$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json) Hash identifier: moenA5tIU7x86r2tJMgTxqKBdHMApxswKmBJJuzQ1yk= Subject key identifier: E5:16:B1:AF:A4:32:AB:1D:0F:6F:E4:67:BE:1B:40:B6:CF:C5:75:DD Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft Manifest number: 0184 Signing time: Sat 09 Aug 2025 03:59:07 +0000 Manifest this update: Sat 09 Aug 2025 03:59:07 +0000 Manifest next update: Sat 16 Aug 2025 03:59:07 +0000 Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: okzEib0UUGjtGPIFiIjjEtq+RM5ci7mkjiSbOiHL5lM=) 2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: dKoEMXA8fRTWxjeYqmYYgyMSw9H1lwIw8Fa9EYm/xNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Validity Not Before: Aug 9 03:59:07 2025 GMT Not After : Aug 16 03:59:07 2025 GMT Subject: CN=6896c78b-a04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:05:f7:a1:4a:04:d1:02:01:56:72:0d:53: d3:3f:02:ed:5f:eb:75:60:ba:98:2d:01:7a:6e:cf: c4:4c:69:b8:26:29:1a:62:8c:f5:d9:be:af:d0:85: ea:62:82:4f:a5:c0:9c:7e:32:f3:5c:98:26:57:86: 58:08:ce:55:fb:99:ef:f9:00:9c:ec:cc:50:49:52: f3:fa:9c:4a:6e:10:00:16:e4:fe:c6:c5:24:95:27: fa:fb:d5:25:d0:f3:e8:25:4c:66:b7:2a:18:ea:9c: 19:f0:76:56:5c:52:0e:ef:86:54:7d:2b:e3:a9:38: 22:dc:dc:24:07:41:69:48:0e:cc:41:59:4e:ea:47: c8:b9:67:f4:32:ba:4d:f3:a9:94:96:45:58:18:05: 2c:24:fa:12:7f:c9:95:fe:40:3d:76:39:00:8f:ba: c5:5e:b7:89:ed:8b:0d:c6:27:e5:73:99:e7:b1:17: e5:ae:86:5a:4d:7f:f1:3a:22:f9:5c:93:4a:09:9f: e9:65:79:a4:7f:d2:02:15:3b:3d:db:bd:1e:e9:91: 5f:78:65:a0:f3:84:5e:fe:b5:ed:d3:4c:48:6d:57: 25:13:7c:8c:1c:d4:a2:a6:5e:c0:66:2f:78:32:ca: d1:f8:44:b7:a8:a2:1f:78:b0:2b:ee:8d:ae:bb:f8: 85:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:16:B1:AF:A4:32:AB:1D:0F:6F:E4:67:BE:1B:40:B6:CF:C5:75:DD X509v3 Authority Key Identifier: keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:b6:cd:f4:3a:3c:1b:cc:c5:73:23:69:28:41:ee:32:b1:e2: 5c:7b:fc:22:13:fc:3f:11:fb:6f:75:3e:35:80:d6:64:69:6d: fc:cb:d4:73:0d:47:6b:e4:c7:1d:4e:e6:f5:96:a6:74:ee:28: ae:d9:21:41:4b:2a:04:58:ba:9f:59:54:88:fe:99:44:33:00: 40:9b:f5:09:11:ac:3a:b4:4f:e2:6d:c0:14:8f:eb:f1:fd:5d: 98:b3:1e:8b:dd:ea:b5:74:cd:21:c9:12:72:a6:69:16:52:38: 43:27:07:11:ff:70:94:87:f7:03:34:77:8b:a0:20:11:dd:d5: f9:80:14:ef:54:73:d3:b9:ff:e8:fc:0c:01:7c:58:2b:7b:ad: c1:ae:50:43:96:c2:7e:8a:ca:b5:93:10:41:cb:c0:f9:4b:c7: 98:f5:c0:1a:61:9a:98:c3:d6:0f:1e:56:bf:f8:b3:08:47:52: 90:58:58:89:7d:3e:9d:de:b5:0e:1a:d4:c3:e7:a4:67:18:f4: f9:a0:10:48:1e:45:77:96:2a:5c:df:6d:41:7b:a0:46:56:99: 3f:43:09:0e:83:fd:b0:33:77:37:da:b9:5f:3d:e3:85:ca:c3: 99:90:37:d9:39:fc:9f:32:7f:c1:5f:52:31:54:71:91:d3:7f: 5a:12:ef:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QTIxMTAvBgNVBAUTKEY2OERDRUQyRTYwMkY0NDY1Njc0MTA5OTRBOEU4QzAy MTAwOUVEODkwHhcNMjUwODA5MDM1OTA3WhcNMjUwODE2MDM1OTA3WjAYMRYwFAYD VQQDEw02ODk2Yzc4Yi1hMDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutkF96FKBNECAVZyDVPTPwLtX+t1YLqYLQF6bs/ETGm4JikaYoz12b6v0IXq YoJPpcCcfjLzXJgmV4ZYCM5V+5nv+QCc7MxQSVLz+pxKbhAAFuT+xsUklSf6+9Ul 0PPoJUxmtyoY6pwZ8HZWXFIO74ZUfSvjqTgi3NwkB0FpSA7MQVlO6kfIuWf0MrpN 86mUlkVYGAUsJPoSf8mV/kA9djkAj7rFXreJ7YsNxiflc5nnsRflroZaTX/xOiL5 XJNKCZ/pZXmkf9ICFTs9270e6ZFfeGWg84Re/rXt00xIbVclE3yMHNSipl7AZi94 MsrR+ES3qKIfeLAr7o2uu/iFIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUWsa+k MqsdD2/kZ74bQLbPxXXdMB8GA1UdIwQYMBaAFPaNztLmAvRGVnQQmUqOjAIQCe2J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdBMi80MDZCNjEwMDI2 QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlFWldkQkNaU282TUFoQUo3 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvM08wdVlDOUVaV2RCQ1pTbzZNQWhBSjdZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdBMi80MDZCNjEwMDI2QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlF WldkQkNaU282TUFoQUo3WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRts30OjwbzMVzI2koQe4yseJce/wiE/w/EftvdT41gNZkaW38y9Rz DUdr5McdTub1lqZ07iiu2SFBSyoEWLqfWVSI/plEMwBAm/UJEaw6tE/ibcAUj+vx /V2Ysx6L3eq1dM0hyRJypmkWUjhDJwcR/3CUh/cDNHeLoCAR3dX5gBTvVHPTuf/o /AwBfFgre63BrlBDlsJ+isq1kxBBy8D5S8eY9cAaYZqYw9YPHla/+LMIR1KQWFiJ fT6d3rUOGtTD56RnGPT5oBBIHkV3lipc321Be6BGVpk/QwkOg/2wM3c32rlfPeOF ysOZkDfZOfyfMn/BX1IxVHGR039aEu+U -----END CERTIFICATE-----Generated at Sat Aug 9 23:08:35 2025 by rpki-client