$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json) Hash identifier: wyONOV6Aor1GdyLlU80OkgkJSv0rI4Lyj7XdBlqzotA= Subject key identifier: 2C:B4:D0:49:D2:32:2A:2D:AB:07:9F:8D:94:96:BF:B7:30:5E:22:83 Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft Manifest number: A9 Signing time: Sat 23 Aug 2025 06:29:42 +0000 Manifest this update: Sat 23 Aug 2025 06:29:41 +0000 Manifest next update: Sat 30 Aug 2025 06:29:41 +0000 Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: Yvhp7jMgv58ePp9UXag51dYtUC0cCiscErAznQknOLY=) 2: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (hash: j4rFIHTNRhGLJLDjietaNGRc3CHg7H6921oZKrCNics=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Aug 23 06:29:41 2025 GMT Not After : Aug 30 06:29:41 2025 GMT Subject: CN=68a95fd6-cafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:1f:0f:8f:ff:20:f5:05:a6:66:bd:a0:ec: cc:0e:61:03:60:2e:e4:f4:b9:cd:2b:e6:3d:60:74: 8a:60:f1:fe:a3:6f:55:a5:30:fa:d1:b1:fb:8a:3a: fb:70:88:6a:f0:56:33:56:ab:81:54:d9:90:56:bb: ee:b8:d8:ca:26:3e:c3:08:a7:43:62:7a:be:bd:d8: af:16:3d:c5:fa:17:fe:e2:89:2e:46:a8:83:d6:2e: 15:73:03:c1:fd:3c:94:17:c6:27:09:16:0e:3e:e3: 78:d9:29:f2:06:41:d0:74:74:3e:ab:1a:c7:b1:39: 27:8a:3f:56:e3:4d:c7:29:35:9f:5e:9f:28:03:3c: 24:01:e8:33:40:98:26:ea:6a:35:e5:b5:bf:21:5f: 22:74:c1:36:b4:75:6c:10:0a:2f:0b:71:53:77:0c: 9d:aa:75:70:78:e9:3c:0b:e4:3a:29:0d:9b:8f:0d: d7:e2:ea:ce:0d:fc:62:c2:4c:21:b9:87:12:c0:24: 71:a6:00:81:38:8b:98:28:1f:11:12:63:e1:49:4b: ce:de:52:50:b3:08:c5:91:34:28:ee:fa:cd:36:7b: 7d:18:f4:8f:76:e1:7f:4a:89:f3:a8:6f:3c:5b:d9: ba:63:cb:f5:af:81:0c:bb:20:a9:fc:8f:e8:7d:d3: 77:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B4:D0:49:D2:32:2A:2D:AB:07:9F:8D:94:96:BF:B7:30:5E:22:83 X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:96:32:0a:6d:7c:de:8b:f0:a1:9f:eb:91:99:77:3d:9e:df: e0:5b:a5:ea:e6:99:7b:62:c4:a0:33:b0:b9:b4:0e:9b:60:b3: 7c:df:3e:66:61:b1:5a:93:a3:e5:c1:b7:29:ac:2c:78:08:c0: 7e:b5:8b:9f:29:0b:e4:a0:c1:f6:ea:26:59:ac:29:52:4c:51: a1:8a:b7:6a:9d:c2:b7:d6:25:6c:4a:cd:19:53:93:27:ec:d4: 21:de:e1:cc:23:17:75:0c:e1:c0:65:96:63:46:50:a5:fa:9c: c1:ac:e2:6f:57:80:c0:3b:63:af:e7:d1:f8:ec:71:2e:1d:60: 80:08:42:9d:e5:5e:9b:32:20:96:08:e7:20:05:80:1c:4c:4f: 6f:7a:f1:81:fa:aa:62:e4:51:7b:16:18:51:c0:aa:01:64:e8: f6:cd:b3:af:cf:01:28:fc:f3:e0:14:02:6e:5c:28:c3:12:05: 38:0c:2c:b6:22:d5:1c:22:2d:f9:93:38:f1:18:9a:8c:23:c3: 07:33:4b:a7:e2:82:b6:0b:09:b5:9a:92:c2:25:7d:e2:d6:83: a4:0c:67:5b:97:eb:8b:c3:c4:43:07:94:1d:b6:4f:c2:c5:99: 50:71:1b:87:ab:92:24:87:37:a5:ba:f4:cb:e9:21:fd:37:2f: 45:60:71:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKEZEOUQ3RjY2MEYzQTEzMENBNDhCRUJCQTY2RTE2MkJE MzAzNEUzOEQwHhcNMjUwODIzMDYyOTQxWhcNMjUwODMwMDYyOTQxWjAYMRYwFAYD VQQDEw02OGE5NWZkNi1jYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlUfD4//IPUFpma9oOzMDmEDYC7k9LnNK+Y9YHSKYPH+o29VpTD60bH7ijr7 cIhq8FYzVquBVNmQVrvuuNjKJj7DCKdDYnq+vdivFj3F+hf+4okuRqiD1i4VcwPB /TyUF8YnCRYOPuN42SnyBkHQdHQ+qxrHsTknij9W403HKTWfXp8oAzwkAegzQJgm 6mo15bW/IV8idME2tHVsEAovC3FTdwydqnVweOk8C+Q6KQ2bjw3X4urODfxiwkwh uYcSwCRxpgCBOIuYKB8REmPhSUvO3lJQswjFkTQo7vrNNnt9GPSPduF/SonzqG88 W9m6Y8v1r4EMuyCp/I/ofdN3gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCy00EnS MiotqwefjZSWv7cwXiKDMB8GA1UdIwQYMBaAFP2df2YPOhMMpIvrumbhYr0wNOON MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS80RUZEMTVCNjhC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3eWtpLXU2WnVGaXZUQTA0 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS80RUZEMTVCNjhCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3 eWtpLXU2WnVGaXZUQTA0NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVljIKbXzei/Chn+uRmXc9nt/gW6Xq5pl7YsSgM7C5tA6bYLN83z5m YbFak6PlwbcprCx4CMB+tYufKQvkoMH26iZZrClSTFGhirdqncK31iVsSs0ZU5Mn 7NQh3uHMIxd1DOHAZZZjRlCl+pzBrOJvV4DAO2Ov59H47HEuHWCACEKd5V6bMiCW COcgBYAcTE9vevGB+qpi5FF7FhhRwKoBZOj2zbOvzwEo/PPgFAJuXCjDEgU4DCy2 ItUcIi35kzjxGJqMI8MHM0un4oK2Cwm1mpLCJX3i1oOkDGdbl+uLw8RDB5Qdtk/C xZlQcRuHq5IkhzeluvTL6SH9Ny9FYHGE -----END CERTIFICATE-----Generated at Sat Aug 23 10:54:36 2025 by rpki-client