$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft File: 9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json) Hash identifier: I8/G6P9zZRljL7s6nyYyvj81si1xSdSUKRgFG/okWb0= Subject key identifier: A8:D5:B5:4D:0B:7D:89:5C:C4:FD:87:EE:00:57:97:20:3D:8F:AA:5A Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 Certificate issuer: /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft Manifest number: 0182 Signing time: Fri 22 Aug 2025 20:02:40 +0000 Manifest this update: Fri 22 Aug 2025 20:02:39 +0000 Manifest next update: Fri 29 Aug 2025 20:02:39 +0000 Files and hashes: 1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: MS4nYv9vxXIx41z8NkqbmD9w3Y4jC3X8toD+8oh6nGw=) 2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: iTrEAAlkJw9OclXVQcOsLhF2OGcA/o+GNahTLZ1PRQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Validity Not Before: Aug 22 20:02:39 2025 GMT Not After : Aug 29 20:02:39 2025 GMT Subject: CN=68a8cce0-99a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:13:0e:70:b0:71:60:b5:ef:15:a4:e6:b1:54: 9c:24:62:92:9e:e0:6c:73:ef:a0:b3:84:39:43:63: 26:ef:e7:3f:7d:94:b1:37:a9:a3:80:67:46:9c:06: 43:f8:65:a2:03:44:18:6c:61:84:6c:06:ab:c9:0d: 6d:3a:02:34:ae:2f:6d:46:56:0d:c4:79:75:6c:d1: 6b:b9:66:00:5b:df:85:03:26:53:71:23:f2:e3:b8: 72:85:83:c3:65:86:2e:97:84:ac:e2:79:07:76:b3: 11:b1:96:93:35:de:bd:65:e2:df:ee:78:b8:1b:ed: b6:99:17:4a:88:9f:e8:b9:4a:41:be:56:24:2c:2b: b8:09:61:70:42:86:11:59:fe:92:dc:98:90:84:1a: 87:45:9f:11:dc:c7:69:b4:c9:d7:76:bb:26:77:de: 27:6d:df:39:52:1a:05:83:65:cd:40:73:48:65:a8: 01:9e:64:8f:1d:2c:2b:22:ae:93:b3:0e:47:86:a6: 15:5f:19:26:aa:7e:0c:81:40:0d:99:16:58:29:50: 96:07:c4:96:a9:6a:e6:10:1a:1f:2f:eb:ef:1c:e6: e1:4f:9d:06:e7:cd:4f:55:bc:89:42:f1:30:f0:d0: a4:a8:e0:82:b0:88:26:1c:8e:47:33:e3:ce:90:1f: 8d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D5:B5:4D:0B:7D:89:5C:C4:FD:87:EE:00:57:97:20:3D:8F:AA:5A X509v3 Authority Key Identifier: keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:cd:9e:7e:a3:cf:37:9c:3c:0e:7a:0d:2f:e9:e1:89:a1:3e: 1f:21:a5:b7:39:02:38:15:6d:73:2d:b6:83:fd:c5:9d:38:6d: bc:21:67:2f:30:c0:69:59:e7:4e:14:ba:21:38:84:f2:cc:1f: 8d:6c:7e:06:26:e9:46:b5:fb:7a:32:b7:cb:ec:09:59:2a:ad: 20:95:55:79:da:5b:d7:b9:e4:36:8d:8f:47:4b:5d:b7:91:6d: 31:71:81:44:32:05:bc:b1:66:95:21:6b:88:69:1a:67:cb:c5: 3f:e4:d9:e1:91:3f:f1:20:fd:3c:76:7b:b4:39:07:7f:8a:f1: cd:d9:ef:fc:ac:e3:71:06:e4:19:00:dc:48:44:d7:5c:11:59: 00:a8:cb:e5:0f:7a:d6:aa:61:16:06:02:18:b2:6b:e6:0c:c7: 47:79:19:81:51:bf:64:5b:50:73:9c:65:03:18:28:62:b8:be: 9c:37:36:3b:31:e1:9e:fc:1d:61:67:0e:51:5a:0a:74:20:ef: e8:1c:90:eb:f6:75:62:6b:25:e5:94:f4:87:ce:e1:37:e4:6d: 7a:bb:5a:5f:7f:3b:3a:2d:c5:7f:64:2c:62:f5:25:40:41:50: aa:37:1b:cc:06:e0:4d:b8:f2:7f:41:68:d1:96:eb:1b:0b:11: bf:42:6e:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKEY2NUNGRDFDRjNCMUM1QThFQTYwODcxRkEzQzM0MDYx REI0Q0YzODMwHhcNMjUwODIyMjAwMjM5WhcNMjUwODI5MjAwMjM5WjAYMRYwFAYD VQQDEw02OGE4Y2NlMC05OWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RMOcLBxYLXvFaTmsVScJGKSnuBsc++gs4Q5Q2Mm7+c/fZSxN6mjgGdGnAZD +GWiA0QYbGGEbAaryQ1tOgI0ri9tRlYNxHl1bNFruWYAW9+FAyZTcSPy47hyhYPD ZYYul4Ss4nkHdrMRsZaTNd69ZeLf7ni4G+22mRdKiJ/ouUpBvlYkLCu4CWFwQoYR Wf6S3JiQhBqHRZ8R3MdptMnXdrsmd94nbd85UhoFg2XNQHNIZagBnmSPHSwrIq6T sw5HhqYVXxkmqn4MgUANmRZYKVCWB8SWqWrmEBofL+vvHObhT50G581PVbyJQvEw 8NCkqOCCsIgmHI5HM+POkB+N+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjVtU0L fYlcxP2H7gBXlyA9j6paMB8GA1UdIwQYMBaAFPZc/RzzscWo6mCHH6PDQGHbTPOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9DRUU2ODgyMjM3 QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhhanFZSWNmbzhOQVlkdE04 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsejlIUE94eGFqcVlJY2ZvOE5BWWR0TTg0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9DRUU2ODgyMjM3QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhh anFZSWNmbzhOQVlkdE04NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7zZ5+o883nDwOeg0v6eGJoT4fIaW3OQI4FW1zLbaD/cWdOG28IWcv MMBpWedOFLohOITyzB+NbH4GJulGtft6MrfL7AlZKq0glVV52lvXueQ2jY9HS123 kW0xcYFEMgW8sWaVIWuIaRpny8U/5NnhkT/xIP08dnu0OQd/ivHN2e/8rONxBuQZ ANxIRNdcEVkAqMvlD3rWqmEWBgIYsmvmDMdHeRmBUb9kW1BznGUDGChiuL6cNzY7 MeGe/B1hZw5RWgp0IO/oHJDr9nViayXllPSHzuE35G16u1pffzs6LcV/ZCxi9SVA QVCqNxvMBuBNuPJ/QWjRlusbCxG/Qm7M -----END CERTIFICATE-----Generated at Sun Aug 24 00:54:46 2025 by rpki-client