$ rpki-client -vvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft File: 9yY4deggn7olR_uOOH2AP3WAvtY.mft (raw, json) Hash identifier: 8r8DHfXKW5PEN6R5mVzGGLVcE/b9JnDwlZdl24ehgv0= Subject key identifier: EB:60:E9:A1:AE:D0:A2:F7:9B:15:E8:36:8B:D8:4D:0B:4A:1D:A7:2E Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 Certificate issuer: /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft Manifest number: 064B Signing time: Fri 08 Aug 2025 23:03:20 +0000 Manifest this update: Fri 08 Aug 2025 23:03:19 +0000 Manifest next update: Fri 15 Aug 2025 23:03:19 +0000 Files and hashes: 1: 9yY4deggn7olR_uOOH2AP3WAvtY.crl (hash: SoY8Aw4MHpJEoWkmKpYIFJEO+TLkg8M0dluUz8mhwUQ=) 2: B46F501C994D11EBB61C0C71C4F9AE02.roa (hash: j/GF9Fp/8A3iAGqlLey+nPmFjem1hKBzyG3C/3FfPBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126AFE, serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Validity Not Before: Aug 8 23:03:19 2025 GMT Not After : Aug 15 23:03:19 2025 GMT Subject: CN=68968237-afe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:13:92:03:ca:6e:3d:56:ed:f7:e9:c7:2a:c0: 1b:af:27:73:d5:a8:53:f8:40:78:82:dc:c7:a3:25: 10:33:fa:3f:6c:09:ec:7b:c0:aa:3a:53:af:ad:9c: 6d:42:c2:a0:77:50:3c:34:16:38:c1:2f:0d:30:a1: c3:4d:b5:bf:ea:01:66:c4:f5:45:2e:d9:8b:55:f7: 49:08:a6:93:e9:c8:53:1f:98:2d:4a:90:f3:e5:4a: 64:db:63:16:3c:94:9a:f1:5c:be:91:3a:ee:0b:28: ff:a0:12:c1:28:a5:7d:c8:06:b0:17:52:e4:57:47: 24:df:7e:03:72:d3:00:96:55:b6:57:21:ad:76:d1: e9:c7:c2:45:6e:fb:89:2f:09:02:d9:a5:8f:5f:30: 12:78:70:37:61:c1:3b:8e:46:c1:d8:3e:cd:a3:06: e1:d8:30:03:73:f2:61:7b:27:c1:87:10:70:f3:4c: 68:b4:40:ce:50:2b:9a:8d:c1:af:d2:97:2a:95:d8: 84:f8:ab:6b:17:db:52:36:57:ec:98:ba:88:50:ea: cc:26:89:89:09:2b:5d:59:1a:82:01:89:0b:b8:1a: cb:e9:48:46:87:55:79:7a:68:fe:f4:c2:aa:91:68: 9f:d7:8a:f3:cd:8a:27:24:af:aa:ee:25:99:8f:f9: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:60:E9:A1:AE:D0:A2:F7:9B:15:E8:36:8B:D8:4D:0B:4A:1D:A7:2E X509v3 Authority Key Identifier: keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:74:07:c4:69:19:64:23:a3:10:ae:ae:d6:1d:ee:6c:97:93: ee:7f:8c:af:52:ea:2e:c5:dd:f1:ff:02:99:9c:7d:8d:76:c3: f9:7e:3d:2f:65:18:56:8d:83:0e:ca:cd:19:ec:39:02:39:e9: 28:70:b5:94:0b:89:f3:9e:f9:d2:56:c2:ba:8a:7f:91:ca:ca: bd:c7:74:c8:e3:60:77:21:f4:f1:e9:11:9d:c2:9d:98:8b:45: f7:85:9d:90:ac:a7:35:8a:a6:11:e8:8c:75:f7:82:a0:2a:8c: 06:9f:0f:98:2d:0c:d1:c0:50:db:a8:31:2c:03:cd:8b:62:87: e8:78:13:61:d1:29:5b:52:55:b9:54:e2:e4:ec:9e:ab:cf:ed: 69:20:8a:39:82:d0:71:24:b9:68:80:64:c9:19:c8:1f:19:01: 45:6d:1a:ed:a7:cf:a1:fd:49:82:e2:82:be:b5:73:8e:21:10: f8:fb:45:c6:b6:ca:07:cd:55:1c:b9:ba:2c:a9:34:c9:30:be: 34:0f:c7:c2:c4:85:65:7e:d1:63:5c:32:7b:f3:cd:d9:50:cc: 3f:ae:08:50:04:83:31:b6:2d:b5:1d:69:74:e1:de:b1:3b:66: c6:4f:83:c0:57:94:08:41:19:e3:72:22:6b:a2:45:39:47:60: c0:61:2f:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBRkUxMTAvBgNVBAUTKEY3MjYzODc1RTgyMDlGQkEyNTQ3RkI4RTM4N0Q4MDNG NzU4MEJFRDYwHhcNMjUwODA4MjMwMzE5WhcNMjUwODE1MjMwMzE5WjAYMRYwFAYD VQQDEw02ODk2ODIzNy1hZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xOSA8puPVbt9+nHKsAbrydz1ahT+EB4gtzHoyUQM/o/bAnse8CqOlOvrZxt QsKgd1A8NBY4wS8NMKHDTbW/6gFmxPVFLtmLVfdJCKaT6chTH5gtSpDz5Upk22MW PJSa8Vy+kTruCyj/oBLBKKV9yAawF1LkV0ck334DctMAllW2VyGtdtHpx8JFbvuJ LwkC2aWPXzASeHA3YcE7jkbB2D7Nowbh2DADc/JheyfBhxBw80xotEDOUCuajcGv 0pcqldiE+KtrF9tSNlfsmLqIUOrMJomJCStdWRqCAYkLuBrL6UhGh1V5emj+9MKq kWif14rzzYonJK+q7iWZj/m/uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtg6aGu 0KL3mxXoNovYTQtKHacuMB8GA1UdIwQYMBaAFPcmOHXoIJ+6JUf7jjh9gD91gL7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkFGRS81ODI3MjkzQTk5 NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243b2xSX3VPT0gyQVAzV0F2 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5WTRkZWdnbjdvbFJfdU9PSDJBUDNXQXZ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkFGRS81ODI3MjkzQTk5NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243 b2xSX3VPT0gyQVAzV0F2dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTdAfEaRlkI6MQrq7WHe5sl5Puf4yvUuouxd3x/wKZnH2NdsP5fj0v ZRhWjYMOys0Z7DkCOekocLWUC4nznvnSVsK6in+Rysq9x3TI42B3IfTx6RGdwp2Y i0X3hZ2QrKc1iqYR6Ix194KgKowGnw+YLQzRwFDbqDEsA82LYofoeBNh0SlbUlW5 VOLk7J6rz+1pIIo5gtBxJLlogGTJGcgfGQFFbRrtp8+h/UmC4oK+tXOOIRD4+0XG tsoHzVUcubosqTTJML40D8fCxIVlftFjXDJ7883ZUMw/rghQBIMxti21HWl04d6x O2bGT4PAV5QIQRnjciJrokU5R2DAYS+y -----END CERTIFICATE-----Generated at Sun Aug 10 14:00:08 2025 by rpki-client