$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft File: 9U-AgBarS7BveWqJRmfHC91I-_Y.mft (raw, json) Hash identifier: 77R45b0aYtUYjDMTwNQmV/pDBemBy8Fn2pk0pREPpzY= Subject key identifier: 56:E6:76:12:2D:F0:9C:AD:59:EF:CA:AA:B8:1C:AC:C0:6B:7C:C5:6B Authority key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 Certificate issuer: /CN=A9151932/serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft Manifest number: A1 Signing time: Sat 19 Jul 2025 06:29:51 +0000 Manifest this update: Sat 19 Jul 2025 06:29:51 +0000 Manifest next update: Sat 26 Jul 2025 06:29:51 +0000 Files and hashes: 1: 9U-AgBarS7BveWqJRmfHC91I-_Y.crl (hash: sEbtMOLiVAjVS6SsWaAD4fBk4OVrx3prUxdzn6sC1aU=) 2: 21642FDA720811EF8F352D23C4F9AE02.roa (hash: 3wZO5NpUkTFN/tJddHseNs+Usy8EJHQkjD9s+ZGedQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Validity Not Before: Jul 19 06:29:51 2025 GMT Not After : Jul 26 06:29:51 2025 GMT Subject: CN=687b3b5f-7287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ec:4d:fe:21:3c:73:42:ea:a9:a9:4b:57:89: 4f:73:94:b1:02:85:5f:5e:12:fc:fc:44:66:75:34: 4b:7a:70:96:fa:82:35:6f:3a:76:bd:c2:06:54:0e: 37:4d:ff:6c:03:c5:8f:76:93:e2:9a:9a:89:b9:8f: 71:49:6c:f4:90:1b:77:53:ba:39:14:0d:5e:40:31: 72:df:d6:d1:35:1c:f4:bb:2e:d5:3d:19:fc:92:ec: b6:f7:8c:2a:c4:65:94:09:2e:85:2c:84:82:fe:07: 51:19:ed:1a:1b:30:9e:50:7c:4a:fa:6b:c4:4c:18: 66:6e:3d:0a:82:34:64:89:f4:0c:fc:97:23:fc:b7: 30:08:5d:0c:1c:89:c2:63:b5:9c:4b:68:2c:40:4d: 16:b6:bc:73:7f:10:38:c6:2f:4a:e5:76:11:f7:b2: a7:37:88:45:37:7f:ec:2e:de:4e:fd:ca:37:c0:4a: b8:64:47:f5:56:15:90:79:00:06:26:dd:a6:55:a4: 18:83:3b:93:c3:12:25:37:1c:2f:c6:6a:9f:f2:25: 0e:81:81:1e:e7:32:af:d0:c1:7d:03:f7:7f:16:02: dc:dd:63:74:a3:8c:d9:97:90:b1:83:75:6d:3a:b6: 59:2f:b2:dd:af:51:cc:0d:6a:8b:8b:c2:e4:10:d2: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E6:76:12:2D:F0:9C:AD:59:EF:CA:AA:B8:1C:AC:C0:6B:7C:C5:6B X509v3 Authority Key Identifier: keyid:F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0c:69:e0:fc:70:7f:1f:1d:56:00:d4:57:91:6f:01:3a:59: 57:7a:4b:2b:e1:38:59:b6:bc:03:6d:01:6c:27:80:1f:ac:5f: 68:1f:46:d2:4b:21:d7:d7:83:27:4b:59:d1:8c:09:e6:39:7d: a0:56:83:8e:09:a5:10:96:6c:fe:2f:0a:03:8b:89:f6:f2:26: 50:e6:c5:ec:92:3c:d6:6f:74:27:7f:26:d6:b6:84:de:3d:34: 9d:d0:26:ad:e4:d3:2b:76:fe:56:86:6d:8e:b6:a3:73:8f:3f: c9:31:50:3e:fb:29:8b:54:96:4a:00:c0:d7:af:88:c7:ce:8e: ab:d5:fc:26:52:c5:15:4a:cf:3f:30:09:53:52:4f:0f:2a:7a: 64:45:ee:d0:99:2a:5e:1d:e8:d7:3c:3f:3c:97:62:f6:6b:79: b0:23:cb:0a:fa:fd:76:04:ac:cb:c6:5b:44:be:bf:1b:bb:34: 89:3f:45:70:6b:66:1d:f3:01:69:56:2a:11:c5:63:b3:64:a9: f1:10:ad:d3:c9:42:a1:8e:04:9a:50:5b:60:f7:ae:c2:db:ec: 4d:e5:49:d1:a8:68:d9:52:e8:c4:9b:30:d8:fd:14:d8:74:bd: 88:12:2e:e5:2d:3f:9b:a7:aa:36:c4:36:8f:de:d7:ee:bb:58: b7:6c:43:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKEY1NEY4MDgwMTZBQjRCQjA2Rjc5NkE4OTQ2NjdDNzBC REQ0OEZCRjYwHhcNMjUwNzE5MDYyOTUxWhcNMjUwNzI2MDYyOTUxWjAYMRYwFAYD VQQDEw02ODdiM2I1Zi03Mjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOxN/iE8c0LqqalLV4lPc5SxAoVfXhL8/ERmdTRLenCW+oI1bzp2vcIGVA43 Tf9sA8WPdpPimpqJuY9xSWz0kBt3U7o5FA1eQDFy39bRNRz0uy7VPRn8kuy294wq xGWUCS6FLISC/gdRGe0aGzCeUHxK+mvETBhmbj0KgjRkifQM/Jcj/LcwCF0MHInC Y7WcS2gsQE0WtrxzfxA4xi9K5XYR97KnN4hFN3/sLt5O/co3wEq4ZEf1VhWQeQAG Jt2mVaQYgzuTwxIlNxwvxmqf8iUOgYEe5zKv0MF9A/d/FgLc3WN0o4zZl5Cxg3Vt OrZZL7Ldr1HMDWqLi8LkENIiPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbmdhIt 8JytWe/KqrgcrMBrfMVrMB8GA1UdIwQYMBaAFPVPgIAWq0uwb3lqiUZnxwvdSPv2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi80N0NBMzVFNDcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi85VS1BZ0JhclM3QnZlV3FKUm1mSEM5MUkt X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlVLUFnQmFyUzdCdmVXcUpSbWZIQzkxSS1fWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi80N0NBMzVFNDcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi85VS1BZ0JhclM3 QnZlV3FKUm1mSEM5MUktX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPDGng/HB/Hx1WANRXkW8BOllXeksr4ThZtrwDbQFsJ4AfrF9oH0bS SyHX14MnS1nRjAnmOX2gVoOOCaUQlmz+LwoDi4n28iZQ5sXskjzWb3QnfybWtoTe PTSd0Cat5NMrdv5Whm2OtqNzjz/JMVA++ymLVJZKAMDXr4jHzo6r1fwmUsUVSs8/ MAlTUk8PKnpkRe7QmSpeHejXPD88l2L2a3mwI8sK+v12BKzLxltEvr8buzSJP0Vw a2Yd8wFpVioRxWOzZKnxEK3TyUKhjgSaUFtg967C2+xN5UnRqGjZUujEmzDY/RTY dL2IEi7lLT+bp6o2xDaP3tfuu1i3bENI -----END CERTIFICATE-----Generated at Sun Jul 20 12:10:03 2025 by rpki-client