$ rpki-client -vvf rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft File: R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft (raw, json) Hash identifier: QJh1iaDZi4zN1q5CACJeYhqqbandJW3zh2ybXhWDlVU= Subject key identifier: 89:6D:AF:74:EF:97:E0:91:03:73:17:E3:0D:59:20:DF:C1:E3:0D:2D Authority key identifier: 47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65 Certificate issuer: /CN=A9166279/serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft Manifest number: 24 Signing time: Fri 05 Sep 2025 08:19:50 +0000 Manifest this update: Fri 05 Sep 2025 08:19:49 +0000 Manifest next update: Fri 12 Sep 2025 08:19:49 +0000 Files and hashes: 1: R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl (hash: 10ngjGvMA3TbpfW09HASgRH8tfBfTnSiDbMfCk4OY7M=) 2: A7C3B19858CD11F083D7B477C4F9AE02.roa (hash: 8KYhw05nY7mchDEJfru3ck598S7WS2QrgetgJkL5mmM=) 3: 22CDB420688111F0ADE02116C4F9AE02.roa (hash: cU0btbGETNSiVfIPEybbQHdGLtibsKCuD5znry5aMpk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166279, serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765 Validity Not Before: Sep 5 08:19:49 2025 GMT Not After : Sep 12 08:19:49 2025 GMT Subject: CN=68ba9d25-2852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a4:2f:ff:29:82:38:97:56:9c:56:1e:46:12: 9f:5b:7d:dd:ea:4b:69:3b:dc:be:88:55:24:c2:fa: 30:c5:e4:c9:9d:ef:b5:6a:9d:6d:00:78:51:9a:6d: a7:6f:53:3c:33:ac:cb:7e:ae:92:c1:29:59:d2:14: 3e:74:1c:86:8e:ea:3c:39:96:d2:f6:b4:f5:42:0e: cb:5a:71:ed:e1:8f:d2:3d:ee:b7:ad:f1:3a:c6:8d: c9:98:de:17:1b:d7:84:9d:ed:ca:78:b9:0a:6d:0d: c6:c0:dd:b4:6a:b0:b4:5d:c9:4e:f9:77:31:65:69: 8f:2e:f6:64:e9:9e:88:a6:51:0a:0f:af:bd:36:03: 86:85:83:14:48:e7:e1:84:58:ee:eb:bc:96:b2:d7: 5d:e7:04:de:47:88:bd:3f:50:a0:00:b3:fe:71:bd: 77:7b:f7:b7:c1:9e:22:c4:42:cc:e0:1e:97:6d:8b: 9c:56:5a:6c:5a:b9:ae:00:8f:29:0d:48:46:3a:17: 3b:58:c9:4b:8d:b8:e1:fa:68:ba:0d:be:18:b7:9d: d9:23:b7:0d:d1:f8:f6:3e:69:26:f1:bd:c8:ee:30: bc:7a:79:13:ce:ca:ff:5f:53:c9:c6:ba:7d:a5:92: fa:9d:7e:1a:93:59:ba:7b:8f:97:cf:55:81:f3:f6: 94:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6D:AF:74:EF:97:E0:91:03:73:17:E3:0D:59:20:DF:C1:E3:0D:2D X509v3 Authority Key Identifier: keyid:47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:c1:a3:f1:9a:c2:2d:6c:f4:3c:06:39:05:69:98:51:3b:a0: 49:cb:10:b2:ce:37:61:18:e8:04:dc:ff:f2:b7:1d:53:4d:00: 08:98:d9:52:0b:2a:6e:02:cf:e3:a3:4d:b1:00:22:ea:79:e7: 5b:b8:06:a8:28:8d:7d:ac:61:8e:2d:b6:66:74:e5:a4:1e:de: e2:ac:63:7f:66:af:84:c9:dd:23:92:ca:e6:f7:1a:e2:9e:cf: 64:5c:ae:71:ab:ca:99:db:f5:ac:e6:f6:51:45:0e:31:6b:4e: af:7a:18:96:52:eb:65:45:bf:c9:ee:66:ad:93:34:7c:ab:c7: 02:b2:52:54:ec:36:de:90:62:a8:5b:b5:27:e7:c5:16:7d:49: 63:10:9c:e2:c9:bf:ea:5f:4f:89:04:b2:85:d0:44:cc:d3:da: 56:d7:dd:58:56:b6:b2:86:20:70:20:17:fa:81:ff:4b:23:e7: 22:5c:11:bb:f5:12:31:92:32:6d:29:f8:86:d3:a5:dc:f7:26: ce:7d:93:bd:ab:33:7d:87:51:77:2a:cc:2a:19:69:43:6f:e6: 12:4e:15:0b:6f:3a:d8:7c:1c:7b:f2:bf:f2:2a:2e:35:39:05: 59:a1:bc:5c:24:9e:a0:a6:23:1b:20:cb:07:ba:4d:f9:9d:af: b5:bb:aa:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NjI3OTExMC8GA1UEBRMoNDc0QkY3MzVFRDI4RjM1MThCQ0UwQUM0NjI5NThCRUM1 ODJDRDc2NTAeFw0yNTA5MDUwODE5NDlaFw0yNTA5MTIwODE5NDlaMBgxFjAUBgNV BAMTDTY4YmE5ZDI1LTI4NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQpC//KYI4l1acVh5GEp9bfd3qS2k73L6IVSTC+jDF5Mmd77VqnW0AeFGabadv UzwzrMt+rpLBKVnSFD50HIaO6jw5ltL2tPVCDstace3hj9I97ret8TrGjcmY3hcb 14Sd7cp4uQptDcbA3bRqsLRdyU75dzFlaY8u9mTpnoimUQoPr702A4aFgxRI5+GE WO7rvJay113nBN5HiL0/UKAAs/5xvXd797fBniLEQszgHpdti5xWWmxaua4AjykN SEY6FztYyUuNuOH6aLoNvhi3ndkjtw3R+PY+aSbxvcjuMLx6eRPOyv9fU8nGun2l kvqdfhqTWbp7j5fPVYHz9pSPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiW2vdO+X 4JEDcxfjDVkg38HjDS0wHwYDVR0jBBgwFoAUR0v3Ne0o81GLzgrEYpWL7Fgs12Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2Mjc5LzM4QjJDN0JDNThD RDExRjBBRDEwMDg3N0M0RjlBRTAyL1IwdjNOZTBvODFHTHpnckVZcFdMN0ZnczEy VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUjB2M05lMG84MUdMemdyRVlwV0w3RmdzMTJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 Mjc5LzM4QjJDN0JDNThDRDExRjBBRDEwMDg3N0M0RjlBRTAyL1IwdjNOZTBvODFH THpnckVZcFdMN0ZnczEyVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALfBo/Gawi1s9DwGOQVpmFE7oEnLELLON2EY6ATc//K3HVNNAAiY2VIL Km4Cz+OjTbEAIup551u4BqgojX2sYY4ttmZ05aQe3uKsY39mr4TJ3SOSyub3GuKe z2RcrnGrypnb9azm9lFFDjFrTq96GJZS62VFv8nuZq2TNHyrxwKyUlTsNt6QYqhb tSfnxRZ9SWMQnOLJv+pfT4kEsoXQRMzT2lbX3VhWtrKGIHAgF/qB/0sj5yJcEbv1 EjGSMm0p+IbTpdz3Js59k72rM32HUXcqzCoZaUNv5hJOFQtvOth8HHvyv/IqLjU5 BVmhvFwknqCmIxsgywe6Tfmdr7W7qps= -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:33 2025 by rpki-client