:7a:60:ed:85: 29:8c:cf:7d:2b:7f:df:5e:7e:f9:9f:09:44:5c:dc: 07:e8:30:97:a6:3d:d1:1b:6d:20:f2:ec:0f:40:ac: 9f:fc:76:53:ed:bc:8e:5b:9c:19:ca:51:78:9a:f2: 5d:dd:31:d8:1c:55:b5:c6:d5:e3:cf:c2:f8:d9:b1: bd:fd:15:b8:a3:cc:67:5b:ca:26:4c:dc:27:4e:bd: 67:6a:e1:5e:79:90:57:44:68:6e:66:52:a2:00:b9: e4:1b:42:92:a2:77:27:31:a2:94:28:48:2f:bc:d0: 85:43:a1:70:ce:f4:05:cc:3d:5d:d2:a7:9c:a0:df: ef:28:83:3c:55:bb:08:18:81:66:c7:58:be:85:6e: b3:30:6c:a1:44:de:0f:6b:17:2c:59:3b:08:b4:9c: d3:49:78:fd:3f:bd:af:a2:e0:cf:4b:77:64:cd:63: b9:ba:c7:9c:c3:02:02:65:05:1c:c0:59:35:41:38: de:21:4e:7f:3f:9c:9e:a7:ab:44:7d:fa:c7:b4:3a: 8f:b2:c7:8b:50:58:64:0f:ce:98:59:2b:e9:25:ef: ca:42:81:2d:59:bb:c0:84:c3:de:46:e6:5f:f1:b0: fd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:51:A6:60:45:45:AC:E9:B9:26:53:51:D4:31:26:CC:67:37:9E:F7 X509v3 Authority Key Identifier: keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:96:43:97:cf:80:ba:af:7f:79:6e:29:66:57:ed:9d:13:94: be:ff:7e:83:1e:c1:2d:f0:66:27:ce:21:40:52:92:ee:57:26: 24:e3:2e:ac:5a:0b:8f:d8:a2:4b:47:f1:65:4d:80:d9:7f:f9: fe:1c:06:15:8f:84:92:d5:0b:6f:ad:b8:c0:73:21:1a:a5:05: e2:43:3e:68:f7:cc:cc:ab:f4:97:a0:d4:c8:70:fd:6a:98:90: 12:3b:25:10:15:27:d3:f3:cc:bc:8b:77:f5:45:b4:50:7e:c4: 3b:8a:ad:55:ac:ff:50:9c:e6:d1:93:63:6a:2b:39:39:e9:e8: 41:a6:e5:fb:03:b9:f6:63:3b:83:04:30:cb:0d:8b:95:55:a1: d9:b1:4b:9f:05:64:c5:df:0a:3d:20:98:75:df:42:b5:24:f8: 5c:98:9f:cc:83:13:78:41:51:0f:ac:b2:12:46:f9:b4:80:75: 10:94:34:d9:b2:ae:a4:cc:95:d5:be:c9:f3:c9:1f:1f:ad:b2: ee:ee:64:84:67:20:db:c5:42:7c:47:00:36:1c:68:7e:e2:b7: 50:21:07:00:63:6f:4d:1d:8d:ae:fe:52:6a:59:e7:e6:e7:3a: 9a:c1:a9:b3:a7:3f:65:7b:99:1c:84:13:e6:88:68:21:e7:d8: b8:d9:63:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0MzgxMTAvBgNVBAUTKEIxQzM0NzQ1NkU1NEE0NjYyRTEwOTdFQ0QzMzRBQzEx QzAyQ0UwMEIwHhcNMjUwOTE4MjIxMjU2WhcNMjUwOTI1MjIxMjU2WjAYMRYwFAYD VQQDEw02OGNjODNlOC1iZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5OWlukRMxHFkG8ajLMs3MAITUpheUXVoyXpg7YUpjM99K3/fXn75nwlEXNwH 6DCXpj3RG20g8uwPQKyf/HZT7byOW5wZylF4mvJd3THYHFW1xtXjz8L42bG9/RW4 o8xnW8omTNwnTr1nauFeeZBXRGhuZlKiALnkG0KSoncnMaKUKEgvvNCFQ6FwzvQF zD1d0qecoN/vKIM8VbsIGIFmx1i+hW6zMGyhRN4PaxcsWTsItJzTSXj9P72vouDP S3dkzWO5usecwwICZQUcwFk1QTjeIU5/P5yep6tEffrHtDqPsseLUFhkD86YWSvp Je/KQoEtWbvAhMPeRuZf8bD9YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtRpmBF RazpuSZTUdQxJsxnN573MB8GA1UdIwQYMBaAFLHDR0VuVKRmLhCX7NM0rBHALOAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQzOC9DNDUwOUQ1NDVF NzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBHWXVFSmZzMHpTc0VjQXM0 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjTkhSVzVVcEdZdUVKZnMwelNzRWNBczRBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDQzOC9DNDUwOUQ1NDVFNzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBH WXVFSmZzMHpTc0VjQXM0QXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAlkOXz4C6r395bilmV+2dE5S+/36DHsEt8GYnziFAUpLuVyYk4y6s WguP2KJLR/FlTYDZf/n+HAYVj4SS1QtvrbjAcyEapQXiQz5o98zMq/SXoNTIcP1q mJASOyUQFSfT88y8i3f1RbRQfsQ7iq1VrP9QnObRk2NqKzk56ehBpuX7A7n2YzuD BDDLDYuVVaHZsUufBWTF3wo9IJh130K1JPhcmJ/MgxN4QVEPrLISRvm0gHUQlDTZ sq6kzJXVvsnzyR8frbLu7mSEZyDbxUJ8RwA2HGh+4rdQIQcAY29NHY2u/lJqWefm 5zqawamzpz9le5kchBPmiGgh59i42WNW -----END CERTIFICATE-----Generated at Fri Sep 19 00:57:22 2025 by rpki-client