$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft File: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json) Hash identifier: 4vSjCH90KdVwygXn0UY+4CFZFrsYQ9Pi9FoZ46uDfdg= Subject key identifier: 55:5A:0A:ED:08:DA:8B:1B:ED:DC:E3:1E:B2:6F:E8:CB:67:DB:D6:DC Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D Certificate issuer: /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Certificate serial: 09A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft Manifest number: 09A1 Signing time: Fri 22 Aug 2025 20:11:58 +0000 Manifest this update: Fri 22 Aug 2025 20:11:57 +0000 Manifest next update: Fri 29 Aug 2025 20:11:57 +0000 Files and hashes: 1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: +x5PMqgVjhobp42ycK3ZkNDW4ByT+r9BI1iVCXJUW+Y=) 2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: 2KXnyRjzRL6Ajbgx/szbyFBTyK8pjQMyBf0qPFxtz+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2471 (0x9a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Validity Not Before: Aug 22 20:11:57 2025 GMT Not After : Aug 29 20:11:57 2025 GMT Subject: CN=68a8cf0e-39c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:78:6f:e6:65:00:b4:59:38:f0:f9:ba:22:6b: dc:93:6c:0c:12:4c:d6:c3:2a:90:0a:94:3f:f3:c4: 3c:ae:bf:b7:49:2d:ff:80:f1:d9:85:cc:d6:38:00: 36:12:55:69:2d:0f:d7:cc:a8:4c:67:37:fa:28:cf: 3d:cc:04:ea:65:1f:f2:6f:a4:b2:78:14:25:e8:59: 0b:28:be:63:7e:4d:14:3c:31:61:ee:6b:21:2d:05: d9:7f:76:e5:44:95:c3:d1:fa:81:8b:e4:b9:42:c1: 9d:98:83:6f:3d:7e:6d:ec:4d:38:91:71:16:33:9e: f0:24:fc:eb:08:b6:24:e4:25:0e:3b:7a:84:09:99: 08:8f:19:db:65:6d:81:c9:6b:39:81:ff:a9:b2:1a: c3:de:1c:4f:86:6f:fd:0d:ad:01:2a:9e:f5:45:e4: 39:e5:c5:23:fd:aa:7d:34:bc:48:57:18:80:d0:8f: 64:ed:d9:a1:25:c2:c4:bf:f8:9f:fe:e7:b3:f4:b6: 33:a9:75:cc:bc:a2:cc:15:d3:c0:28:6a:9b:71:95: 96:6b:b4:4a:be:18:1a:7c:25:d2:87:12:37:a2:10: 0c:a0:77:ff:39:cb:26:4f:35:9e:91:e2:87:47:62: 54:43:28:b4:a4:8a:bf:f3:34:61:0c:73:fb:7b:7f: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5A:0A:ED:08:DA:8B:1B:ED:DC:E3:1E:B2:6F:E8:CB:67:DB:D6:DC X509v3 Authority Key Identifier: keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:71:79:fe:6b:73:18:e9:8f:7b:36:cb:04:e7:63:05:09:48: d8:71:67:4b:ca:75:c8:f1:28:92:57:55:08:c0:cc:c3:0b:3d: 40:35:5d:77:b2:0b:8d:9e:53:42:19:41:da:44:06:43:4a:dc: 59:a6:4b:f8:66:c6:d7:5d:c1:0e:82:c1:21:7b:d6:7f:fa:0a: 00:6c:c6:c3:0b:3c:d3:52:7f:f8:36:90:fc:93:9d:ce:a7:77: c5:68:a2:e6:c4:cd:c9:83:f3:65:c4:d4:ca:a1:d5:7f:14:a7: a4:3d:97:05:bb:96:83:a0:eb:64:4d:c1:1e:de:12:6f:89:b2: 02:c6:c7:15:99:48:43:60:cc:92:78:f7:bb:e7:f9:92:72:a3: b3:87:21:09:15:cf:4d:cd:de:fe:1d:ce:07:c5:81:8e:68:af: 42:13:84:cb:f9:ef:c2:2a:c9:48:f1:82:ed:77:19:0a:71:85: 05:65:a6:95:81:f9:69:87:c0:3d:9f:f3:ef:12:60:45:9a:d9: 3f:a9:f4:56:fc:5c:80:27:10:f0:79:19:be:4d:63:00:7c:30: 93:b1:36:fd:f2:54:6b:6b:90:df:6e:b3:d7:2d:03:a4:b5:26: fb:95:f7:c8:81:ba:01:85:59:7e:85:37:05:32:89:91:77:d5: 81:fb:ce:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA1NjYxMTAvBgNVBAUTKDlCRDY0NDgzQTI0MjFGQTZGMEVFNjM5OTc1QzcwNTk3 NjJBRkYwNUQwHhcNMjUwODIyMjAxMTU3WhcNMjUwODI5MjAxMTU3WjAYMRYwFAYD VQQDEw02OGE4Y2YwZS0zOWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXhv5mUAtFk48Pm6Imvck2wMEkzWwyqQCpQ/88Q8rr+3SS3/gPHZhczWOAA2 ElVpLQ/XzKhMZzf6KM89zATqZR/yb6SyeBQl6FkLKL5jfk0UPDFh7mshLQXZf3bl RJXD0fqBi+S5QsGdmINvPX5t7E04kXEWM57wJPzrCLYk5CUOO3qECZkIjxnbZW2B yWs5gf+pshrD3hxPhm/9Da0BKp71ReQ55cUj/ap9NLxIVxiA0I9k7dmhJcLEv/if /uez9LYzqXXMvKLMFdPAKGqbcZWWa7RKvhgafCXShxI3ohAMoHf/OcsmTzWekeKH R2JUQyi0pIq/8zRhDHP7e3/PIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVaCu0I 2osb7dzjHrJv6Mtn29bcMB8GA1UdIwQYMBaAFJvWRIOiQh+m8O5jmXXHBZdir/Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU2Ni82QjQ1NjA5Qzkw OEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2Ync3bU9aZGNjRmwyS3Y4 RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL205WkVnNkpDSDZidzdtT1pkY2NGbDJLdjhGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDU2Ni82QjQ1NjA5QzkwOEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2 Ync3bU9aZGNjRmwyS3Y4RjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxcXn+a3MY6Y97NssE52MFCUjYcWdLynXI8SiSV1UIwMzDCz1ANV13 sguNnlNCGUHaRAZDStxZpkv4ZsbXXcEOgsEhe9Z/+goAbMbDCzzTUn/4NpD8k53O p3fFaKLmxM3Jg/NlxNTKodV/FKekPZcFu5aDoOtkTcEe3hJvibICxscVmUhDYMyS ePe75/mScqOzhyEJFc9Nzd7+Hc4HxYGOaK9CE4TL+e/CKslI8YLtdxkKcYUFZaaV gflph8A9n/PvEmBFmtk/qfRW/FyAJxDweRm+TWMAfDCTsTb98lRra5DfbrPXLQOk tSb7lffIgboBhVl+hTcFMomRd9WB+84z -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:19 2025 by rpki-client