$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft File: CfwHfzPjrWe_FHdVFno61OrLHnw.mft (raw, json) Hash identifier: Fm2UoWPC9GakprgGHRXb3cucPYOM3nGi058ISnsOz8w= Subject key identifier: EC:D6:64:80:CA:AA:24:69:9C:4D:07:4D:72:E2:4F:8B:85:4E:32:F0 Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C Certificate issuer: /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft Manifest number: 0603 Signing time: Thu 04 Sep 2025 23:29:31 +0000 Manifest this update: Thu 04 Sep 2025 23:29:31 +0000 Manifest next update: Thu 11 Sep 2025 23:29:31 +0000 Files and hashes: 1: CfwHfzPjrWe_FHdVFno61OrLHnw.crl (hash: vp97HrKHrg+tIK4lWIkFqkMyXcJIZiBfgCbKauw+Gjo=) 2: ACDC465C7AEF11EFA321CE80C4F9AE02.roa (hash: yBRdcVlJbMlBPrrr56nDrfaeaxDRpo8RSVcl7jjMZG8=) 3: 794C3D9C5BCC11F0A828900BC4F9AE02.roa (hash: fv5EgUVWuJv2ZJ2v/4tnVI7V/ZKsoOONfbHKKCRs8y0=) 4: 81618D88E53E11EB9E429C44C4F9AE02.roa (hash: eFJqISAsUQRuhPb6f3Hah2PFjEJHe1r/X4BKPg7b4kE=) 5: 30904BA8329711EE8EC1E923C4F9AE02.roa (hash: APJ8LqbdzO0lCKxbThL64TXLQduxBrfKXGZEsGj8Ew8=) 6: AEEA30A444C911F0B1847067C4F9AE02.roa (hash: jBj8tUje/J9yoZyIY1hd6S/+kLstKeE/As7y2q686ZY=) 7: 639394F4B05611EF95B2931BC4F9AE02.roa (hash: C08kfFB3sbHdAzC9hLJnr0tm+lqFd1yHsi8+zNn8y4s=) 8: 8023B518E53E11EB9E429C44C4F9AE02.roa (hash: vSQHxn5/lTR7h5pMBllVKzWJzWkf2IiJr01/df+82mQ=) 9: 167A6086BBD211EEABCC0D23C4F9AE02.roa (hash: bZCNjczNhzUji7LuYcuS6Yg9nvK9y01d14oqtpECLrI=) 10: 80AD3A9AE53E11EB9E429C44C4F9AE02.roa (hash: 0krzqD999T9B24TBVDnqpUMPP33Jo+TAt8qYmCWzmx0=) 11: 7F2A4208E53E11EB9E429C44C4F9AE02.roa (hash: epJMifwD6R2b1WeonhK6+Ptsph58rQyMoEb+/4Q80hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C Validity Not Before: Sep 4 23:29:31 2025 GMT Not After : Sep 11 23:29:31 2025 GMT Subject: CN=68ba20db-17c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:6a:01:8c:67:6c:58:c5:6f:28:25:c2:89: ea:81:0d:7c:08:64:70:15:03:2f:53:bc:d6:97:83: 54:42:4f:9e:a6:a2:a8:25:10:7e:0d:0f:c0:87:4e: 9d:81:32:31:ec:08:81:93:35:25:6b:57:73:df:e0: 2a:ad:d8:40:d5:1d:ab:b9:83:07:64:8e:5e:c3:bc: c4:e3:1b:81:cb:9b:c1:8f:8e:bb:4b:97:e5:6e:ed: 4b:b4:76:8e:8f:e0:48:31:4c:8c:e4:08:0f:8f:4f: be:37:b5:e4:65:40:2b:e9:7d:4d:58:02:56:96:51: 02:bd:96:55:0b:f5:c6:50:8f:13:d5:79:e9:9b:4b: ab:cd:a2:76:e4:66:cd:5f:d8:60:e9:74:8a:24:43: 44:0a:9b:ec:95:f6:04:b9:1e:7b:cd:1e:99:1b:ee: ae:e7:bf:09:05:8b:ae:ad:d3:52:44:10:97:87:6e: ed:50:8e:75:1d:80:a7:cc:4e:f3:0f:eb:ee:65:83: 46:b3:e8:cc:5c:8d:c0:b5:39:1b:ea:79:97:58:44: 94:c9:92:1e:63:9e:f9:25:a5:4e:bb:6a:86:af:45: 48:9e:7c:80:38:12:84:71:22:b2:ab:27:6a:f0:30: 7e:b6:52:31:94:a7:70:46:15:90:e0:43:9e:6c:d8: 90:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D6:64:80:CA:AA:24:69:9C:4D:07:4D:72:E2:4F:8B:85:4E:32:F0 X509v3 Authority Key Identifier: keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5e:bc:20:79:57:54:94:64:44:60:e7:25:00:80:b1:b8:40: 5c:9d:d7:d8:2f:4e:10:47:bb:59:95:96:28:cb:98:1b:a8:78: 8b:86:12:95:e6:cf:80:ec:39:fc:ab:9a:40:37:ac:66:ca:0a: e7:f5:16:97:6e:c6:7a:27:4e:d0:f4:2a:ac:55:27:66:72:a8: 7b:47:d3:22:d2:d4:3c:37:1c:d7:35:ec:3a:d7:f3:06:b7:a5: 02:d4:a0:93:8e:ba:79:82:f9:6d:25:a3:0c:3a:fd:98:ce:2e: 0a:1a:07:16:d3:2c:15:95:51:80:1b:3f:e5:58:43:3b:63:f6: bc:4e:44:18:2c:20:fb:19:a9:e2:5c:a2:ec:fc:fb:6f:45:70: 4e:be:1c:3b:52:07:63:fd:26:e3:98:8e:e3:c7:2e:e1:08:28: 19:1d:f8:11:29:c3:66:92:ac:53:66:cc:18:1b:a8:cb:70:7c: bb:91:cc:2f:86:ae:3d:b9:80:5a:82:fb:cb:36:f9:cd:d8:c1: de:5c:7e:f1:4e:85:88:5d:25:b0:c7:a3:05:01:f1:a6:85:e0: 3b:93:a8:8a:83:4b:75:33:65:0e:7e:69:68:56:f9:ae:fe:da: 65:66:18:e4:27:80:f5:1a:91:bc:a3:b9:56:88:aa:8f:b2:00: 9b:b5:d3:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2MTMxMTAvBgNVBAUTKDA5RkMwNzdGMzNFM0FENjdCRjE0Nzc1NTE2N0EzQUQ0 RUFDQjFFN0MwHhcNMjUwOTA0MjMyOTMxWhcNMjUwOTExMjMyOTMxWjAYMRYwFAYD VQQDEw02OGJhMjBkYi0xN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqv9qAYxnbFjFbyglwonqgQ18CGRwFQMvU7zWl4NUQk+epqKoJRB+DQ/Ah06d gTIx7AiBkzUla1dz3+AqrdhA1R2ruYMHZI5ew7zE4xuBy5vBj467S5flbu1LtHaO j+BIMUyM5AgPj0++N7XkZUAr6X1NWAJWllECvZZVC/XGUI8T1Xnpm0urzaJ25GbN X9hg6XSKJENECpvslfYEuR57zR6ZG+6u578JBYuurdNSRBCXh27tUI51HYCnzE7z D+vuZYNGs+jMXI3AtTkb6nmXWESUyZIeY575JaVOu2qGr0VInnyAOBKEcSKyqydq 8DB+tlIxlKdwRhWQ4EOebNiQlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzWZIDK qiRpnE0HTXLiT4uFTjLwMB8GA1UdIwQYMBaAFAn8B38z461nvxR3VRZ6OtTqyx58 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTYxMy8zMDk5MjY2OEU1 MzkxMUVCOEE1QjkyNzFDNEY5QUUwMi9DZndIZnpQanJXZV9GSGRWRm5vNjFPckxI bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nmd0hmelBqcldlX0ZIZFZGbm82MU9yTEhudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTYxMy8zMDk5MjY2OEU1MzkxMUVCOEE1QjkyNzFDNEY5QUUwMi9DZndIZnpQanJX ZV9GSGRWRm5vNjFPckxIbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaXrwgeVdUlGREYOclAICxuEBcndfYL04QR7tZlZYoy5gbqHiLhhKV 5s+A7Dn8q5pAN6xmygrn9RaXbsZ6J07Q9CqsVSdmcqh7R9Mi0tQ8NxzXNew61/MG t6UC1KCTjrp5gvltJaMMOv2Yzi4KGgcW0ywVlVGAGz/lWEM7Y/a8TkQYLCD7Gani XKLs/PtvRXBOvhw7Ugdj/SbjmI7jxy7hCCgZHfgRKcNmkqxTZswYG6jLcHy7kcwv hq49uYBagvvLNvnN2MHeXH7xToWIXSWwx6MFAfGmheA7k6iKg0t1M2UOfmloVvmu /tplZhjkJ4D1GpG8o7lWiKqPsgCbtdNA -----END CERTIFICATE-----Generated at Sat Sep 6 16:06:12 2025 by rpki-client