$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft File: 5ufguvNPIMPZye8md2gF84JGO4Y.mft (raw, json) Hash identifier: DQWbbCpAoT0i071mHQWW/Y5LE4nNshjsnZKfrJOIoVA= Subject key identifier: FD:26:85:D8:64:DE:59:55:74:05:E9:15:D0:CC:B0:2E:F6:46:3D:1A Authority key identifier: E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86 Certificate issuer: /CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86 Certificate serial: 06A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft Manifest number: 06A4 Signing time: Thu 18 Sep 2025 22:29:07 +0000 Manifest this update: Thu 18 Sep 2025 22:29:07 +0000 Manifest next update: Thu 25 Sep 2025 22:29:07 +0000 Files and hashes: 1: 5ufguvNPIMPZye8md2gF84JGO4Y.crl (hash: OfwpTVp2cbGtj0OiHcg14AWNiOkC17kZL7qAXh9EvXE=) 2: 159A3C967D7211EBA0A7FF60C4F9AE02.roa (hash: Zxo0mKrJYkISVsqHRZIlLeBZhk5GaXEPMnvmTBTNLew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BD2, serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86 Validity Not Before: Sep 18 22:29:07 2025 GMT Not After : Sep 25 22:29:07 2025 GMT Subject: CN=68cc87b3-42c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:96:09:04:33:d1:3e:e5:fc:4e:96:a3:41: 7c:1e:f5:73:69:68:6f:48:cc:9f:27:b2:e8:b5:d7: b0:4d:6b:ce:8f:99:1d:92:ff:ce:ac:ad:79:e1:cc: 97:60:f1:9f:7a:c6:d9:15:04:03:a1:90:56:a3:2b: 44:f0:53:5f:b4:58:ae:86:82:5e:be:e1:bd:b7:2c: 68:20:02:1b:5c:c1:b6:f6:df:5f:2b:29:91:68:82: b1:51:37:cf:b3:bc:2b:bb:f7:fe:8c:d9:1e:b8:e0: 6b:ef:84:13:89:50:52:85:be:4f:29:d7:af:f4:23: 09:85:19:a3:3b:a4:4d:4f:cf:bc:48:66:5d:ad:4a: 9a:f8:c4:2b:f1:3e:6f:eb:32:ad:51:74:ae:7a:80: 7f:f8:e8:f5:a6:9a:9e:b8:04:f5:bf:7a:2e:05:b7: ee:3c:0f:58:05:e1:40:51:68:22:a2:bc:ca:25:0f: 22:c6:72:c2:93:5f:3b:df:5b:cc:89:a9:45:b7:5d: 7f:06:54:01:27:f5:1b:6d:bc:e1:56:6d:8e:3a:51: 6d:21:31:f4:39:95:2a:c8:7a:9b:16:be:91:e4:8e: aa:09:e8:45:07:da:7e:3d:62:bf:82:1f:eb:34:c7: 7c:90:17:98:ca:ba:2d:0a:69:76:2e:80:84:79:d9: 40:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:26:85:D8:64:DE:59:55:74:05:E9:15:D0:CC:B0:2E:F6:46:3D:1A X509v3 Authority Key Identifier: keyid:E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:bb:8a:da:d2:97:e6:9b:77:e2:a8:43:c0:c3:6b:30:4b:d7: f4:06:c5:ec:2a:cc:95:e3:7a:33:a9:d2:23:79:b6:8e:15:4e: 90:78:00:04:c7:22:30:16:99:5a:a7:40:71:43:50:bf:4c:a8: a3:69:31:9a:2e:70:80:56:0e:97:61:a2:21:a8:e8:6a:4b:db: 59:ef:65:c0:ca:7a:cd:b9:b1:7c:22:3c:0c:01:6f:4d:5a:28: a9:e6:c2:d6:f1:32:35:9a:e3:8f:1e:86:1c:92:6d:2c:ba:2d: e4:d0:44:a6:35:40:94:89:af:85:b5:4b:fe:c2:95:20:a3:a2: 02:bc:f5:d1:77:b0:b2:20:cb:71:e6:db:ef:7a:c9:2e:b1:72: 56:ef:6d:9a:b8:b6:e7:7e:93:91:cf:cf:8f:9c:d7:e0:b1:2e: f5:da:94:34:a0:05:7c:d3:bd:05:22:f6:db:fc:38:3a:e6:b9: c6:bd:0b:60:7e:f0:bd:4b:c5:36:e8:a5:a9:e5:b4:7b:34:c1: 87:b1:46:da:49:09:ea:76:27:4d:34:7d:d7:98:5a:61:a5:20: 7a:e9:40:73:3b:11:96:d3:1f:24:14:5c:0a:f3:08:c2:49:9c: b1:a8:b9:6e:6e:1e:e9:e0:5b:25:7f:17:49:57:2d:8e:52:3b: 87:9e:1c:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRDIxMTAvBgNVBAUTKEU2RTdFMEJBRjM0RjIwQzNEOUM5RUYyNjc3NjgwNUYz ODI0NjNCODYwHhcNMjUwOTE4MjIyOTA3WhcNMjUwOTI1MjIyOTA3WjAYMRYwFAYD VQQDEw02OGNjODdiMy00MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraqWCQQz0T7l/E6Wo0F8HvVzaWhvSMyfJ7LotdewTWvOj5kdkv/OrK154cyX YPGfesbZFQQDoZBWoytE8FNftFiuhoJevuG9tyxoIAIbXMG29t9fKymRaIKxUTfP s7wru/f+jNkeuOBr74QTiVBShb5PKdev9CMJhRmjO6RNT8+8SGZdrUqa+MQr8T5v 6zKtUXSueoB/+Oj1ppqeuAT1v3ouBbfuPA9YBeFAUWgiorzKJQ8ixnLCk18731vM ialFt11/BlQBJ/UbbbzhVm2OOlFtITH0OZUqyHqbFr6R5I6qCehFB9p+PWK/gh/r NMd8kBeYyrotCml2LoCEedlAaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0mhdhk 3llVdAXpFdDMsC72Rj0aMB8GA1UdIwQYMBaAFObn4LrzTyDD2cnvJndoBfOCRjuG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJEMi9FN0U5MDQwMDdE NkYxMUVCODYxMTExNDdDNEY5QUUwMi81dWZndXZOUElNUFp5ZThtZDJnRjg0SkdP NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV1Zmd1dk5QSU1QWnllOG1kMmdGODRKR080WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJEMi9FN0U5MDQwMDdENkYxMUVCODYxMTExNDdDNEY5QUUwMi81dWZndXZOUElN UFp5ZThtZDJnRjg0SkdPNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYu4ra0pfmm3fiqEPAw2swS9f0BsXsKsyV43ozqdIjebaOFU6QeAAE xyIwFplap0BxQ1C/TKijaTGaLnCAVg6XYaIhqOhqS9tZ72XAynrNubF8IjwMAW9N Wiip5sLW8TI1muOPHoYckm0sui3k0ESmNUCUia+FtUv+wpUgo6ICvPXRd7CyIMtx 5tvveskusXJW722auLbnfpORz8+PnNfgsS712pQ0oAV8070FIvbb/Dg65rnGvQtg fvC9S8U26KWp5bR7NMGHsUbaSQnqdidNNH3XmFphpSB66UBzOxGW0x8kFFwK8wjC SZyxqLlubh7p4FslfxdJVy2OUjuHnhzY -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:09 2025 by rpki-client