$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft File: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json) Hash identifier: Tbis8OF0xNKpjqrv24rhHXJ9shAB0vIS6pfVrpWgnHo= Subject key identifier: 67:66:B0:0E:6F:80:B2:3B:2F:20:18:28:88:D6:0A:6C:54:68:DB:10 Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D Certificate issuer: /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Certificate serial: 0995 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft Manifest number: 098F Signing time: Fri 18 Jul 2025 20:20:09 +0000 Manifest this update: Fri 18 Jul 2025 20:20:08 +0000 Manifest next update: Fri 25 Jul 2025 20:20:08 +0000 Files and hashes: 1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: VHfXNpqwxpSgiu+C60ZmZLgNWIn+1f6XJ2XY5tUqBCE=) 2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: 2KXnyRjzRL6Ajbgx/szbyFBTyK8pjQMyBf0qPFxtz+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2453 (0x995) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Validity Not Before: Jul 18 20:20:08 2025 GMT Not After : Jul 25 20:20:08 2025 GMT Subject: CN=687aac78-e105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:1e:7c:8b:b9:69:3d:05:4d:d0:96:af:40: b2:6f:5f:42:e1:c9:d5:0a:84:69:80:7e:cc:0b:19: 42:5b:53:92:9e:cf:b2:25:09:fd:92:ea:94:ff:83: 0b:91:0b:9e:b7:0f:f9:ce:d4:7d:e4:fb:f5:87:28: f2:76:65:f6:98:d9:dd:79:f4:ff:2c:d5:a6:48:6f: 35:75:41:b7:10:0b:91:f1:49:33:db:4d:c7:0a:58: b4:6c:69:74:fb:65:ac:57:6a:5d:2d:9b:63:06:a7: c4:ff:b5:7c:b0:c2:80:cd:62:4a:e9:76:5a:1a:d4: ed:27:72:66:31:e7:60:2b:e1:4e:2c:2b:99:86:d5: 49:c2:26:2c:fd:8b:93:c3:bb:75:33:30:41:6a:c1: 14:84:11:7b:2e:99:ff:20:0a:56:bf:f1:d8:d3:3a: 1d:5d:44:85:06:98:d9:6a:af:e6:cf:82:31:4f:96: b7:dc:9f:95:77:21:00:83:bc:ba:91:54:a4:30:54: 1a:5f:1d:26:68:99:5f:99:a1:28:1a:88:63:71:4f: ab:77:05:88:8b:70:5b:62:25:5f:d7:d5:15:f4:3a: fd:dc:cc:ce:25:15:94:35:80:b6:d3:7c:01:46:59: 4e:1d:39:b8:75:f0:d1:60:6a:93:88:b6:fc:c5:20: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:66:B0:0E:6F:80:B2:3B:2F:20:18:28:88:D6:0A:6C:54:68:DB:10 X509v3 Authority Key Identifier: keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4a:2f:8c:6f:e6:ed:fc:63:b3:43:f9:f4:03:1f:65:c7:67: 49:04:d3:d8:54:3d:df:67:4a:d5:95:a5:b6:c4:b6:0f:b0:41: f4:d3:c6:fe:15:1c:2b:78:a2:3d:a3:7c:c8:eb:73:49:61:04: b8:ea:c5:eb:2b:0b:2c:ff:10:71:41:37:94:00:16:fe:a3:fc: f0:b8:a3:fc:77:29:23:90:8a:6c:2e:e3:66:5d:56:0c:39:b3: aa:2e:b0:a9:1a:d5:bd:2b:9a:3f:02:0b:d7:07:0f:1c:0e:eb: 66:98:44:12:9e:cb:d6:95:90:44:09:c8:d7:94:d8:dd:93:ec: 8c:de:52:66:ed:e1:0d:48:92:5d:dc:dd:ea:39:2b:13:13:ee: 26:1f:33:5a:b9:4a:2d:af:1e:78:66:51:12:0d:6d:98:85:a1: 48:90:03:2a:46:00:0b:96:e3:32:3f:a6:cb:b9:83:48:ca:c2: c3:66:c6:4a:b6:aa:7d:e3:06:01:55:9d:35:19:a5:a9:4d:ef: f4:49:de:ca:f4:19:71:89:72:3d:d2:f4:02:58:9d:14:36:01: f6:93:55:54:d4:b9:7b:a8:4e:ad:5a:be:a3:75:81:98:d3:e2: 5d:da:9e:55:b7:22:a2:86:9c:b3:ac:d9:56:42:92:f6:2e:0c: 97:c8:3e:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA1NjYxMTAvBgNVBAUTKDlCRDY0NDgzQTI0MjFGQTZGMEVFNjM5OTc1QzcwNTk3 NjJBRkYwNUQwHhcNMjUwNzE4MjAyMDA4WhcNMjUwNzI1MjAyMDA4WjAYMRYwFAYD VQQDEw02ODdhYWM3OC1lMTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJgefIu5aT0FTdCWr0Cyb19C4cnVCoRpgH7MCxlCW1OSns+yJQn9kuqU/4ML kQuetw/5ztR95Pv1hyjydmX2mNndefT/LNWmSG81dUG3EAuR8Ukz203HCli0bGl0 +2WsV2pdLZtjBqfE/7V8sMKAzWJK6XZaGtTtJ3JmMedgK+FOLCuZhtVJwiYs/YuT w7t1MzBBasEUhBF7Lpn/IApWv/HY0zodXUSFBpjZaq/mz4IxT5a33J+VdyEAg7y6 kVSkMFQaXx0maJlfmaEoGohjcU+rdwWIi3BbYiVf19UV9Dr93MzOJRWUNYC203wB RllOHTm4dfDRYGqTiLb8xSD62wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdmsA5v gLI7LyAYKIjWCmxUaNsQMB8GA1UdIwQYMBaAFJvWRIOiQh+m8O5jmXXHBZdir/Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU2Ni82QjQ1NjA5Qzkw OEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2Ync3bU9aZGNjRmwyS3Y4 RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL205WkVnNkpDSDZidzdtT1pkY2NGbDJLdjhGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDU2Ni82QjQ1NjA5QzkwOEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2 Ync3bU9aZGNjRmwyS3Y4RjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMSi+Mb+bt/GOzQ/n0Ax9lx2dJBNPYVD3fZ0rVlaW2xLYPsEH008b+ FRwreKI9o3zI63NJYQS46sXrKwss/xBxQTeUABb+o/zwuKP8dykjkIpsLuNmXVYM ObOqLrCpGtW9K5o/AgvXBw8cDutmmEQSnsvWlZBECcjXlNjdk+yM3lJm7eENSJJd 3N3qOSsTE+4mHzNauUotrx54ZlESDW2YhaFIkAMqRgALluMyP6bLuYNIysLDZsZK tqp94wYBVZ01GaWpTe/0Sd7K9BlxiXI90vQCWJ0UNgH2k1VU1Ll7qE6tWr6jdYGY 0+Jd2p5VtyKihpyzrNlWQpL2LgyXyD6t -----END CERTIFICATE-----Generated at Sun Jul 20 10:39:59 2025 by rpki-client