$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: 7CG2yKhmOL4wxhbJ3kqf1pqx4iN8NY2Jy6dIZn4v2TA= Subject key identifier: 36:42:1E:77:CA:E1:AB:B0:37:D2:36:A6:89:7A:31:51:7E:95:56:80 Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 3532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 34E5 Signing time: Fri 22 Aug 2025 14:32:58 +0000 Manifest this update: Fri 22 Aug 2025 14:32:58 +0000 Manifest next update: Fri 29 Aug 2025 14:32:58 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: 4MgCnAdM6MmExVnGnV6Q3Lm9F1z7DODi63r764FUxMc=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: UAdWkh5fwATHMmIyVhd7P9Q5bEUDKKzkNfodKXfZ52I=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: NQGk9VrpAXTZXq5SUwR5lBrzM7K1d06qPjVq8qLZu/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13618 (0x3532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Aug 22 14:32:58 2025 GMT Not After : Aug 29 14:32:58 2025 GMT Subject: CN=68a87f9a-e2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:66:e8:c6:b0:ab:20:15:8f:61:05:51:fd:43: a9:0d:7a:06:bb:dd:19:7b:bc:3a:80:07:f5:25:43: 69:d2:42:49:34:ba:35:75:20:5d:1c:15:73:1f:47: 10:71:ee:28:93:86:3b:01:f0:b2:ec:2c:f4:05:3f: ac:ca:d4:bc:11:b3:b4:97:92:b9:97:6f:ae:e3:e0: 54:c3:81:71:d9:42:39:9e:6d:32:1a:c3:91:8c:c1: 18:97:0d:35:9d:95:ed:f5:5e:03:ee:4c:1b:bc:9d: 00:4e:f8:60:64:2e:94:dd:9f:3e:9c:91:69:ee:7b: 4a:94:bd:cc:68:11:07:00:a8:1c:9c:22:1b:f2:a4: 43:06:02:e7:7f:b1:c1:eb:a3:0a:57:7f:44:7c:76: 3d:4b:0e:cd:c1:3b:06:c7:5a:76:1a:94:b8:a3:01: 3b:cf:66:97:59:cb:d1:2a:ca:05:51:01:1c:12:80: d0:29:e8:d7:d2:92:db:12:3e:11:69:da:50:6f:e1: 4b:16:93:0b:7d:43:b8:f8:42:30:fc:dd:89:d0:58: 39:9d:0e:b3:74:68:9d:a0:99:d0:62:bc:97:af:30: cb:c6:5d:85:d2:b4:07:e5:da:68:eb:7d:69:ab:52: 4d:c0:0e:d0:98:ad:c8:54:3d:53:55:b3:7f:25:30: 12:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:42:1E:77:CA:E1:AB:B0:37:D2:36:A6:89:7A:31:51:7E:95:56:80 X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:60:75:d1:55:d7:d1:5d:3c:4b:85:c5:af:8f:b0:98:f9:3c: 3b:48:e9:af:28:8a:6f:65:64:ad:80:dd:16:28:df:16:2f:f3: 2f:5d:1e:0d:3e:14:87:30:7a:fe:90:14:a9:f7:9c:12:d4:22: 14:14:44:6b:8e:9f:1c:7e:43:76:39:3a:39:64:05:ad:c4:48: 08:d2:1a:7c:12:ce:fa:eb:27:0e:cf:80:e2:77:da:b6:18:69: 31:62:11:b2:19:e7:2e:91:86:4c:ba:f7:3f:78:57:d2:d8:b4: 40:75:57:79:f0:34:84:1b:af:9f:f5:63:69:e1:cd:64:ac:54: 38:d4:fe:57:bd:ef:6d:8d:ee:c3:bc:f4:fd:56:a2:d1:b8:14: 49:75:70:18:40:2e:7d:e0:f4:5d:77:b6:61:41:21:a5:87:e3: 56:dd:cc:9c:c4:a9:f6:6c:79:93:4a:3d:30:e6:74:2c:bc:2a: db:82:48:aa:7d:1d:50:20:5d:9f:73:35:73:59:b8:40:60:2a: 0f:37:e8:26:52:73:03:49:de:96:da:29:85:14:d9:eb:98:c9: 21:5d:18:c5:ba:e4:2b:e6:8f:f0:11:69:6d:36:ed:36:94:33: 75:bf:b5:15:fd:a8:f4:42:ef:68:93:2f:bd:b8:2b:58:19:e1: d7:5f:9a:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjUwODIyMTQzMjU4WhcNMjUwODI5MTQzMjU4WjAYMRYwFAYD VQQDEw02OGE4N2Y5YS1lMmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GboxrCrIBWPYQVR/UOpDXoGu90Ze7w6gAf1JUNp0kJJNLo1dSBdHBVzH0cQ ce4ok4Y7AfCy7Cz0BT+sytS8EbO0l5K5l2+u4+BUw4Fx2UI5nm0yGsORjMEYlw01 nZXt9V4D7kwbvJ0ATvhgZC6U3Z8+nJFp7ntKlL3MaBEHAKgcnCIb8qRDBgLnf7HB 66MKV39EfHY9Sw7NwTsGx1p2GpS4owE7z2aXWcvRKsoFUQEcEoDQKejX0pLbEj4R adpQb+FLFpMLfUO4+EIw/N2J0Fg5nQ6zdGidoJnQYryXrzDLxl2F0rQH5dpo631p q1JNwA7QmK3IVD1TVbN/JTASnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZCHnfK 4auwN9I2pol6MVF+lVaAMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALYHXRVdfRXTxLhcWvj7CY+Tw7SOmvKIpvZWStgN0WKN8WL/MvXR4N PhSHMHr+kBSp95wS1CIUFERrjp8cfkN2OTo5ZAWtxEgI0hp8Es766ycOz4Did9q2 GGkxYhGyGecukYZMuvc/eFfS2LRAdVd58DSEG6+f9WNp4c1krFQ41P5Xve9tje7D vPT9VqLRuBRJdXAYQC594PRdd7ZhQSGlh+NW3cycxKn2bHmTSj0w5nQsvCrbgkiq fR1QIF2fczVzWbhAYCoPN+gmUnMDSd6W2imFFNnrmMkhXRjFuuQr5o/wEWltNu02 lDN1v7UV/aj0Qu9oky+9uCtYGeHXX5p/ -----END CERTIFICATE-----Generated at Sun Aug 24 03:09:13 2025 by rpki-client