$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json) Hash identifier: mbr7M1XV3dd8Rtm7yujv3o3zEvjDiJv9IK53Vc+PyAA= Subject key identifier: 43:F3:9A:7A:5D:75:FD:B1:BE:42:2A:A9:BB:96:7C:DC:0A:99:43:D3 Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft Manifest number: 0563 Signing time: Wed 06 Aug 2025 23:48:16 +0000 Manifest this update: Wed 06 Aug 2025 23:48:16 +0000 Manifest next update: Wed 13 Aug 2025 23:48:16 +0000 Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: fcUrgOfq5FtWSxVlFyN0wsNk3ukCJLrKVl0I1DPYfBo=) 2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: LSj0rBxO9Z29e6JUXgqXeUATalGSgm5CqWXMd5B6WOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 23:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164655, serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Validity Not Before: Aug 6 23:48:16 2025 GMT Not After : Aug 13 23:48:16 2025 GMT Subject: CN=6893e9c0-5f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:04:cb:9b:d9:0f:82:30:c9:c6:a5:d9:5a: a3:11:58:5d:c6:dd:f2:0c:a3:b1:15:a2:a9:52:74: ce:21:37:b8:d6:82:63:02:f5:f5:cf:d1:f9:df:96: 26:f6:e5:e9:c0:26:cd:d5:88:e0:b8:5d:0f:37:43: be:5b:38:e0:ac:89:9a:6d:94:e0:d2:2c:4a:b7:0d: 6b:45:6b:19:dc:54:90:c7:fa:4a:cc:6b:34:2c:d1: c5:f3:21:f3:89:1f:ba:81:f5:35:3c:7d:19:01:da: 1c:56:b6:22:af:ee:68:9b:bb:e5:6a:fe:38:09:86: 11:95:6b:6e:6d:dc:88:df:be:2b:da:18:97:1b:a8: 3e:34:52:90:23:9c:c8:3e:32:5b:29:88:16:e9:19: c5:23:e2:3f:9f:c6:e0:87:eb:26:78:88:54:49:1f: d4:a4:e7:ab:84:be:9a:8b:b1:21:3a:00:57:ce:a7: e2:10:0b:76:08:6c:38:ee:42:b6:fb:4d:44:f7:bd: 76:9f:76:65:d2:7e:9b:59:ff:4a:f2:93:8d:f8:7d: 36:a5:b3:d3:bf:42:4f:aa:5f:25:4b:21:3e:0e:1d: 03:97:a7:f1:ac:48:26:33:69:cf:92:e0:f1:ba:cf: 06:a1:85:f4:a3:01:f7:16:e3:87:01:32:ba:89:64: 4c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F3:9A:7A:5D:75:FD:B1:BE:42:2A:A9:BB:96:7C:DC:0A:99:43:D3 X509v3 Authority Key Identifier: keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:b9:d6:d1:e4:ca:8b:32:97:7e:b6:73:c6:1a:ab:2b:cc:e4: 2a:6a:84:5f:46:02:a0:b8:18:93:5a:fd:6d:bf:1e:36:12:8f: 06:bc:b7:8d:c5:14:ed:14:d8:04:0b:d5:e2:f8:dc:5d:b9:17: a1:40:90:04:af:72:dc:59:d2:b7:c7:6e:88:db:9e:c9:ad:72: 64:b8:03:0d:95:4f:df:d7:bd:a4:bf:58:74:77:9c:60:31:7b: 45:cf:a9:a6:02:00:29:fc:d9:ee:68:21:1c:1b:61:c6:3a:73: 3d:b6:b6:a8:d1:f3:8e:48:f1:b0:ad:eb:e8:7a:37:f1:d5:68: 26:dc:6d:a8:59:e8:d4:ca:27:b2:07:6d:0d:c6:a2:88:d6:63: 62:70:b4:93:2c:1f:c0:e2:04:cc:ed:4e:43:08:0f:59:e7:b5: c6:ce:a5:e6:87:ef:db:69:62:80:38:08:4f:07:1b:09:4c:80: 44:07:d8:a6:24:cf:6b:af:fb:f7:28:17:36:a1:95:1e:f4:42: 7e:2d:ad:a7:64:98:ad:a8:71:9c:54:95:bf:5b:2b:a7:03:ee: ec:dc:a4:b3:4d:fd:11:da:26:dd:29:9e:f7:3d:19:bc:ea:23: db:b1:93:14:de:8a:b5:df:4b:6a:7b:18:29:c4:9a:7f:f6:b2: 7a:82:84:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NTUxMTAvBgNVBAUTKDZCRDE0NUVDRTQyQUU0RkQ4MkFENjdDRkQxQTQwNTlB OUVBQjNBNkQwHhcNMjUwODA2MjM0ODE2WhcNMjUwODEzMjM0ODE2WjAYMRYwFAYD VQQDEw02ODkzZTljMC01ZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOAEy5vZD4Iwycal2VqjEVhdxt3yDKOxFaKpUnTOITe41oJjAvX1z9H535Ym 9uXpwCbN1YjguF0PN0O+WzjgrImabZTg0ixKtw1rRWsZ3FSQx/pKzGs0LNHF8yHz iR+6gfU1PH0ZAdocVrYir+5om7vlav44CYYRlWtubdyI374r2hiXG6g+NFKQI5zI PjJbKYgW6RnFI+I/n8bgh+smeIhUSR/UpOerhL6ai7EhOgBXzqfiEAt2CGw47kK2 +01E9712n3Zl0n6bWf9K8pON+H02pbPTv0JPql8lSyE+Dh0Dl6fxrEgmM2nPkuDx us8GoYX0owH3FuOHATK6iWRMrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPzmnpd df2xvkIqqbuWfNwKmUPTMB8GA1UdIwQYMBaAFGvRRezkKuT9gq1nz9GkBZqeqzpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY1NS9EOEJCODQ5QUYz REUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQMkNyV2ZQMGFRRm1wNnJP bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5RkY3T1FxNVAyQ3JXZlAwYVFGbXA2ck9tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY1NS9EOEJCODQ5QUYzREUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQ MkNyV2ZQMGFRRm1wNnJPbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6udbR5MqLMpd+tnPGGqsrzOQqaoRfRgKguBiTWv1tvx42Eo8GvLeN xRTtFNgEC9Xi+NxduRehQJAEr3LcWdK3x26I257JrXJkuAMNlU/f172kv1h0d5xg MXtFz6mmAgAp/NnuaCEcG2HGOnM9trao0fOOSPGwrevoejfx1Wgm3G2oWejUyiey B20NxqKI1mNicLSTLB/A4gTM7U5DCA9Z57XGzqXmh+/baWKAOAhPBxsJTIBEB9im JM9rr/v3KBc2oZUe9EJ+La2nZJitqHGcVJW/WyunA+7s3KSzTf0R2ibdKZ73PRm8 6iPbsZMU3oq130tqexgpxJp/9rJ6goQI -----END CERTIFICATE-----Generated at Fri Aug 8 00:39:41 2025 by rpki-client