$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: mDQlYCqPH+q+XHeCgucNiO9u1OGSQMj7lwsUmBFC1CI= Subject key identifier: D4:9D:FE:4E:22:AA:79:31:B0:00:5D:5A:F7:09:F3:5B:E0:FE:AF:83 Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 0188 Signing time: Sat 23 Aug 2025 03:40:31 +0000 Manifest this update: Sat 23 Aug 2025 03:40:30 +0000 Manifest next update: Sat 30 Aug 2025 03:40:30 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: t/DL1ZVl2Q/dhHgSJKljeea0ro6L8DwoMRW3D3Jhz3k=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: b/tyuT5HVmPK9JfwUWtYKqOXXB/oMLOeGmEa5cvBbbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: Aug 23 03:40:30 2025 GMT Not After : Aug 30 03:40:30 2025 GMT Subject: CN=68a9382f-a2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:18:5c:92:af:c0:16:fd:ad:59:6c:50:96: 1c:81:50:d1:2f:84:68:de:fd:8c:c0:ef:cc:8e:80: 36:38:bf:8f:29:cc:cd:8f:ff:37:c1:53:68:62:d2: b9:ab:ab:de:a3:4c:92:2b:37:9a:fd:ba:ef:8e:2c: 7d:a1:9e:3d:81:87:85:58:c0:c9:69:a6:7b:29:25: e1:de:f6:c0:8f:fa:b4:c2:36:9b:21:f4:6f:97:86: 7e:d8:cf:71:2e:f7:d8:03:91:fa:59:fc:66:4f:22: 39:db:5d:76:9d:af:8f:13:e4:90:de:89:d2:8a:7c: 0b:b5:a8:c4:a6:7c:1e:19:63:2a:bc:2b:1d:56:9a: 43:ad:28:ed:45:45:9b:89:16:95:2b:a0:b6:d3:b3: 4d:67:fe:9b:76:4d:78:0d:8b:4b:7e:d1:17:7e:eb: 4c:bd:8d:5c:55:69:f1:86:e5:c5:83:cd:60:d2:f8: b4:9d:78:3d:14:19:b7:6f:df:40:4b:d8:35:e0:42: a5:36:62:80:42:c1:7b:02:c7:9f:fc:84:2b:a3:e1: d0:58:07:5b:8c:cf:eb:e2:34:27:dc:c7:5e:2f:6f: d4:f9:a4:05:e1:19:66:a0:11:5f:cd:a0:ca:cb:8b: 09:f7:b4:49:be:4c:38:2b:66:42:20:41:cf:83:38: ec:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9D:FE:4E:22:AA:79:31:B0:00:5D:5A:F7:09:F3:5B:E0:FE:AF:83 X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:51:4f:a7:96:b8:1a:94:47:12:4d:f1:27:b7:a7:b1:a4:90: 3d:d2:2e:e0:2a:6e:65:aa:4c:31:8e:d7:cb:d6:24:d9:dd:f2: e9:aa:58:a5:c8:2f:df:da:99:76:5a:8d:d7:85:b2:bf:b2:b0: ed:e8:fb:85:3b:25:d5:2a:20:e7:16:19:33:79:07:dc:0d:eb: e6:a7:9a:28:0b:bb:21:a9:24:03:ad:e7:e4:78:2c:26:d4:57: 2a:e3:07:4f:99:59:31:41:6f:90:fa:89:26:ba:d5:0e:2d:64: 0a:78:b3:ad:2c:db:77:39:e0:3b:0c:5f:1c:f7:b2:6d:d2:d9: 2f:ab:5e:bd:22:c6:7c:ea:1f:54:e1:fd:83:09:ce:e8:c2:91: bc:b3:1d:3f:96:6a:28:0d:73:bd:10:fd:31:b3:5f:e8:c2:99: 80:dc:cf:70:8c:d0:1d:9e:e4:ef:a6:02:f7:32:f0:27:df:3b: e9:b4:49:5f:55:fe:17:cd:09:ec:b2:2b:71:7e:f6:05:24:76: 05:13:18:4c:26:52:eb:84:8f:88:86:e3:53:90:1b:8f:6c:2b: 9a:50:db:2b:d8:80:f3:30:ff:ef:ee:eb:e2:34:b8:f4:5e:dc: 09:da:95:92:f4:69:ce:76:53:01:0a:78:06:a2:e2:e2:71:93: 16:e4:f8:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjUwODIzMDM0MDMwWhcNMjUwODMwMDM0MDMwWjAYMRYwFAYD VQQDEw02OGE5MzgyZi1hMmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVIYXJKvwBb9rVlsUJYcgVDRL4Ro3v2MwO/MjoA2OL+PKczNj/83wVNoYtK5 q6veo0ySKzea/brvjix9oZ49gYeFWMDJaaZ7KSXh3vbAj/q0wjabIfRvl4Z+2M9x LvfYA5H6WfxmTyI52112na+PE+SQ3onSinwLtajEpnweGWMqvCsdVppDrSjtRUWb iRaVK6C207NNZ/6bdk14DYtLftEXfutMvY1cVWnxhuXFg81g0vi0nXg9FBm3b99A S9g14EKlNmKAQsF7Asef/IQro+HQWAdbjM/r4jQn3MdeL2/U+aQF4RlmoBFfzaDK y4sJ97RJvkw4K2ZCIEHPgzjslQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSd/k4i qnkxsABdWvcJ81vg/q+DMB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgUU+nlrgalEcSTfEnt6expJA90i7gKm5lqkwxjtfL1iTZ3fLpqlil yC/f2pl2Wo3XhbK/srDt6PuFOyXVKiDnFhkzeQfcDevmp5ooC7shqSQDrefkeCwm 1Fcq4wdPmVkxQW+Q+okmutUOLWQKeLOtLNt3OeA7DF8c97Jt0tkvq169IsZ86h9U 4f2DCc7owpG8sx0/lmooDXO9EP0xs1/owpmA3M9wjNAdnuTvpgL3MvAn3zvptElf Vf4XzQnssitxfvYFJHYFExhMJlLrhI+IhuNTkBuPbCuaUNsr2IDzMP/v7uviNLj0 XtwJ2pWS9GnOdlMBCngGouLicZMW5Pi2 -----END CERTIFICATE-----Generated at Sat Aug 23 16:39:02 2025 by rpki-client