$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json) Hash identifier: tVwl71GikK2RmGDm4tMUkGcvHEkDCm3L07ZElmuQ3L8= Subject key identifier: 46:A8:D0:48:09:D9:3C:8C:0E:E9:C9:67:63:7B:2E:38:4C:1D:B3:A9 Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft Manifest number: 011D Signing time: Fri 05 Sep 2025 05:09:10 +0000 Manifest this update: Fri 05 Sep 2025 05:09:10 +0000 Manifest next update: Fri 12 Sep 2025 05:09:09 +0000 Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: b3LCBjfQRIh2FccGgEpetT8MEwuEjrGXrEjMmSZflNU=) 2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: p/CKDmdi14SpnAXglq6STJnT5JwJ1Aph3AE4B1BxPGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Validity Not Before: Sep 5 05:09:10 2025 GMT Not After : Sep 12 05:09:09 2025 GMT Subject: CN=68ba7076-3a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8b:fb:ed:d3:75:30:b2:50:69:e8:0b:ee:f4: bd:04:0a:0a:4a:72:13:9f:64:17:ef:d0:da:6a:72: 57:70:3a:7b:16:8c:f3:dc:0c:a2:3b:e9:98:72:68: 1c:f3:fa:d0:f4:4b:ba:dd:f7:36:fb:de:64:f6:a4: 73:73:53:0f:95:00:d4:58:61:3a:e8:50:8a:c4:77: 85:da:e8:64:67:84:40:57:4d:3b:54:a6:47:82:92: 22:df:dd:a9:8d:0d:53:b6:4b:a8:26:2a:4e:4a:24: f4:24:d1:79:88:2e:35:5c:8e:9a:35:90:18:b0:46: 92:c0:4c:81:3f:de:8f:4c:e4:f7:d5:bf:ae:3c:01: e9:8a:f8:e6:90:5b:7d:83:a1:93:84:78:93:45:89: b9:a8:79:c4:7f:e3:e8:9f:37:7c:5b:e9:55:d7:f4: a6:8a:1a:8f:a6:f0:b9:f6:88:e9:6c:50:6f:50:2e: 08:71:41:97:a9:3d:66:22:b9:2e:60:f6:bc:75:90: 93:09:bf:b8:e8:03:8a:b6:55:57:a7:03:1d:c2:5c: 53:01:17:44:b6:f2:e9:c9:01:2c:e9:5c:92:b9:11: ca:2f:bf:2c:d8:a5:ec:52:51:19:ed:ba:e5:e4:26: 88:c5:49:bb:de:26:84:a0:01:d8:b4:e9:a5:33:44: d0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A8:D0:48:09:D9:3C:8C:0E:E9:C9:67:63:7B:2E:38:4C:1D:B3:A9 X509v3 Authority Key Identifier: keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:72:fb:af:fc:08:99:5d:2d:be:4a:75:91:95:b9:db:46:43: 52:45:ae:c7:2b:8f:9f:b0:8d:4c:77:39:8f:69:82:f1:ce:34: 62:8e:70:ea:f9:bc:4e:f0:56:45:d0:db:d3:b8:ae:52:86:6c: c8:cb:27:08:d3:08:26:40:00:00:35:3e:18:b8:5f:b5:b0:a5: 91:f4:e3:e2:59:bf:67:76:4b:b2:3d:db:58:a8:4f:c6:2f:aa: ec:b2:3d:9b:d6:01:58:65:00:d9:12:ef:44:15:4e:25:f8:49: 92:1f:5c:b2:85:79:7a:8b:30:22:80:bb:48:45:e3:9a:14:73: 50:b0:4c:1a:38:a8:74:64:5c:30:e7:23:99:2c:e3:35:e5:e0: 2c:a6:43:a0:56:2b:5d:b5:a0:b8:29:12:72:df:b0:42:53:83: 8e:0d:a8:0d:fc:55:fe:5a:1e:a0:17:ad:5f:19:61:29:82:39: 0a:ef:16:ac:61:23:4f:d0:3b:02:e1:4e:7c:9d:82:13:ad:95: 47:e3:05:90:c3:46:a4:e1:48:c3:d4:8d:36:46:ab:73:3a:65: bb:f9:7d:d6:8f:9d:93:e7:fc:ff:1f:5b:94:aa:20:a8:e4:c4: c9:d0:06:f3:07:0e:5e:f9:5c:3c:77:be:91:d8:1f:e9:04:94: 9d:a1:9a:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw OUY1RjVCOTMwHhcNMjUwOTA1MDUwOTEwWhcNMjUwOTEyMDUwOTA5WjAYMRYwFAYD VQQDEw02OGJhNzA3Ni0zYTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Yv77dN1MLJQaegL7vS9BAoKSnITn2QX79DaanJXcDp7Fozz3AyiO+mYcmgc 8/rQ9Eu63fc2+95k9qRzc1MPlQDUWGE66FCKxHeF2uhkZ4RAV007VKZHgpIi392p jQ1TtkuoJipOSiT0JNF5iC41XI6aNZAYsEaSwEyBP96PTOT31b+uPAHpivjmkFt9 g6GThHiTRYm5qHnEf+Ponzd8W+lV1/SmihqPpvC59ojpbFBvUC4IcUGXqT1mIrku YPa8dZCTCb+46AOKtlVXpwMdwlxTARdEtvLpyQEs6VySuRHKL78s2KXsUlEZ7brl 5CaIxUm73iaEoAHYtOmlM0TQswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEao0EgJ 2TyMDunJZ2N7LjhMHbOpMB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5 QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9BRUY3MDQ5MEQ5QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10 RURDWnVuaWdLTTBKOWZXNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMcvuv/AiZXS2+SnWRlbnbRkNSRa7HK4+fsI1MdzmPaYLxzjRijnDq +bxO8FZF0NvTuK5ShmzIyycI0wgmQAAANT4YuF+1sKWR9OPiWb9ndkuyPdtYqE/G L6rssj2b1gFYZQDZEu9EFU4l+EmSH1yyhXl6izAigLtIReOaFHNQsEwaOKh0ZFww 5yOZLOM15eAspkOgVitdtaC4KRJy37BCU4OODagN/FX+Wh6gF61fGWEpgjkK7xas YSNP0DsC4U58nYITrZVH4wWQw0ak4UjD1I02RqtzOmW7+X3Wj52T5/z/H1uUqiCo 5MTJ0AbzBw5e+Vw8d76R2B/pBJSdoZp8 -----END CERTIFICATE-----Generated at Sat Sep 6 15:12:23 2025 by rpki-client