$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json) Hash identifier: bAUGz6E4rh/kTCxuDnpr5afkmgVkC7fmximyO3d9jz8= Subject key identifier: 84:9D:E4:FD:2E:93:A7:11:0D:9C:62:18:40:C6:12:61:72:15:DC:6E Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft Manifest number: 9C Signing time: Sat 09 Aug 2025 06:44:54 +0000 Manifest this update: Sat 09 Aug 2025 06:44:54 +0000 Manifest next update: Sat 16 Aug 2025 06:44:54 +0000 Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: 4DaEI4U/3MTmkbJ9j37eV+SBcSaJIjdA1DCZpxeG8fg=) 2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: kBrZwIHTbaSnaE7XdLULllQIjEnMuSEphHZrV4DhNKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Validity Not Before: Aug 9 06:44:54 2025 GMT Not After : Aug 16 06:44:54 2025 GMT Subject: CN=6896ee66-f28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:87:55:0e:6c:61:a6:b9:63:6a:45:40:bc:47: be:7c:a8:28:8d:12:cf:ee:a5:48:ad:56:61:aa:df: 60:99:a1:d0:2f:68:4c:0f:28:f2:ff:dd:df:3d:5e: 99:b7:00:35:b8:74:0a:1a:87:c1:82:ec:43:53:81: 8b:8b:20:10:e5:cd:5f:46:f9:2a:55:18:f4:79:67: 1d:ae:d6:73:27:a4:f9:d3:da:26:a3:af:1e:f9:d9: 27:46:91:b9:35:55:e7:67:8a:9f:dc:69:7d:ee:2c: 0d:f3:b2:22:65:bd:6f:2e:dd:29:76:6e:0e:10:7b: 3b:90:96:57:54:d9:3d:1c:33:28:4f:37:b2:d7:61: 32:88:86:68:62:45:f2:48:38:49:42:af:11:99:dd: 42:79:68:6b:de:4a:a1:2a:1e:4d:ce:76:44:fc:41: ad:34:38:2b:9a:a7:6d:68:00:f2:16:2d:93:12:31: 74:14:ae:4c:40:20:46:31:2d:77:d2:50:0c:c4:90: cf:7f:c4:08:6b:ec:f9:83:24:ee:13:5c:d9:8e:69: d1:9a:06:23:ba:a4:ee:d1:e3:cc:76:af:e5:2a:19: 8d:ad:a0:81:0e:d6:d6:71:27:d8:a1:9f:8f:82:c4: 9f:9b:bd:68:4f:68:49:bc:b7:54:b8:9f:16:86:4f: ce:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9D:E4:FD:2E:93:A7:11:0D:9C:62:18:40:C6:12:61:72:15:DC:6E X509v3 Authority Key Identifier: keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:43:e5:03:2b:55:d3:16:19:3f:98:83:19:e1:64:32:c4:34: ae:38:ed:6c:e7:c2:38:54:71:85:39:90:48:c1:a8:e3:42:5e: a0:af:ce:47:22:4b:ef:62:6a:96:c7:66:92:8d:ad:3a:7a:4b: f5:2f:05:ed:1e:68:47:72:fb:d2:b7:02:c5:47:9c:30:8e:e6: 55:db:37:0d:36:33:28:75:58:c4:e9:a2:18:24:5e:76:4e:73: ff:83:4b:e8:4f:eb:eb:7f:3d:98:17:f0:a3:58:43:d2:9b:a5: b8:24:37:78:0f:98:6e:59:e8:84:61:17:f1:b0:64:d3:af:51: 97:33:a0:1e:3b:3a:5c:d0:27:84:12:ec:d5:81:f6:42:3b:a7: 9e:09:be:24:a3:1a:23:73:d6:88:0e:d0:85:c7:3d:e7:85:ce: 05:ee:7b:6d:f9:06:30:1d:3f:0e:3f:11:fc:d5:72:56:1c:89: a0:bb:2e:25:3e:c1:68:d8:9b:49:c6:e2:d9:e3:3a:1d:f3:90: cf:f9:04:28:1a:de:62:8a:65:4b:eb:f2:c3:ed:f7:67:a0:65: 1f:57:5d:f0:2b:37:ef:83:4a:e0:f5:a5:60:57:9c:e3:a9:46: 2b:1a:1e:33:42:6f:f1:51:47:47:2e:67:74:d6:39:7a:81:d1: 3d:3a:d1:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2MzMxMTAvBgNVBAUTKDEzRDdBMTNCNDIzQkI2RTg3QTFBNzVCNzQ5M0YwQkMx OUQwQ0VBQTMwHhcNMjUwODA5MDY0NDU0WhcNMjUwODE2MDY0NDU0WjAYMRYwFAYD VQQDEw02ODk2ZWU2Ni1mMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIdVDmxhprljakVAvEe+fKgojRLP7qVIrVZhqt9gmaHQL2hMDyjy/93fPV6Z twA1uHQKGofBguxDU4GLiyAQ5c1fRvkqVRj0eWcdrtZzJ6T509omo68e+dknRpG5 NVXnZ4qf3Gl97iwN87IiZb1vLt0pdm4OEHs7kJZXVNk9HDMoTzey12EyiIZoYkXy SDhJQq8Rmd1CeWhr3kqhKh5NznZE/EGtNDgrmqdtaADyFi2TEjF0FK5MQCBGMS13 0lAMxJDPf8QIa+z5gyTuE1zZjmnRmgYjuqTu0ePMdq/lKhmNraCBDtbWcSfYoZ+P gsSfm71oT2hJvLdUuJ8Whk/OQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISd5P0u k6cRDZxiGEDGEmFyFdxuMB8GA1UdIwQYMBaAFBPXoTtCO7boehp1t0k/C8GdDOqj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjYzMy9EMEFCOTNFNDg2 RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1aDZHblczU1Q4THdaME02 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0U5ZWhPMEk3dHVoNkduVzNTVDhMd1owTTZxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjYzMy9EMEFCOTNFNDg2RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1 aDZHblczU1Q4THdaME02cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpQ+UDK1XTFhk/mIMZ4WQyxDSuOO1s58I4VHGFOZBIwajjQl6gr85H IkvvYmqWx2aSja06ekv1LwXtHmhHcvvStwLFR5wwjuZV2zcNNjModVjE6aIYJF52 TnP/g0voT+vrfz2YF/CjWEPSm6W4JDd4D5huWeiEYRfxsGTTr1GXM6AeOzpc0CeE EuzVgfZCO6eeCb4koxojc9aIDtCFxz3nhc4F7ntt+QYwHT8OPxH81XJWHImguy4l PsFo2JtJxuLZ4zod85DP+QQoGt5iimVL6/LD7fdnoGUfV13wKzfvg0rg9aVgV5zj qUYrGh4zQm/xUUdHLmd01jl6gdE9OtHS -----END CERTIFICATE-----Generated at Mon Aug 11 07:28:22 2025 by rpki-client