$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json) Hash identifier: P0BZkV1EBtqWn2PUOrIpp9jfYTwhDLI+ZgN6M8y1o/k= Subject key identifier: 09:BB:58:E2:7A:B0:13:20:87:44:B1:B4:47:20:64:A7:16:0B:DA:0E Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft Manifest number: 014C Signing time: Sun 07 Sep 2025 05:05:15 +0000 Manifest this update: Sun 07 Sep 2025 05:05:14 +0000 Manifest next update: Sun 14 Sep 2025 05:05:14 +0000 Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: KxpHFd6hjPTXoOlhzik5dLrHcxGbqazmp36R9NhV6FQ=) 2: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: EN6MJJBs25VJA8BxPoTDjeqUMnebmHL6ptBQ7dXtzww=) 3: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: yi/JlbD7n+64UZKPjWeRYXCwO+TbmKfGvCIR+gFBIgU=) 4: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: 4bqguqQkO2NdVWuTGwGDP28FXTuH4VtBBVIWhIpTMAk=) 5: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: kdnh0lY80uMfga5l6WUOTwTWs5iXaL/0Tn0l6KDoAeU=) 6: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: Rw5/f7mwiL2A4bDLQlquOGpfyNbiDbGp1uerfy4o6ls=) 7: BB17221E211611F08D31C34DC4F9AE02.roa (hash: ROJzIN797AliUmkcNaXXEwujC8/puzfhlC19YDeoFFk=) 8: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: 9NSBUz8m7XvUpzDF2q/kWtrtqPYOWvRlzQxmdt8OCJc=) 9: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: 5GSc16lAwm/VgJPQr9dFvZJgXnG3knNsBXTvWJ5YEVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Sep 7 05:05:14 2025 GMT Not After : Sep 14 05:05:14 2025 GMT Subject: CN=68bd128b-0183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:e1:a6:27:df:77:a1:b3:90:10:d9:b9:f4: c8:f7:5a:d4:82:28:18:a9:da:af:7e:5a:b2:1f:b2: 36:96:e3:cd:2a:18:e4:36:6a:23:fb:6a:13:36:49: 30:53:46:08:02:8a:67:a8:c2:e8:77:b3:45:36:98: b5:b6:05:44:20:c3:a0:25:bc:f7:dd:b9:89:34:b5: 52:9a:dc:44:65:55:de:06:d9:0f:2b:51:18:42:c2: 72:30:f1:03:fb:ef:2e:af:93:a8:37:7e:b1:48:af: 0e:3f:3d:0c:80:54:92:54:a8:6a:23:61:33:4e:2a: 54:3a:51:4c:a5:e9:96:54:cb:e0:f1:61:af:a5:9b: 79:e0:42:1b:4e:cf:b7:86:2a:1d:78:f4:cf:2c:f3: 9b:0d:00:79:5b:ac:47:aa:57:fc:d8:de:73:d1:27: c1:69:35:87:cc:7a:0d:dc:d3:95:73:36:4b:e4:41: 08:e8:b0:78:08:9d:77:47:47:7c:61:53:e1:c5:c8: 75:d9:97:da:de:0a:be:26:03:d7:73:5f:d7:c1:62: 81:d0:57:d8:f2:76:0f:f5:3a:21:e8:35:62:b7:9f: 9c:fe:6b:40:fa:12:98:aa:7a:c4:37:8d:0b:eb:ef: 7d:ac:6d:42:db:2a:1f:b9:25:f5:52:c1:58:4a:22: 59:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BB:58:E2:7A:B0:13:20:87:44:B1:B4:47:20:64:A7:16:0B:DA:0E X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b6:1b:3a:0d:6d:2f:68:72:04:82:34:43:8b:f2:ba:3f:c5: 46:66:b0:db:3b:67:4d:6e:c1:5e:29:f8:45:9a:61:34:31:12: dd:5c:3b:b5:90:a7:a1:62:54:89:72:c9:e5:1f:79:c0:75:47: 26:2d:60:62:d5:77:22:51:ec:cc:56:79:c2:8c:1d:24:a1:11: fb:50:6b:04:62:bc:08:47:a1:20:15:b9:91:a3:20:20:49:2d: c1:6b:32:98:a6:3e:3f:31:bb:99:80:66:87:8a:cf:01:a8:d2: a9:60:e0:58:27:91:eb:43:3b:38:2b:1f:8e:17:d2:a9:10:a7: aa:6a:a8:2c:9f:37:59:f5:7a:10:7d:28:60:ac:b0:d3:44:62: 29:0b:b8:72:cd:4b:7d:6f:e3:f8:4a:20:11:4c:79:b5:7e:ee: 9a:69:51:8b:53:65:fc:36:af:b1:fa:58:2a:03:c7:3a:3c:7b: f4:f7:d2:7c:0b:99:7b:f2:a1:c4:c7:c0:73:f3:28:5f:28:00: d0:51:d9:f3:db:5e:20:3a:0d:50:d1:39:4b:c4:8c:c0:81:fa: c4:ce:db:17:8a:64:ac:a4:f1:23:3a:3c:53:f1:b2:de:f0:bc: 24:3c:bd:b2:42:dc:07:cc:af:24:f8:6b:83:e1:e8:a7:21:ac: 43:8c:73:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwOTA3MDUwNTE0WhcNMjUwOTE0MDUwNTE0WjAYMRYwFAYD VQQDEw02OGJkMTI4Yi0wMTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqvhpiffd6GzkBDZufTI91rUgigYqdqvflqyH7I2luPNKhjkNmoj+2oTNkkw U0YIAopnqMLod7NFNpi1tgVEIMOgJbz33bmJNLVSmtxEZVXeBtkPK1EYQsJyMPED ++8ur5OoN36xSK8OPz0MgFSSVKhqI2EzTipUOlFMpemWVMvg8WGvpZt54EIbTs+3 hiodePTPLPObDQB5W6xHqlf82N5z0SfBaTWHzHoN3NOVczZL5EEI6LB4CJ13R0d8 YVPhxch12Zfa3gq+JgPXc1/XwWKB0FfY8nYP9Toh6DVit5+c/mtA+hKYqnrEN40L 6+99rG1C2yofuSX1UsFYSiJZNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAm7WOJ6 sBMgh0SxtEcgZKcWC9oOMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGta U0dvLVllalhpSkk1SXI5cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRths6DW0vaHIEgjRDi/K6P8VGZrDbO2dNbsFeKfhFmmE0MRLdXDu1 kKehYlSJcsnlH3nAdUcmLWBi1XciUezMVnnCjB0koRH7UGsEYrwIR6EgFbmRoyAg SS3BazKYpj4/MbuZgGaHis8BqNKpYOBYJ5HrQzs4Kx+OF9KpEKeqaqgsnzdZ9XoQ fShgrLDTRGIpC7hyzUt9b+P4SiARTHm1fu6aaVGLU2X8Nq+x+lgqA8c6PHv099J8 C5l78qHEx8Bz8yhfKADQUdnz214gOg1Q0TlLxIzAgfrEztsXimSspPEjOjxT8bLe 8LwkPL2yQtwHzK8k+GuD4einIaxDjHPz -----END CERTIFICATE-----Generated at Mon Sep 8 10:39:58 2025 by rpki-client