$ rpki-client -vvf rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft File: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft (raw, json) Hash identifier: exOlBADfkEcOeEN7C01mJUhkCRDmQluPfepgq7PsIN0= Subject key identifier: 99:B8:E1:24:72:3F:47:AF:08:B7:EB:0C:C5:70:F5:AA:7F:BF:0F:74 Authority key identifier: F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B Certificate issuer: /CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft Manifest number: 0104 Signing time: Sat 23 Aug 2025 05:15:06 +0000 Manifest this update: Sat 23 Aug 2025 05:15:05 +0000 Manifest next update: Sat 30 Aug 2025 05:15:05 +0000 Files and hashes: 1: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl (hash: 2BNCQxgRDbRBfaG1XhpNTMjxOhwVo9Fcezc1DTCpfmc=) 2: 9D50BCA4F64211EE9114A555C4F9AE02.roa (hash: 5CJbD7pKl6AqdADQ2DaLJ20RlS7MYpOoT15StrcsKuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911073A, serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Validity Not Before: Aug 23 05:15:05 2025 GMT Not After : Aug 30 05:15:05 2025 GMT Subject: CN=68a94e5a-82e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8e:c8:40:9f:3e:24:67:2f:66:bd:a4:b1:e9: 6e:32:c3:73:28:7e:35:92:80:43:e1:7b:57:4d:37: 4e:cd:dd:03:0a:ea:b0:68:5d:9d:e7:a3:7d:8d:f0: 18:c8:67:67:20:45:62:39:08:49:3a:9e:20:66:67: c4:72:ed:9b:41:d5:e1:42:6b:a2:71:8a:aa:91:53: b9:bf:12:a1:01:c2:69:a9:9d:aa:41:73:ee:ac:00: 2e:13:6e:4e:f8:20:c9:8f:76:79:20:0e:ea:00:85: 19:7f:70:3a:e5:b7:78:92:e5:8f:1f:80:f9:3f:09: 82:9b:af:5d:fd:bf:69:a5:2f:20:22:f0:3d:b8:95: ba:79:91:36:2a:99:9c:41:e2:86:4e:bd:3c:54:a6: 85:ef:72:87:35:c4:7a:91:98:f0:c2:66:b6:b7:7f: 9d:14:a9:96:35:06:3d:c1:15:bb:5c:e4:5b:26:91: a6:ad:c7:b6:40:77:ea:63:d9:09:d5:21:78:22:72: 2c:19:43:3a:8b:26:85:75:d8:36:f2:23:71:52:b2: 6e:d5:e4:93:8d:a1:95:70:67:89:75:f7:11:29:3a: c7:97:a6:35:ee:a1:c4:35:96:83:19:8d:6e:fb:98: 08:40:4b:56:c0:83:a0:09:6e:03:64:87:11:68:6e: 13:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B8:E1:24:72:3F:47:AF:08:B7:EB:0C:C5:70:F5:AA:7F:BF:0F:74 X509v3 Authority Key Identifier: keyid:F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f0:da:e8:6a:27:5e:84:2d:d7:85:18:bb:31:7c:ef:f3:f0: 33:df:bf:81:31:0b:d3:47:b3:30:65:58:cf:a5:f0:62:24:9d: 4b:2f:48:b6:03:12:ab:e1:88:c6:3c:53:0d:b0:ca:46:0c:ea: 2f:6a:b2:e1:b8:c7:c8:17:df:2c:03:d1:b7:e6:26:11:d2:03: b6:5f:39:3d:1a:bb:fe:92:18:a4:08:0c:72:c7:09:5a:f4:1b: b4:0b:21:7c:93:23:12:33:72:9d:76:14:d9:ec:66:72:a7:52: eb:1a:b9:80:31:cc:08:29:5b:ca:5f:39:95:0e:68:3b:a8:bb: dd:64:74:de:eb:07:23:2e:70:42:f4:7e:a8:de:7c:2e:1c:ae: 7f:b0:aa:08:e3:d2:a9:36:fa:a6:8a:3c:b2:7a:0f:31:e9:60: fa:58:93:f1:4e:36:37:b9:68:e3:e8:86:f4:dd:aa:75:07:43: cd:0f:b0:ff:8d:88:5b:bb:d4:0a:45:c5:7e:a4:35:ee:0a:1e: 90:f3:9a:c7:7d:a3:f5:32:10:82:55:5d:8f:5f:5d:00:5c:cc: fd:4b:a2:52:28:5b:7b:3f:5c:2b:d0:59:5f:2a:a1:8e:25:62: 71:37:8b:12:c7:87:50:10:b3:c4:c7:6f:66:b2:9a:0f:fb:2f: d0:4e:b0:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3M0ExMTAvBgNVBAUTKEY1NTAyQTREN0QxNEE2QUE2M0U1RkZBQkY5MzZFMTUy QThERjgwM0IwHhcNMjUwODIzMDUxNTA1WhcNMjUwODMwMDUxNTA1WjAYMRYwFAYD VQQDEw02OGE5NGU1YS04MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0I7IQJ8+JGcvZr2kseluMsNzKH41koBD4XtXTTdOzd0DCuqwaF2d56N9jfAY yGdnIEViOQhJOp4gZmfEcu2bQdXhQmuicYqqkVO5vxKhAcJpqZ2qQXPurAAuE25O +CDJj3Z5IA7qAIUZf3A65bd4kuWPH4D5PwmCm69d/b9ppS8gIvA9uJW6eZE2Kpmc QeKGTr08VKaF73KHNcR6kZjwwma2t3+dFKmWNQY9wRW7XORbJpGmrce2QHfqY9kJ 1SF4InIsGUM6iyaFddg28iNxUrJu1eSTjaGVcGeJdfcRKTrHl6Y17qHENZaDGY1u +5gIQEtWwIOgCW4DZIcRaG4TqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJm44SRy P0evCLfrDMVw9ap/vw90MB8GA1UdIwQYMBaAFPVQKk19FKaqY+X/q/k24VKo34A7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDczQS9FQjRBM0FEQUY2 NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBxcGo1Zi1yLVRiaFVxamZn RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWQXFUWDBVcHFwajVmLXItVGJoVXFqZmdEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDczQS9FQjRBM0FEQUY2NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBx cGo1Zi1yLVRiaFVxamZnRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc8NroaidehC3XhRi7MXzv8/Az37+BMQvTR7MwZVjPpfBiJJ1LL0i2 AxKr4YjGPFMNsMpGDOovarLhuMfIF98sA9G35iYR0gO2Xzk9Grv+khikCAxyxwla 9Bu0CyF8kyMSM3KddhTZ7GZyp1LrGrmAMcwIKVvKXzmVDmg7qLvdZHTe6wcjLnBC 9H6o3nwuHK5/sKoI49KpNvqmijyyeg8x6WD6WJPxTjY3uWjj6Ib03ap1B0PND7D/ jYhbu9QKRcV+pDXuCh6Q85rHfaP1MhCCVV2PX10AXMz9S6JSKFt7P1wr0FlfKqGO JWJxN4sSx4dQELPEx29mspoP+y/QTrAE -----END CERTIFICATE-----Generated at Sun Aug 24 06:28:45 2025 by rpki-client