$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft File: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft (raw, json) Hash identifier: BjZ1snESmNqAGCRDiu0/zJ4aBqYoxqdQA4V7Jsm6kRw= Subject key identifier: F6:FF:3A:F1:78:31:22:35:F8:D6:DA:00:7D:2A:8D:E9:62:09:8C:3E Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55 Certificate issuer: /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055 Certificate serial: 0A0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft Manifest number: 09DC Signing time: Fri 22 Aug 2025 20:08:32 +0000 Manifest this update: Fri 22 Aug 2025 20:08:32 +0000 Manifest next update: Fri 29 Aug 2025 20:08:32 +0000 Files and hashes: 1: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl (hash: LHLoAE3CVLZWuwxS6PTipB5JO7y4S9b8/fw3SDt/XIw=) 2: D4378BBA268311EE9BB21413C4F9AE02.roa (hash: Fn/SXrKcwrvikRaZqbM9UmvxwM1m/am9+sz8PJUtJeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2570 (0xa0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DE7A, serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055 Validity Not Before: Aug 22 20:08:32 2025 GMT Not After : Aug 29 20:08:32 2025 GMT Subject: CN=68a8ce40-d6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:47:4d:65:22:4d:91:42:8f:eb:4c:21:f4: 61:d2:bc:c5:3d:2c:ce:c2:84:ac:5c:70:3a:b9:47: bc:ed:be:9c:88:bb:a5:8d:3d:03:f9:0b:ff:2c:6a: 99:56:43:3f:ab:de:8f:05:4c:2b:33:fc:13:af:c1: e8:f6:0c:5a:70:13:ef:ab:7b:d2:f8:d4:7c:d6:aa: 20:cd:0f:c7:13:d3:34:40:87:e5:e9:6e:f3:37:db: cd:0a:7d:b3:00:f6:64:a0:7a:15:d4:c4:23:02:c7: e4:54:5f:0d:50:37:09:60:7c:f9:8f:e1:9c:5c:ef: 03:34:35:75:02:26:df:40:b2:4f:88:5a:b1:2f:a8: 63:8b:ea:20:6e:a1:7f:cb:a4:43:bd:9b:43:da:9d: 56:f0:a5:88:2d:1a:1e:17:6c:39:9d:9a:d8:05:62: ae:ee:c8:e6:83:df:74:1f:32:76:ae:70:25:5e:ee: 7d:69:2a:59:e7:e9:7f:a3:bc:00:56:aa:1f:ab:a7: b2:bd:17:c2:a4:96:eb:f2:0e:cd:5e:f9:0f:35:c6: 83:df:c7:37:b6:09:6d:5a:71:ad:ef:e4:0f:af:e1: d8:25:9c:da:16:3f:8c:b8:36:d5:0e:37:56:5e:9b: a9:f1:4a:b2:df:1c:e8:cd:9c:54:75:92:9e:6d:af: ee:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FF:3A:F1:78:31:22:35:F8:D6:DA:00:7D:2A:8D:E9:62:09:8C:3E X509v3 Authority Key Identifier: keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:5f:4b:62:b7:ef:84:50:3a:62:36:3c:85:dd:ef:f8:b7:cb: 63:2c:22:b3:91:6f:0b:b2:39:8a:ee:e3:d1:a7:c6:6b:fb:f5: 90:bb:21:ba:49:da:d7:38:5e:42:42:24:08:c1:43:0d:50:50: 65:e1:f1:ac:71:95:47:76:41:19:df:e4:d4:7b:ba:34:7f:61: 3f:5d:53:7c:d6:d7:a6:f9:c5:e1:14:c8:ab:16:6c:9f:2a:8f: 8d:12:9a:0e:db:68:a4:2e:52:22:67:5d:6a:b4:e2:29:2b:42: a0:4c:72:0f:4c:9c:1a:be:64:0f:35:8c:f2:db:f4:8b:5a:42: 76:1f:db:f2:c2:60:7a:86:ed:32:82:8f:c8:f1:0c:da:61:9e: 37:dd:4f:b9:74:b9:8a:a0:5b:1e:f2:fd:c7:ce:7f:6e:6b:f7: 50:ac:d3:53:a8:b6:87:60:86:6f:41:46:08:30:47:57:c8:32: f8:be:fe:66:a6:67:0f:89:0b:3f:b7:70:89:ba:89:91:68:3b: 32:80:b2:59:1a:d8:01:33:89:c2:e2:28:87:a5:a6:5e:f8:b7: 09:bb:8d:f4:2d:a2:7c:71:3f:de:81:09:1f:28:39:47:ea:41: 58:1d:eb:90:21:14:45:68:3e:d8:ed:ff:09:d7:43:6f:54:4e: 51:ba:d7:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RFN0ExMTAvBgNVBAUTKEJGRDQxRkNGRDI1NjFCNTNBQzRDRDJGODNEMTFCMDQ3 MEE2NkEwNTUwHhcNMjUwODIyMjAwODMyWhcNMjUwODI5MjAwODMyWjAYMRYwFAYD VQQDEw02OGE4Y2U0MC1kNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7dHTWUiTZFCj+tMIfRh0rzFPSzOwoSsXHA6uUe87b6ciLuljT0D+Qv/LGqZ VkM/q96PBUwrM/wTr8Ho9gxacBPvq3vS+NR81qogzQ/HE9M0QIfl6W7zN9vNCn2z APZkoHoV1MQjAsfkVF8NUDcJYHz5j+GcXO8DNDV1AibfQLJPiFqxL6hji+ogbqF/ y6RDvZtD2p1W8KWILRoeF2w5nZrYBWKu7sjmg990HzJ2rnAlXu59aSpZ5+l/o7wA Vqofq6eyvRfCpJbr8g7NXvkPNcaD38c3tgltWnGt7+QPr+HYJZzaFj+MuDbVDjdW Xpup8Uqy3xzozZxUdZKeba/ubQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPb/OvF4 MSI1+NbaAH0qjeliCYw+MB8GA1UdIwQYMBaAFL/UH8/SVhtTrEzS+D0RsEcKZqBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREU3QS9CQzcxRUNDNjhE NDUxMUVBODdGQUY4NThDNEY5QUUwMi92OVFmejlKV0cxT3NUTkw0UFJHd1J3cG1v RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y5UWZ6OUpXRzFPc1ROTDRQUkd3UndwbW9GVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REU3QS9CQzcxRUNDNjhENDUxMUVBODdGQUY4NThDNEY5QUUwMi92OVFmejlKV0cx T3NUTkw0UFJHd1J3cG1vRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATX0tit++EUDpiNjyF3e/4t8tjLCKzkW8LsjmK7uPRp8Zr+/WQuyG6 SdrXOF5CQiQIwUMNUFBl4fGscZVHdkEZ3+TUe7o0f2E/XVN81tem+cXhFMirFmyf Ko+NEpoO22ikLlIiZ11qtOIpK0KgTHIPTJwavmQPNYzy2/SLWkJ2H9vywmB6hu0y go/I8QzaYZ433U+5dLmKoFse8v3Hzn9ua/dQrNNTqLaHYIZvQUYIMEdXyDL4vv5m pmcPiQs/t3CJuomRaDsygLJZGtgBM4nC4iiHpaZe+LcJu430LaJ8cT/egQkfKDlH 6kFYHeuQIRRFaD7Y7f8J10NvVE5Rutd4 -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:00 2025 by rpki-client