$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json) Hash identifier: kI/VYNX0ApwQfw1l5LpFRHEBBU7OgKe12kpYSgo3x0c= Subject key identifier: D7:31:91:3C:FC:2B:AE:B3:12:D8:4C:FD:81:D3:DA:A0:2F:39:8E:DF Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft Manifest number: 01B9 Signing time: Sat 23 Aug 2025 03:10:19 +0000 Manifest this update: Sat 23 Aug 2025 03:10:19 +0000 Manifest next update: Sat 30 Aug 2025 03:10:19 +0000 Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: H38dlZruUBC+Ex3oI2bEkLNfKWQGdIqSlxV3LmH6BfM=) 2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: XonPHnI9n9dqc1tom7Es5BpnOeOt7wPnQuvQZ6j9Tf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Validity Not Before: Aug 23 03:10:19 2025 GMT Not After : Aug 30 03:10:19 2025 GMT Subject: CN=68a9311b-101d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:3d:7e:28:d2:46:8f:48:f6:48:0c:ef:cd: 08:b3:de:da:f5:03:f2:02:e8:59:22:03:b1:d4:66: 92:1b:f4:56:f3:79:71:22:61:8b:55:00:47:f2:71: 78:81:93:97:b3:b8:de:66:c4:81:d2:16:06:0f:42: 70:0a:5f:46:1f:4c:ef:6b:dd:5e:28:50:fc:5f:e7: b5:33:79:cb:9f:86:7d:c9:2e:83:51:9f:2b:54:ce: 20:92:ff:58:21:f2:a0:20:d8:e1:f4:cc:74:fa:9c: 11:4d:38:b3:ad:21:8e:8a:e3:e0:e7:94:bb:88:f8: d1:81:c3:8b:5b:00:ec:5e:6c:4a:d1:92:b2:ba:65: 95:36:31:bf:c3:6e:80:a7:11:80:9e:47:93:9c:8a: ea:42:49:0a:19:5a:68:7f:67:f7:47:7e:aa:c1:98: cc:ca:35:6f:7e:9b:33:d5:ca:fa:6c:ee:8e:1f:bb: 1d:bb:b9:3e:e9:3e:9e:c5:a1:63:72:00:42:af:c7: 83:5c:1d:9e:7e:18:0e:24:22:e0:de:fb:05:2e:2e: 85:15:23:d8:5d:37:0c:18:cf:d1:9a:71:68:36:d6: 4a:73:33:a7:fe:86:73:9a:cd:29:03:3c:ed:e3:0b: b3:bb:dd:cd:0b:3c:4f:c1:ad:3b:d7:c4:45:12:a8: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:31:91:3C:FC:2B:AE:B3:12:D8:4C:FD:81:D3:DA:A0:2F:39:8E:DF X509v3 Authority Key Identifier: keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:07:f9:bd:87:81:0d:85:6d:ff:1b:b6:93:c4:4b:ea:02:14: 18:36:79:0e:9b:82:f4:dd:5d:8a:42:16:2e:8f:25:bd:5b:8e: ac:e7:00:c7:1c:91:e4:73:2f:c6:75:77:c2:8f:11:ea:ef:fb: 14:04:85:e1:ab:96:37:19:e0:43:d0:df:9f:f0:7a:9e:3f:af: 17:35:16:24:07:0e:0f:48:3e:12:53:f8:8b:0a:0e:e1:0a:ed: 2b:17:17:31:ba:b2:85:4e:84:2c:8c:db:19:22:eb:76:71:9b: 0f:da:c3:cf:27:95:26:ba:7e:b2:0d:63:9d:d0:fe:34:88:1f: e3:64:a4:1d:cc:a9:7d:27:ed:bf:31:94:41:96:bc:0f:c3:fa: b9:98:34:b9:42:06:25:7b:69:f3:c9:31:e2:b2:16:d2:f1:6a: 9a:00:fd:b4:fd:f1:8d:46:94:c0:5c:4b:68:be:03:d0:b5:31: e5:54:14:00:1f:17:f2:5c:ec:11:01:c2:0d:33:7a:d7:1b:76: 1f:5f:0f:e9:a5:de:f3:2b:50:e1:26:3c:92:6b:87:8f:a6:a1: 94:a6:43:58:d9:48:fc:f7:91:75:39:80:d3:5b:ae:9d:5b:00: c5:a6:35:d1:27:7f:61:d8:1d:78:00:19:d6:fd:3c:5c:5b:c9: 39:11:e5:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2OTUxMTAvBgNVBAUTKEEzNzAzMEMzNTk2MzA0MDU4RTJGOTk0RjNGRDE0NzFB M0EyODNFQjMwHhcNMjUwODIzMDMxMDE5WhcNMjUwODMwMDMxMDE5WjAYMRYwFAYD VQQDEw02OGE5MzExYi0xMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhU9fijSRo9I9kgM780Is97a9QPyAuhZIgOx1GaSG/RW83lxImGLVQBH8nF4 gZOXs7jeZsSB0hYGD0JwCl9GH0zva91eKFD8X+e1M3nLn4Z9yS6DUZ8rVM4gkv9Y IfKgINjh9Mx0+pwRTTizrSGOiuPg55S7iPjRgcOLWwDsXmxK0ZKyumWVNjG/w26A pxGAnkeTnIrqQkkKGVpof2f3R36qwZjMyjVvfpsz1cr6bO6OH7sdu7k+6T6exaFj cgBCr8eDXB2efhgOJCLg3vsFLi6FFSPYXTcMGM/RmnFoNtZKczOn/oZzms0pAzzt 4wuzu93NCzxPwa0718RFEqgrswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcxkTz8 K66zEthM/YHT2qAvOY7fMB8GA1UdIwQYMBaAFKNwMMNZYwQFji+ZTz/RRxo6KD6z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzY5NS84NzNBNjgwMERB OEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJBV09MNWxQUDlGSEdqb29Q ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28zQXd3MWxqQkFXT0w1bFBQOUZIR2pvb1ByTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzY5NS84NzNBNjgwMERBOEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJB V09MNWxQUDlGSEdqb29Qck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZB/m9h4ENhW3/G7aTxEvqAhQYNnkOm4L03V2KQhYujyW9W46s5wDH HJHkcy/GdXfCjxHq7/sUBIXhq5Y3GeBD0N+f8HqeP68XNRYkBw4PSD4SU/iLCg7h Cu0rFxcxurKFToQsjNsZIut2cZsP2sPPJ5Umun6yDWOd0P40iB/jZKQdzKl9J+2/ MZRBlrwPw/q5mDS5QgYle2nzyTHishbS8WqaAP20/fGNRpTAXEtovgPQtTHlVBQA HxfyXOwRAcINM3rXG3YfXw/ppd7zK1DhJjySa4ePpqGUpkNY2Uj895F1OYDTW66d WwDFpjXRJ39h2B14ABnW/TxcW8k5EeWD -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:10 2025 by rpki-client