$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft File: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft (raw, json) Hash identifier: eYhCvP4mUKLP1783tIOOuAJvUlZhcovAdivD2k9ablA= Subject key identifier: 99:24:9F:97:01:CE:74:47:43:03:47:FB:61:3C:44:94:7D:57:D1:8D Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55 Certificate issuer: /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055 Certificate serial: 09F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft Manifest number: 09CA Signing time: Fri 18 Jul 2025 20:16:45 +0000 Manifest this update: Fri 18 Jul 2025 20:16:45 +0000 Manifest next update: Fri 25 Jul 2025 20:16:45 +0000 Files and hashes: 1: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl (hash: KTgAKup3U9yfUC+0AUDVv1gmK1Th3RwuJMiPNaGbp7g=) 2: D4378BBA268311EE9BB21413C4F9AE02.roa (hash: Fn/SXrKcwrvikRaZqbM9UmvxwM1m/am9+sz8PJUtJeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2552 (0x9f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DE7A, serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055 Validity Not Before: Jul 18 20:16:45 2025 GMT Not After : Jul 25 20:16:45 2025 GMT Subject: CN=687aabad-629c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:42:30:31:3d:1d:03:60:ce:ed:d5:1e:cf:b6: 2d:61:4e:c3:59:6f:ad:1d:24:a1:57:c6:92:14:28: cf:e4:73:f2:e7:da:f7:34:d5:74:0e:3a:42:52:fc: 29:c7:a2:01:c3:2e:a5:15:af:a2:4d:b3:ea:9f:8a: 03:90:f9:23:8e:9d:06:2e:2e:5a:11:78:0a:bc:37: 7c:cb:e1:f2:66:52:a1:c8:0e:03:b7:91:8c:ac:71: 12:b3:e8:22:75:de:19:8d:14:af:4d:33:a7:a4:25: d1:85:5b:ad:1f:51:23:89:7c:31:70:ac:cf:8e:77: da:fc:ab:d2:14:89:c5:ee:f1:e5:60:d0:e1:30:57: 0e:12:f8:a0:ca:3f:a0:b4:a5:f8:bd:cb:3c:56:f3: 2a:dc:41:61:e4:26:53:51:47:5d:0b:7c:c6:eb:ec: 5c:d8:4a:38:21:01:db:13:72:93:3e:25:94:21:c4: 1e:d0:96:0c:83:fe:f2:d8:44:71:d6:08:56:66:00: 07:65:c8:31:23:31:44:cd:aa:b0:79:f1:78:bb:79: 2f:a3:06:4c:de:53:b1:21:c5:69:ad:2b:78:4e:66: 7e:e2:9f:72:a2:e2:d6:0c:73:f8:00:dc:2c:2d:f4: 53:59:67:a3:1a:27:5d:f2:26:96:e3:71:47:71:71: 6d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:24:9F:97:01:CE:74:47:43:03:47:FB:61:3C:44:94:7D:57:D1:8D X509v3 Authority Key Identifier: keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:9a:2b:7f:e1:b4:31:e4:cf:10:75:87:0b:67:d1:81:59:7d: e5:fe:1a:f7:44:53:55:74:fa:09:04:9a:f0:bf:dd:ab:c6:64: 62:cf:45:19:88:67:e8:32:19:25:b0:02:be:0b:73:0b:c7:cc: 8a:ac:0e:b4:de:32:01:33:82:12:ce:62:61:20:29:23:b9:4a: b6:a8:b0:8c:65:5f:24:c9:16:2f:fa:69:48:ae:ec:3e:92:f6: 9d:8a:16:b1:30:39:7d:c8:ac:c6:66:f9:9e:b1:a4:85:5c:f7: 42:fa:38:48:13:f7:e5:62:9f:5a:d6:de:8e:8b:21:1e:78:67: 33:79:6b:1e:a7:8b:8d:02:2f:fd:a0:12:0d:76:d7:78:3f:76: e4:c4:b0:b9:d1:f5:a9:4d:65:11:17:39:ea:38:93:a4:83:cf: 78:45:4e:9d:34:f1:8f:bb:0d:b3:e0:65:69:5e:45:19:6e:5a: b5:e3:cb:ad:74:0b:7c:f6:4b:7c:a7:7e:1f:58:d9:ea:0f:ff: ab:08:14:49:9f:f3:3c:2c:c9:ab:c9:fc:bf:19:31:0f:dd:31: 97:20:08:dd:6a:e2:e5:a6:78:42:6c:35:93:8f:7b:63:ec:6d: 6c:ab:4e:2e:c7:e3:20:70:b1:7a:a7:fa:f2:6d:37:7b:5f:74: 93:49:ae:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RFN0ExMTAvBgNVBAUTKEJGRDQxRkNGRDI1NjFCNTNBQzRDRDJGODNEMTFCMDQ3 MEE2NkEwNTUwHhcNMjUwNzE4MjAxNjQ1WhcNMjUwNzI1MjAxNjQ1WjAYMRYwFAYD VQQDEw02ODdhYWJhZC02MjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UIwMT0dA2DO7dUez7YtYU7DWW+tHSShV8aSFCjP5HPy59r3NNV0DjpCUvwp x6IBwy6lFa+iTbPqn4oDkPkjjp0GLi5aEXgKvDd8y+HyZlKhyA4Dt5GMrHESs+gi dd4ZjRSvTTOnpCXRhVutH1EjiXwxcKzPjnfa/KvSFInF7vHlYNDhMFcOEvigyj+g tKX4vcs8VvMq3EFh5CZTUUddC3zG6+xc2Eo4IQHbE3KTPiWUIcQe0JYMg/7y2ERx 1ghWZgAHZcgxIzFEzaqwefF4u3kvowZM3lOxIcVprSt4TmZ+4p9youLWDHP4ANws LfRTWWejGidd8iaW43FHcXFt1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkkn5cB znRHQwNH+2E8RJR9V9GNMB8GA1UdIwQYMBaAFL/UH8/SVhtTrEzS+D0RsEcKZqBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREU3QS9CQzcxRUNDNjhE NDUxMUVBODdGQUY4NThDNEY5QUUwMi92OVFmejlKV0cxT3NUTkw0UFJHd1J3cG1v RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y5UWZ6OUpXRzFPc1ROTDRQUkd3UndwbW9GVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REU3QS9CQzcxRUNDNjhENDUxMUVBODdGQUY4NThDNEY5QUUwMi92OVFmejlKV0cx T3NUTkw0UFJHd1J3cG1vRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBImit/4bQx5M8QdYcLZ9GBWX3l/hr3RFNVdPoJBJrwv92rxmRiz0UZ iGfoMhklsAK+C3MLx8yKrA603jIBM4ISzmJhICkjuUq2qLCMZV8kyRYv+mlIruw+ kvadihaxMDl9yKzGZvmesaSFXPdC+jhIE/flYp9a1t6OiyEeeGczeWsep4uNAi/9 oBINdtd4P3bkxLC50fWpTWURFznqOJOkg894RU6dNPGPuw2z4GVpXkUZblq148ut dAt89kt8p34fWNnqD/+rCBRJn/M8LMmryfy/GTEP3TGXIAjdauLlpnhCbDWTj3tj 7G1sq04ux+MgcLF6p/rybTd7X3STSa5t -----END CERTIFICATE-----Generated at Sun Jul 20 07:36:24 2025 by rpki-client