$ rpki-client -vvf rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft File: A6AuL12r8P85OGKLxP9fthZT8EU.mft (raw, json) Hash identifier: H7RdvqDI/7dyJ0FbAxLkLbar/Wqy6PFRoqkTqoqB140= Subject key identifier: 96:C4:53:B8:0B:0D:FD:DD:19:CA:67:76:FF:F7:6B:F9:2B:61:C8:C9 Authority key identifier: 03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 Certificate issuer: /CN=A9161099/serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft Manifest number: 0107 Signing time: Tue 19 Aug 2025 05:38:28 +0000 Manifest this update: Tue 19 Aug 2025 05:38:27 +0000 Manifest next update: Tue 26 Aug 2025 05:38:27 +0000 Files and hashes: 1: A6AuL12r8P85OGKLxP9fthZT8EU.crl (hash: UiZGpo76fqzZ6BEk491/lsXLBA+PY5W/Eui5N+j4bB8=) 2: 4335BE9C0D0611EFA3ECB057C4F9AE02.roa (hash: 3QaIs0MEQTp5+WPYR1WYTiWl+pbfn1qVb0U7KbrgNTE=) 3: 42D4C3BC0D0611EFA3ECB057C4F9AE02.roa (hash: culo+SXGLXhoFYc+j6cile+BQd4b8OQlh1GlcQ7YkOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161099, serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045 Validity Not Before: Aug 19 05:38:27 2025 GMT Not After : Aug 26 05:38:27 2025 GMT Subject: CN=68a40dd4-95d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:70:f8:18:73:ff:69:ee:de:57:78:f7:c3: 94:39:3b:3b:88:99:5a:0b:6f:31:f9:9c:87:2f:08: 11:98:a3:84:da:52:02:c7:54:fb:11:53:e1:7a:7e: 15:31:db:db:9f:f0:1d:d7:d3:45:1f:90:53:c6:85: 92:4e:af:ab:08:01:46:10:c3:25:ef:45:12:85:4f: a2:2c:f5:5f:fe:a2:a8:3b:47:42:5f:8b:04:6b:57: 74:e8:71:e6:d5:87:22:67:54:9c:c6:bd:77:64:a6: 31:2e:f5:42:7b:72:e2:ca:6a:a3:44:c3:71:d6:ba: f8:83:5c:71:08:a8:46:0c:53:79:c9:47:85:46:de: e1:37:8b:4b:29:f2:64:25:0c:b9:e8:b5:4f:1a:da: c5:19:25:dc:49:cc:17:13:52:14:29:02:20:80:48: d3:ba:43:70:15:42:b5:73:cf:0c:20:30:9e:14:72: 95:2b:fb:0f:1c:95:ac:f2:2b:b5:8d:4b:e5:14:af: 3a:ba:38:65:4c:f0:a9:fc:f1:b5:8b:36:68:85:35: 9b:3a:bc:04:2a:7d:d9:bb:08:a0:97:68:a5:00:16: 54:f4:77:41:65:63:b7:67:20:9a:b5:fb:23:83:91: 0b:0a:a5:15:f0:08:6b:94:f7:f5:14:42:2b:46:5a: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C4:53:B8:0B:0D:FD:DD:19:CA:67:76:FF:F7:6B:F9:2B:61:C8:C9 X509v3 Authority Key Identifier: keyid:03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:96:3a:4c:f0:a2:9b:d5:06:ac:99:05:c9:a1:3a:3f:f9:9f: cd:ea:0d:ae:47:08:ea:ff:e9:96:c7:b4:ed:fa:25:bd:e9:1b: be:f5:52:57:ee:d5:c6:ac:fd:ef:03:f1:34:dd:4d:98:48:a0: dd:61:ee:5e:bf:51:32:40:8b:8e:06:96:36:3f:af:ec:b8:dc: 2e:5a:54:0d:65:07:c0:38:2f:75:ba:00:5d:1f:90:b2:ce:1c: 36:0d:84:e5:84:86:75:52:ee:81:96:cd:dd:da:c8:00:6d:d3: 39:a0:4d:16:8d:70:a9:5d:24:45:89:c7:4c:ce:e1:78:07:fd: be:27:ae:f7:01:f6:30:2d:13:b5:8a:af:5a:2a:82:fa:0b:34: c3:5a:a4:38:c1:fc:23:f1:73:95:c7:a9:3e:16:cf:20:09:00: 55:87:22:5f:0f:79:6c:26:ea:8a:96:cb:f1:c5:0b:69:d8:e0: da:24:33:fa:39:c1:c7:40:83:58:e1:7a:ab:e0:a5:40:69:6a: 55:05:8f:b2:63:18:13:10:3d:57:c0:71:7b:91:26:88:e5:e1: f0:19:eb:90:8f:67:67:cc:95:81:8c:28:6d:24:eb:e8:1b:43: e9:d0:c3:be:af:fa:f1:6e:31:06:53:10:56:6b:e2:f9:4e:3e: 84:e6:b7:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwOTkxMTAvBgNVBAUTKDAzQTAyRTJGNURBQkYwRkYzOTM4NjI4QkM0RkY1RkI2 MTY1M0YwNDUwHhcNMjUwODE5MDUzODI3WhcNMjUwODI2MDUzODI3WjAYMRYwFAYD VQQDEw02OGE0MGRkNC05NWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsN1w+Bhz/2nu3ld498OUOTs7iJlaC28x+ZyHLwgRmKOE2lICx1T7EVPhen4V Mdvbn/Ad19NFH5BTxoWSTq+rCAFGEMMl70UShU+iLPVf/qKoO0dCX4sEa1d06HHm 1YciZ1Scxr13ZKYxLvVCe3LiymqjRMNx1rr4g1xxCKhGDFN5yUeFRt7hN4tLKfJk JQy56LVPGtrFGSXcScwXE1IUKQIggEjTukNwFUK1c88MIDCeFHKVK/sPHJWs8iu1 jUvlFK86ujhlTPCp/PG1izZohTWbOrwEKn3Zuwigl2ilABZU9HdBZWO3ZyCatfsj g5ELCqUV8AhrlPf1FEIrRlqf0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbEU7gL Df3dGcpndv/3a/krYcjJMB8GA1UdIwQYMBaAFAOgLi9dq/D/OThii8T/X7YWU/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA5OS9GRDM2N0M3MDBE MDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQODVPR0tMeFA5ZnRoWlQ4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2QXVMMTJyOFA4NU9HS0x4UDlmdGhaVDhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTA5OS9GRDM2N0M3MDBEMDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQ ODVPR0tMeFA5ZnRoWlQ4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvljpM8KKb1QasmQXJoTo/+Z/N6g2uRwjq/+mWx7Tt+iW96Ru+9VJX 7tXGrP3vA/E03U2YSKDdYe5ev1EyQIuOBpY2P6/suNwuWlQNZQfAOC91ugBdH5Cy zhw2DYTlhIZ1Uu6Bls3d2sgAbdM5oE0WjXCpXSRFicdMzuF4B/2+J673AfYwLRO1 iq9aKoL6CzTDWqQ4wfwj8XOVx6k+Fs8gCQBVhyJfD3lsJuqKlsvxxQtp2ODaJDP6 OcHHQINY4Xqr4KVAaWpVBY+yYxgTED1XwHF7kSaI5eHwGeuQj2dnzJWBjChtJOvo G0Pp0MO+r/rxbjEGUxBWa+L5Tj6E5rc4 -----END CERTIFICATE-----Generated at Wed Aug 20 17:22:35 2025 by rpki-client