$ rpki-client -vvf rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft File: f99iGPoBXQoAdKhEJFGAaij53fU.mft (raw, json) Hash identifier: BSTVWhDX4byvkbpwL2X45HJD7fsuhq4YQdlIsDo8R6s= Subject key identifier: E9:77:7B:C7:6B:71:A9:6D:24:69:C9:69:3C:57:86:3D:E2:06:F1:DA Authority key identifier: 7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5 Certificate issuer: /CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5 Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft Manifest number: 07C9 Signing time: Fri 08 Aug 2025 21:31:44 +0000 Manifest this update: Fri 08 Aug 2025 21:31:44 +0000 Manifest next update: Fri 15 Aug 2025 21:31:44 +0000 Files and hashes: 1: f99iGPoBXQoAdKhEJFGAaij53fU.crl (hash: rtO7kyAoPFQcp3+j0McNnHSGhNXMPUAjTsSMKclRI0U=) 2: 7FAEDE3A03B411EBBB548A5EC4F9AE02.roa (hash: zYkuWCX1X2lloXdYhvISAPhidi7ivs3H5XjhpAN4fng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173060, serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5 Validity Not Before: Aug 8 21:31:44 2025 GMT Not After : Aug 15 21:31:44 2025 GMT Subject: CN=68966cc0-da8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:6b:b2:e9:63:10:7f:ce:7c:9a:9a:c5:81: b9:60:eb:be:23:31:1b:dc:73:00:1a:d3:7d:2f:a3: 6e:45:81:80:ae:82:a5:98:87:ae:f7:93:d9:2f:67: 66:54:b7:b5:fd:bb:34:67:4f:f0:22:df:0d:d9:14: 7b:88:f9:5e:a9:d0:17:29:09:0a:94:17:02:6d:cb: 82:0a:6a:17:be:23:66:53:35:43:17:95:7a:4c:4d: 04:56:d8:8b:54:bf:01:63:82:b0:88:7c:66:1b:c7: 01:a8:55:b8:0e:4d:4c:b6:1a:f4:1b:29:92:90:81: 38:77:5f:a0:43:95:38:b8:01:27:21:0a:de:fc:63: d0:c6:15:71:df:d6:cc:eb:b8:90:0e:0e:c8:06:24: 3b:ae:f1:e8:59:7e:15:84:cf:04:eb:97:b2:59:89: 37:12:17:aa:f3:69:1a:37:e1:f1:12:b3:65:30:17: a1:1d:37:1b:bc:06:81:30:0e:bf:c8:9d:71:dc:8a: b1:e8:3c:46:08:93:ee:98:74:7c:df:ae:e0:41:85: 59:93:60:83:ec:08:47:26:cf:c9:32:09:17:1c:13: a4:aa:ee:8c:c2:e6:77:10:81:94:64:0f:57:f8:54: 72:be:7a:01:c7:57:71:15:e4:d3:14:71:24:73:8e: 46:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:77:7B:C7:6B:71:A9:6D:24:69:C9:69:3C:57:86:3D:E2:06:F1:DA X509v3 Authority Key Identifier: keyid:7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9d:78:ce:a8:ac:30:a4:39:07:16:73:b1:af:c8:48:e4:c1: ec:09:d9:cd:ef:98:14:d7:bb:7e:84:a0:c5:01:8b:32:72:7e: 6c:65:17:5b:6e:9c:d6:99:79:6c:7c:5d:57:ba:6f:1e:83:53: b3:b5:63:3c:e5:4e:e3:64:9b:87:72:32:1a:cc:8f:6f:f1:90: 22:54:49:c9:db:21:9b:1a:d0:61:6a:09:20:91:85:ca:e4:36: 73:68:25:d2:1c:8f:1a:7b:79:7a:7b:50:52:7e:62:43:47:27: 05:11:54:08:f7:91:d7:86:a8:b0:e4:28:a7:b6:83:70:d9:f7: d2:87:37:77:03:af:ab:a4:cd:66:58:8b:be:12:53:3f:12:62: 6b:7e:6e:3a:6d:d2:9c:1f:cc:b7:1f:4a:8a:54:d7:e4:75:63: 1c:25:15:72:55:55:4d:a0:c4:9d:d0:92:ff:25:0e:9b:a0:ed: 44:6c:1a:d8:e8:0f:75:56:ae:dc:37:d8:9f:62:34:ee:8b:62: 7e:4d:f8:22:95:ab:2e:0e:77:e9:f6:f5:3f:93:f5:ef:32:70: 3f:88:f9:04:5b:fb:fa:56:25:d0:14:ca:51:27:8b:ba:86:57: 5f:6d:a0:f2:56:08:3b:ef:fc:f2:a4:78:e0:99:7c:95:75:2d: 9c:c3:5e:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMwNjAxMTAvBgNVBAUTKDdGREY2MjE4RkEwMTVEMEEwMDc0QTg0NDI0NTE4MDZB MjhGOURERjUwHhcNMjUwODA4MjEzMTQ0WhcNMjUwODE1MjEzMTQ0WjAYMRYwFAYD VQQDEw02ODk2NmNjMC1kYThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrVrsuljEH/OfJqaxYG5YOu+IzEb3HMAGtN9L6NuRYGAroKlmIeu95PZL2dm VLe1/bs0Z0/wIt8N2RR7iPleqdAXKQkKlBcCbcuCCmoXviNmUzVDF5V6TE0EVtiL VL8BY4KwiHxmG8cBqFW4Dk1Mthr0GymSkIE4d1+gQ5U4uAEnIQre/GPQxhVx39bM 67iQDg7IBiQ7rvHoWX4VhM8E65eyWYk3Eheq82kaN+HxErNlMBehHTcbvAaBMA6/ yJ1x3Iqx6DxGCJPumHR8367gQYVZk2CD7AhHJs/JMgkXHBOkqu6MwuZ3EIGUZA9X +FRyvnoBx1dxFeTTFHEkc45GUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOl3e8dr caltJGnJaTxXhj3iBvHaMB8GA1UdIwQYMBaAFH/fYhj6AV0KAHSoRCRRgGoo+d31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzA2MC9BNzI1ODZCMDAz QjExMUVCODQzQTc3NTZDNEY5QUUwMi9mOTlpR1BvQlhRb0FkS2hFSkZHQWFpajUz ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5OWlHUG9CWFFvQWRLaEVKRkdBYWlqNTNmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzA2MC9BNzI1ODZCMDAzQjExMUVCODQzQTc3NTZDNEY5QUUwMi9mOTlpR1BvQlhR b0FkS2hFSkZHQWFpajUzZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8nXjOqKwwpDkHFnOxr8hI5MHsCdnN75gU17t+hKDFAYsycn5sZRdb bpzWmXlsfF1Xum8eg1OztWM85U7jZJuHcjIazI9v8ZAiVEnJ2yGbGtBhagkgkYXK 5DZzaCXSHI8ae3l6e1BSfmJDRycFEVQI95HXhqiw5CintoNw2ffShzd3A6+rpM1m WIu+ElM/EmJrfm46bdKcH8y3H0qKVNfkdWMcJRVyVVVNoMSd0JL/JQ6boO1EbBrY 6A91Vq7cN9ifYjTui2J+TfgilasuDnfp9vU/k/XvMnA/iPkEW/v6ViXQFMpRJ4u6 hldfbaDyVgg77/zypHjgmXyVdS2cw15H -----END CERTIFICATE-----Generated at Sat Aug 9 15:10:41 2025 by rpki-client