$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json) Hash identifier: O78fkZhnnQeI83bIUVcdx4rSTzOxssoz3UeZUnTeYaE= Subject key identifier: 09:07:93:D4:C9:FA:25:FA:87:A4:42:5C:EF:82:CA:BD:E9:8E:85:6C Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft Manifest number: 17 Signing time: Sat 23 Aug 2025 08:12:23 +0000 Manifest this update: Sat 23 Aug 2025 08:12:23 +0000 Manifest next update: Sat 30 Aug 2025 08:12:23 +0000 Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: ydlywUIk7eJIdEXqkXEW3GbE3djOwIgWQm7idbZSgaM=) 2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: Rsq6/I7qJeC3VPVdtIV32k6eG9/KeOaeWD2g/nms+lI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Validity Not Before: Aug 23 08:12:23 2025 GMT Not After : Aug 30 08:12:23 2025 GMT Subject: CN=68a977e7-044d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3a:0f:60:51:32:70:2d:69:ca:b7:e1:46:f8: 8d:a7:32:50:ee:e3:9d:2f:82:5c:35:c4:cd:b1:dc: c3:b7:d3:55:82:6c:45:f9:9c:17:29:4b:35:a4:cb: 9b:56:9e:29:e4:31:c4:bb:42:fd:2d:41:93:f4:7f: be:6c:8a:6b:85:35:f5:4e:2b:6b:b5:98:e0:e3:23: 97:0b:bb:e1:b5:78:da:de:d2:be:23:b7:96:36:30: 6d:a4:f8:0c:61:2c:29:76:45:17:d2:58:c8:88:fd: 6a:f2:cd:b6:74:e6:42:8c:c8:89:d6:40:40:32:7a: ab:ad:e0:eb:6a:a6:21:dd:61:8e:89:3e:78:a8:e0: 9a:ec:2c:32:d2:ca:61:27:4f:50:a9:12:0e:30:f4: dd:e2:02:7b:e0:03:ad:68:24:31:1f:b3:b0:fd:f0: 5b:15:3c:f3:fa:4d:77:a4:9a:59:96:77:63:c7:43: 2d:0a:14:df:ca:fa:4b:e2:03:79:fe:d0:9d:b1:99: 8e:c0:6b:d9:06:7e:eb:d9:34:a9:16:0b:81:63:1e: f8:7d:07:a4:92:1f:0a:c5:07:e5:f0:f0:a9:af:14: be:d0:d1:17:de:02:9c:56:bb:7d:e4:e1:86:c2:b0: f9:2c:14:8a:ff:e8:d1:13:e1:37:ec:16:f4:07:81: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:07:93:D4:C9:FA:25:FA:87:A4:42:5C:EF:82:CA:BD:E9:8E:85:6C X509v3 Authority Key Identifier: keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:00:23:5b:9c:74:11:12:65:e4:a1:4b:0a:f1:89:ad:4a:bc: e0:6b:73:a4:c4:3b:09:f9:d8:09:f7:37:e7:c5:ce:2d:9f:b0: 9e:55:e6:c9:82:11:eb:e6:70:ac:d6:08:54:0d:45:c3:d1:40: 3e:b4:15:dd:7a:1e:9e:7f:4b:67:29:e2:f8:62:a4:13:46:ea: 7c:65:fa:29:47:be:22:0b:bb:77:02:ad:47:e4:9f:da:17:09: 23:9c:48:a2:33:f5:52:c8:f2:bf:d4:d6:c9:14:d7:8c:61:b4: 82:d8:d0:d4:4b:f5:89:f5:a6:57:18:0c:a3:52:18:40:d5:b1: ac:8c:f2:1a:ad:55:61:87:76:96:eb:0a:eb:f3:30:f3:2a:97: b7:bc:c7:79:e3:b4:9b:6c:00:7b:8d:e7:23:09:a0:16:48:86: 07:52:c7:61:d6:15:6f:7c:f6:de:36:2e:fd:89:c0:39:e9:7e: 63:08:9e:e4:fc:b1:d6:f4:47:a2:1e:0d:04:0e:82:d1:73:da: c0:fb:bc:09:f7:4e:5b:0c:db:01:86:25:80:49:d5:90:16:34: 30:c9:b8:08:21:c3:63:4d:62:23:ec:eb:87:0a:42:3b:22:bc: 23:34:72:b2:cb:b1:7d:d1:c8:e8:03:3d:fb:66:16:1b:b7:43: 48:dc:4f:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoM0FDRjQ0NUNGQ0VDRkJCMjkxM0IzNDdENjdBODI4RTA0 MEExNUExRDAeFw0yNTA4MjMwODEyMjNaFw0yNTA4MzAwODEyMjNaMBgxFjAUBgNV BAMTDTY4YTk3N2U3LTA0NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFOg9gUTJwLWnKt+FG+I2nMlDu450vglw1xM2x3MO301WCbEX5nBcpSzWky5tW ninkMcS7Qv0tQZP0f75simuFNfVOK2u1mODjI5cLu+G1eNre0r4jt5Y2MG2k+Axh LCl2RRfSWMiI/WryzbZ05kKMyInWQEAyequt4OtqpiHdYY6JPnio4JrsLDLSymEn T1CpEg4w9N3iAnvgA61oJDEfs7D98FsVPPP6TXekmlmWd2PHQy0KFN/K+kviA3n+ 0J2xmY7Aa9kGfuvZNKkWC4FjHvh9B6SSHwrFB+Xw8KmvFL7Q0RfeApxWu33k4YbC sPksFIr/6NET4TfsFvQHge3bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCQeT1Mn6 JfqHpEJc74LKvemOhWwwHwYDVR0jBBgwFoAUOs9EXPzs+7KROzR9Z6go4EChWh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzVEQjc0QjBBNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdLUk96UjlaNmdvNEVDaFdo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT3M5RVhQenMtN0tST3pSOVo2Z280RUNoV2gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzVEQjc0QjBBNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdL Uk96UjlaNmdvNEVDaFdoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGYAI1ucdBESZeShSwrxia1KvOBrc6TEOwn52An3N+fFzi2fsJ5V5smC EevmcKzWCFQNRcPRQD60Fd16Hp5/S2cp4vhipBNG6nxl+ilHviILu3cCrUfkn9oX CSOcSKIz9VLI8r/U1skU14xhtILY0NRL9Yn1plcYDKNSGEDVsayM8hqtVWGHdpbr CuvzMPMql7e8x3njtJtsAHuN5yMJoBZIhgdSx2HWFW989t42Lv2JwDnpfmMInuT8 sdb0R6IeDQQOgtFz2sD7vAn3TlsM2wGGJYBJ1ZAWNDDJuAghw2NNYiPs64cKQjsi vCM0crLLsX3RyOgDPftmFhu3Q0jcT2s= -----END CERTIFICATE-----Generated at Sat Aug 23 15:13:24 2025 by rpki-client