$ rpki-client -vvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft File: o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json) Hash identifier: tbEUie72E9lS6TwtrNuWRhBFX4AebQkwv+vtWkPmF+I= Subject key identifier: 6C:48:05:E3:0B:AC:54:5E:C8:E2:45:21:1E:AF:B0:51:1B:DA:C4:EC Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 Certificate issuer: /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Certificate serial: 093A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft Manifest number: 0934 Signing time: Fri 08 Aug 2025 20:33:21 +0000 Manifest this update: Fri 08 Aug 2025 20:33:20 +0000 Manifest next update: Fri 15 Aug 2025 20:33:20 +0000 Files and hashes: 1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: zyEe38CqEFfPotE+RT4zhOcRm9eGc9XjIHbHSVzPz1k=) 2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: oh99riu32xDufqLh4s49Z+OfJBlHg4YCfXKo4NVguOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2362 (0x93a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Validity Not Before: Aug 8 20:33:20 2025 GMT Not After : Aug 15 20:33:20 2025 GMT Subject: CN=68965f11-2363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d7:68:49:91:e2:86:a9:64:96:9b:54:5b:46: df:42:74:66:3b:83:59:23:96:ac:1a:e6:81:eb:0c: f1:ab:dc:e8:77:dd:65:5e:e2:d7:ad:a9:bb:46:1a: cd:eb:e4:d5:5a:11:c1:2b:81:15:e9:a6:be:f8:fb: f1:fe:0a:0d:c5:a5:89:9e:50:d7:83:5b:39:17:58: 28:49:45:c5:66:ec:a1:c7:64:10:0a:7a:e9:59:96: ad:d8:9c:96:08:79:4b:73:cd:44:56:7e:4b:58:f8: 53:58:f9:14:86:23:76:27:4e:4e:5c:c7:54:05:d0: 1b:1a:97:d5:bd:dc:92:0b:18:49:2f:11:77:dd:3f: 01:ee:94:59:fe:70:b6:ef:59:fd:95:9b:70:1d:74: 0a:a2:19:f1:d5:89:62:d3:b9:0c:b5:d4:cc:c8:ff: 45:aa:cd:94:05:3a:a2:ec:29:90:c2:87:e3:ec:21: c5:f0:68:77:a8:90:6c:97:75:9f:0e:7d:62:d2:69: 92:cb:0a:43:31:5e:34:37:16:ce:04:ef:f1:d2:0e: c3:0e:e3:70:bf:38:64:68:bf:58:7c:dd:83:1f:71: ff:b2:3c:42:ab:a9:71:74:22:40:c3:26:2e:94:e2: fc:0c:76:ab:52:d4:e9:17:3d:6a:29:b0:67:7e:06: ae:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:48:05:E3:0B:AC:54:5E:C8:E2:45:21:1E:AF:B0:51:1B:DA:C4:EC X509v3 Authority Key Identifier: keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:9e:65:41:99:dd:ba:2f:4f:84:58:d1:e1:2c:67:ae:dc:30: 7a:2a:be:c5:f2:ab:81:8b:41:9a:da:5e:da:2d:61:ad:a9:d8: c0:dd:27:26:43:95:c2:5d:b8:60:6e:c3:45:8d:b0:78:90:85: fb:4a:48:07:3a:10:cc:96:5b:b5:17:5a:35:41:08:a8:84:7f: ab:a7:0c:0b:83:54:7c:10:af:ff:9a:8a:74:21:23:ba:e9:4f: fa:8b:1c:e3:f6:29:57:48:6a:ee:5f:b2:76:23:4a:99:4b:06: 24:55:20:cf:fe:71:42:90:62:c5:4d:5f:88:ba:8e:8f:49:f7: b2:39:9e:d2:d4:64:36:c7:1d:b6:34:68:ed:a0:02:0e:a8:81: 79:b1:61:a6:ed:c4:46:56:da:5f:4c:4f:2f:15:fd:8c:a9:19: aa:ef:28:2b:71:ae:d6:d5:43:71:3c:5b:de:e1:cf:9f:49:07: ad:65:54:4f:cc:86:c9:10:c2:e8:74:d6:0c:c9:35:e2:8d:90: d3:c0:21:0e:02:d5:ce:bb:ff:59:18:6d:9f:1c:8b:ae:38:0f: b1:c4:51:4c:0f:57:3d:32:ef:f1:8f:f4:d7:75:b7:6a:e4:56: 05:a5:b3:99:6a:04:5f:ac:98:74:53:75:18:85:7a:cc:18:74: ae:74:9e:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2MDQxMTAvBgNVBAUTKEEzREZCRTExQUY4QTc4RTU2MkNGQjQ1NzkwMENDQUI5 MDkwQzJCNTkwHhcNMjUwODA4MjAzMzIwWhcNMjUwODE1MjAzMzIwWjAYMRYwFAYD VQQDEw02ODk2NWYxMS0yMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ddoSZHihqlklptUW0bfQnRmO4NZI5asGuaB6wzxq9zod91lXuLXram7RhrN 6+TVWhHBK4EV6aa++Pvx/goNxaWJnlDXg1s5F1goSUXFZuyhx2QQCnrpWZat2JyW CHlLc81EVn5LWPhTWPkUhiN2J05OXMdUBdAbGpfVvdySCxhJLxF33T8B7pRZ/nC2 71n9lZtwHXQKohnx1Yli07kMtdTMyP9Fqs2UBTqi7CmQwofj7CHF8Gh3qJBsl3Wf Dn1i0mmSywpDMV40NxbOBO/x0g7DDuNwvzhkaL9YfN2DH3H/sjxCq6lxdCJAwyYu lOL8DHarUtTpFz1qKbBnfgau7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxIBeML rFReyOJFIR6vsFEb2sTsMB8GA1UdIwQYMBaAFKPfvhGvinjlYs+0V5AMyrkJDCtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTYwNC9CQ0VDNkM1RUE0 QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VPVml6N1JYa0F6S3VRa01L MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285LS1FYS1LZU9WaXo3UlhrQXpLdVFrTUsxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTYwNC9CQ0VDNkM1RUE0QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VP Vml6N1JYa0F6S3VRa01LMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0nmVBmd26L0+EWNHhLGeu3DB6Kr7F8quBi0Ga2l7aLWGtqdjA3Scm Q5XCXbhgbsNFjbB4kIX7SkgHOhDMllu1F1o1QQiohH+rpwwLg1R8EK//mop0ISO6 6U/6ixzj9ilXSGruX7J2I0qZSwYkVSDP/nFCkGLFTV+Iuo6PSfeyOZ7S1GQ2xx22 NGjtoAIOqIF5sWGm7cRGVtpfTE8vFf2MqRmq7ygrca7W1UNxPFve4c+fSQetZVRP zIbJEMLodNYMyTXijZDTwCEOAtXOu/9ZGG2fHIuuOA+xxFFMD1c9Mu/xj/TXdbdq 5FYFpbOZagRfrJh0U3UYhXrMGHSudJ4Z -----END CERTIFICATE-----Generated at Sun Aug 10 04:59:25 2025 by rpki-client