$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json) Hash identifier: Dng/P/Jz/t3ps/DooWEckQbss6I9+uHXl1fxXYM3VC0= Subject key identifier: 36:62:09:1B:03:B2:A5:1B:B4:60:F7:87:31:9E:C5:A9:14:A8:B4:0B Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Certificate serial: 0625 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft Manifest number: 05FF Signing time: Fri 22 Aug 2025 23:14:21 +0000 Manifest this update: Fri 22 Aug 2025 23:14:20 +0000 Manifest next update: Fri 29 Aug 2025 23:14:20 +0000 Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: eYbhcc1KdPu6Br2aaZ9Xye3F7Yz2rYS6rqshT9gUVQo=) 2: 96E3EB58B2B711EEAE882255C4F9AE02.roa (hash: HhWutos5vK2k7U1Y6D/GqMl0klIP1xZEoSAwh8yepqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Validity Not Before: Aug 22 23:14:20 2025 GMT Not After : Aug 29 23:14:20 2025 GMT Subject: CN=68a8f9cd-1ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:6e:7d:0e:21:7a:95:cd:e1:2f:cb:58:b5: bc:74:8a:a3:39:84:1b:4c:9a:27:ed:1d:02:db:10: 0c:90:b4:ea:bc:fe:d6:63:b9:e3:db:ca:c2:6c:45: 60:2b:66:2c:38:1b:38:7d:5f:6c:e4:4a:d1:15:8a: 9d:09:b0:df:a3:fe:1f:16:9b:9e:c9:ae:f2:9c:76: a5:2f:24:18:aa:57:6c:c1:8c:b0:bd:6e:ab:90:f9: 5a:16:91:e7:a3:42:d0:98:b2:b9:3d:f5:e9:0b:5a: 90:47:57:8e:ae:4c:c1:7b:0c:86:d5:1d:7d:72:c4: 13:2e:d1:10:63:e0:36:4e:0e:60:f0:41:f0:20:ce: 57:bd:08:5e:d3:0a:ff:39:68:08:9d:f1:00:e9:db: 25:a3:39:9a:ac:45:21:39:24:a4:51:5a:c3:d4:77: 38:9b:e9:b4:e3:0b:d7:51:cc:dc:b0:66:90:b6:b5: 29:4d:50:f4:9f:90:95:f4:78:57:35:b8:d4:bf:2c: 3b:c7:1c:88:d7:13:5f:7d:db:76:fe:d1:a7:f6:47: aa:73:ef:39:f5:52:6d:00:1c:37:d0:bc:6d:b6:2d: f0:62:e0:28:6a:1b:3e:73:f6:f2:0c:09:e3:cf:2c: 9f:a1:77:b7:72:87:16:e7:a0:bf:64:78:59:fe:48: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:62:09:1B:03:B2:A5:1B:B4:60:F7:87:31:9E:C5:A9:14:A8:B4:0B X509v3 Authority Key Identifier: keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:73:0a:a2:a3:85:63:6f:3a:36:5e:33:44:b7:6e:9b:12:d4: 38:2e:94:25:58:38:45:d2:ca:e9:76:ad:63:91:0d:4d:be:33: b5:09:cc:7f:21:ac:0b:38:df:6b:6d:32:81:87:23:6b:80:1f: a0:f8:4c:96:2e:c0:79:eb:04:d7:85:d2:a6:8b:f4:b8:a9:30: a8:ab:0e:31:90:57:0d:2c:77:13:c5:c2:9f:7d:01:b5:31:a9: 71:a2:c9:4a:15:ac:35:d7:f3:8f:85:ba:72:c5:63:34:17:06: 6f:3a:5d:76:3b:af:65:5a:61:30:37:31:60:46:a8:0f:52:5e: ef:14:de:19:48:10:49:af:c4:06:8f:fe:29:49:6a:71:e1:7d: 86:17:78:2b:a6:cf:3a:74:d3:70:05:fb:ec:f1:03:3b:46:70: b6:10:59:96:45:b3:37:f3:1b:aa:4f:dc:1c:f6:81:f0:bc:72: 49:fe:38:b0:8e:39:cd:33:92:80:85:76:f4:91:5c:94:6e:0b: b2:b4:9c:a1:c9:d4:ab:e2:8d:2e:7d:c4:04:ab:3a:69:07:26: 0b:4b:51:9d:98:02:3a:6c:c3:b5:a6:28:14:de:c6:0a:48:0b: ec:31:71:30:05:79:d3:6e:a1:ed:75:59:79:1e:4c:21:d2:7d: 02:9e:c2:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDRDExMTAvBgNVBAUTKEEzRDVDRjQzREU1QjNEOEI5QzM0M0VENDQ5QzE2OTBF QkUzNDE3MEUwHhcNMjUwODIyMjMxNDIwWhcNMjUwODI5MjMxNDIwWjAYMRYwFAYD VQQDEw02OGE4ZjljZC0xY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvitufQ4hepXN4S/LWLW8dIqjOYQbTJon7R0C2xAMkLTqvP7WY7nj28rCbEVg K2YsOBs4fV9s5ErRFYqdCbDfo/4fFpueya7ynHalLyQYqldswYywvW6rkPlaFpHn o0LQmLK5PfXpC1qQR1eOrkzBewyG1R19csQTLtEQY+A2Tg5g8EHwIM5XvQhe0wr/ OWgInfEA6dslozmarEUhOSSkUVrD1Hc4m+m04wvXUczcsGaQtrUpTVD0n5CV9HhX NbjUvyw7xxyI1xNffdt2/tGn9keqc+859VJtABw30Lxtti3wYuAoahs+c/byDAnj zyyfoXe3cocW56C/ZHhZ/khspwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZiCRsD sqUbtGD3hzGexakUqLQLMB8GA1UdIwQYMBaAFKPVz0PeWz2LnDQ+1EnBaQ6+NBcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NEMS9BRDdGNDVBNENE QzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZdWNORDdVU2NGcERyNDBG dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285WFBROTViUFl1Y05EN1VTY0ZwRHI0MEZ3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NEMS9BRDdGNDVBNENEQzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZ dWNORDdVU2NGcERyNDBGdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYcwqio4Vjbzo2XjNEt26bEtQ4LpQlWDhF0srpdq1jkQ1NvjO1Ccx/ IawLON9rbTKBhyNrgB+g+EyWLsB56wTXhdKmi/S4qTCoqw4xkFcNLHcTxcKffQG1 MalxoslKFaw11/OPhbpyxWM0FwZvOl12O69lWmEwNzFgRqgPUl7vFN4ZSBBJr8QG j/4pSWpx4X2GF3grps86dNNwBfvs8QM7RnC2EFmWRbM38xuqT9wc9oHwvHJJ/jiw jjnNM5KAhXb0kVyUbguytJyhydSr4o0ufcQEqzppByYLS1GdmAI6bMO1pigU3sYK SAvsMXEwBXnTbqHtdVl5Hkwh0n0CnsJj -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:18 2025 by rpki-client