$ rpki-client -vvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft File: 9yY4deggn7olR_uOOH2AP3WAvtY.mft (raw, json) Hash identifier: zmJ0D+fxTnui4kS7TuTgrMbboU5Qfupeezj9zxtbRWw= Subject key identifier: 98:9D:98:E3:D0:1E:98:1B:9A:B3:15:F2:8B:AA:1C:F9:28:FF:42:89 Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 Certificate issuer: /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft Manifest number: 0652 Signing time: Fri 22 Aug 2025 22:47:16 +0000 Manifest this update: Fri 22 Aug 2025 22:47:16 +0000 Manifest next update: Fri 29 Aug 2025 22:47:16 +0000 Files and hashes: 1: 9yY4deggn7olR_uOOH2AP3WAvtY.crl (hash: Sh/lq1zmcUQUmLd/MM4wKvDQNDhD2yO2TP57jRx6MIA=) 2: B46F501C994D11EBB61C0C71C4F9AE02.roa (hash: j/GF9Fp/8A3iAGqlLey+nPmFjem1hKBzyG3C/3FfPBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126AFE, serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Validity Not Before: Aug 22 22:47:16 2025 GMT Not After : Aug 29 22:47:16 2025 GMT Subject: CN=68a8f374-6ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:85:cf:7f:3c:37:3d:27:ac:d2:f8:37:bc:e6: 79:43:0f:6a:3a:bb:e1:e7:df:a1:5f:ee:25:0f:60: c6:64:50:05:51:d4:8e:75:a0:fa:1a:d3:e5:4a:4a: 36:6c:d8:54:b6:c0:da:a8:2e:fa:7b:24:67:d7:d0: 90:dd:23:7f:81:18:0b:68:11:90:79:a8:cd:66:61: 6b:9e:52:e8:f6:d0:9b:0f:80:95:be:5d:01:04:0b: 3a:63:f0:94:59:28:93:84:4d:ee:da:2d:de:aa:ab: c9:9a:69:51:7f:f3:80:56:b7:de:ed:e9:62:4a:05: d9:c4:03:88:ef:b3:ea:0f:62:19:c2:c3:76:70:8b: 69:78:0b:33:54:0f:a8:05:fc:4a:67:54:16:45:c1: 31:d2:76:2a:b2:7a:79:6a:58:ff:2c:58:66:00:78: 04:bd:b8:de:3d:b0:ac:b4:87:f2:c1:5e:b9:0a:cc: b5:08:9e:7c:9a:ac:56:c3:a6:06:b5:3d:42:9a:7d: f7:52:f5:54:c7:73:cc:90:3a:41:17:e2:13:fc:01: 34:b5:97:a0:a5:72:27:af:3d:e7:77:ce:8a:14:40: 46:0c:2b:d5:ce:27:83:94:12:68:d1:1e:07:ce:cb: 8f:40:82:fb:c0:0f:62:0f:f7:7c:65:43:ba:47:1b: 11:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9D:98:E3:D0:1E:98:1B:9A:B3:15:F2:8B:AA:1C:F9:28:FF:42:89 X509v3 Authority Key Identifier: keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:18:f0:32:37:24:ba:a5:a7:5d:ce:96:49:e9:4c:d7:aa:60: 4c:47:2a:5e:8e:af:f1:09:6f:6d:1e:a8:0b:90:82:71:19:57: 96:75:a0:73:b7:aa:f6:2d:58:9a:e6:a5:e6:fb:bd:8a:46:9f: cd:a7:a4:6f:1c:fc:48:44:0c:96:a4:a0:39:31:58:33:c5:e4: 25:75:25:6c:56:03:a2:e0:3f:58:64:9a:ee:9b:f7:6b:96:0f: 3d:72:8c:8c:91:7f:36:04:9a:77:28:65:02:71:4c:36:0c:fb: 0d:f3:c4:13:79:cf:48:d4:2c:0a:16:f2:01:5e:41:13:3a:18: a7:80:05:c5:75:33:fe:e0:b0:8b:33:81:49:2c:7f:36:22:78: 98:43:03:96:ba:e6:73:37:75:5d:58:81:ce:6b:20:ac:82:6d: a5:32:90:0b:79:81:19:4e:6e:a2:20:8c:0a:f6:d0:2e:a3:fc: 5a:65:ce:0b:e1:8b:ce:4b:6c:73:c9:0a:3e:ba:90:48:30:a7: d8:16:0f:f3:49:aa:b1:92:c9:7a:1f:21:b3:9d:c4:3b:47:96: 9a:c4:af:05:68:49:56:70:1d:12:af:16:ed:d4:bd:6f:e3:01: 81:ff:75:4f:e7:97:56:e0:07:c7:27:57:7c:8e:cf:e8:21:36: 9a:58:ae:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBRkUxMTAvBgNVBAUTKEY3MjYzODc1RTgyMDlGQkEyNTQ3RkI4RTM4N0Q4MDNG NzU4MEJFRDYwHhcNMjUwODIyMjI0NzE2WhcNMjUwODI5MjI0NzE2WjAYMRYwFAYD VQQDEw02OGE4ZjM3NC02Y2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24XPfzw3PSes0vg3vOZ5Qw9qOrvh59+hX+4lD2DGZFAFUdSOdaD6GtPlSko2 bNhUtsDaqC76eyRn19CQ3SN/gRgLaBGQeajNZmFrnlLo9tCbD4CVvl0BBAs6Y/CU WSiThE3u2i3eqqvJmmlRf/OAVrfe7eliSgXZxAOI77PqD2IZwsN2cItpeAszVA+o BfxKZ1QWRcEx0nYqsnp5alj/LFhmAHgEvbjePbCstIfywV65Csy1CJ58mqxWw6YG tT1Cmn33UvVUx3PMkDpBF+IT/AE0tZegpXInrz3nd86KFEBGDCvVzieDlBJo0R4H zsuPQIL7wA9iD/d8ZUO6RxsRfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJidmOPQ HpgbmrMV8ouqHPko/0KJMB8GA1UdIwQYMBaAFPcmOHXoIJ+6JUf7jjh9gD91gL7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkFGRS81ODI3MjkzQTk5 NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243b2xSX3VPT0gyQVAzV0F2 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5WTRkZWdnbjdvbFJfdU9PSDJBUDNXQXZ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkFGRS81ODI3MjkzQTk5NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243 b2xSX3VPT0gyQVAzV0F2dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvGPAyNyS6paddzpZJ6UzXqmBMRypejq/xCW9tHqgLkIJxGVeWdaBz t6r2LVia5qXm+72KRp/Np6RvHPxIRAyWpKA5MVgzxeQldSVsVgOi4D9YZJrum/dr lg89coyMkX82BJp3KGUCcUw2DPsN88QTec9I1CwKFvIBXkETOhingAXFdTP+4LCL M4FJLH82IniYQwOWuuZzN3VdWIHOayCsgm2lMpALeYEZTm6iIIwK9tAuo/xaZc4L 4YvOS2xzyQo+upBIMKfYFg/zSaqxksl6HyGzncQ7R5aaxK8FaElWcB0Srxbt1L1v 4wGB/3VP55dW4AfHJ1d8js/oITaaWK7g -----END CERTIFICATE-----Generated at Sun Aug 24 03:10:02 2025 by rpki-client