$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft File: O0irhhZS-u7X4dElg_Frt_uyiRM.mft (raw, json) Hash identifier: L2/bbX94DelR6pZAA3S7CAY0KTcVXVqvoTpyui+rCXY= Subject key identifier: E4:D2:A1:68:5E:02:05:44:8C:A6:19:6C:2D:DB:E2:3D:E4:67:4D:09 Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft Manifest number: 0228 Signing time: Sat 23 Aug 2025 02:14:08 +0000 Manifest this update: Sat 23 Aug 2025 02:14:07 +0000 Manifest next update: Sat 30 Aug 2025 02:14:07 +0000 Files and hashes: 1: O0irhhZS-u7X4dElg_Frt_uyiRM.crl (hash: AxMsb0lP5BlQd32esKK7nKWDo/21xigZpGqS2pTVzQo=) 2: EDE89884DB1711EF8929832EC4F9AE02.roa (hash: tqa1Ixra7BMwCWoNM3olfzFpbEkXEWmJXa4eDjgnFBc=) 3: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (hash: eVGJpjXfZuqnT2xF5gSdYG+4NURN3G12aXx32PS/6hU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Validity Not Before: Aug 23 02:14:07 2025 GMT Not After : Aug 30 02:14:07 2025 GMT Subject: CN=68a923f0-4bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:d4:98:d7:de:13:f8:10:72:4c:f1:c3:48: 41:24:b8:87:f0:18:8d:6b:41:33:24:84:10:3e:4b: 2b:8b:10:93:20:84:3a:70:4b:06:8c:4c:10:2f:f1: e7:c3:04:5c:f4:70:55:57:60:33:d2:f6:87:a6:cc: 30:c8:c5:0b:f1:e1:75:c6:a6:43:84:4f:9e:f2:45: 89:5c:0b:cf:1a:fb:aa:4e:46:44:f7:e5:46:0e:d8: c4:75:5e:67:15:f1:72:c4:a9:d5:07:2f:9b:c1:b9: ac:c8:53:c0:bd:2b:f9:99:72:b9:e2:f4:b4:6e:c0: 70:98:21:48:26:94:cd:9b:77:6f:5f:61:3d:02:02: aa:2d:5f:24:c3:89:91:31:05:59:5e:0a:32:fa:6d: 92:8e:7f:80:50:1f:c6:da:32:6f:8f:5b:46:47:b2: 2d:2c:3e:a4:c8:be:0b:37:25:61:09:2e:72:50:89: d1:c7:0d:58:82:83:43:b0:37:c9:0f:a8:73:78:83: 27:01:e0:6b:31:d9:66:a7:8e:0d:db:0d:64:c4:d7: 41:3c:43:16:0b:6a:bb:be:4c:6e:83:b3:34:fe:90: 8d:4e:d2:90:15:34:25:66:51:98:78:3e:b4:e8:dd: 45:b3:13:66:4f:9e:6c:d5:04:2f:62:14:ba:53:88: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D2:A1:68:5E:02:05:44:8C:A6:19:6C:2D:DB:E2:3D:E4:67:4D:09 X509v3 Authority Key Identifier: keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b6:6c:d1:6c:e0:1c:1f:6f:af:0e:9c:70:d8:ed:55:e6:b1: 4e:2f:cd:db:5b:84:6c:46:11:1d:56:8b:b8:43:7e:76:75:79: 0f:f2:04:44:85:94:97:8d:e3:8a:97:65:6e:d1:a5:b2:85:45: d3:72:15:c7:9c:39:b4:21:a7:cc:b1:a2:54:5e:2c:94:e2:3e: a7:c0:2d:8b:86:a7:fd:c0:be:33:f8:5a:f2:8c:cc:47:af:6b: c9:61:72:0e:71:43:91:1e:c8:58:8f:14:13:81:0a:e7:76:c5: 6e:fa:6c:d3:4e:a0:a2:40:f7:6c:ed:53:c1:4b:39:31:62:0e: 76:6a:a8:0e:88:44:ab:97:83:45:43:8c:bb:9b:2c:31:17:ed: 91:74:94:7d:9d:82:4d:6d:bf:67:0f:63:9a:65:6f:5e:51:a8: 57:30:c7:09:03:b1:fb:90:da:6b:68:0d:37:4d:01:32:cb:c0: f5:08:e9:51:72:f2:3b:b3:df:74:4f:4a:10:0e:94:f4:a9:50: 56:75:8a:53:47:b9:0d:1c:19:24:ac:5b:1a:ba:7a:43:39:dd: af:f2:ba:f4:d2:6b:a2:b3:ff:1f:69:b6:da:c4:6e:a4:38:c1: fa:91:a7:21:39:8f:f2:2c:31:10:31:7f:72:d7:0b:d4:43:dc: d9:03:22:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY5MDkxMTAvBgNVBAUTKDNCNDhBQjg2MTY1MkZBRUVEN0UxRDEyNTgzRjE2QkI3 RkJCMjg5MTMwHhcNMjUwODIzMDIxNDA3WhcNMjUwODMwMDIxNDA3WjAYMRYwFAYD VQQDEw02OGE5MjNmMC00YmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk/UmNfeE/gQckzxw0hBJLiH8BiNa0EzJIQQPksrixCTIIQ6cEsGjEwQL/Hn wwRc9HBVV2Az0vaHpswwyMUL8eF1xqZDhE+e8kWJXAvPGvuqTkZE9+VGDtjEdV5n FfFyxKnVBy+bwbmsyFPAvSv5mXK54vS0bsBwmCFIJpTNm3dvX2E9AgKqLV8kw4mR MQVZXgoy+m2Sjn+AUB/G2jJvj1tGR7ItLD6kyL4LNyVhCS5yUInRxw1YgoNDsDfJ D6hzeIMnAeBrMdlmp44N2w1kxNdBPEMWC2q7vkxug7M0/pCNTtKQFTQlZlGYeD60 6N1FsxNmT55s1QQvYhS6U4hujwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTSoWhe AgVEjKYZbC3b4j3kZ00JMB8GA1UdIwQYMBaAFDtIq4YWUvru1+HRJYPxa7f7sokT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjkwOS85QUJBQ0FDODRE Q0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11N1g0ZEVsZ19GcnRfdXlp Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08waXJoaFpTLXU3WDRkRWxnX0ZydF91eWlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjkwOS85QUJBQ0FDODREQ0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11 N1g0ZEVsZ19GcnRfdXlpUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAitmzRbOAcH2+vDpxw2O1V5rFOL83bW4RsRhEdVou4Q352dXkP8gRE hZSXjeOKl2Vu0aWyhUXTchXHnDm0IafMsaJUXiyU4j6nwC2Lhqf9wL4z+FryjMxH r2vJYXIOcUORHshYjxQTgQrndsVu+mzTTqCiQPds7VPBSzkxYg52aqgOiESrl4NF Q4y7mywxF+2RdJR9nYJNbb9nD2OaZW9eUahXMMcJA7H7kNpraA03TQEyy8D1COlR cvI7s990T0oQDpT0qVBWdYpTR7kNHBkkrFsaunpDOd2v8rr00muis/8fabbaxG6k OMH6kachOY/yLDEQMX9y1wvUQ9zZAyKc -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:51 2025 by rpki-client