$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft File: f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json) Hash identifier: b3JhEHWdB1WDb2cp5uRG155TgYdR7c68uMZHe+Mhu1Q= Subject key identifier: 81:F6:FC:38:9B:43:F2:4B:63:8E:9B:F6:68:E2:96:24:4F:E4:AB:33 Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 Certificate issuer: /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft Manifest number: 031F Signing time: Sun 07 Sep 2025 01:41:30 +0000 Manifest this update: Sun 07 Sep 2025 01:41:29 +0000 Manifest next update: Sun 14 Sep 2025 01:41:29 +0000 Files and hashes: 1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: sKSR097f7St3yua9lyLGrtmHGXbODS+UIkxywEYCscw=) 2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: kGDq/OHD1l2DSUn6HN/fSE9IJdA1C+dG59/8ecfdLJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 01:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Validity Not Before: Sep 7 01:41:29 2025 GMT Not After : Sep 14 01:41:29 2025 GMT Subject: CN=68bce2ca-6ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:67:79:23:bb:e9:36:5e:e4:ea:88:a9:5f: 47:86:f1:3b:d5:b1:17:77:ec:4f:82:7f:02:c9:33: 3f:d4:1b:ad:5b:62:33:34:40:c4:fb:51:ba:71:fb: 53:56:31:48:57:24:6f:74:a1:d2:2f:bc:ff:48:bf: b7:45:60:1d:07:30:86:56:28:cb:ae:85:62:3f:1e: 32:b0:c7:de:20:ca:6b:03:63:ef:56:af:6e:1b:df: dd:26:03:fb:4a:1b:61:ee:b0:78:61:a7:11:bb:a8: ce:59:63:13:1b:8d:6b:f0:98:51:24:c7:ab:51:d9: 9d:91:f7:7d:2a:cd:2d:47:b1:63:e2:e4:73:f4:8e: 7a:7a:85:b1:f1:d3:dd:50:84:19:8f:87:9b:40:2d: 28:2a:da:00:4e:c5:38:28:15:ed:e1:87:2c:79:24: ae:af:7c:e0:0b:47:1a:64:67:15:60:de:b3:8d:23: 38:23:f5:19:94:83:31:1f:48:17:55:1d:41:37:c1: 28:84:83:22:98:ad:07:f6:34:ed:5c:40:26:66:05: 81:12:e4:93:21:03:99:81:23:2a:df:a9:5c:f4:a4: 4d:a4:ae:8b:12:a1:34:d2:0d:d9:fe:58:8f:d8:1f: 77:10:a1:b3:c2:75:6e:e5:52:a2:cc:18:02:94:72: 01:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F6:FC:38:9B:43:F2:4B:63:8E:9B:F6:68:E2:96:24:4F:E4:AB:33 X509v3 Authority Key Identifier: keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:84:f0:57:fc:41:6f:42:15:bb:73:ef:bf:e7:3a:2a:c0:36: 4a:8e:7e:12:5d:40:e5:a8:d3:38:5a:99:44:5f:a6:30:8a:8f: 5d:17:57:5e:e2:3f:44:2f:c8:86:fe:65:4d:c1:db:8e:cc:f4: f5:f1:c5:79:ee:32:c8:3a:c9:6d:9d:66:d6:f1:11:16:75:31: 65:60:e9:12:ac:e0:d9:89:30:27:38:e6:d1:30:27:14:a9:76: a5:97:d8:de:d3:e9:46:27:0e:26:6a:f0:d6:52:7d:1c:d1:da: 67:a8:a4:2c:90:5d:c6:bf:2d:a4:cb:b2:05:b1:f4:88:f5:37: e7:1c:b6:b7:59:8f:1f:52:c5:00:d6:8d:20:8b:e7:72:5f:85: 59:ae:a1:81:a2:45:76:bb:8d:6f:f1:2c:0b:ca:d2:1a:da:9c: 82:bd:c6:4b:6b:cb:82:8c:ff:15:0e:c2:0f:ee:7e:f7:1b:bf: 72:bc:e2:30:01:8d:f2:a1:81:40:b7:bf:32:cf:69:46:2b:fa: 54:ed:48:30:07:70:1b:dd:4b:6a:71:ba:53:07:d5:fb:49:6a: 75:28:ae:8c:f4:5b:a2:20:fd:93:a1:9f:4c:16:10:65:06:0c: c8:5e:ba:64:d9:92:49:d5:63:33:c3:79:49:6c:c3:4b:15:3c: c9:54:b3:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCRjcxMTAvBgNVBAUTKDdGQ0RFQzMxRkFGQTdFNTI3REE3QTk3MDM5MzIwNDBG ODQ1NTgxNTkwHhcNMjUwOTA3MDE0MTI5WhcNMjUwOTE0MDE0MTI5WjAYMRYwFAYD VQQDEw02OGJjZTJjYS02YWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwExneSO76TZe5OqIqV9HhvE71bEXd+xPgn8CyTM/1ButW2IzNEDE+1G6cftT VjFIVyRvdKHSL7z/SL+3RWAdBzCGVijLroViPx4ysMfeIMprA2PvVq9uG9/dJgP7 Shth7rB4YacRu6jOWWMTG41r8JhRJMerUdmdkfd9Ks0tR7Fj4uRz9I56eoWx8dPd UIQZj4ebQC0oKtoATsU4KBXt4YcseSSur3zgC0caZGcVYN6zjSM4I/UZlIMxH0gX VR1BN8EohIMimK0H9jTtXEAmZgWBEuSTIQOZgSMq36lc9KRNpK6LEqE00g3Z/liP 2B93EKGzwnVu5VKizBgClHIB8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH2/Dib Q/JLY46b9mjiliRP5KszMB8GA1UdIwQYMBaAFH/N7DH6+n5SfaepcDkyBA+EVYFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUJGNy80QjY2RjEyQ0Yy QzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZsSjlwNmx3T1RJRUQ0UlZn VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4M3NNZnI2ZmxKOXA2bHdPVElFRDRSVmdWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUJGNy80QjY2RjEyQ0YyQzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZs SjlwNmx3T1RJRUQ0UlZnVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEhPBX/EFvQhW7c++/5zoqwDZKjn4SXUDlqNM4WplEX6Ywio9dF1de 4j9EL8iG/mVNwduOzPT18cV57jLIOsltnWbW8REWdTFlYOkSrODZiTAnOObRMCcU qXall9je0+lGJw4mavDWUn0c0dpnqKQskF3Gvy2ky7IFsfSI9TfnHLa3WY8fUsUA 1o0gi+dyX4VZrqGBokV2u41v8SwLytIa2pyCvcZLa8uCjP8VDsIP7n73G79yvOIw AY3yoYFAt78yz2lGK/pU7UgwB3Ab3UtqcbpTB9X7SWp1KK6M9FuiIP2ToZ9MFhBl BgzIXrpk2ZJJ1WMzw3lJbMNLFTzJVLMR -----END CERTIFICATE-----Generated at Sun Sep 7 20:48:53 2025 by rpki-client