$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft File: a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft (raw, json) Hash identifier: oKN6HjuDiAyRc9FyG/Qrjp13ePiLp2nXb6OpIJ5hqPQ= Subject key identifier: A3:E0:5F:C0:FA:45:25:1E:41:4E:49:1B:EE:C7:6D:40:86:5E:63:C4 Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E Certificate issuer: /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft Manifest number: 01C0 Signing time: Sat 09 Aug 2025 03:22:06 +0000 Manifest this update: Sat 09 Aug 2025 03:22:06 +0000 Manifest next update: Sat 16 Aug 2025 03:22:06 +0000 Files and hashes: 1: a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl (hash: asMZ6TTOWceTcK4FqR5nz1MWmhd2Gy9ML4E4BJH1Z+g=) 2: A92EC53AC95B11ED9ABE6935C4F9AE02.roa (hash: gnoiGXKkrmhYTwfXU41IB03BpkGU00B0FHz74SrCkdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165BD7, serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E Validity Not Before: Aug 9 03:22:06 2025 GMT Not After : Aug 16 03:22:06 2025 GMT Subject: CN=6896bede-bc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:32:20:0b:8e:5d:43:fc:42:5b:1e:8c:22:1e: 97:55:13:a1:69:e4:e2:76:26:ea:a5:c6:74:07:cb: f1:0a:be:42:03:b6:00:7f:17:0b:c0:6a:bd:dd:0b: 63:9c:2b:25:43:18:1d:f1:15:d3:16:8c:0e:72:48: 82:3c:5c:1b:27:b0:cc:d6:65:ae:2f:09:77:75:98: bc:c7:67:68:a1:42:12:2e:3d:00:cd:2c:75:25:cc: 4e:f0:db:53:fc:44:6a:5f:e4:b2:99:a4:24:d3:ef: f1:32:19:12:36:c2:36:62:12:05:2e:a7:1c:23:aa: 06:3a:aa:19:51:bc:c0:14:17:8b:6d:a3:09:0e:2a: f3:b7:81:e7:25:5b:78:ed:9a:59:2a:f9:8f:d7:38: 52:1a:ac:4b:62:94:91:b2:2f:53:51:82:42:d8:78: e2:d0:e1:09:8b:d6:30:40:87:e8:d5:ac:89:cd:b7: 00:36:b8:dc:48:e7:3c:95:43:7a:68:b5:9e:0d:a0: d1:b2:e5:3a:30:7e:50:3e:92:7f:c9:e9:e1:1c:ad: 50:2c:07:d6:0b:a5:69:58:1f:70:62:17:ee:61:23: 3c:f7:93:78:bd:d5:fd:a7:28:74:e3:6e:e4:98:59: 78:5c:b6:2d:42:df:b3:5f:c9:e4:3c:09:ee:1e:a2: dc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E0:5F:C0:FA:45:25:1E:41:4E:49:1B:EE:C7:6D:40:86:5E:63:C4 X509v3 Authority Key Identifier: keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:e2:b9:b8:f1:eb:05:fe:5b:1f:58:cd:15:20:a7:c4:d8:79: e8:33:a1:51:8b:b4:1c:ba:0c:4f:0d:b5:2b:83:11:df:ce:82: d8:be:60:bc:66:a2:c2:8f:83:20:42:6a:09:a3:14:34:61:70: 05:dc:f5:a4:13:e1:cc:6e:a5:ca:5d:8d:18:00:6d:ae:0c:91: 1d:bd:d6:90:10:a7:56:8f:2f:9a:b9:5e:c8:f9:3f:79:bf:82: e1:f8:f9:72:2c:aa:3e:ca:17:21:43:61:c0:26:b5:b0:8e:b6: 1b:07:95:7b:65:65:4a:9b:c5:8b:51:84:2d:0c:f9:f6:4f:87: 10:c9:ed:70:ae:16:00:14:91:0b:da:16:95:93:55:98:3f:d9: c4:a2:08:8f:a4:a1:1b:73:60:e0:54:40:44:ad:45:24:64:9f: 81:4b:88:16:bb:f4:83:22:c7:41:7f:d0:de:15:85:b5:64:f6: 73:7c:f2:c2:94:2a:c7:34:c6:e3:89:6c:ce:10:58:8a:01:e2: 3a:ce:b6:3d:1c:a6:53:26:93:c9:8f:38:eb:03:eb:30:af:de: ec:a0:26:f5:11:77:b8:a3:3c:6a:bb:49:85:9a:0b:1a:61:dc: ee:70:43:9c:5f:98:6e:57:86:32:1e:3d:5d:ab:80:0c:32:72: 94:4e:d2:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCRDcxMTAvBgNVBAUTKDZCNDk1NzY2MkFENEMyMUJENDIyQTg3REI0MUI4QkNG QzlENkREOEUwHhcNMjUwODA5MDMyMjA2WhcNMjUwODE2MDMyMjA2WjAYMRYwFAYD VQQDEw02ODk2YmVkZS1iYzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkjIgC45dQ/xCWx6MIh6XVROhaeTidibqpcZ0B8vxCr5CA7YAfxcLwGq93Qtj nCslQxgd8RXTFowOckiCPFwbJ7DM1mWuLwl3dZi8x2dooUISLj0AzSx1JcxO8NtT /ERqX+SymaQk0+/xMhkSNsI2YhIFLqccI6oGOqoZUbzAFBeLbaMJDirzt4HnJVt4 7ZpZKvmP1zhSGqxLYpSRsi9TUYJC2Hji0OEJi9YwQIfo1ayJzbcANrjcSOc8lUN6 aLWeDaDRsuU6MH5QPpJ/yenhHK1QLAfWC6VpWB9wYhfuYSM895N4vdX9pyh0427k mFl4XLYtQt+zX8nkPAnuHqLcVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPgX8D6 RSUeQU5JG+7HbUCGXmPEMB8GA1UdIwQYMBaAFGtJV2Yq1MIb1CKofbQbi8/J1t2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUJENy84QTYyQzgyQUM5 NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdodlVJcWg5dEJ1THo4blcz WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EwbFhaaXJVd2h2VUlxaDl0QnVMejhuVzNZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUJENy84QTYyQzgyQUM5NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdo dlVJcWg5dEJ1THo4blczWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR4rm48esF/lsfWM0VIKfE2HnoM6FRi7QcugxPDbUrgxHfzoLYvmC8 ZqLCj4MgQmoJoxQ0YXAF3PWkE+HMbqXKXY0YAG2uDJEdvdaQEKdWjy+auV7I+T95 v4Lh+PlyLKo+yhchQ2HAJrWwjrYbB5V7ZWVKm8WLUYQtDPn2T4cQye1wrhYAFJEL 2haVk1WYP9nEogiPpKEbc2DgVEBErUUkZJ+BS4gWu/SDIsdBf9DeFYW1ZPZzfPLC lCrHNMbjiWzOEFiKAeI6zrY9HKZTJpPJjzjrA+swr97soCb1EXe4ozxqu0mFmgsa YdzucEOcX5huV4YyHj1dq4AMMnKUTtK7 -----END CERTIFICATE-----Generated at Mon Aug 11 04:17:05 2025 by rpki-client