$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft File: 9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json) Hash identifier: Ym/DrcTZ34kaLJuoTrRRVAvsHud/kuTheKCxIsYHcXI= Subject key identifier: 5B:9A:F6:CA:4D:14:CC:98:82:F4:90:6E:D5:AD:62:89:9D:AC:3C:D9 Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 Certificate issuer: /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft Manifest number: 04BD Signing time: Sun 10 Aug 2025 17:23:50 +0000 Manifest this update: Sun 10 Aug 2025 17:23:50 +0000 Manifest next update: Sun 17 Aug 2025 17:23:50 +0000 Files and hashes: 1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: 1dyQLIdpdq3k1oFYxHcq2FtXg400Mzm5IvAe2QFB4J8=) 2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: 7V54SxSgQ+SNaGeYZDWb9OGgqMLMcejVc584VWscbyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Validity Not Before: Aug 10 17:23:50 2025 GMT Not After : Aug 17 17:23:50 2025 GMT Subject: CN=6898d5a6-2d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:fc:a6:2d:1a:43:fb:cd:1f:2b:8a:81:46: 78:6d:15:5c:a2:32:ff:9c:e8:25:09:82:f1:66:e2: 20:6d:98:2f:86:f2:27:1a:dd:34:4a:b2:78:91:aa: d8:a6:bb:7d:18:19:1f:bc:0f:90:8b:c2:35:f3:17: 1e:15:34:a6:96:c2:b4:2e:4f:84:a7:24:b3:3f:74: ed:16:41:9d:d5:76:f5:28:4d:63:6e:61:25:5b:e6: a8:a0:c0:56:e6:ed:23:e8:44:1e:f1:b5:b3:f4:55: 24:86:62:e1:82:74:93:eb:0a:f6:51:c6:7c:89:b7: 57:58:7f:a2:d5:f5:c5:21:0c:1b:02:8f:df:5d:00: f5:4c:3a:ad:9e:54:eb:da:2d:33:ab:2d:5e:50:14: 10:32:c0:70:2e:5e:63:f7:f8:1d:73:af:a4:fc:79: 56:49:44:5f:dd:19:2b:0c:60:13:ba:8f:77:ab:c2: d5:0d:10:cb:fa:ea:4d:f2:c6:99:8c:09:19:0c:d5: 13:c0:a5:99:8b:4d:64:49:d8:00:1a:a8:a2:e8:bc: e8:2d:27:fb:f1:1d:43:b7:42:34:30:75:db:e3:0e: fa:7d:83:0c:f9:6c:72:22:1c:db:96:f0:6a:e8:17: 04:43:c6:a8:0f:96:8e:dd:47:9f:ce:56:f3:f4:f6: 2e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9A:F6:CA:4D:14:CC:98:82:F4:90:6E:D5:AD:62:89:9D:AC:3C:D9 X509v3 Authority Key Identifier: keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:07:e2:32:36:4c:60:8f:f3:f8:2b:84:b9:01:24:f1:ae:9a: b8:c5:6e:0f:6e:8b:e7:6d:09:a4:08:d0:93:d9:b2:71:c5:ce: d1:33:8c:8a:b1:e7:ec:8e:8d:3b:f0:d5:57:45:f9:fb:34:8f: ba:10:68:7b:88:25:cc:95:e3:71:b7:30:5b:66:93:58:51:33: 02:0a:df:b4:ef:30:b2:44:12:b9:8c:2a:81:2e:07:85:bd:78: 5d:f7:8e:ef:f1:96:b3:ff:0f:7f:24:62:3e:2f:d3:c8:4d:a3: 60:ac:28:3c:fb:46:33:9d:70:a3:f5:6e:7a:61:48:61:42:4c: a6:f7:3d:d1:33:18:af:bd:ac:52:a0:67:a8:c3:03:dc:f0:46: 70:40:08:0f:4b:1d:cf:ab:b7:f1:4e:5a:37:ee:73:1a:e4:2a: e8:2c:83:bb:50:00:82:3f:69:48:36:61:8e:2e:cf:9e:1b:c7: 82:1e:1e:25:50:c3:30:67:85:1d:0c:e0:23:c4:e3:66:07:01: e4:6b:53:29:05:4a:cb:d7:62:bb:55:76:39:a6:d8:be:f8:d9: ce:44:32:1a:22:59:f5:b6:db:ce:3f:43:aa:be:ff:49:26:f8: f9:9c:0f:5e:f7:41:c5:96:57:6b:88:f6:cd:ba:ca:6b:fa:3c: 73:06:1d:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKEY3RjlEOEE0MzU1RDY3M0I5RDRFN0YxNTVEM0E3OEU1 RTY2MEZFQTUwHhcNMjUwODEwMTcyMzUwWhcNMjUwODE3MTcyMzUwWjAYMRYwFAYD VQQDEw02ODk4ZDVhNi0yZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf78pi0aQ/vNHyuKgUZ4bRVcojL/nOglCYLxZuIgbZgvhvInGt00SrJ4karY prt9GBkfvA+Qi8I18xceFTSmlsK0Lk+EpySzP3TtFkGd1Xb1KE1jbmElW+aooMBW 5u0j6EQe8bWz9FUkhmLhgnST6wr2UcZ8ibdXWH+i1fXFIQwbAo/fXQD1TDqtnlTr 2i0zqy1eUBQQMsBwLl5j9/gdc6+k/HlWSURf3RkrDGATuo93q8LVDRDL+upN8saZ jAkZDNUTwKWZi01kSdgAGqii6LzoLSf78R1Dt0I0MHXb4w76fYMM+WxyIhzblvBq 6BcEQ8aoD5aO3Uefzlbz9PYuUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFua9spN FMyYgvSQbtWtYomdrDzZMB8GA1UdIwQYMBaAFPf52KQ1XWc7nU5/FV06eOXmYP6l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMTYyRTAzQTNE M0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6dWRUbjhWWFRwNDVlWmdf cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlfbllwRFZkWnp1ZFRuOFZYVHA0NWVaZ19xVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMTYyRTAzQTNEM0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6 dWRUbjhWWFRwNDVlWmdfcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuB+IyNkxgj/P4K4S5ASTxrpq4xW4PbovnbQmkCNCT2bJxxc7RM4yK sefsjo078NVXRfn7NI+6EGh7iCXMleNxtzBbZpNYUTMCCt+07zCyRBK5jCqBLgeF vXhd947v8Zaz/w9/JGI+L9PITaNgrCg8+0YznXCj9W56YUhhQkym9z3RMxivvaxS oGeowwPc8EZwQAgPSx3Pq7fxTlo37nMa5CroLIO7UACCP2lINmGOLs+eG8eCHh4l UMMwZ4UdDOAjxONmBwHka1MpBUrL12K7VXY5pti++NnORDIaIln1ttvOP0Oqvv9J Jvj5nA9e90HFlldriPbNuspr+jxzBh0V -----END CERTIFICATE-----Generated at Mon Aug 11 07:25:52 2025 by rpki-client