$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft File: a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json) Hash identifier: l7VqOJ0ujnuIT1KGnffx1PNDvmlzbdSU94zScVz54dY= Subject key identifier: BA:C9:D1:9D:73:86:64:AB:58:AD:5C:E5:59:0B:D6:7E:01:93:5E:11 Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 Certificate issuer: /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft Manifest number: 01A3 Signing time: Sat 23 Aug 2025 03:23:28 +0000 Manifest this update: Sat 23 Aug 2025 03:23:27 +0000 Manifest next update: Sat 30 Aug 2025 03:23:27 +0000 Files and hashes: 1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: N/SxSY2oRMx/3xEk10j5/ij55D6Soe4lsg96QUfrMY4=) 2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: RyO6brDZcon28lskHekrQI6icOmLyy8RHSVJF6PV6RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Validity Not Before: Aug 23 03:23:27 2025 GMT Not After : Aug 30 03:23:27 2025 GMT Subject: CN=68a93430-3a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:42:a3:e2:a2:12:13:8e:3f:b1:69:f7:6d:f0: fd:9c:e5:10:8f:db:79:d8:2e:96:09:56:8b:49:b2: cc:a3:30:b3:a8:d0:50:9e:f4:09:5a:a4:ef:7e:9b: d6:ed:ac:99:2e:a7:7d:a5:1d:42:da:86:16:5b:2f: c7:d3:f6:7d:95:de:e7:41:82:40:46:14:26:95:17: b1:c6:9b:b6:30:d6:03:61:fa:5c:2f:80:ff:e2:69: b7:99:18:78:a1:34:97:4e:b3:be:50:c8:c6:5e:36: 89:6c:07:df:ae:88:7d:2f:04:bd:4d:7b:7e:d7:bb: 36:1b:d5:2a:fb:ee:5a:2c:27:b5:84:93:85:9d:2c: 86:40:4a:32:33:41:1c:42:3a:02:2c:c4:4c:f7:19: 7c:82:5f:3a:22:df:d5:e7:c7:17:cc:17:06:62:0b: 41:31:79:22:fe:5b:3f:86:ae:b4:1a:83:5f:f0:65: 2a:2c:3f:0a:36:31:4c:c1:e3:d2:3e:13:fc:6f:2c: 17:67:81:2b:ae:67:ea:01:3c:92:01:ff:17:84:6e: 42:6b:78:98:b2:fa:c0:67:d8:53:78:85:05:76:e7: 80:ea:d6:d5:74:70:d1:05:84:e8:9f:78:59:b0:8f: 90:b6:a4:19:e9:1a:03:95:eb:14:f9:d9:50:4e:fd: 4f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C9:D1:9D:73:86:64:AB:58:AD:5C:E5:59:0B:D6:7E:01:93:5E:11 X509v3 Authority Key Identifier: keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c4:2f:9d:17:8a:df:fe:1c:da:80:1f:34:22:17:a5:95:20: e9:92:ed:42:b4:e3:a9:9d:7f:88:0d:4f:5c:c2:f5:fd:15:68: a3:d6:54:0f:dc:9f:51:c7:76:1f:00:ca:ca:68:f5:69:6c:91: c8:13:4f:37:ee:17:86:50:6b:51:bf:98:d0:60:e5:98:6e:4d: 8e:72:ad:b2:f0:cf:78:dc:7e:a6:40:e7:f2:75:86:f0:a4:c8: bf:74:c9:cf:87:d2:c6:98:f3:63:6b:50:3c:c1:b0:d7:78:a4: 06:71:08:9d:fa:e2:c9:cf:f1:4e:bf:a0:dd:f5:2b:4e:ae:a8: 50:99:cb:e1:98:83:af:4c:81:48:df:49:fa:e2:80:a9:37:65: 00:3d:7d:07:27:90:e7:47:32:4c:67:78:c1:ca:07:d7:b6:ef: d4:fa:21:09:87:2f:5c:2c:41:1b:02:51:20:7d:1e:de:6f:29: fd:f4:27:9d:84:9b:37:56:29:58:a2:6a:d6:39:d1:ff:8b:a1: 89:fc:a9:5b:9d:95:e3:d4:34:5e:47:af:da:98:27:b8:6e:a3: 6a:9b:47:a4:00:31:61:22:e5:cf:ca:14:9f:8d:df:e8:8b:4a: b3:5f:3f:75:ef:d7:1d:5a:dc:43:89:b5:7d:cb:b0:51:49:37: 44:68:6e:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGNzkxMTAvBgNVBAUTKDZCRDhDMEExMTUwMEIzQ0EwRkVDNEE5RkQzNDBDMzEy MDU5NUIwQzcwHhcNMjUwODIzMDMyMzI3WhcNMjUwODMwMDMyMzI3WjAYMRYwFAYD VQQDEw02OGE5MzQzMC0zYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5UKj4qISE44/sWn3bfD9nOUQj9t52C6WCVaLSbLMozCzqNBQnvQJWqTvfpvW 7ayZLqd9pR1C2oYWWy/H0/Z9ld7nQYJARhQmlRexxpu2MNYDYfpcL4D/4mm3mRh4 oTSXTrO+UMjGXjaJbAffroh9LwS9TXt+17s2G9Uq++5aLCe1hJOFnSyGQEoyM0Ec QjoCLMRM9xl8gl86It/V58cXzBcGYgtBMXki/ls/hq60GoNf8GUqLD8KNjFMwePS PhP8bywXZ4ErrmfqATySAf8XhG5Ca3iYsvrAZ9hTeIUFdueA6tbVdHDRBYTon3hZ sI+QtqQZ6RoDlesU+dlQTv1PTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrJ0Z1z hmSrWK1c5VkL1n4Bk14RMB8GA1UdIwQYMBaAFGvYwKEVALPKD+xKn9NAwxIFlbDH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUY3OS9EMEY4NkQ3MkZF MDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4b1A3RXFmMDBEREVnV1Zz TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5akFvUlVBczhvUDdFcWYwMERERWdXVnNNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUY3OS9EMEY4NkQ3MkZFMDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4 b1A3RXFmMDBEREVnV1ZzTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOxC+dF4rf/hzagB80IhellSDpku1CtOOpnX+IDU9cwvX9FWij1lQP 3J9Rx3YfAMrKaPVpbJHIE0837heGUGtRv5jQYOWYbk2Ocq2y8M943H6mQOfydYbw pMi/dMnPh9LGmPNja1A8wbDXeKQGcQid+uLJz/FOv6Dd9StOrqhQmcvhmIOvTIFI 30n64oCpN2UAPX0HJ5DnRzJMZ3jBygfXtu/U+iEJhy9cLEEbAlEgfR7ebyn99Ced hJs3VilYomrWOdH/i6GJ/KlbnZXj1DReR6/amCe4bqNqm0ekADFhIuXPyhSfjd/o i0qzXz9179cdWtxDibV9y7BRSTdEaG5x -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:39 2025 by rpki-client