$ rpki-client -vvf rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft File: 9h-6phkp0QD6mdvUgM6MLE7nP_E.mft (raw, json) Hash identifier: 5Fo4SMyVQAeIbrIwuEKWaMBw12HwNoCsgqMgI77LT/w= Subject key identifier: DD:EF:AF:2E:95:4B:BD:19:28:A8:6E:13:25:20:34:4E:B9:7F:E1:63 Authority key identifier: F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1 Certificate issuer: /CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1 Certificate serial: 0AE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft Manifest number: 0AD4 Signing time: Fri 22 Aug 2025 19:35:09 +0000 Manifest this update: Fri 22 Aug 2025 19:35:08 +0000 Manifest next update: Fri 29 Aug 2025 19:35:08 +0000 Files and hashes: 1: 9h-6phkp0QD6mdvUgM6MLE7nP_E.crl (hash: lA3GKLVunIdKRs9BR+egdPB5VIPAkkEq1ayPJrNWaTk=) 2: FDF734905C9D11EA91DB3C7CC4F9AE02.roa (hash: vXdhueOKeH2L+EhcuXNxIR6NEBaIJ+rO+WquQADkcYg=) 3: 8DB89FC2572311EA9D4ED562C4F9AE02.roa (hash: uIlmxyBkIRVTtfqtlVJMMghD2D4RDYW/jdv8jycrnJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2786 (0xae2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EAFB, serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1 Validity Not Before: Aug 22 19:35:08 2025 GMT Not After : Aug 29 19:35:08 2025 GMT Subject: CN=68a8c66c-3121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a7:d8:e1:6f:80:72:e2:37:34:0a:65:4f:d6: 3f:8d:52:c0:1b:a5:6f:82:77:d3:fd:50:6e:89:7b: 03:28:3d:1b:cc:5c:e0:fd:5c:e8:00:79:22:51:46: 2d:69:f8:27:e9:7d:bd:40:c1:f5:d7:a6:a2:1d:3b: 94:7a:24:08:64:0f:d3:1f:58:9d:ec:64:a7:5c:0c: 11:f9:07:2e:b2:91:f7:b2:ec:38:31:88:fe:9e:8f: 2e:7f:3e:0b:98:f0:e4:45:3f:a7:4f:69:d7:c4:02: bf:1e:c6:09:62:e2:c5:57:fb:cb:ef:65:4b:c2:08: 03:51:37:e8:63:89:dc:58:de:d5:5d:d7:c1:cb:4b: 8c:6a:0c:4b:41:4a:32:df:65:76:61:a9:27:21:a9: 87:1b:24:74:ba:e1:96:ea:de:fa:9d:6d:a0:7c:42: b3:89:a9:ca:55:99:5a:c4:f4:43:17:0d:85:e3:2f: 27:4c:56:cf:f2:b0:0e:2a:d3:4b:34:fa:59:2b:12: ff:06:8b:98:b6:c9:6a:47:83:59:c4:1d:fd:fd:38: 92:d3:a6:70:f6:19:68:7c:19:c4:5b:8e:88:90:95: 1e:8c:a7:23:cd:f4:b1:88:d6:64:79:10:26:b1:a5: f3:56:94:a4:b8:c0:7d:d1:a1:af:fd:ba:50:47:14: 80:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EF:AF:2E:95:4B:BD:19:28:A8:6E:13:25:20:34:4E:B9:7F:E1:63 X509v3 Authority Key Identifier: keyid:F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:27:00:a5:f5:01:32:d7:ae:d8:a1:b7:15:ca:55:7e:2f:78: f5:74:21:df:f4:e5:04:a1:a6:3b:5d:04:cb:93:9b:3f:e8:24: f0:8c:79:4e:1a:51:6c:e7:ef:2a:fe:ec:78:87:df:22:b4:2c: 61:6e:08:ba:dc:6d:3e:09:57:dd:43:7d:df:cc:ee:00:e1:b5: 31:10:f2:d2:8e:25:b7:a2:14:56:c3:b3:6a:f1:1a:32:21:62: 0a:84:0d:5e:e3:79:42:8e:34:7b:9a:56:0c:55:3e:bb:65:75: 71:3b:13:90:ee:08:80:c8:05:72:d6:a8:fa:15:66:ac:52:49: 5d:4b:a2:67:f1:6d:c0:83:4d:ed:d0:78:ca:b4:b1:50:42:95: df:85:d2:21:9d:a8:9a:05:a3:30:5c:a6:93:8d:c8:e2:19:53: 0a:f9:1b:dc:cb:bb:1f:32:30:f6:cc:eb:b8:28:7e:d6:a3:60: 82:42:49:e9:2f:91:88:f5:a3:cb:e0:a6:4a:43:6c:83:56:23: 77:1e:22:4d:fd:5b:ce:86:a6:ba:b6:63:d9:cf:31:50:c3:b5: 50:78:83:2b:68:73:f9:98:b3:2b:e4:08:da:e6:35:11:e5:96: 8a:1b:a7:80:0e:b8:29:44:93:92:a3:d1:cf:f0:f9:ec:2c:34: 2c:2f:86:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVBRkIxMTAvBgNVBAUTKEY2MUZCQUE2MTkyOUQxMDBGQTk5REJENDgwQ0U4QzJD NEVFNzNGRjEwHhcNMjUwODIyMTkzNTA4WhcNMjUwODI5MTkzNTA4WjAYMRYwFAYD VQQDEw02OGE4YzY2Yy0zMTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KfY4W+AcuI3NAplT9Y/jVLAG6VvgnfT/VBuiXsDKD0bzFzg/VzoAHkiUUYt afgn6X29QMH116aiHTuUeiQIZA/TH1id7GSnXAwR+QcuspH3suw4MYj+no8ufz4L mPDkRT+nT2nXxAK/HsYJYuLFV/vL72VLwggDUTfoY4ncWN7VXdfBy0uMagxLQUoy 32V2YaknIamHGyR0uuGW6t76nW2gfEKzianKVZlaxPRDFw2F4y8nTFbP8rAOKtNL NPpZKxL/BouYtslqR4NZxB39/TiS06Zw9hlofBnEW46IkJUejKcjzfSxiNZkeRAm saXzVpSkuMB90aGv/bpQRxSAfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3vry6V S70ZKKhuEyUgNE65f+FjMB8GA1UdIwQYMBaAFPYfuqYZKdEA+pnb1IDOjCxO5z/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUFGQi8wOTRGNzQ2RTU0 RjcxMUVBODM4RkE4NEZDNEY5QUUwMi85aC02cGhrcDBRRDZtZHZVZ002TUxFN25Q X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloLTZwaGtwMFFENm1kdlVnTTZNTEU3blBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUFGQi8wOTRGNzQ2RTU0RjcxMUVBODM4RkE4NEZDNEY5QUUwMi85aC02cGhrcDBR RDZtZHZVZ002TUxFN25QX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAJwCl9QEy167YobcVylV+L3j1dCHf9OUEoaY7XQTLk5s/6CTwjHlO GlFs5+8q/ux4h98itCxhbgi63G0+CVfdQ33fzO4A4bUxEPLSjiW3ohRWw7Nq8Roy IWIKhA1e43lCjjR7mlYMVT67ZXVxOxOQ7giAyAVy1qj6FWasUkldS6Jn8W3Ag03t 0HjKtLFQQpXfhdIhnaiaBaMwXKaTjcjiGVMK+Rvcy7sfMjD2zOu4KH7Wo2CCQknp L5GI9aPL4KZKQ2yDViN3HiJN/VvOhqa6tmPZzzFQw7VQeIMraHP5mLMr5Aja5jUR 5ZaKG6eADrgpRJOSo9HP8PnsLDQsL4aZ -----END CERTIFICATE-----Generated at Sat Aug 23 19:13:25 2025 by rpki-client