$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft File: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft (raw, json) Hash identifier: h4UHsXUuvbx8uDbpwrBlh5nyQXHMOgGQQou8P6EjmN0= Subject key identifier: CB:CE:06:7A:58:9E:1F:83:3F:97:CD:0C:24:CA:28:B1:68:30:E4:F2 Authority key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 Certificate issuer: /CN=A9193B7A/serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft Manifest number: 07 Signing time: Sat 23 Aug 2025 08:25:19 +0000 Manifest this update: Sat 23 Aug 2025 08:25:18 +0000 Manifest next update: Sat 30 Aug 2025 08:25:18 +0000 Files and hashes: 1: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl (hash: 61jF4UKykHCTuKGtr+M2LtzZmXS97dfIwXLMEMpPFqA=) 2: 62B3880C7E5D11F0ACC14A80C4F9AE02.roa (hash: UYXy4In2ej15vB1SThN5OwmV+NPLJjrhZVDmU16GLKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Validity Not Before: Aug 23 08:25:18 2025 GMT Not After : Aug 30 08:25:18 2025 GMT Subject: CN=68a97aee-2c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:42:c1:16:2c:cc:63:33:76:99:26:29:5c:b0: 95:7c:1d:cd:31:db:80:b0:c5:dc:71:a2:9d:fd:c4: 78:c2:f5:a3:ae:11:15:22:71:54:93:d8:2b:62:34: e5:2b:6c:38:c4:96:e9:d8:e1:f4:f0:24:1a:fd:ab: 91:8d:10:d4:f7:2f:32:2a:6e:57:3c:6a:17:55:b7: 43:57:53:bc:43:b4:f6:31:42:f2:d5:b9:2b:33:15: ea:f1:60:b8:bd:58:39:f3:96:17:2e:42:fd:d6:d1: e3:86:f1:ea:78:42:86:79:73:7b:44:b1:64:1c:97: cd:52:0e:63:79:e7:eb:aa:b0:71:51:89:fe:37:aa: ad:8b:00:0b:c4:eb:7e:46:6e:7e:62:3c:78:e2:a0: 87:59:ad:a4:ea:27:b7:fe:1a:f5:86:a5:25:a2:bd: 06:4c:44:7a:9c:1c:a3:12:14:32:30:48:9d:6d:53: 3e:63:24:a4:8e:b8:a6:dc:f9:d0:72:a2:9b:25:a5: cc:d5:7a:76:b6:1d:01:09:ce:cd:47:14:77:91:5f: b4:b1:b0:3f:83:6f:b4:76:93:d6:e0:43:f2:1c:36: 58:f4:2a:78:37:ac:c0:c2:d0:cd:ab:60:65:fc:a5: 52:16:cb:f2:15:c2:b5:8e:54:e0:da:03:e7:ac:90: 1f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CE:06:7A:58:9E:1F:83:3F:97:CD:0C:24:CA:28:B1:68:30:E4:F2 X509v3 Authority Key Identifier: keyid:0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:29:3f:74:b6:31:ce:c6:f7:f7:11:fc:0a:ac:42:0a:43:df: 7e:be:73:41:de:4c:45:ea:02:85:21:2d:84:36:d4:44:af:5a: e8:76:21:13:9c:55:47:e6:6a:4d:89:58:59:05:3c:a0:91:78: f3:53:f6:73:70:02:2c:de:48:c2:3b:0f:f7:ec:a8:8a:58:e2: 1b:b8:f2:51:97:fa:e9:07:55:fc:3e:1e:b6:ef:93:46:ff:e1: 15:19:67:e0:12:62:8a:3c:1e:ce:ba:23:de:b5:9c:2c:03:bf: f1:6d:25:5a:ad:14:19:e3:b7:56:6a:fa:5b:f3:6d:22:e2:06: 99:56:16:5f:5a:ec:1c:dd:b1:00:55:85:2a:ff:46:41:57:17: 46:1a:8f:2f:02:25:e4:29:a5:56:cc:d9:4f:7c:13:46:f3:b4: f4:0f:74:85:88:8a:68:36:bf:e9:c5:d2:5e:f3:63:cf:6e:9a: aa:e3:9c:2e:67:c8:df:f7:e8:e1:30:44:77:0f:06:90:08:57: 21:cc:6c:6d:2f:8b:23:b5:9b:6a:33:2c:10:a2:be:a8:2a:55: aa:8f:06:d4:c4:e8:ae:21:f3:6f:18:04:9f:c2:da:54:ed:92: cf:2c:dc:83:29:af:b3:4e:33:a6:25:40:35:d6:63:80:07:29: 75:8e:a5:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I3QTExMC8GA1UEBRMoMEMyRjQ1QjZDODg2MjIzMjQyRUM5QkY5M0IzNDY5N0Y2 NERERjY4MDAeFw0yNTA4MjMwODI1MThaFw0yNTA4MzAwODI1MThaMBgxFjAUBgNV BAMTDTY4YTk3YWVlLTJjMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuQsEWLMxjM3aZJilcsJV8Hc0x24Cwxdxxop39xHjC9aOuERUicVST2CtiNOUr bDjElunY4fTwJBr9q5GNENT3LzIqblc8ahdVt0NXU7xDtPYxQvLVuSszFerxYLi9 WDnzlhcuQv3W0eOG8ep4QoZ5c3tEsWQcl81SDmN55+uqsHFRif43qq2LAAvE635G bn5iPHjioIdZraTqJ7f+GvWGpSWivQZMRHqcHKMSFDIwSJ1tUz5jJKSOuKbc+dBy opslpczVena2HQEJzs1HFHeRX7SxsD+Db7R2k9bgQ/IcNlj0Kng3rMDC0M2rYGX8 pVIWy/IVwrWOVODaA+eskB+NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy84Gelie H4M/l80MJMoosWgw5PIwHwYDVR0jBBgwFoAUDC9FtsiGIjJC7Jv5OzRpf2Td9oAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjdBL0MwODUwNjkyN0RC QjExRjBCQzRENzc2MUM0RjlBRTAyL0RDOUZ0c2lHSWpKQzdKdjVPelJwZjJUZDlv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREM5RnRzaUdJakpDN0p2NU96UnBmMlRkOW9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz QjdBL0MwODUwNjkyN0RCQjExRjBCQzRENzc2MUM0RjlBRTAyL0RDOUZ0c2lHSWpK QzdKdjVPelJwZjJUZDlvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFEpP3S2Mc7G9/cR/AqsQgpD336+c0HeTEXqAoUhLYQ21ESvWuh2IROc VUfmak2JWFkFPKCRePNT9nNwAizeSMI7D/fsqIpY4hu48lGX+ukHVfw+Hrbvk0b/ 4RUZZ+ASYoo8Hs66I961nCwDv/FtJVqtFBnjt1Zq+lvzbSLiBplWFl9a7BzdsQBV hSr/RkFXF0Yajy8CJeQppVbM2U98E0bztPQPdIWIimg2v+nF0l7zY89umqrjnC5n yN/36OEwRHcPBpAIVyHMbG0viyO1m2ozLBCivqgqVaqPBtTE6K4h828YBJ/C2lTt ks8s3IMpr7NOM6YlQDXWY4AHKXWOpfE= -----END CERTIFICATE-----Generated at Sun Aug 24 05:25:56 2025 by rpki-client