$ rpki-client -vvf rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft File: v3p9VKnGtsG13SUCa_u6fXfkUns.mft (raw, json) Hash identifier: ZU0gzkiMT2FGLV5Qi1AU7Ly0TubBVxwz92xCEoBudoI= Subject key identifier: 23:00:C2:A0:8C:95:08:E2:2F:5E:A5:91:0E:77:B3:F3:73:AF:E9:9D Authority key identifier: BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B Certificate issuer: /CN=A9136302/serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft Manifest number: A8 Signing time: Sat 23 Aug 2025 06:23:27 +0000 Manifest this update: Sat 23 Aug 2025 06:23:27 +0000 Manifest next update: Sat 30 Aug 2025 06:23:27 +0000 Files and hashes: 1: v3p9VKnGtsG13SUCa_u6fXfkUns.crl (hash: qjDmSSQRty1g1D5SS00YO+VfAhke+9FjOMhUReyzm7c=) 2: 94922566814411EFA0DF4C09C4F9AE02.roa (hash: 9kYxJpxlD05Jr699vklpYVPr8eXG1mQPz/w/ByRsgR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136302, serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B Validity Not Before: Aug 23 06:23:27 2025 GMT Not After : Aug 30 06:23:27 2025 GMT Subject: CN=68a95e5f-9135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:7d:25:54:7f:f7:4f:e2:d6:e4:5b:ab:21: 8f:d0:73:d7:a5:a5:c7:61:64:ee:1f:34:73:b8:37: 40:17:e3:0f:5c:a8:3b:63:d0:0b:84:27:b4:14:db: 10:62:23:c4:00:d7:88:ce:37:26:6a:bd:f7:db:26: 7a:5d:62:50:6b:c9:06:0b:12:0d:73:ef:61:c8:21: 1f:c2:92:b0:71:b3:5b:19:a2:3b:cd:2b:58:2e:1b: 00:2e:b9:86:2c:25:02:87:db:34:a6:e2:36:78:61: f5:56:39:dd:17:01:44:55:48:79:a8:a1:3b:85:5b: 0d:49:5f:26:42:29:d3:ef:2d:37:a0:c9:50:67:15: b2:ad:bf:d3:ce:18:4d:2e:45:17:d0:87:96:2e:8b: ab:51:1f:66:69:3e:03:55:8a:d8:e6:13:54:bc:48: af:d5:da:19:b9:6c:85:3b:91:4c:c2:cb:70:2a:99: 04:7e:e8:53:eb:63:78:73:dd:35:50:07:71:82:cf: e5:3f:32:8e:70:bb:71:a1:b9:d1:f0:69:ea:67:97: 96:db:52:62:a4:e8:ef:61:ed:4f:04:6c:75:47:af: 10:d4:0c:e4:5d:5a:3d:31:56:52:ba:e1:63:ca:46: e2:6b:50:11:e1:6f:91:2f:90:24:0a:57:e6:96:88: 9e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:00:C2:A0:8C:95:08:E2:2F:5E:A5:91:0E:77:B3:F3:73:AF:E9:9D X509v3 Authority Key Identifier: keyid:BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:b4:7c:06:f4:ac:f1:2d:cd:dd:c3:e2:e5:5a:90:4c:5e:13: d9:4d:48:da:1e:aa:c2:99:0c:36:5d:0b:e8:4e:08:b0:58:3a: d0:b7:15:e0:41:73:39:85:74:70:52:a4:78:8a:51:f8:1a:4d: b5:bd:5d:0b:ec:ef:f1:fc:19:cb:42:8f:4f:4d:3c:a3:f7:a0: cc:d1:35:91:de:9c:f4:1e:89:53:df:03:33:74:96:07:72:ca: 82:51:c7:19:e9:34:6b:3d:ab:44:b6:04:ea:8f:de:68:98:c0: ac:0a:ab:4a:6e:20:82:0b:f4:8d:52:7f:2f:81:1e:b9:46:0a: f3:da:81:ec:a3:d1:52:8d:ec:e7:33:0c:1d:49:61:cf:68:cb: 27:e3:e8:23:7f:84:ed:3c:39:01:81:85:f8:10:f2:d0:e0:23: 9e:60:ba:b4:0b:ed:e2:65:1a:e3:f6:9b:9c:a0:48:63:f2:0a: 0c:9a:18:59:88:90:0b:16:46:f8:c4:9d:ab:c1:65:13:0d:5c: ed:4c:a6:1c:78:2b:a3:d8:da:4d:5c:58:9d:e4:2d:c1:a9:bc: 19:bd:9c:d2:db:d4:38:26:0e:47:c6:22:c5:3f:ed:da:8b:7d: 69:d7:9a:6d:ba:b7:f8:6f:5c:4e:c4:4d:d7:bf:e3:52:d4:64: b1:01:61:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYzMDIxMTAvBgNVBAUTKEJGN0E3RDU0QTlDNkI2QzFCNUREMjUwMjZCRkJCQTdE NzdFNDUyN0IwHhcNMjUwODIzMDYyMzI3WhcNMjUwODMwMDYyMzI3WjAYMRYwFAYD VQQDEw02OGE5NWU1Zi05MTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdR9JVR/90/i1uRbqyGP0HPXpaXHYWTuHzRzuDdAF+MPXKg7Y9ALhCe0FNsQ YiPEANeIzjcmar332yZ6XWJQa8kGCxINc+9hyCEfwpKwcbNbGaI7zStYLhsALrmG LCUCh9s0puI2eGH1VjndFwFEVUh5qKE7hVsNSV8mQinT7y03oMlQZxWyrb/TzhhN LkUX0IeWLourUR9maT4DVYrY5hNUvEiv1doZuWyFO5FMwstwKpkEfuhT62N4c901 UAdxgs/lPzKOcLtxobnR8GnqZ5eW21JipOjvYe1PBGx1R68Q1AzkXVo9MVZSuuFj ykbia1AR4W+RL5AkClfmloieywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMAwqCM lQjiL16lkQ53s/Nzr+mdMB8GA1UdIwQYMBaAFL96fVSpxrbBtd0lAmv7un135FJ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjMwMi8yRkM0QTcxMjgx NDQxMUVGOTVBRkMxNDhDNEY5QUUwMi92M3A5VktuR3RzRzEzU1VDYV91NmZYZmtV bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzcDlWS25HdHNHMTNTVUNhX3U2Zlhma1Vucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjMwMi8yRkM0QTcxMjgxNDQxMUVGOTVBRkMxNDhDNEY5QUUwMi92M3A5VktuR3Rz RzEzU1VDYV91NmZYZmtVbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1tHwG9KzxLc3dw+LlWpBMXhPZTUjaHqrCmQw2XQvoTgiwWDrQtxXg QXM5hXRwUqR4ilH4Gk21vV0L7O/x/BnLQo9PTTyj96DM0TWR3pz0HolT3wMzdJYH csqCUccZ6TRrPatEtgTqj95omMCsCqtKbiCCC/SNUn8vgR65Rgrz2oHso9FSjezn MwwdSWHPaMsn4+gjf4TtPDkBgYX4EPLQ4COeYLq0C+3iZRrj9pucoEhj8goMmhhZ iJALFkb4xJ2rwWUTDVztTKYceCuj2NpNXFid5C3BqbwZvZzS29Q4Jg5HxiLFP+3a i31p15pturf4b1xOxE3Xv+NS1GSxAWF1 -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:04 2025 by rpki-client