$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json) Hash identifier: cBW+Jbvr+Y0nOf9ClTeCo//u4Na4Wy2G+vm0JPwhKag= Subject key identifier: 30:96:56:CC:F8:5E:7C:97:9E:F4:68:26:88:C0:B4:39:12:54:B4:7C Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft Manifest number: 0104 Signing time: Sat 19 Jul 2025 05:16:31 +0000 Manifest this update: Sat 19 Jul 2025 05:16:30 +0000 Manifest next update: Sat 26 Jul 2025 05:16:30 +0000 Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: 3hVqwdBOMdjXkaC8y6sGeKeUjHM3ae7+Ie1pONZUACc=) 2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: p/CKDmdi14SpnAXglq6STJnT5JwJ1Aph3AE4B1BxPGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Validity Not Before: Jul 19 05:16:30 2025 GMT Not After : Jul 26 05:16:30 2025 GMT Subject: CN=687b2a2e-3f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:28:e3:d1:9f:9b:75:92:19:c0:0f:17:81:21: 93:57:2d:e5:78:16:27:4e:1e:cd:06:07:1a:17:65: cd:91:5f:76:e2:22:7c:8c:b0:6a:65:74:e0:4b:fe: c8:fd:13:18:e2:07:82:78:22:d7:27:79:9b:79:90: 3f:57:2d:63:42:8b:46:4b:c5:2c:59:0f:d6:27:fc: 2e:67:a1:75:4e:4a:39:a7:6e:5f:25:55:06:39:a2: c6:c2:0b:c1:b6:cd:58:6c:0e:4a:9b:48:45:68:fc: 29:30:85:e1:42:1d:45:67:84:d3:da:f8:65:73:69: 48:7f:11:a1:90:ac:58:2c:26:4a:ba:88:f5:5c:a3: 05:0f:f4:12:f3:cd:89:02:e9:fd:b9:ef:59:2a:86: fb:75:ff:75:a5:e6:23:be:c0:40:26:31:8f:6f:1e: 45:92:ba:cb:0c:da:1d:e3:bc:9f:a5:e1:06:1b:18: 3e:c5:50:2b:92:dd:c1:a5:05:1b:29:bb:02:49:19: c3:c8:45:f0:85:0e:dc:d0:2c:ea:bf:1d:7f:7e:42: 83:55:ea:ec:37:8c:10:bc:f7:e6:60:cc:48:9d:6f: c5:29:dc:d2:51:8e:9a:ae:18:f7:11:bd:ed:ac:32: f9:93:f8:6b:7e:c6:88:d7:77:11:6b:65:4d:1b:2e: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:96:56:CC:F8:5E:7C:97:9E:F4:68:26:88:C0:B4:39:12:54:B4:7C X509v3 Authority Key Identifier: keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ae:b8:a8:6f:50:1a:bc:e2:1e:85:85:6c:15:0f:26:e6:ce: 87:5a:ab:f9:1e:41:eb:06:a2:40:48:80:6e:41:6b:b5:54:eb: 98:f9:0e:28:4f:02:bb:22:91:8b:a7:03:f8:aa:0b:1a:2c:aa: 6e:04:3d:32:0d:73:c7:49:4b:34:6b:fc:9f:78:3d:2d:da:64: ee:35:0c:69:18:41:42:67:85:b5:a9:a7:f1:ec:a1:e5:4a:c0: a1:76:d7:f7:07:6c:0b:47:d9:a3:f5:15:c8:24:1b:a1:4e:d4: e6:8e:2e:67:8f:87:de:a8:7d:31:1b:cd:34:8f:1e:e7:68:b9: da:66:32:bc:a2:5d:11:0d:8e:7c:3e:22:42:e4:9b:ea:e1:7d: 49:88:5e:9d:c4:54:96:89:93:b7:cd:df:de:4f:f9:69:8a:dd: cc:75:56:a1:6b:82:61:78:35:4f:e6:92:18:38:0a:fb:90:b6: c9:48:86:78:52:f5:19:e6:68:76:fd:4f:94:c1:69:cf:dd:5a: e1:5d:11:d9:a1:cc:0d:de:d9:52:60:a0:d8:77:92:ef:45:49: dd:4a:1f:11:b4:4e:47:c4:76:6f:d7:a4:76:c5:0a:8c:55:5f: 9d:7d:ef:e6:46:3b:0f:c2:59:14:d8:80:a0:df:b0:34:35:b8: bb:8e:40:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw OUY1RjVCOTMwHhcNMjUwNzE5MDUxNjMwWhcNMjUwNzI2MDUxNjMwWjAYMRYwFAYD VQQDEw02ODdiMmEyZS0zZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSjj0Z+bdZIZwA8XgSGTVy3leBYnTh7NBgcaF2XNkV924iJ8jLBqZXTgS/7I /RMY4geCeCLXJ3mbeZA/Vy1jQotGS8UsWQ/WJ/wuZ6F1Tko5p25fJVUGOaLGwgvB ts1YbA5Km0hFaPwpMIXhQh1FZ4TT2vhlc2lIfxGhkKxYLCZKuoj1XKMFD/QS882J Aun9ue9ZKob7df91peYjvsBAJjGPbx5FkrrLDNod47yfpeEGGxg+xVArkt3BpQUb KbsCSRnDyEXwhQ7c0Czqvx1/fkKDVersN4wQvPfmYMxInW/FKdzSUY6arhj3Eb3t rDL5k/hrfsaI13cRa2VNGy6r/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCWVsz4 XnyXnvRoJojAtDkSVLR8MB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5 QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9BRUY3MDQ5MEQ5QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10 RURDWnVuaWdLTTBKOWZXNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTrriob1AavOIehYVsFQ8m5s6HWqv5HkHrBqJASIBuQWu1VOuY+Q4o TwK7IpGLpwP4qgsaLKpuBD0yDXPHSUs0a/yfeD0t2mTuNQxpGEFCZ4W1qafx7KHl SsChdtf3B2wLR9mj9RXIJBuhTtTmji5nj4feqH0xG800jx7naLnaZjK8ol0RDY58 PiJC5Jvq4X1JiF6dxFSWiZO3zd/eT/lpit3MdVaha4JheDVP5pIYOAr7kLbJSIZ4 UvUZ5mh2/U+UwWnP3VrhXRHZocwN3tlSYKDYd5LvRUndSh8RtE5HxHZv16R2xQqM VV+dfe/mRjsPwlkU2ICg37A0Nbi7jkAM -----END CERTIFICATE-----Generated at Sun Jul 20 20:40:58 2025 by rpki-client