$ rpki-client -vvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft File: o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json) Hash identifier: 8dtdxFGNU47TSD46g4dcU938Fjz9V0iwRsiOGBsEoP0= Subject key identifier: 3E:FC:69:90:55:89:13:B5:AF:5E:FF:3A:EA:8E:3F:CD:B1:43:D8:1A Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 Certificate issuer: /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Certificate serial: 0941 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft Manifest number: 093B Signing time: Fri 22 Aug 2025 20:20:33 +0000 Manifest this update: Fri 22 Aug 2025 20:20:32 +0000 Manifest next update: Fri 29 Aug 2025 20:20:32 +0000 Files and hashes: 1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: xtf44N37LjXFGmggoZd6+l67SsOmfK+8Ws+jlITkH20=) 2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: oh99riu32xDufqLh4s49Z+OfJBlHg4YCfXKo4NVguOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2369 (0x941) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Validity Not Before: Aug 22 20:20:32 2025 GMT Not After : Aug 29 20:20:32 2025 GMT Subject: CN=68a8d110-2658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:1a:ba:d8:f4:1b:5b:52:d5:a1:97:1b:17: 25:8c:d4:f8:20:f1:4e:81:40:68:10:ef:7e:f3:a1: ae:2e:59:62:a7:96:90:8e:41:4a:27:21:46:a6:17: 2a:22:e7:f2:bc:61:f1:a0:cd:a8:6c:2f:92:a3:e2: d9:a6:88:95:e2:40:9f:ce:3b:ea:43:2f:2f:f9:38: b5:98:e7:45:3a:63:61:46:15:66:16:bf:a4:3f:e8: ba:07:01:65:1f:77:f9:97:74:b3:6a:bd:fd:e9:6b: 93:d6:61:77:49:f9:30:73:61:2c:3c:2d:ff:c3:2f: 85:85:3d:61:ca:10:ea:f5:0e:58:55:c9:92:6c:79: e0:c7:d5:90:71:68:b7:b3:93:da:cc:66:f6:62:2e: 13:f9:53:86:13:0d:1c:f4:f5:d2:66:e6:91:02:04: d7:c0:1a:6c:7c:e6:a7:e1:1a:a8:b2:ec:64:d3:3f: db:2f:40:e2:a1:11:dd:a0:a9:da:6a:64:10:88:00: 73:04:bc:6f:93:64:b4:7d:39:04:18:3a:08:77:c5: ea:0e:c4:3c:cb:6f:9c:05:3d:fd:8d:0a:cb:75:6a: ce:a4:9a:1a:52:f1:e6:ca:9d:49:37:30:a8:12:8d: eb:c3:4d:3d:4d:6d:e6:f0:ee:89:f9:ce:2c:c2:34: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FC:69:90:55:89:13:B5:AF:5E:FF:3A:EA:8E:3F:CD:B1:43:D8:1A X509v3 Authority Key Identifier: keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:99:1b:f3:3f:ed:8a:d4:b6:fe:a6:fd:05:3c:c2:5b:b9:45: bf:80:74:2c:32:14:25:4c:36:8e:0f:56:3f:7e:bf:ec:ee:75: 2e:a5:a1:96:6b:d0:01:13:94:74:e2:ea:26:55:e1:9a:ce:84: 22:1b:30:e1:8f:51:2a:48:d9:9a:46:2e:0f:57:54:c1:cd:8b: f2:08:75:ab:58:e0:ab:1a:1b:ab:fa:37:5a:69:56:58:9c:7c: 16:7d:2a:26:a6:c0:25:31:a2:f4:6b:d1:dd:9e:e1:f9:2b:2c: 2c:f2:16:6f:af:f3:de:0f:aa:82:89:b3:d9:e3:df:ae:5d:ca: 2c:17:b6:7f:3c:6b:7b:b4:96:fa:9d:7e:2a:b3:51:49:1a:73: 4d:0c:8f:ff:73:7a:77:7a:77:f9:d0:5c:1f:10:c5:ce:42:94: 2d:fa:db:cc:f5:11:f7:16:59:5c:4a:2b:7c:67:5d:84:64:a2: fe:db:5e:ac:96:dc:50:2a:95:6c:76:76:b5:57:8b:15:77:60: d8:66:dd:c0:30:98:ac:36:df:bb:cc:09:3a:55:c4:55:60:33: 07:94:15:c5:3d:42:6c:79:69:4a:83:ce:93:c5:f8:75:bf:c1: f0:b6:cf:54:47:0c:28:5a:c8:2c:d1:61:ea:73:60:c1:1f:ee: 3b:b8:ee:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2MDQxMTAvBgNVBAUTKEEzREZCRTExQUY4QTc4RTU2MkNGQjQ1NzkwMENDQUI5 MDkwQzJCNTkwHhcNMjUwODIyMjAyMDMyWhcNMjUwODI5MjAyMDMyWjAYMRYwFAYD VQQDEw02OGE4ZDExMC0yNjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroEautj0G1tS1aGXGxcljNT4IPFOgUBoEO9+86GuLllip5aQjkFKJyFGphcq IufyvGHxoM2obC+So+LZpoiV4kCfzjvqQy8v+Ti1mOdFOmNhRhVmFr+kP+i6BwFl H3f5l3Szar396WuT1mF3Sfkwc2EsPC3/wy+FhT1hyhDq9Q5YVcmSbHngx9WQcWi3 s5PazGb2Yi4T+VOGEw0c9PXSZuaRAgTXwBpsfOan4Rqosuxk0z/bL0DioRHdoKna amQQiABzBLxvk2S0fTkEGDoId8XqDsQ8y2+cBT39jQrLdWrOpJoaUvHmyp1JNzCo Eo3rw009TW3m8O6J+c4swjRu/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD78aZBV iRO1r17/OuqOP82xQ9gaMB8GA1UdIwQYMBaAFKPfvhGvinjlYs+0V5AMyrkJDCtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTYwNC9CQ0VDNkM1RUE0 QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VPVml6N1JYa0F6S3VRa01L MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285LS1FYS1LZU9WaXo3UlhrQXpLdVFrTUsxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTYwNC9CQ0VDNkM1RUE0QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VP Vml6N1JYa0F6S3VRa01LMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/mRvzP+2K1Lb+pv0FPMJbuUW/gHQsMhQlTDaOD1Y/fr/s7nUupaGW a9ABE5R04uomVeGazoQiGzDhj1EqSNmaRi4PV1TBzYvyCHWrWOCrGhur+jdaaVZY nHwWfSompsAlMaL0a9HdnuH5Kyws8hZvr/PeD6qCibPZ49+uXcosF7Z/PGt7tJb6 nX4qs1FJGnNNDI//c3p3enf50FwfEMXOQpQt+tvM9RH3FllcSit8Z12EZKL+216s ltxQKpVsdna1V4sVd2DYZt3AMJisNt+7zAk6VcRVYDMHlBXFPUJseWlKg86Txfh1 v8Hwts9URwwoWsgs0WHqc2DBH+47uO7Y -----END CERTIFICATE-----Generated at Sun Aug 24 07:01:50 2025 by rpki-client