$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: 4TS9JPO2JV6LMNPH2x45PrE3wdkjM83Zq1qv0Yn/uzw= Subject key identifier: D8:4B:6B:BB:B3:7A:82:2F:AB:DC:51:CE:DF:B0:1C:B4:ED:B8:6F:D3 Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 0180 Signing time: Thu 07 Aug 2025 04:07:12 +0000 Manifest this update: Thu 07 Aug 2025 04:07:11 +0000 Manifest next update: Thu 14 Aug 2025 04:07:11 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: eJp7lBGxBnGcVuELbJuJUCTeh0FapJlLUaS1eRDN7X4=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: b/tyuT5HVmPK9JfwUWtYKqOXXB/oMLOeGmEa5cvBbbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: Aug 7 04:07:11 2025 GMT Not After : Aug 14 04:07:11 2025 GMT Subject: CN=68942670-3330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a3:de:19:b5:4d:15:6f:17:6e:bb:b4:80:90: 80:bb:3d:8d:c1:67:02:eb:e6:8e:3c:55:e9:dd:e0: 04:1b:b5:41:d4:0c:e3:fb:9b:16:0a:fd:40:fb:35: ed:1c:43:70:6a:6f:d4:5a:a0:a3:47:da:47:45:20: 05:34:e1:0c:e0:dd:c1:12:25:7c:4a:a3:ff:84:f7: d0:72:66:1c:22:0d:ae:8d:98:e1:b5:d0:6a:e9:73: f1:fd:58:fc:da:33:d7:e9:c3:a2:b1:59:07:5b:73: 9b:8c:ca:f2:60:0e:a8:de:48:e2:0e:b4:fb:09:00: fd:cf:08:30:71:20:96:3f:94:80:d7:2a:b7:0a:bb: 78:d5:ef:2f:b7:8b:60:25:82:5c:b9:3d:83:cd:c7: 86:a4:f4:1f:c6:54:d9:07:14:43:45:ed:f4:9d:02: 42:16:d6:d0:98:3d:71:98:47:36:8d:74:f9:4a:ff: 44:87:1e:32:16:ad:c8:fb:91:c2:85:3e:8d:01:70: 8a:3e:bb:f8:a8:ed:fc:53:fe:8e:00:5f:4b:ff:6d: f7:d2:a2:68:7f:4e:da:9e:d6:dd:98:61:d5:2a:24: 5b:78:53:ea:3b:75:42:d6:31:86:06:98:02:d6:4f: a0:be:e1:a0:bc:51:45:bc:5a:9b:84:cb:e7:21:82: 3b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4B:6B:BB:B3:7A:82:2F:AB:DC:51:CE:DF:B0:1C:B4:ED:B8:6F:D3 X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d6:6e:85:11:cf:d6:42:5c:b3:81:fc:3e:d0:76:96:84:6f: 96:e9:eb:f7:1d:ee:5d:78:05:ce:e9:cf:3c:e6:52:3c:f9:ed: 97:96:67:df:27:eb:7d:c8:31:5a:8f:34:f7:20:72:5c:c6:6f: 80:25:e6:4e:d7:70:d6:a8:f9:de:df:2b:d3:4d:7f:b0:a9:ec: ff:c2:58:c8:43:35:9f:35:0c:3b:da:52:79:b7:c5:a3:77:05: 09:e4:7c:76:88:0c:f8:0b:2e:0b:fb:89:3e:79:f1:96:09:4c: 1a:1b:09:a8:48:53:f2:31:98:40:38:41:e0:75:b4:3d:29:d7: d5:dd:23:18:fe:a3:2f:5e:46:71:e7:2c:e6:79:59:4e:50:d6: 73:e3:fe:20:02:86:81:dc:91:b8:b2:28:94:4c:64:ec:a9:03: 30:aa:51:6b:5a:1f:d9:1f:2f:d9:ce:b5:2a:30:97:ea:8a:1d: 46:f5:1f:a1:1e:e3:c5:d4:86:c3:c0:72:72:2d:a9:59:c2:ff: 8a:19:73:65:30:f2:84:52:5d:77:1f:c0:e1:e5:9f:cf:c5:bb: 5a:0c:e0:d8:7c:85:2e:5b:94:96:dd:18:76:28:d6:64:f0:19: c6:36:2d:ce:32:89:15:8d:c0:ed:14:6f:fb:b9:48:84:d1:e8: 7f:97:90:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjUwODA3MDQwNzExWhcNMjUwODE0MDQwNzExWjAYMRYwFAYD VQQDEw02ODk0MjY3MC0zMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqPeGbVNFW8Xbru0gJCAuz2NwWcC6+aOPFXp3eAEG7VB1Azj+5sWCv1A+zXt HENwam/UWqCjR9pHRSAFNOEM4N3BEiV8SqP/hPfQcmYcIg2ujZjhtdBq6XPx/Vj8 2jPX6cOisVkHW3ObjMryYA6o3kjiDrT7CQD9zwgwcSCWP5SA1yq3Crt41e8vt4tg JYJcuT2DzceGpPQfxlTZBxRDRe30nQJCFtbQmD1xmEc2jXT5Sv9Ehx4yFq3I+5HC hT6NAXCKPrv4qO38U/6OAF9L/2330qJof07antbdmGHVKiRbeFPqO3VC1jGGBpgC 1k+gvuGgvFFFvFqbhMvnIYI7uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhLa7uz eoIvq9xRzt+wHLTtuG/TMB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq1m6FEc/WQlyzgfw+0HaWhG+W6ev3He5deAXO6c885lI8+e2Xlmff J+t9yDFajzT3IHJcxm+AJeZO13DWqPne3yvTTX+wqez/wljIQzWfNQw72lJ5t8Wj dwUJ5Hx2iAz4Cy4L+4k+efGWCUwaGwmoSFPyMZhAOEHgdbQ9KdfV3SMY/qMvXkZx 5yzmeVlOUNZz4/4gAoaB3JG4siiUTGTsqQMwqlFrWh/ZHy/ZzrUqMJfqih1G9R+h HuPF1IbDwHJyLalZwv+KGXNlMPKEUl13H8Dh5Z/PxbtaDODYfIUuW5SW3Rh2KNZk 8BnGNi3OMokVjcDtFG/7uUiE0eh/l5Bu -----END CERTIFICATE-----Generated at Fri Aug 8 13:03:47 2025 by rpki-client