$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json) Hash identifier: OdP4vvUuhWivW6SqKujwTsrr7ge4iQMw0SPBl+q8/JI= Subject key identifier: E3:28:4D:E1:66:BA:B2:3C:F8:41:53:1E:0E:2D:EE:58:9A:70:74:EC Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 07C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft Manifest number: 07BE Signing time: Fri 22 Aug 2025 21:21:07 +0000 Manifest this update: Fri 22 Aug 2025 21:21:06 +0000 Manifest next update: Fri 29 Aug 2025 21:21:06 +0000 Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: MFP0hdojc5m1zlEQgAYDjPB+sMBE38In3++q2jJeXDo=) 2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: OxZStMenvNbbBM0B5p11XZWipGKvwq8HkkBRgx7lHnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1989 (0x7c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: Aug 22 21:21:06 2025 GMT Not After : Aug 29 21:21:06 2025 GMT Subject: CN=68a8df42-4efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:18:be:70:00:4c:36:bc:32:ea:36:a8:db:e5: 21:e1:9a:37:a2:9b:3b:5a:d1:91:04:7a:c6:01:cb: e5:d7:43:02:48:98:b0:cf:0f:ea:57:60:ec:e3:27: 99:b0:ca:3a:4b:7a:b2:ba:33:23:91:16:0f:1b:c8: ef:f8:94:91:f6:07:2e:1d:7a:cf:3c:0a:b0:58:b5: 7d:c8:6a:de:59:e3:bc:e3:cd:d2:43:85:8c:88:09: d4:00:11:c7:c1:92:17:f3:0e:44:38:51:92:96:60: 48:b4:14:04:36:1d:0e:b9:a0:2d:fb:46:5a:96:e9: 77:43:96:57:bd:94:1d:67:99:d3:71:de:e3:74:de: 7a:55:ad:a1:ca:53:1f:d8:30:79:38:8c:17:6b:f3: 63:f0:cd:61:55:9e:2c:9a:35:38:d6:f3:84:2a:6e: 50:e5:4b:c5:34:be:96:4a:8f:69:01:1a:dd:fc:14: cb:f7:27:0f:f0:a3:0c:4f:1b:04:33:59:3f:59:92: f2:96:14:b2:2c:aa:06:4d:90:53:00:00:97:6a:de: 31:e8:2a:58:34:4e:bb:98:84:f6:5f:8b:69:f4:0d: af:9c:c6:ee:aa:db:87:d2:64:20:24:0b:d0:e8:e2: fb:76:97:4e:bd:99:71:9e:6e:97:f7:4d:5b:10:83: 15:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:28:4D:E1:66:BA:B2:3C:F8:41:53:1E:0E:2D:EE:58:9A:70:74:EC X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:55:6e:2b:65:75:8c:0a:c8:51:eb:18:65:5f:f3:60:60:f4: e2:d2:3c:a9:33:a3:c3:10:c8:9f:de:56:a5:b7:c9:57:32:74: e7:76:7b:8d:ec:b5:fd:d9:b1:5d:69:18:34:73:a1:34:75:82: 1b:1c:53:6e:c9:f2:19:f5:6f:7b:33:ca:d7:05:dd:60:30:9a: cc:38:7f:a6:00:b2:06:00:76:e0:a9:0e:af:19:e9:da:b6:89: 54:6f:ec:cd:75:29:9a:42:32:45:7d:af:41:33:5b:a4:82:f4: 07:30:b9:01:05:cd:14:cd:ee:a7:1f:ad:01:e3:b8:3d:9e:8e: a6:49:e3:95:e9:5d:e4:7f:af:02:6d:c8:97:36:cb:92:51:85: 54:83:6d:d8:67:f2:e4:cb:1a:89:fb:fc:de:89:b7:7d:01:65: 63:ea:80:85:02:a3:03:3b:6a:32:1e:b1:25:56:15:a5:0d:c3: c7:f5:db:52:33:76:00:c8:a2:af:e7:df:ce:05:4a:f7:4e:d0: 07:04:e4:83:44:4a:f4:a0:3e:95:76:f3:8e:d8:94:35:a2:76: 08:14:24:cd:f1:53:f6:97:e0:f0:62:f4:38:9f:c6:b7:75:c7: 22:ca:f6:2a:ea:8a:20:1a:0a:dd:96:22:a6:8a:62:af:df:cf: a4:4f:b9:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjUwODIyMjEyMTA2WhcNMjUwODI5MjEyMTA2WjAYMRYwFAYD VQQDEw02OGE4ZGY0Mi00ZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hi+cABMNrwy6jao2+Uh4Zo3ops7WtGRBHrGAcvl10MCSJiwzw/qV2Ds4yeZ sMo6S3qyujMjkRYPG8jv+JSR9gcuHXrPPAqwWLV9yGreWeO8483SQ4WMiAnUABHH wZIX8w5EOFGSlmBItBQENh0OuaAt+0Zalul3Q5ZXvZQdZ5nTcd7jdN56Va2hylMf 2DB5OIwXa/Nj8M1hVZ4smjU41vOEKm5Q5UvFNL6WSo9pARrd/BTL9ycP8KMMTxsE M1k/WZLylhSyLKoGTZBTAACXat4x6CpYNE67mIT2X4tp9A2vnMbuqtuH0mQgJAvQ 6OL7dpdOvZlxnm6X901bEIMVUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMoTeFm urI8+EFTHg4t7liacHTsMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0REOS83QzkyQjhFMjA5REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJ dURnUk9iTW5DWVRBb1EtckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6VW4rZXWMCshR6xhlX/NgYPTi0jypM6PDEMif3lalt8lXMnTndnuN 7LX92bFdaRg0c6E0dYIbHFNuyfIZ9W97M8rXBd1gMJrMOH+mALIGAHbgqQ6vGena tolUb+zNdSmaQjJFfa9BM1ukgvQHMLkBBc0Uze6nH60B47g9no6mSeOV6V3kf68C bciXNsuSUYVUg23YZ/LkyxqJ+/zeibd9AWVj6oCFAqMDO2oyHrElVhWlDcPH9dtS M3YAyKKv59/OBUr3TtAHBOSDREr0oD6VdvOO2JQ1onYIFCTN8VP2l+DwYvQ4n8a3 dcciyvYq6oogGgrdliKmimKv38+kT7nX -----END CERTIFICATE-----Generated at Sat Aug 23 17:08:10 2025 by rpki-client