$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: I5S+VKHcrSqomTHr9/mrIbYXtic2P8scVZAcYjXVRqA= Subject key identifier: 78:D2:E2:06:83:03:C9:45:2A:78:8E:B8:EA:2F:A4:A1:35:92:EA:C7 Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: 01D6 Signing time: Sun 07 Sep 2025 03:16:40 +0000 Manifest this update: Sun 07 Sep 2025 03:16:39 +0000 Manifest next update: Sun 14 Sep 2025 03:16:39 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: 3WQQcMKFwQAXy0pqV/iqgZyVqmr6aPmri7GBbJ+UtGY=) 2: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: BWLI/lFMOk0gs1uM9uMc8V3aTl6ezInYU2HutDGOR1Y=) 3: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: WszDeDtt2pA1qPuCttmdMd6CqUvx9wc+SucMvuhAFvE=) 4: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: KfEf5+IVw2cc5iVIvA+8UOcszxul9bOLbJUOX0WGbIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Sep 7 03:16:39 2025 GMT Not After : Sep 14 03:16:39 2025 GMT Subject: CN=68bcf917-7a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ca:8c:9e:8d:4e:43:0b:2b:a7:b2:16:d8:20: c0:c9:cf:fc:a1:62:d0:25:92:f4:23:cb:be:19:4f: 90:4a:20:ca:e7:70:25:36:f0:2f:5d:4a:aa:7f:a2: 96:c1:11:7a:a5:d5:9b:15:c8:2a:b8:c9:c4:96:e1: 05:64:2d:a7:40:83:3d:32:2f:61:fe:7f:f6:8d:5b: f7:f2:93:11:70:28:3a:9c:af:11:5b:db:bd:a7:3a: d4:a6:dc:88:0e:68:34:f3:3b:4b:50:a8:35:ec:10: 80:ee:98:b9:3c:a3:d1:8c:fb:80:52:4a:7d:9c:ba: f2:e6:c2:64:83:74:19:81:b1:ed:9d:21:2c:e9:fa: 5d:fc:91:3c:a5:73:11:25:a8:3e:f5:5f:a1:a5:84: 45:b1:67:e6:a8:c1:ab:6e:f2:da:68:2d:13:72:0c: 3c:a5:19:a4:f4:08:ba:ac:3d:1e:e9:de:bc:07:a1: 08:ce:80:d3:5a:4b:09:22:69:38:8a:b4:4c:4e:89: dc:13:0b:7d:f7:91:89:bd:e5:9b:0f:19:b0:d3:c7: d1:5f:3a:88:b6:4a:99:f1:38:83:f5:b7:ae:c5:7d: 15:33:97:e4:3c:ce:4f:9f:70:2d:55:35:1f:03:02: ee:1f:f4:7c:ee:38:7c:d2:e9:54:0b:74:1e:54:17: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D2:E2:06:83:03:C9:45:2A:78:8E:B8:EA:2F:A4:A1:35:92:EA:C7 X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:90:97:d6:9b:98:03:74:3c:78:d3:5e:3f:6c:4a:a5:48:1f: f6:a7:ca:82:7f:b7:ae:e3:0e:3e:08:4e:71:74:4f:33:0a:08: 45:42:f4:55:49:db:73:41:1c:ca:f7:37:ec:d5:ad:25:4c:1d: 53:38:9e:b4:da:8e:5e:ba:32:ea:f1:df:5e:d2:65:1f:5f:dd: 0f:bb:65:77:e9:4e:bd:3f:03:c8:96:df:5b:c0:d5:e9:df:6d: 20:b2:5b:c0:de:a0:d0:0d:6f:56:e0:e5:3b:7d:6c:0e:30:af: b0:eb:e7:a8:23:0f:ef:2b:8d:c8:4c:59:c8:fc:3b:0b:e4:93: 3c:b6:b3:d4:8f:88:43:dc:c5:11:0f:27:3a:38:d3:4a:97:0d: 65:22:c1:a3:ee:48:2b:29:17:74:a7:0d:ff:c2:01:29:0a:87: ad:31:e3:d9:de:ee:bb:9f:ba:38:77:8d:c0:20:0b:d3:f6:44: 44:4e:89:6c:85:66:e5:7b:e2:7c:b8:e9:e7:8c:d9:58:66:4f: 54:21:f0:63:24:29:54:72:48:fa:96:4f:7a:32:f7:68:98:10: 30:15:b8:0c:82:7f:27:85:18:35:b5:6b:dd:ce:ff:59:a2:be: af:81:83:46:dc:34:b8:ab:c0:cd:28:28:55:62:30:2a:c9:b3: 87:4c:8e:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjUwOTA3MDMxNjM5WhcNMjUwOTE0MDMxNjM5WjAYMRYwFAYD VQQDEw02OGJjZjkxNy03YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5MqMno1OQwsrp7IW2CDAyc/8oWLQJZL0I8u+GU+QSiDK53AlNvAvXUqqf6KW wRF6pdWbFcgquMnEluEFZC2nQIM9Mi9h/n/2jVv38pMRcCg6nK8RW9u9pzrUptyI Dmg08ztLUKg17BCA7pi5PKPRjPuAUkp9nLry5sJkg3QZgbHtnSEs6fpd/JE8pXMR Jag+9V+hpYRFsWfmqMGrbvLaaC0Tcgw8pRmk9Ai6rD0e6d68B6EIzoDTWksJImk4 irRMToncEwt995GJveWbDxmw08fRXzqItkqZ8TiD9beuxX0VM5fkPM5Pn3AtVTUf AwLuH/R87jh80ulUC3QeVBfDzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjS4gaD A8lFKniOuOovpKE1kurHMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdkJfWm5gDdDx4014/bEqlSB/2p8qCf7eu4w4+CE5xdE8zCghFQvRV SdtzQRzK9zfs1a0lTB1TOJ602o5eujLq8d9e0mUfX90Pu2V36U69PwPIlt9bwNXp 320gslvA3qDQDW9W4OU7fWwOMK+w6+eoIw/vK43ITFnI/DsL5JM8trPUj4hD3MUR Dyc6ONNKlw1lIsGj7kgrKRd0pw3/wgEpCoetMePZ3u67n7o4d43AIAvT9kRETols hWble+J8uOnnjNlYZk9UIfBjJClUckj6lk96MvdomBAwFbgMgn8nhRg1tWvdzv9Z or6vgYNG3DS4q8DNKChVYjAqybOHTI54 -----END CERTIFICATE-----Generated at Mon Sep 8 11:22:57 2025 by rpki-client