$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft File: O0irhhZS-u7X4dElg_Frt_uyiRM.mft (raw, json) Hash identifier: JyAJKwRykVhBLbtWDamxUJAfxck/VXOxPPPj4bzwhj4= Subject key identifier: 9B:7F:FF:82:1F:28:43:05:53:AB:86:5B:23:67:3E:7C:F6:35:DC:C5 Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft Manifest number: 020D Signing time: Sat 05 Jul 2025 02:39:23 +0000 Manifest this update: Sat 05 Jul 2025 02:39:23 +0000 Manifest next update: Sat 12 Jul 2025 02:39:22 +0000 Files and hashes: 1: O0irhhZS-u7X4dElg_Frt_uyiRM.crl (hash: uKRNdloXtZlNzhge6FRDmXdbOr5wodWZ6kaE7Xf5O3Y=) 2: EDE89884DB1711EF8929832EC4F9AE02.roa (hash: tqa1Ixra7BMwCWoNM3olfzFpbEkXEWmJXa4eDjgnFBc=) 3: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (hash: oSZdhfGWwwKdH63s+SExbmyRtKVUZJS009bBjLK65o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Validity Not Before: Jul 5 02:39:23 2025 GMT Not After : Jul 12 02:39:22 2025 GMT Subject: CN=6868905b-3016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:aa:13:4a:c2:7b:86:bb:18:b9:e4:e1:a4: f5:4e:74:48:ad:b6:59:af:c0:8d:9e:ea:53:56:8d: d2:12:62:2c:5b:13:f6:90:42:0a:67:8b:fa:51:8b: e3:5e:a8:ed:ba:b8:f0:2b:9f:62:83:54:0f:c9:f8: e3:18:42:77:75:d7:97:5d:79:2f:3d:d0:68:46:4f: 4a:12:79:cb:2d:99:6f:cf:cf:46:aa:4b:47:6f:6d: 3b:2c:38:36:56:d5:42:4f:34:8f:a5:97:b5:ec:a3: 7f:0b:cc:f1:25:c9:26:db:b0:f0:2a:3a:f2:aa:0e: 7d:b0:a2:3d:6f:f8:f1:50:53:55:26:f7:6f:a3:3a: b0:60:c9:a8:88:ec:04:cd:3f:77:b9:9f:4d:34:47: 75:b0:fc:76:52:9f:50:8e:53:cc:a6:51:90:15:c1: 69:11:79:80:c8:b2:f9:f2:51:ea:72:f5:a8:ab:f1: b3:4c:de:2b:70:0e:b1:22:99:a2:3a:36:b3:45:a2: 9a:ae:4d:22:73:03:18:89:c6:31:60:31:9a:e6:52: 77:b1:86:f5:8d:18:36:fe:d6:68:d9:24:7c:e3:d9: 66:c0:2c:49:a6:f2:00:3d:76:34:f1:bc:22:f6:f3: e7:2d:b2:e8:01:5d:c6:b1:86:90:36:ed:74:b1:60: 08:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7F:FF:82:1F:28:43:05:53:AB:86:5B:23:67:3E:7C:F6:35:DC:C5 X509v3 Authority Key Identifier: keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:06:8c:cd:4d:09:55:70:ab:ae:68:36:f0:f0:48:0d:30:65: 58:ee:5b:bf:59:48:06:28:d5:0b:9d:6b:ab:eb:9d:68:81:b8: a6:06:23:8b:87:1e:2a:72:6d:49:24:ab:13:dd:57:d9:37:65: 6c:f4:2b:57:a3:bc:54:60:e8:da:f4:3b:d7:1d:66:5c:b7:6d: eb:e9:2c:07:c7:5b:9a:d6:4b:0b:b2:99:95:0c:45:aa:7d:06: c8:1a:a6:d6:9a:ed:d7:ec:41:5c:57:ef:0d:6e:41:33:1d:4e: e4:bf:f8:6e:bf:af:34:cc:f3:d0:23:07:5f:fe:c1:6f:99:30: 05:d1:e8:8e:30:8b:34:9b:de:89:ec:d8:a8:58:59:33:bb:4c: 83:b4:0e:53:a1:99:6d:1f:0b:f9:2b:2d:8e:8a:db:35:29:b8: f1:c6:08:dd:d9:b8:ac:22:c1:04:ba:5c:34:28:96:3f:e9:f5: cf:49:44:4d:5d:1f:7a:6f:64:4f:8e:08:f5:45:f7:5e:c4:e1: ee:2d:49:06:46:c9:d0:b6:32:a6:de:be:49:4b:49:f6:68:cb: 8d:5b:3e:ff:41:4c:25:bb:21:95:4e:d5:ad:45:26:06:6a:2d: 2b:b6:33:09:df:33:24:59:23:a1:36:47:34:07:42:c7:fb:59: 2a:ac:93:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY5MDkxMTAvBgNVBAUTKDNCNDhBQjg2MTY1MkZBRUVEN0UxRDEyNTgzRjE2QkI3 RkJCMjg5MTMwHhcNMjUwNzA1MDIzOTIzWhcNMjUwNzEyMDIzOTIyWjAYMRYwFAYD VQQDEw02ODY4OTA1Yi0zMDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jeqE0rCe4a7GLnk4aT1TnRIrbZZr8CNnupTVo3SEmIsWxP2kEIKZ4v6UYvj XqjturjwK59ig1QPyfjjGEJ3ddeXXXkvPdBoRk9KEnnLLZlvz89GqktHb207LDg2 VtVCTzSPpZe17KN/C8zxJckm27DwKjryqg59sKI9b/jxUFNVJvdvozqwYMmoiOwE zT93uZ9NNEd1sPx2Up9QjlPMplGQFcFpEXmAyLL58lHqcvWoq/GzTN4rcA6xIpmi OjazRaKark0icwMYicYxYDGa5lJ3sYb1jRg2/tZo2SR849lmwCxJpvIAPXY08bwi 9vPnLbLoAV3GsYaQNu10sWAIbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJt//4If KEMFU6uGWyNnPnz2NdzFMB8GA1UdIwQYMBaAFDtIq4YWUvru1+HRJYPxa7f7sokT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjkwOS85QUJBQ0FDODRE Q0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11N1g0ZEVsZ19GcnRfdXlp Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08waXJoaFpTLXU3WDRkRWxnX0ZydF91eWlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjkwOS85QUJBQ0FDODREQ0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11 N1g0ZEVsZ19GcnRfdXlpUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbBozNTQlVcKuuaDbw8EgNMGVY7lu/WUgGKNULnWur651ogbimBiOL hx4qcm1JJKsT3VfZN2Vs9CtXo7xUYOja9DvXHWZct23r6SwHx1ua1ksLspmVDEWq fQbIGqbWmu3X7EFcV+8NbkEzHU7kv/huv680zPPQIwdf/sFvmTAF0eiOMIs0m96J 7NioWFkzu0yDtA5ToZltHwv5Ky2Oits1Kbjxxgjd2bisIsEEulw0KJY/6fXPSURN XR96b2RPjgj1RfdexOHuLUkGRsnQtjKm3r5JS0n2aMuNWz7/QUwluyGVTtWtRSYG ai0rtjMJ3zMkWSOhNkc0B0LH+1kqrJN3 -----END CERTIFICATE-----Generated at Sun Jul 6 03:38:28 2025 by rpki-client