$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft File: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft (raw, json) Hash identifier: 6sDKAB27jCq4RdliUO3sPDON7xhT43Ny6sy9XJ/bS50= Subject key identifier: 5B:9B:C2:E0:A9:F1:32:07:35:DE:2C:81:A4:EB:AD:04:EA:97:EE:34 Authority key identifier: D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 Certificate issuer: /CN=A9146D06/serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0 Certificate serial: 3232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft Manifest number: 3220 Signing time: Sun 10 Aug 2025 15:22:15 +0000 Manifest this update: Sun 10 Aug 2025 15:22:14 +0000 Manifest next update: Sun 17 Aug 2025 15:22:14 +0000 Files and hashes: 1: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl (hash: XklMlCmtKh4RLyawTfPyoQ3vf0aHKulq9M8MR5s8IOo=) 2: F1C9EE68B13B11E5B2D80087C4F9AE02.roa (hash: 1VVuRrqVVTtGHoXa2KKerRIHjhwmzovA9uhLiSgp/NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12850 (0x3232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146D06, serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0 Validity Not Before: Aug 10 15:22:14 2025 GMT Not After : Aug 17 15:22:14 2025 GMT Subject: CN=6898b926-52d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3d:8e:c8:7a:7e:ee:8a:fd:ec:8e:24:eb:12: a9:1a:3b:b0:24:c6:ca:ad:2f:78:0b:e0:9c:55:02: e8:dd:a3:e9:0f:36:20:b1:a4:35:b9:75:09:17:46: 83:e2:1b:fc:60:72:02:a2:29:54:5d:9b:25:ba:04: 8d:c7:7a:b0:5c:81:73:b5:8e:28:07:8c:0c:85:ae: dd:6a:c6:9a:b2:9f:02:16:3d:a9:a8:22:14:f6:5d: 62:65:e3:09:7a:df:1b:b0:d3:d0:85:02:0f:db:ab: df:fa:79:be:ec:cc:1c:bb:b0:9e:44:30:07:9e:96: c1:e8:84:9c:84:be:d5:93:0b:66:a0:37:50:13:c4: 5a:40:a9:b1:af:a5:bb:ab:80:90:86:b8:a5:ae:99: 3a:5c:95:9e:33:02:29:ce:43:97:ab:3e:0d:2b:8b: fd:e6:4e:23:88:91:24:85:85:e3:70:2e:ff:c1:35: b9:f5:61:1b:c3:ea:2b:d8:98:5f:6d:df:79:31:c9: 9e:8c:0c:d3:cd:72:26:ef:2c:17:b3:62:fe:ee:07: ea:21:9d:2a:70:a4:09:06:42:66:da:98:24:01:ca: 26:86:f1:cc:da:75:30:0f:81:e3:28:87:b4:ae:fb: 43:8c:22:84:82:9d:90:53:6c:6e:8e:c5:ee:d0:f2: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9B:C2:E0:A9:F1:32:07:35:DE:2C:81:A4:EB:AD:04:EA:97:EE:34 X509v3 Authority Key Identifier: keyid:D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:2f:4c:20:54:49:3c:9e:90:e6:38:20:09:34:08:db:db:bc: ad:96:8a:31:a6:e1:71:9e:50:80:ad:8f:fc:77:b4:39:fe:aa: 1c:62:9e:28:24:20:f4:41:05:54:41:e9:e2:34:19:c8:a7:2b: b1:25:6b:14:93:9d:ea:56:44:6e:f9:f4:c8:3f:58:97:1e:01: 2d:3b:34:e5:a1:48:e2:81:8b:26:a4:d8:18:68:c5:29:14:3e: e2:df:e9:4c:7f:38:b8:ba:39:d0:07:be:b1:92:74:6e:d4:24: 29:32:1b:ef:24:2b:bf:90:52:20:cf:1d:6f:53:3f:69:5a:d8: 32:b9:8e:51:27:b0:38:11:0b:81:e3:d8:b2:92:fe:e8:3f:a7: df:5d:11:b7:d8:0e:7c:9d:11:c5:a1:f7:18:4e:4e:81:82:f1: c6:5d:39:cc:ea:28:c2:79:81:3c:b8:89:a5:0b:9a:2e:74:08: 66:ef:37:26:50:83:d9:95:0f:13:97:23:24:0a:91:cc:5f:32: 60:27:fe:29:ad:71:cd:fe:04:cc:c0:e3:2a:1c:f0:c3:67:32: d0:db:d6:ad:f6:06:cd:8c:61:42:db:5b:79:ad:b0:65:84:e2: 63:a5:e9:21:6f:2f:3d:45:af:15:db:9a:5e:9b:49:ad:37:4a: eb:47:c7:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEMDYxMTAvBgNVBAUTKEQzMTU2RkY1MzhBMEQzRjUzOTczODYxRkFENjQzNkZC MUU1RkU4QzAwHhcNMjUwODEwMTUyMjE0WhcNMjUwODE3MTUyMjE0WjAYMRYwFAYD VQQDEw02ODk4YjkyNi01MmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyj2OyHp+7or97I4k6xKpGjuwJMbKrS94C+CcVQLo3aPpDzYgsaQ1uXUJF0aD 4hv8YHICoilUXZslugSNx3qwXIFztY4oB4wMha7dasaasp8CFj2pqCIU9l1iZeMJ et8bsNPQhQIP26vf+nm+7Mwcu7CeRDAHnpbB6ISchL7VkwtmoDdQE8RaQKmxr6W7 q4CQhrilrpk6XJWeMwIpzkOXqz4NK4v95k4jiJEkhYXjcC7/wTW59WEbw+or2Jhf bd95McmejAzTzXIm7ywXs2L+7gfqIZ0qcKQJBkJm2pgkAcomhvHM2nUwD4HjKIe0 rvtDjCKEgp2QU2xujsXu0PJvWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFubwuCp 8TIHNd4sgaTrrQTql+40MB8GA1UdIwQYMBaAFNMVb/U4oNP1OXOGH61kNvseX+jA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkQwNi8xQ0VDQjE4QUEw MDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBfVTVjNFlmcldRMi14NWY2 TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4VnY5VGlnMF9VNWM0WWZyV1EyLXg1ZjZNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkQwNi8xQ0VDQjE4QUEwMDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBf VTVjNFlmcldRMi14NWY2TUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0L0wgVEk8npDmOCAJNAjb27ytlooxpuFxnlCArY/8d7Q5/qocYp4o JCD0QQVUQeniNBnIpyuxJWsUk53qVkRu+fTIP1iXHgEtOzTloUjigYsmpNgYaMUp FD7i3+lMfzi4ujnQB76xknRu1CQpMhvvJCu/kFIgzx1vUz9pWtgyuY5RJ7A4EQuB 49iykv7oP6ffXRG32A58nRHFofcYTk6BgvHGXTnM6ijCeYE8uImlC5oudAhm7zcm UIPZlQ8TlyMkCpHMXzJgJ/4prXHN/gTMwOMqHPDDZzLQ29at9gbNjGFC21t5rbBl hOJjpekhby89Ra8V25pem0mtN0rrR8dp -----END CERTIFICATE-----Generated at Sun Aug 10 18:18:57 2025 by rpki-client