$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json) Hash identifier: m2rJijC3YULUdUpvNEELks8mKPMyPV4cmncAvD/tgWE= Subject key identifier: 9F:ED:8A:D5:5B:4D:E4:0D:88:6F:AC:31:9B:F4:5F:B0:1D:3E:A2:A4 Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft Manifest number: 9E Signing time: Sat 23 Aug 2025 06:34:47 +0000 Manifest this update: Sat 23 Aug 2025 06:34:46 +0000 Manifest next update: Sat 30 Aug 2025 06:34:46 +0000 Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: aih2UE5SCMOuBbDByVFpDIV1i7+CrzJ8iwix3rfHb38=) 2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: EP8IMn/Dpz37JzTGpl131u/EdByNY9mypWBz1crTuiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Validity Not Before: Aug 23 06:34:46 2025 GMT Not After : Aug 30 06:34:46 2025 GMT Subject: CN=68a96106-ef15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:f8:a1:d3:61:72:fc:7d:62:6b:b3:30:b6: b6:d5:5c:15:44:3b:4b:51:38:00:1e:15:7f:ce:aa: 37:e0:c5:77:14:f4:72:e8:ee:b1:25:8d:96:9c:00: 3f:38:17:84:77:8a:00:a6:31:a0:63:69:dd:c5:ee: 07:9f:2a:08:73:df:09:1c:e6:5c:4f:94:80:09:e4: 9a:8c:28:dd:17:a4:4b:cf:c1:c7:c6:a2:d8:75:f9: 83:69:d2:cd:b8:7e:db:12:e7:c5:62:63:fa:f0:14: 95:31:98:13:1d:54:a4:69:ad:ec:9f:b6:fd:d5:f4: e8:8f:e8:16:86:40:be:e3:9a:6c:db:95:fb:5a:6f: 63:c3:a1:e9:7c:88:b6:ea:2a:ca:23:55:7c:bd:b7: 40:60:19:39:d5:f6:82:3d:33:5a:dc:94:16:e5:7d: dd:e9:0f:d0:eb:fe:98:4f:c6:35:52:d2:ba:a1:d4: a6:87:f8:0f:ef:0c:5b:43:20:c4:ca:1a:1b:48:31: 38:0a:96:ae:1b:c9:f0:f6:2d:c2:e2:d7:b8:a4:a0: 34:f8:3d:e6:6d:31:78:dc:45:9f:5e:d0:f8:67:ad: 94:74:3b:67:31:80:6e:bd:be:1f:82:4f:81:8f:66: 79:17:dd:e9:86:aa:07:9b:fe:4d:86:0c:84:79:4a: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:ED:8A:D5:5B:4D:E4:0D:88:6F:AC:31:9B:F4:5F:B0:1D:3E:A2:A4 X509v3 Authority Key Identifier: keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:80:5f:b0:bd:f3:6a:19:b6:5e:8a:ed:ef:dd:b4:ff:1f:75: 96:8c:68:5b:45:22:48:c2:b6:92:c5:b2:1e:e1:9e:73:99:70: 0c:d9:97:50:f9:7c:8c:f0:16:a5:b6:5e:6f:af:74:66:4b:fb: 34:68:84:ea:03:3a:1c:05:6f:0b:29:4d:6e:52:77:65:d9:9e: 9e:c2:d5:ac:a8:45:8c:72:4a:36:28:79:5f:e5:b9:dc:42:83: c5:51:bb:0e:22:c9:1c:3a:51:f6:5b:d7:50:ff:b1:7e:98:f8: 00:cb:8f:ad:5c:c1:3f:01:71:5f:9f:2e:d5:56:06:c8:50:b1: 60:d0:e0:c2:7d:ca:f3:62:c0:49:e9:a6:7c:b5:6b:37:78:83: f5:c0:97:b8:b8:c7:16:d4:d1:c6:02:56:8c:c0:36:dd:92:8c: 34:fc:53:1c:10:14:57:af:d5:64:99:3a:be:7e:23:1b:85:74: be:8b:ab:98:7f:ed:8b:57:09:5c:ba:18:db:c0:c4:ce:04:92: ab:d8:51:53:65:56:d7:26:57:bf:35:67:8d:3d:a3:be:a4:ad: 36:28:ac:c1:80:63:67:63:4b:ba:49:45:58:a6:0a:13:92:c4: ea:ad:76:2c:fc:0a:6a:00:02:39:4d:86:15:e5:1e:ff:3d:4a: 61:4f:03:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKEY0NDRCOEREQUMxQTJBRUM5Qzk4RDg5ODE2MUM3MzQ4 MkMyRUQ0ODgwHhcNMjUwODIzMDYzNDQ2WhcNMjUwODMwMDYzNDQ2WjAYMRYwFAYD VQQDEw02OGE5NjEwNi1lZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXX4odNhcvx9YmuzMLa21VwVRDtLUTgAHhV/zqo34MV3FPRy6O6xJY2WnAA/ OBeEd4oApjGgY2ndxe4HnyoIc98JHOZcT5SACeSajCjdF6RLz8HHxqLYdfmDadLN uH7bEufFYmP68BSVMZgTHVSkaa3sn7b91fToj+gWhkC+45ps25X7Wm9jw6HpfIi2 6irKI1V8vbdAYBk51faCPTNa3JQW5X3d6Q/Q6/6YT8Y1UtK6odSmh/gP7wxbQyDE yhobSDE4CpauG8nw9i3C4te4pKA0+D3mbTF43EWfXtD4Z62UdDtnMYBuvb4fgk+B j2Z5F93phqoHm/5NhgyEeUq/vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/titVb TeQNiG+sMZv0X7AdPqKkMB8GA1UdIwQYMBaAFPREuN2sGirsnJjYmBYcc0gsLtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83MDMxQTFFQzkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1eWNtTmlZRmh4elNDd3Ux SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83MDMxQTFFQzkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1 eWNtTmlZRmh4elNDd3UxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVgF+wvfNqGbZeiu3v3bT/H3WWjGhbRSJIwraSxbIe4Z5zmXAM2ZdQ +XyM8Baltl5vr3RmS/s0aITqAzocBW8LKU1uUndl2Z6ewtWsqEWMcko2KHlf5bnc QoPFUbsOIskcOlH2W9dQ/7F+mPgAy4+tXME/AXFfny7VVgbIULFg0ODCfcrzYsBJ 6aZ8tWs3eIP1wJe4uMcW1NHGAlaMwDbdkow0/FMcEBRXr9VkmTq+fiMbhXS+i6uY f+2LVwlcuhjbwMTOBJKr2FFTZVbXJle/NWeNPaO+pK02KKzBgGNnY0u6SUVYpgoT ksTqrXYs/ApqAAI5TYYV5R7/PUphTwOP -----END CERTIFICATE-----Generated at Sat Aug 23 10:39:56 2025 by rpki-client