$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft File: 9U-AgBarS7BveWqJRmfHC91I-_Y.mft (raw, json) Hash identifier: EztjYDwG5mwTcODTrESbzEE6UyJDkW4guiJwdGTNcHI= Subject key identifier: AA:C6:63:41:EF:37:B1:23:E1:A6:93:1C:6F:17:B4:07:65:10:30:5A Authority key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 Certificate issuer: /CN=A9151932/serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft Manifest number: AC Signing time: Sat 09 Aug 2025 06:35:11 +0000 Manifest this update: Sat 09 Aug 2025 06:35:10 +0000 Manifest next update: Sat 16 Aug 2025 06:35:10 +0000 Files and hashes: 1: 9U-AgBarS7BveWqJRmfHC91I-_Y.crl (hash: Jk1XAnMshJq+9Y5Gv23Li75PpQo0/FZtyGg342oXO10=) 2: 21642FDA720811EF8F352D23C4F9AE02.roa (hash: 3wZO5NpUkTFN/tJddHseNs+Usy8EJHQkjD9s+ZGedQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Validity Not Before: Aug 9 06:35:10 2025 GMT Not After : Aug 16 06:35:10 2025 GMT Subject: CN=6896ec1f-6e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:21:d3:38:94:53:df:a7:e9:6e:9a:8c:a9: 6f:72:5a:e3:1b:0a:1f:82:7c:8f:8b:64:28:64:d7: 98:41:61:11:02:64:6c:57:c5:bf:b1:36:a5:90:c3: f3:84:18:6b:18:9f:04:51:de:f2:91:d7:36:98:d5: c1:57:64:08:ba:59:12:b9:51:95:09:a5:34:f3:57: d3:61:a6:4b:e5:38:8f:f1:5f:ca:67:2d:58:27:91: 17:6a:d9:d1:8e:f6:e1:5b:f1:e1:59:40:ff:30:0b: 7d:c6:6f:59:17:7f:48:ae:76:fd:29:4f:e3:fb:68: a1:9d:21:95:32:0b:21:f6:96:84:d7:75:5d:9b:36: 5b:58:38:29:59:c3:8c:79:41:94:f3:66:dc:b8:0b: 45:5d:df:15:d6:12:ba:fe:d0:41:6c:0d:db:c8:85: 10:d5:4a:b7:9d:ac:91:3f:8d:a7:3a:12:f4:3f:f5: 06:bb:16:a7:f7:95:78:2a:ef:4f:ec:6c:e7:71:77: 12:ea:79:3f:4b:91:cd:09:01:5c:91:02:2d:22:0a: ab:63:cc:a7:3a:dd:8f:57:ce:f0:e6:69:42:5f:ff: e2:16:ff:2b:ef:68:5c:e7:94:0f:43:77:91:6c:24: 28:3c:5f:e4:ac:be:d7:92:6b:c5:a2:14:c8:9d:45: d8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C6:63:41:EF:37:B1:23:E1:A6:93:1C:6F:17:B4:07:65:10:30:5A X509v3 Authority Key Identifier: keyid:F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:bf:9c:e0:06:eb:77:66:25:77:2c:3a:88:ff:63:99:ec:07: d6:16:d4:34:d1:3e:76:af:7c:8c:fd:fe:14:e1:50:ac:28:90: 4b:2b:aa:89:d3:e8:6c:b9:c3:c9:84:52:64:be:eb:ed:f0:7d: 95:2d:9a:e7:21:b0:dd:4a:03:58:cd:fa:f2:fb:1b:7f:2e:86: 95:35:9a:8b:bd:e7:5a:66:ba:27:b8:d2:2f:5c:f2:21:59:eb: bf:74:f6:35:49:1b:d2:e8:43:ff:ae:ac:50:a4:c7:dd:db:e5: a5:24:7f:8b:a0:9e:88:11:68:a7:81:19:f3:7c:75:25:bd:53: 25:c0:8b:a4:7b:04:2d:c4:8d:0b:fd:44:95:1a:b2:30:49:e5: 93:1c:da:af:88:58:d9:ea:1a:74:0a:bf:1c:6f:66:42:38:85: 8f:26:ef:ca:82:19:5f:83:24:07:87:22:c9:0d:13:e5:38:94: 56:8e:47:e1:5d:88:dd:73:20:d7:a1:38:c1:e1:83:86:9a:ac: 01:64:80:c2:b6:bd:ac:86:b0:e7:4b:ca:0e:a1:d2:1b:cc:ee: e0:8a:d4:4b:0b:ab:85:9e:02:76:91:77:b6:05:c6:63:eb:5e: f9:44:4b:b4:d6:85:7a:e6:b6:9a:56:f3:0f:98:ee:26:c8:b2: 71:8f:76:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKEY1NEY4MDgwMTZBQjRCQjA2Rjc5NkE4OTQ2NjdDNzBC REQ0OEZCRjYwHhcNMjUwODA5MDYzNTEwWhcNMjUwODE2MDYzNTEwWjAYMRYwFAYD VQQDEw02ODk2ZWMxZi02ZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyy8h0ziUU9+n6W6ajKlvclrjGwofgnyPi2QoZNeYQWERAmRsV8W/sTalkMPz hBhrGJ8EUd7ykdc2mNXBV2QIulkSuVGVCaU081fTYaZL5TiP8V/KZy1YJ5EXatnR jvbhW/HhWUD/MAt9xm9ZF39Irnb9KU/j+2ihnSGVMgsh9paE13VdmzZbWDgpWcOM eUGU82bcuAtFXd8V1hK6/tBBbA3byIUQ1Uq3nayRP42nOhL0P/UGuxan95V4Ku9P 7GzncXcS6nk/S5HNCQFckQItIgqrY8ynOt2PV87w5mlCX//iFv8r72hc55QPQ3eR bCQoPF/krL7XkmvFohTInUXYMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrGY0Hv N7Ej4aaTHG8XtAdlEDBaMB8GA1UdIwQYMBaAFPVPgIAWq0uwb3lqiUZnxwvdSPv2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi80N0NBMzVFNDcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi85VS1BZ0JhclM3QnZlV3FKUm1mSEM5MUkt X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlVLUFnQmFyUzdCdmVXcUpSbWZIQzkxSS1fWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi80N0NBMzVFNDcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi85VS1BZ0JhclM3 QnZlV3FKUm1mSEM5MUktX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1v5zgBut3ZiV3LDqI/2OZ7AfWFtQ00T52r3yM/f4U4VCsKJBLK6qJ 0+hsucPJhFJkvuvt8H2VLZrnIbDdSgNYzfry+xt/LoaVNZqLvedaZronuNIvXPIh Weu/dPY1SRvS6EP/rqxQpMfd2+WlJH+LoJ6IEWingRnzfHUlvVMlwIukewQtxI0L /USVGrIwSeWTHNqviFjZ6hp0Cr8cb2ZCOIWPJu/KghlfgyQHhyLJDRPlOJRWjkfh XYjdcyDXoTjB4YOGmqwBZIDCtr2shrDnS8oOodIbzO7gitRLC6uFngJ2kXe2BcZj 6175REu01oV65raaVvMPmO4myLJxj3ao -----END CERTIFICATE-----Generated at Sun Aug 10 18:21:54 2025 by rpki-client