$ rpki-client -vvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft File: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft (raw, json) Hash identifier: LWUHn7o5FT72UzEARMasCX4NE/hfYWjJ7waqdbpQGow= Subject key identifier: 05:3B:35:B5:C8:12:C2:63:F5:97:E9:6A:09:23:AE:37:22:C9:FA:21 Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 Certificate issuer: /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Certificate serial: 0DFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft Manifest number: 0DF7 Signing time: Fri 22 Aug 2025 17:58:29 +0000 Manifest this update: Fri 22 Aug 2025 17:58:28 +0000 Manifest next update: Fri 29 Aug 2025 17:58:28 +0000 Files and hashes: 1: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl (hash: nz8cTvZ1WX0+btB6A/iPalqMFSWfgulE99g8FTlkOU8=) 2: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (hash: NGmhercCoJ9hcEnfypdSk09ukBq8+ACpPHXM0iho7j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3582 (0xdfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165226, serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Validity Not Before: Aug 22 17:58:28 2025 GMT Not After : Aug 29 17:58:28 2025 GMT Subject: CN=68a8afc4-19e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:9a:39:7c:0e:a4:25:28:a1:cf:52:86:d1: dc:e2:ca:9f:af:3c:0a:1e:04:99:e1:be:cb:85:1e: 8f:fd:c5:c3:98:85:14:df:68:b9:9e:e5:6c:56:ed: 01:0d:06:ef:b3:87:4b:91:44:26:5e:d4:8a:2e:e3: 0f:de:a7:18:c5:19:83:b1:92:9b:71:d5:dc:ce:5c: 19:a7:98:bb:0a:37:be:0d:00:ef:7f:9a:c7:c2:87: 33:1c:a6:94:89:85:8c:c8:72:f1:0c:78:4c:27:b3: 6c:33:e7:be:40:69:3a:65:2d:30:ef:ec:03:3b:e4: 4a:d9:71:39:3d:c2:1e:f2:de:fb:e9:56:0f:da:64: b7:8c:41:38:ac:49:17:f7:97:da:92:52:04:43:ac: fe:12:e2:b4:df:0b:d5:84:fc:56:ce:f7:2c:53:6c: e9:93:db:14:67:67:71:70:d1:0c:6d:8c:a2:4f:dd: 54:6f:e2:c9:6f:92:19:9c:1e:fb:97:62:bc:06:8f: 5c:6a:40:a0:35:f7:4d:bf:8a:6c:01:06:89:d3:0e: 20:fe:ee:a3:ae:b0:85:52:44:e9:b2:39:03:73:5d: 35:a3:5e:52:ad:72:b8:df:4f:da:e2:5b:1d:a8:d8: 4b:3f:65:68:c0:8c:c7:22:a8:e3:fb:81:5f:13:0e: fc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3B:35:B5:C8:12:C2:63:F5:97:E9:6A:09:23:AE:37:22:C9:FA:21 X509v3 Authority Key Identifier: keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:23:5d:20:8d:e4:b9:ba:73:bb:37:15:f5:5d:54:8c:ad:5f: 83:38:dc:8c:e4:a7:c6:0b:ca:0d:b2:db:92:94:0d:7a:f2:3e: 1e:d9:81:85:ab:70:61:f4:95:f7:54:90:fd:21:c1:ce:8f:6e: 02:19:f4:97:6e:65:52:99:58:94:7a:f9:b4:1a:43:c8:46:fe: 7e:ae:ed:57:16:34:d5:96:6b:cc:cc:f1:c7:73:2c:60:c1:94: e4:4d:1f:93:a6:ce:21:57:21:b6:9f:9c:57:c8:b0:ef:c9:f6: 40:48:88:56:59:ca:9f:36:c0:c6:de:4e:c1:61:c1:06:f9:cb: 41:8e:6b:21:fe:5f:d0:81:af:fa:6b:2c:e2:57:f1:fc:d0:f5: a9:c2:b8:fb:e5:ca:a8:be:4e:ac:e2:bc:67:72:8c:d0:0e:96: 9e:67:16:e5:bb:87:74:ab:33:cd:64:b3:e9:f5:49:a9:cc:6e: b9:3f:dd:70:6b:2b:7b:c0:4e:49:b2:c0:ac:1c:b4:ad:cd:66: e9:65:2c:40:5d:79:09:8c:d0:c2:f9:6a:7c:f1:aa:24:d6:f2: 77:6f:11:a8:aa:19:12:3a:63:ef:43:f2:44:07:15:47:00:af: 34:0e:35:98:ae:61:b6:24:41:6d:7b:90:e3:92:d0:d9:05:96: c6:89:e6:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyMjYxMTAvBgNVBAUTKEY1MzZBREQ2RTE3RDFDRTIyQ0JCODkzQTdGQTBDRjA4 QkQ4RTNGQzAwHhcNMjUwODIyMTc1ODI4WhcNMjUwODI5MTc1ODI4WjAYMRYwFAYD VQQDEw02OGE4YWZjNC0xOWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNOaOXwOpCUooc9ShtHc4sqfrzwKHgSZ4b7LhR6P/cXDmIUU32i5nuVsVu0B DQbvs4dLkUQmXtSKLuMP3qcYxRmDsZKbcdXczlwZp5i7Cje+DQDvf5rHwoczHKaU iYWMyHLxDHhMJ7NsM+e+QGk6ZS0w7+wDO+RK2XE5PcIe8t776VYP2mS3jEE4rEkX 95faklIEQ6z+EuK03wvVhPxWzvcsU2zpk9sUZ2dxcNEMbYyiT91Ub+LJb5IZnB77 l2K8Bo9cakCgNfdNv4psAQaJ0w4g/u6jrrCFUkTpsjkDc101o15SrXK430/a4lsd qNhLP2VowIzHIqjj+4FfEw78IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAU7NbXI EsJj9ZfpagkjrjciyfohMB8GA1UdIwQYMBaAFPU2rdbhfRziLLuJOn+gzwi9jj/A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTIyNi8zQzlDRjA0Q0I3 M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhPSXN1NGs2ZjZEUENMMk9Q OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUYXQxdUY5SE9Jc3U0azZmNkRQQ0wyT1A4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTIyNi8zQzlDRjA0Q0I3M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhP SXN1NGs2ZjZEUENMMk9QOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+I10gjeS5unO7NxX1XVSMrV+DONyM5KfGC8oNstuSlA168j4e2YGF q3Bh9JX3VJD9IcHOj24CGfSXbmVSmViUevm0GkPIRv5+ru1XFjTVlmvMzPHHcyxg wZTkTR+Tps4hVyG2n5xXyLDvyfZASIhWWcqfNsDG3k7BYcEG+ctBjmsh/l/Qga/6 ayziV/H80PWpwrj75cqovk6s4rxncozQDpaeZxblu4d0qzPNZLPp9UmpzG65P91w ayt7wE5JssCsHLStzWbpZSxAXXkJjNDC+Wp88aok1vJ3bxGoqhkSOmPvQ/JEBxVH AK80DjWYrmG2JEFte5DjktDZBZbGieaV -----END CERTIFICATE-----Generated at Sat Aug 23 17:06:21 2025 by rpki-client