$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft File: S9XCMYZ-JzlRVcAceEizsByGBvI.mft (raw, json) Hash identifier: rAyA5ZG90pjd+AiBdkKtojxjHU+a0eC6SKJDTjHOAgc= Subject key identifier: 61:7E:ED:22:61:83:98:4B:AA:9E:8A:85:B1:F7:E0:1F:F5:C3:46:ED Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft Manifest number: 03FA Signing time: Mon 11 Aug 2025 00:39:27 +0000 Manifest this update: Mon 11 Aug 2025 00:39:26 +0000 Manifest next update: Mon 18 Aug 2025 00:39:26 +0000 Files and hashes: 1: S9XCMYZ-JzlRVcAceEizsByGBvI.crl (hash: z6PfxrzUCZRcU1fAn95xBW/BVonA71DoVa53gc4n2ik=) 2: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (hash: /ks11M81kp4oGi/uf6+uil4xz+jgg1PhbFjvxN9fgAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Validity Not Before: Aug 11 00:39:26 2025 GMT Not After : Aug 18 00:39:26 2025 GMT Subject: CN=68993bbf-239e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:f0:38:89:fc:e2:c6:d3:f8:5c:dc:b0:6f: c2:9d:26:06:26:e7:57:cd:36:92:9c:b4:cc:fa:d3: bc:17:f3:9f:6c:f1:ad:3c:c5:61:1d:66:d7:78:3b: 19:dc:b1:6e:c4:db:c0:b0:60:0c:ac:9d:58:fc:eb: 4b:00:1f:ea:20:6c:d3:47:16:0f:01:23:a0:51:b1: c1:96:21:b7:58:d8:56:68:10:08:7a:fe:4e:35:45: c5:96:b3:2d:32:82:61:e2:3e:cb:6f:fc:4c:0f:c4: 98:b9:8c:a3:08:ce:2b:3e:35:7a:67:56:bd:ff:bf: 3a:95:7c:43:c7:81:14:56:37:24:bb:7a:76:bc:f2: a2:dc:97:9c:af:cc:a6:d6:e5:ef:c2:ba:f9:83:32: 7e:8e:1a:90:56:e9:09:0a:3d:bf:8a:61:5c:d4:81: 2a:86:1b:2b:14:51:41:4e:79:4c:ec:fa:0b:88:ce: c8:d0:91:b0:e6:d8:ad:7c:4c:34:b0:58:ef:1e:fc: e7:67:81:c2:81:6e:b5:9e:4e:d3:2d:46:94:7d:04: 2a:45:2b:14:9e:64:24:94:d7:34:02:b9:62:23:8c: a0:6e:e6:4f:97:d9:de:b2:46:69:c1:1b:ef:f5:ce: be:65:8d:9f:ba:f5:de:ef:61:48:c5:24:3b:dc:0b: 10:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7E:ED:22:61:83:98:4B:AA:9E:8A:85:B1:F7:E0:1F:F5:C3:46:ED X509v3 Authority Key Identifier: keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:5c:9c:53:15:1d:c5:86:1c:13:e2:16:ec:f6:b1:9c:69:6b: 88:25:88:3e:82:37:75:71:1b:48:fe:2b:9a:51:79:df:7a:ce: 99:14:15:aa:1a:3e:f5:23:1b:ca:21:38:08:c6:f6:3a:55:30: 24:3a:14:4a:78:5c:06:04:74:da:5f:42:29:ce:c9:cc:84:51: 95:2b:4e:63:44:ef:7a:aa:15:e2:ab:09:49:fd:99:99:8e:13: 9d:47:a9:1a:0a:ea:1f:ba:d9:4b:44:e1:07:3c:31:6b:a0:7a: a8:99:b9:87:2d:97:85:48:82:a9:50:43:0a:a4:4a:e1:ed:ae: 09:2f:44:09:94:38:4f:d3:fe:99:d3:6e:80:a8:79:f1:2d:55: 72:87:90:bb:23:3f:6d:80:1b:a4:8f:38:ce:90:0b:00:b7:4c: 42:c3:7e:1d:73:00:9c:3c:c1:d9:7f:d3:56:b8:53:7c:ed:e9: 37:f2:cb:02:32:ff:f3:a0:90:7a:ec:80:b1:e7:63:fc:5b:57: 19:51:07:44:aa:f2:6a:2e:96:f9:b1:c3:b0:c7:de:f9:fd:8c: 6c:7f:d6:65:ca:33:24:f7:a9:4f:b2:c9:4a:bd:a5:07:4a:d8: 07:00:df:37:db:e9:11:9a:99:f2:1d:b8:be:d4:3d:29:24:59: 66:7f:3e:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRTExMTAvBgNVBAUTKDRCRDVDMjMxODY3RTI3Mzk1MTU1QzAxQzc4NDhCM0Iw MUM4NjA2RjIwHhcNMjUwODExMDAzOTI2WhcNMjUwODE4MDAzOTI2WjAYMRYwFAYD VQQDEw02ODk5M2JiZi0yMzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEvwOIn84sbT+FzcsG/CnSYGJudXzTaSnLTM+tO8F/OfbPGtPMVhHWbXeDsZ 3LFuxNvAsGAMrJ1Y/OtLAB/qIGzTRxYPASOgUbHBliG3WNhWaBAIev5ONUXFlrMt MoJh4j7Lb/xMD8SYuYyjCM4rPjV6Z1a9/786lXxDx4EUVjcku3p2vPKi3Jecr8ym 1uXvwrr5gzJ+jhqQVukJCj2/imFc1IEqhhsrFFFBTnlM7PoLiM7I0JGw5titfEw0 sFjvHvznZ4HCgW61nk7TLUaUfQQqRSsUnmQklNc0ArliI4ygbuZPl9neskZpwRvv 9c6+ZY2fuvXe72FIxSQ73AsQfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGF+7SJh g5hLqp6KhbH34B/1w0btMB8GA1UdIwQYMBaAFEvVwjGGfic5UVXAHHhIs7Achgby MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFMS85RTY2MDM0Qzg0 QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6bFJWY0FjZUVpenNCeUdC dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5WENNWVotSnpsUlZjQWNlRWl6c0J5R0J2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFMS85RTY2MDM0Qzg0QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6 bFJWY0FjZUVpenNCeUdCdkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSXJxTFR3FhhwT4hbs9rGcaWuIJYg+gjd1cRtI/iuaUXnfes6ZFBWq Gj71IxvKITgIxvY6VTAkOhRKeFwGBHTaX0IpzsnMhFGVK05jRO96qhXiqwlJ/ZmZ jhOdR6kaCuofutlLROEHPDFroHqombmHLZeFSIKpUEMKpErh7a4JL0QJlDhP0/6Z 026AqHnxLVVyh5C7Iz9tgBukjzjOkAsAt0xCw34dcwCcPMHZf9NWuFN87ek38ssC Mv/zoJB67ICx52P8W1cZUQdEqvJqLpb5scOwx975/Yxsf9ZlyjMk96lPsslKvaUH StgHAN832+kRmpnyHbi+1D0pJFlmfz7u -----END CERTIFICATE-----Generated at Mon Aug 11 04:11:56 2025 by rpki-client