$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft File: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft (raw, json) Hash identifier: wFJUldQRFUbBTm6oTDZZ3lSAJols6VzhNDxgN12sIsk= Subject key identifier: 9C:8B:44:7A:8D:ED:52:95:20:ED:17:FE:52:90:6A:8F:44:D3:AC:86 Authority key identifier: D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 Certificate issuer: /CN=A9146D06/serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0 Certificate serial: 3238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft Manifest number: 3226 Signing time: Fri 22 Aug 2025 15:27:46 +0000 Manifest this update: Fri 22 Aug 2025 15:27:46 +0000 Manifest next update: Fri 29 Aug 2025 15:27:46 +0000 Files and hashes: 1: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl (hash: Oc4noQP+0/obpT9pI4EuQBnKD1118hum7RQwr4sY2tg=) 2: F1C9EE68B13B11E5B2D80087C4F9AE02.roa (hash: 1VVuRrqVVTtGHoXa2KKerRIHjhwmzovA9uhLiSgp/NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12856 (0x3238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146D06, serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0 Validity Not Before: Aug 22 15:27:46 2025 GMT Not After : Aug 29 15:27:46 2025 GMT Subject: CN=68a88c72-24b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:bb:6a:e0:82:d9:5a:e5:e1:10:7e:fb:e7: 04:cc:91:7f:bd:35:2a:22:20:2f:84:dd:f2:a8:32: 57:f8:2a:9b:43:5f:10:0c:fd:aa:24:b5:79:2f:fb: 7b:5e:58:0e:39:90:d0:02:11:cb:fa:66:a5:d2:96: 2e:4a:b5:63:b8:37:06:9c:db:6c:bc:21:fd:54:e0: 7d:6a:ce:ce:71:a0:42:f5:e5:02:a0:7b:e9:4b:00: 5b:18:02:cc:75:12:24:d1:5c:fd:85:f4:9c:00:0c: 67:c9:6c:c4:96:38:4c:78:1e:8a:71:09:f8:0a:74: 4b:91:74:ee:cf:14:46:d7:2c:fb:e7:3f:7b:2e:5e: 2a:df:b0:7d:e3:a3:f8:67:87:e8:ae:9e:76:1e:dd: ae:b4:b1:e0:4d:08:bb:04:10:ee:36:ed:4b:64:df: cd:a3:ed:55:f7:26:ab:1b:71:cb:bb:ce:94:43:17: 59:00:4f:9b:8e:68:42:de:cb:65:6d:37:69:4a:64: c6:20:d9:18:ea:74:30:41:34:0d:a1:01:5e:ad:e3: d3:43:3a:a4:67:88:a6:54:80:14:1a:10:9e:6a:61: e3:c8:1a:35:9b:9a:e6:bc:c4:d7:b5:8e:aa:58:b3: c9:0e:18:2c:5b:61:0b:6a:c1:0e:f0:73:52:57:da: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8B:44:7A:8D:ED:52:95:20:ED:17:FE:52:90:6A:8F:44:D3:AC:86 X509v3 Authority Key Identifier: keyid:D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:da:8c:c0:7c:6d:3c:ef:2f:a5:b2:74:7b:3a:8c:49:fd:74: 28:36:dd:f7:98:91:88:a2:31:a7:ec:09:56:34:2e:26:c2:c8: 90:5d:df:7d:83:b4:ce:70:19:dd:96:44:6a:45:fa:04:98:69: de:05:98:88:b6:f9:66:76:ce:d8:b6:7f:25:ab:97:ee:8d:79: 3a:e7:b2:de:f3:bf:17:bc:da:36:17:ff:42:d8:eb:3b:01:32: ee:fc:69:b4:bf:d8:03:23:0a:56:3d:07:cc:ec:af:ee:67:ce: 26:0f:1b:ad:5f:a5:fd:80:28:67:3e:15:ed:b2:ba:03:11:e7: 3c:ae:81:41:f5:f0:35:0a:85:5d:fa:cd:b6:3a:28:e4:10:05: b7:5d:89:2a:52:28:bf:b9:41:6c:17:d4:90:cd:2e:4b:2d:8b: 31:54:6d:13:cb:28:2b:17:b2:d0:cd:57:81:46:18:61:a0:4d: 7d:bb:a1:59:66:8a:9d:34:3c:ec:ff:d4:eb:7f:46:77:93:bd: d4:ac:dc:6e:e7:82:3e:e4:e6:94:39:c4:8d:1e:fb:0d:49:f5: 69:27:f1:da:5c:ba:25:a3:74:52:b3:c5:35:cd:73:7c:e9:91: f9:50:dc:61:43:20:f6:c3:c9:f8:ad:05:e8:e2:4e:80:35:ad: 0a:5f:54:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEMDYxMTAvBgNVBAUTKEQzMTU2RkY1MzhBMEQzRjUzOTczODYxRkFENjQzNkZC MUU1RkU4QzAwHhcNMjUwODIyMTUyNzQ2WhcNMjUwODI5MTUyNzQ2WjAYMRYwFAYD VQQDEw02OGE4OGM3Mi0yNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNe7auCC2Vrl4RB+++cEzJF/vTUqIiAvhN3yqDJX+CqbQ18QDP2qJLV5L/t7 XlgOOZDQAhHL+mal0pYuSrVjuDcGnNtsvCH9VOB9as7OcaBC9eUCoHvpSwBbGALM dRIk0Vz9hfScAAxnyWzEljhMeB6KcQn4CnRLkXTuzxRG1yz75z97Ll4q37B946P4 Z4forp52Ht2utLHgTQi7BBDuNu1LZN/No+1V9yarG3HLu86UQxdZAE+bjmhC3stl bTdpSmTGINkY6nQwQTQNoQFerePTQzqkZ4imVIAUGhCeamHjyBo1m5rmvMTXtY6q WLPJDhgsW2ELasEO8HNSV9pJ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyLRHqN 7VKVIO0X/lKQao9E06yGMB8GA1UdIwQYMBaAFNMVb/U4oNP1OXOGH61kNvseX+jA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkQwNi8xQ0VDQjE4QUEw MDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBfVTVjNFlmcldRMi14NWY2 TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4VnY5VGlnMF9VNWM0WWZyV1EyLXg1ZjZNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkQwNi8xQ0VDQjE4QUEwMDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBf VTVjNFlmcldRMi14NWY2TUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt2ozAfG087y+lsnR7OoxJ/XQoNt33mJGIojGn7AlWNC4mwsiQXd99 g7TOcBndlkRqRfoEmGneBZiItvlmds7Ytn8lq5fujXk657Le878XvNo2F/9C2Os7 ATLu/Gm0v9gDIwpWPQfM7K/uZ84mDxutX6X9gChnPhXtsroDEec8roFB9fA1CoVd +s22OijkEAW3XYkqUii/uUFsF9SQzS5LLYsxVG0TyygrF7LQzVeBRhhhoE19u6FZ ZoqdNDzs/9Trf0Z3k73UrNxu54I+5OaUOcSNHvsNSfVpJ/HaXLolo3RSs8U1zXN8 6ZH5UNxhQyD2w8n4rQXo4k6ANa0KX1T8 -----END CERTIFICATE-----Generated at Sun Aug 24 00:17:10 2025 by rpki-client