$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json) Hash identifier: CPca5qfVDvQzf3UJZCBlzk2YnBmA4SHU6sxC/flHt1M= Subject key identifier: 21:2A:C8:C8:6F:E3:36:D2:08:92:C8:BA:C1:D7:4C:74:76:AE:D2:78 Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0CE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft Manifest number: 0CC9 Signing time: Sun 10 Aug 2025 18:07:29 +0000 Manifest this update: Sun 10 Aug 2025 18:07:28 +0000 Manifest next update: Sun 17 Aug 2025 18:07:28 +0000 Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: KelN6xgiVPdKQ981WAnW9n86glvcWInZ/PKfoxeRdrA=) 2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: HUKn8TCAiBNnvKqCcCok66Nsu0wRIivvDnUfIyEmyBw=) 3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: +UszTokGWITuaKodHVqtXowS/kPpAyLOoDwxxniGhh8=) 4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: va4jKyvaWBHSOXW9lhNLFk3dXPhiBg3Z1DqKqXpZves=) 5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: PI+4io6zs54SvjfIWW1YmDzNzGjU5q2yfd6LaVWJgGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3301 (0xce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: Aug 10 18:07:28 2025 GMT Not After : Aug 17 18:07:28 2025 GMT Subject: CN=6898dfe0-0945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7b:e2:65:e0:d5:45:e6:36:a3:b3:00:46:ba: 93:f3:5e:d7:76:e0:18:ca:08:97:ac:bf:c9:fc:15: f1:95:81:64:86:6e:45:8b:fc:40:2e:39:2c:af:49: f9:93:84:b5:d7:9e:cf:13:8a:1b:4b:1c:21:de:15: a6:c0:99:ee:7f:8e:15:3f:36:da:38:e1:d6:0e:d0: 97:f6:81:d7:d7:a2:2b:a2:8c:7c:cd:9b:58:0a:63: bd:d3:1f:70:df:c8:01:02:2a:36:c1:87:1d:1d:27: 44:6f:c3:90:7b:4f:b6:01:87:a2:d3:3a:a2:21:4a: 51:d9:8a:8a:e7:5f:c1:e7:40:31:40:47:be:0e:91: 15:f0:67:29:07:63:6d:67:a0:90:82:3a:e4:a7:d4: 30:d9:56:88:c5:4e:32:ea:6e:5f:1f:f0:fd:7e:20: c6:19:b9:a7:fd:5c:ce:b5:a8:0d:d1:27:b8:56:14: ce:5b:dc:d0:b8:2b:52:eb:b8:87:e9:8c:fe:1b:ae: f4:d7:3b:2a:c0:38:dd:68:cd:96:f2:d7:8c:14:51: 92:97:0f:d1:72:32:ef:a1:92:4a:42:75:9d:01:c2: 10:12:c1:08:bf:53:74:44:65:85:b2:3e:db:0e:06: 2a:63:41:5f:5d:8d:8c:e2:31:ce:fb:7e:63:a5:5a: ed:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2A:C8:C8:6F:E3:36:D2:08:92:C8:BA:C1:D7:4C:74:76:AE:D2:78 X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d4:91:ae:97:cf:72:00:0b:31:cd:51:ce:19:dc:9d:cf:1a: 47:c1:41:f8:9a:96:cd:32:04:67:61:b2:66:93:19:df:e4:1a: da:7e:c1:c2:40:c7:ba:ed:f1:cb:51:6b:74:22:99:9a:22:af: 1d:76:88:17:be:67:6c:c0:14:00:65:ac:32:49:41:26:d2:0b: 2c:10:0e:51:2d:da:b3:25:df:f4:0d:58:a3:f3:6d:8f:69:e4: 86:d9:2a:e5:1b:fa:dc:09:45:68:28:50:03:5e:76:2a:f9:9a: d9:96:12:72:cb:8a:0b:3b:2f:02:0c:34:90:3e:2a:40:81:13: b2:b6:4e:63:9d:02:f4:bf:5a:f1:73:5b:ec:88:07:05:f2:ca: 1b:90:89:7c:bb:14:27:b9:b2:18:cb:83:88:c8:67:f1:fc:27: 0e:8f:a8:e8:1a:9d:23:97:72:e9:c6:8a:de:f1:13:6e:e5:3f: 54:53:04:e8:0f:21:30:97:4b:be:16:c1:8c:c6:d2:d9:ea:f5: 00:d6:6b:02:8f:e5:be:89:de:25:7a:52:1d:1a:99:72:b8:67: 13:fd:79:18:83:e2:37:0e:25:eb:25:40:ef:61:52:c8:f9:09: bc:09:c1:f3:8d:5c:65:35:46:4e:0c:14:91:14:29:93:3b:4d: ef:87:d7:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjUwODEwMTgwNzI4WhcNMjUwODE3MTgwNzI4WjAYMRYwFAYD VQQDEw02ODk4ZGZlMC0wOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnnviZeDVReY2o7MARrqT817XduAYygiXrL/J/BXxlYFkhm5Fi/xALjksr0n5 k4S1157PE4obSxwh3hWmwJnuf44VPzbaOOHWDtCX9oHX16Iroox8zZtYCmO90x9w 38gBAio2wYcdHSdEb8OQe0+2AYei0zqiIUpR2YqK51/B50AxQEe+DpEV8GcpB2Nt Z6CQgjrkp9Qw2VaIxU4y6m5fH/D9fiDGGbmn/VzOtagN0Se4VhTOW9zQuCtS67iH 6Yz+G6701zsqwDjdaM2W8teMFFGSlw/RcjLvoZJKQnWdAcIQEsEIv1N0RGWFsj7b DgYqY0FfXY2M4jHO+35jpVrtfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEqyMhv 4zbSCJLIusHXTHR2rtJ4MB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0 NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs1JGul89yAAsxzVHOGdydzxpHwUH4mpbNMgRnYbJmkxnf5BrafsHC QMe67fHLUWt0IpmaIq8ddogXvmdswBQAZawySUEm0gssEA5RLdqzJd/0DVij822P aeSG2SrlG/rcCUVoKFADXnYq+ZrZlhJyy4oLOy8CDDSQPipAgROytk5jnQL0v1rx c1vsiAcF8sobkIl8uxQnubIYy4OIyGfx/CcOj6joGp0jl3Lpxore8RNu5T9UUwTo DyEwl0u+FsGMxtLZ6vUA1msCj+W+id4lelIdGplyuGcT/XkYg+I3DiXrJUDvYVLI +Qm8CcHzjVxlNUZODBSRFCmTO03vh9cK -----END CERTIFICATE-----Generated at Mon Aug 11 08:07:49 2025 by rpki-client