$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft File: b09GjkMIsA0N9f6shChm1U539dM.mft (raw, json) Hash identifier: TPJyj+tCCQTV5HEJX1ZGeh/fmeZWMKwp2+TKwU9Pwi0= Subject key identifier: C7:35:C4:CD:96:77:08:DE:F4:51:96:91:DD:08:7A:FA:5C:04:EE:FD Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3 Certificate issuer: /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3 Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft Manifest number: 0C81 Signing time: Fri 22 Aug 2025 18:32:46 +0000 Manifest this update: Fri 22 Aug 2025 18:32:45 +0000 Manifest next update: Fri 29 Aug 2025 18:32:45 +0000 Files and hashes: 1: b09GjkMIsA0N9f6shChm1U539dM.crl (hash: g5JLAd9KfrsUQv0MJCqceaSHQmsBQ+Aw979Obgxqaps=) 2: 6D8B82D0D6D811EE8BBA8938C4F9AE02.roa (hash: 1cMybGIbvpxyTUqlwMM8pDEltG6qbjXuctF+adjG4sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1A2, serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3 Validity Not Before: Aug 22 18:32:45 2025 GMT Not After : Aug 29 18:32:45 2025 GMT Subject: CN=68a8b7ce-6951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:09:71:a5:74:dc:b0:03:16:7d:e0:b8:dc:75: c2:0b:f8:8f:aa:ca:fb:3f:e2:c3:8f:0e:5e:3c:10: a5:f7:53:0b:54:22:f1:7d:c4:f1:9e:88:4f:f2:aa: 31:e5:b8:ed:91:c3:1b:94:41:08:70:74:d7:09:0a: 4f:35:2f:6f:ce:4b:ab:da:43:90:5d:03:46:4a:c6: c3:ee:26:0d:9e:03:2b:6e:d0:35:c9:01:f1:75:af: 4b:b3:28:e8:fd:73:9a:21:a0:a1:9d:08:4c:15:9d: 98:a8:fe:28:6f:ce:f7:b2:60:75:52:12:8e:78:59: b3:a4:cd:6e:79:2f:22:1e:8c:5f:19:04:b1:34:fc: cf:d7:59:6d:d8:be:ca:2b:5f:53:1a:14:0c:23:55: 71:48:2c:72:ab:cd:80:7c:ce:5b:f5:8e:a6:01:aa: 52:da:f9:6e:b9:9a:b0:34:7c:8a:cf:a2:27:5c:37: c5:8e:c5:9f:df:7d:6d:29:49:40:2e:e7:f9:da:79: ff:1b:f4:b2:48:d8:2d:86:8e:50:c9:d4:42:df:05: fa:b7:ce:e0:dc:df:e9:1a:66:ef:55:93:17:e5:ff: 1e:f9:92:92:d6:5f:94:af:47:19:6a:5d:b3:e9:04: ad:b1:56:95:ba:e0:b1:e6:c1:cf:39:8c:74:cf:59: a9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:C4:CD:96:77:08:DE:F4:51:96:91:DD:08:7A:FA:5C:04:EE:FD X509v3 Authority Key Identifier: keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:35:4d:48:4c:32:61:6c:26:39:3a:73:a4:7a:31:27:f3:56: 0b:29:86:b8:9a:64:31:51:35:fa:5c:da:40:97:f7:bc:a7:a4: df:26:b9:03:03:af:c6:00:86:5f:ee:26:86:8e:34:c0:a9:9e: 03:64:97:15:64:43:ab:17:6d:37:71:a6:69:0f:91:21:af:79: 2e:e3:cc:6c:18:9b:34:93:ca:0a:39:8d:39:4d:84:66:7c:fa: 7a:b8:33:43:87:94:d0:7c:65:d2:7b:f0:09:c1:8e:4d:be:66: df:cf:dc:47:bb:6b:65:ad:b0:54:53:bc:a3:4a:80:1b:4a:75: cd:c2:9f:18:6b:60:ec:bb:e5:b6:f4:75:2c:b0:57:93:b7:92: 62:31:5d:80:36:76:82:38:6c:45:be:c2:a7:8a:d8:07:ee:95: 62:e7:bb:6e:a6:0a:2a:3b:3b:5c:bb:e0:40:48:9b:1f:af:e7: e7:bb:64:e9:bc:dc:3f:7c:9a:c6:3b:cc:23:68:fd:aa:d5:30: 63:b2:1d:83:b4:4f:d1:0d:22:e5:6d:a9:a4:9d:1f:4d:0d:e3: 07:3d:8c:40:de:23:b4:d1:59:df:30:01:f3:a2:df:21:6e:c4: 9f:74:57:bd:2f:8e:29:db:2c:0e:fc:01:90:f0:86:64:80:43: db:dd:bd:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxQTIxMTAvBgNVBAUTKDZGNEY0NjhFNDMwOEIwMEQwREY1RkVBQzg0Mjg2NkQ1 NEU3N0Y1RDMwHhcNMjUwODIyMTgzMjQ1WhcNMjUwODI5MTgzMjQ1WjAYMRYwFAYD VQQDEw02OGE4YjdjZS02OTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wlxpXTcsAMWfeC43HXCC/iPqsr7P+LDjw5ePBCl91MLVCLxfcTxnohP8qox 5bjtkcMblEEIcHTXCQpPNS9vzkur2kOQXQNGSsbD7iYNngMrbtA1yQHxda9Lsyjo /XOaIaChnQhMFZ2YqP4ob873smB1UhKOeFmzpM1ueS8iHoxfGQSxNPzP11lt2L7K K19TGhQMI1VxSCxyq82AfM5b9Y6mAapS2vluuZqwNHyKz6InXDfFjsWf331tKUlA Luf52nn/G/SySNgtho5QydRC3wX6t87g3N/pGmbvVZMX5f8e+ZKS1l+Ur0cZal2z 6QStsVaVuuCx5sHPOYx0z1mpawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMc1xM2W dwje9FGWkd0IevpcBO79MB8GA1UdIwQYMBaAFG9PRo5DCLANDfX+rIQoZtVOd/XT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFBMi9ERkQxMUYyODA2 QTYxMUVBODk3NUUzNDFDNEY5QUUwMi9iMDlHamtNSXNBME45ZjZzaENobTFVNTM5 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IwOUdqa01Jc0EwTjlmNnNoQ2htMVU1MzlkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDFBMi9ERkQxMUYyODA2QTYxMUVBODk3NUUzNDFDNEY5QUUwMi9iMDlHamtNSXNB ME45ZjZzaENobTFVNTM5ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1NU1ITDJhbCY5OnOkejEn81YLKYa4mmQxUTX6XNpAl/e8p6TfJrkD A6/GAIZf7iaGjjTAqZ4DZJcVZEOrF203caZpD5Ehr3ku48xsGJs0k8oKOY05TYRm fPp6uDNDh5TQfGXSe/AJwY5Nvmbfz9xHu2tlrbBUU7yjSoAbSnXNwp8Ya2Dsu+W2 9HUssFeTt5JiMV2ANnaCOGxFvsKnitgH7pVi57tupgoqOztcu+BASJsfr+fnu2Tp vNw/fJrGO8wjaP2q1TBjsh2DtE/RDSLlbamknR9NDeMHPYxA3iO00VnfMAHzot8h bsSfdFe9L44p2ywO/AGQ8IZkgEPb3b1h -----END CERTIFICATE-----Generated at Sat Aug 23 13:45:45 2025 by rpki-client