$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: JOTyLx6GALmGudatHOtxWO1adfw+ioO/zw6mDnGtKZc= Subject key identifier: E5:70:8C:CC:10:73:AA:DB:A5:D4:47:9D:51:CC:5C:9C:8A:FA:D2:75 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 09EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 09D2 Signing time: Fri 08 Aug 2025 20:19:49 +0000 Manifest this update: Fri 08 Aug 2025 20:19:49 +0000 Manifest next update: Fri 15 Aug 2025 20:19:49 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: yOVFGr4BihvtPTG9EQdRSjYFk36hlNVTj3RmIgL0beg=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: 5Gk4b25F0uq7efelkFmxT/VKGia42LkwXqnCVKORjVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2542 (0x9ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Aug 8 20:19:49 2025 GMT Not After : Aug 15 20:19:49 2025 GMT Subject: CN=68965be5-c25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:76:2e:be:50:fe:a7:ca:1c:d8:a1:ac:48: 6b:66:d1:7f:69:3c:08:ae:c7:fb:09:1b:4a:78:b0: 11:c4:d0:5d:a9:9d:c7:96:a6:ee:d6:51:7a:12:b7: 12:3e:b0:2e:49:e1:72:ea:5e:17:3f:42:15:13:c4: 7f:c8:97:e7:36:c6:50:73:64:8d:5b:92:ee:95:05: 5b:be:83:de:63:f5:e5:19:c8:8b:26:9c:c7:50:f9: 55:fd:41:40:17:4f:5f:f1:da:41:c6:0c:75:34:29: 35:9e:a4:6a:1b:26:68:73:41:1b:82:db:2a:5b:00: 0f:b4:a2:c9:3d:ef:2c:06:e1:d8:aa:53:92:40:22: f2:b5:15:0b:08:fa:3c:19:04:5f:85:b5:c0:66:12: 25:0c:35:e6:36:4e:ed:54:5e:79:33:d0:1c:14:fd: 96:25:9d:db:35:15:b1:5b:ae:03:79:e3:2c:3c:47: e8:ea:ef:05:e2:ab:cc:05:bc:f1:f0:53:f5:bb:b8: 38:18:ad:b6:ca:92:ce:27:29:b5:31:e8:ab:71:ae: 49:0f:4c:ed:5e:71:40:1a:8c:91:0d:f9:3d:b3:fb: d9:90:e4:9e:a0:57:25:8c:06:2f:74:c9:5e:9e:3b: 67:d2:33:b2:fd:e7:fc:5b:b5:c5:ca:1d:61:9a:54: 90:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:70:8C:CC:10:73:AA:DB:A5:D4:47:9D:51:CC:5C:9C:8A:FA:D2:75 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:fd:bb:97:22:f2:07:f2:57:7d:5f:9f:08:8c:35:0d:3c:f6: 77:d7:8c:3d:e1:b5:4b:0f:1e:ed:5c:69:93:38:26:fb:92:82: 49:5b:83:3a:a8:39:15:b9:52:af:99:22:6d:d7:36:88:75:57: ac:f3:c2:ff:f1:43:14:b0:2a:42:0b:05:41:32:4d:18:7d:d9: 47:e5:a4:e3:65:a7:95:4f:c8:a7:58:6d:86:81:f0:38:d2:3a: df:56:cb:5c:f2:4c:53:8e:f9:d1:d9:29:03:d0:a6:60:d4:9a: 5a:9c:2f:9b:b7:e8:c9:d4:ae:ce:99:0f:21:38:c0:30:d2:23: 0c:c1:70:d5:54:89:12:84:b1:14:71:93:80:99:0e:94:f0:e4: 4e:fd:e2:61:f3:b3:df:b0:47:2a:73:a4:47:39:36:76:2c:67: 11:90:47:07:a4:58:c7:b3:16:6e:87:40:23:2d:c5:a3:e5:49: 38:b3:9e:b1:fe:db:c9:23:fe:0c:e9:9a:a5:1c:fc:9b:83:0c: 0e:85:57:b5:37:02:dc:8b:73:aa:0a:03:65:0c:68:d9:71:da: 29:89:8c:e8:b5:95:51:7e:3d:fa:9c:47:20:7a:d2:b4:99:c5: 3a:bb:ea:4c:7b:c2:57:08:5e:c0:e3:24:2b:96:88:d9:23:65: 3e:c7:40:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjUwODA4MjAxOTQ5WhcNMjUwODE1MjAxOTQ5WjAYMRYwFAYD VQQDEw02ODk2NWJlNS1jMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0h2Lr5Q/qfKHNihrEhrZtF/aTwIrsf7CRtKeLARxNBdqZ3Hlqbu1lF6ErcS PrAuSeFy6l4XP0IVE8R/yJfnNsZQc2SNW5LulQVbvoPeY/XlGciLJpzHUPlV/UFA F09f8dpBxgx1NCk1nqRqGyZoc0EbgtsqWwAPtKLJPe8sBuHYqlOSQCLytRULCPo8 GQRfhbXAZhIlDDXmNk7tVF55M9AcFP2WJZ3bNRWxW64DeeMsPEfo6u8F4qvMBbzx 8FP1u7g4GK22ypLOJym1Meirca5JD0ztXnFAGoyRDfk9s/vZkOSeoFcljAYvdMle njtn0jOy/ef8W7XFyh1hmlSQ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVwjMwQ c6rbpdRHnVHMXJyK+tJ1MB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz/buXIvIH8ld9X58IjDUNPPZ314w94bVLDx7tXGmTOCb7koJJW4M6 qDkVuVKvmSJt1zaIdVes88L/8UMUsCpCCwVBMk0YfdlH5aTjZaeVT8inWG2GgfA4 0jrfVstc8kxTjvnR2SkD0KZg1JpanC+bt+jJ1K7OmQ8hOMAw0iMMwXDVVIkShLEU cZOAmQ6U8ORO/eJh87PfsEcqc6RHOTZ2LGcRkEcHpFjHsxZuh0AjLcWj5Uk4s56x /tvJI/4M6ZqlHPybgwwOhVe1NwLci3OqCgNlDGjZcdopiYzotZVRfj36nEcgetK0 mcU6u+pMe8JXCF7A4yQrlojZI2U+x0Cf -----END CERTIFICATE-----Generated at Sun Aug 10 16:02:08 2025 by rpki-client