$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json) Hash identifier: OWupu3ON4tP2bL57UoCXTqwOS44iFf/QFBo65Dao44Q= Subject key identifier: A4:A9:4E:0F:25:95:B5:17:51:9E:03:98:FF:51:C6:87:35:EE:D1:2E Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Certificate serial: 0833 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft Manifest number: 0825 Signing time: Fri 22 Aug 2025 20:58:51 +0000 Manifest this update: Fri 22 Aug 2025 20:58:50 +0000 Manifest next update: Fri 29 Aug 2025 20:58:50 +0000 Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: vhavRwAcTeiNukrGQlHIR7tlLeT/ueMHYz97arxr6wI=) 2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: L4B2evBW9dTHQXVqbxeQ4CNrkuNZaT5qA9O5a+LAGeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CFD2, serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Validity Not Before: Aug 22 20:58:50 2025 GMT Not After : Aug 29 20:58:50 2025 GMT Subject: CN=68a8da0a-de2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:6f:16:cc:74:82:1b:97:c7:14:b9:2c:43: 11:e5:42:f2:b1:cf:8f:82:b8:8d:f7:ad:6c:36:2e: 72:cc:47:88:c7:88:fc:fe:5e:e9:5a:6a:8b:4b:1f: 30:1e:b7:86:8e:90:08:bf:08:a2:be:f6:2a:1b:bc: 83:36:79:d8:d2:8e:96:be:8e:0c:3d:56:bb:ef:a5: 22:d6:bf:3a:e2:78:30:d3:d0:61:57:2d:57:9c:8a: 3d:f0:94:b9:fb:d8:52:dd:75:33:67:47:14:53:2f: 53:f3:4e:eb:fe:ee:9c:ef:b8:20:34:8c:bd:70:eb: 57:44:27:37:b4:9f:f9:66:d2:c6:04:52:71:f2:bc: 35:5d:9e:23:76:c1:82:59:ed:69:87:f5:c4:03:65: e1:e7:b0:5b:f9:32:bb:96:45:bd:3f:84:2e:c7:44: 7e:a9:3e:be:9b:e0:18:01:a3:af:d0:24:ad:f7:99: e8:22:ab:8c:14:f5:27:04:de:75:ee:01:4b:e6:d3: bb:5c:aa:3d:cb:e2:c6:a3:7a:c4:f5:87:9e:c6:6b: 50:f2:9d:90:0d:c3:46:30:35:f2:3b:54:bd:f3:cb: b7:b7:fd:de:29:05:e7:10:d3:ea:ac:ea:33:fb:65: 0b:11:10:45:1f:9f:78:8b:c3:00:e0:6e:bc:92:93: 50:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A9:4E:0F:25:95:B5:17:51:9E:03:98:FF:51:C6:87:35:EE:D1:2E X509v3 Authority Key Identifier: keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:bf:c3:e9:bd:09:60:c9:aa:a1:9d:22:56:f6:46:64:2d:3d: f9:4d:5b:bc:05:e3:34:2b:80:a0:c0:97:7c:0c:8b:e7:85:c5: 37:bf:f7:81:24:2d:04:a2:8b:22:89:e9:fe:5b:b1:05:35:56: bc:ba:4c:2b:98:a2:5c:f2:b2:e5:39:65:b9:92:53:95:90:e2: cf:fe:80:5e:6f:d1:4b:48:cc:47:6c:7a:e7:70:a2:56:ce:de: 8d:25:16:c9:5a:37:48:ea:17:6c:17:31:cd:a5:f8:b3:94:18: fb:05:b9:e7:73:46:a9:40:d7:16:bd:17:92:f1:ca:b0:e9:7d: 56:72:02:e2:80:32:98:11:29:29:7d:5b:25:e9:54:9d:4b:2e: c2:ff:6a:65:b3:0a:ec:8c:89:fe:f8:9b:14:15:a1:de:22:07: c2:30:6d:7e:cc:6e:88:fb:6c:5c:b9:9f:59:d3:36:fd:7c:77: ef:2e:1f:ea:85:1d:38:1f:1c:86:7c:78:05:83:e6:fb:9f:3d: e7:4b:3d:81:c5:3c:90:b7:84:7e:25:20:7f:97:74:9d:15:af: 3a:47:62:ea:fe:a3:77:90:41:8f:f9:17:7e:0e:19:0e:5e:ea: a5:d7:9d:d4:cc:68:39:37:c1:6a:b0:10:10:08:d2:5f:88:9b: 9a:06:1b:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4 QkQwMzUyNkIwHhcNMjUwODIyMjA1ODUwWhcNMjUwODI5MjA1ODUwWjAYMRYwFAYD VQQDEw02OGE4ZGEwYS1kZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZRvFsx0ghuXxxS5LEMR5ULysc+PgriN961sNi5yzEeIx4j8/l7pWmqLSx8w HreGjpAIvwiivvYqG7yDNnnY0o6Wvo4MPVa776Ui1r864ngw09BhVy1XnIo98JS5 +9hS3XUzZ0cUUy9T807r/u6c77ggNIy9cOtXRCc3tJ/5ZtLGBFJx8rw1XZ4jdsGC We1ph/XEA2Xh57Bb+TK7lkW9P4Qux0R+qT6+m+AYAaOv0CSt95noIquMFPUnBN51 7gFL5tO7XKo9y+LGo3rE9YeexmtQ8p2QDcNGMDXyO1S988u3t/3eKQXnENPqrOoz +2ULERBFH594i8MA4G68kpNQ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSpTg8l lbUXUZ4DmP9Rxoc17tEuMB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2 RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0 eVU2b1dtTHJqckdMMERVbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9v8PpvQlgyaqhnSJW9kZkLT35TVu8BeM0K4CgwJd8DIvnhcU3v/eB JC0Eoosiien+W7EFNVa8ukwrmKJc8rLlOWW5klOVkOLP/oBeb9FLSMxHbHrncKJW zt6NJRbJWjdI6hdsFzHNpfizlBj7Bbnnc0apQNcWvReS8cqw6X1WcgLigDKYESkp fVsl6VSdSy7C/2plswrsjIn++JsUFaHeIgfCMG1+zG6I+2xcuZ9Z0zb9fHfvLh/q hR04HxyGfHgFg+b7nz3nSz2BxTyQt4R+JSB/l3SdFa86R2Lq/qN3kEGP+Rd+DhkO Xuql153UzGg5N8FqsBAQCNJfiJuaBhuK -----END CERTIFICATE-----Generated at Sun Aug 24 05:01:41 2025 by rpki-client