$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json) Hash identifier: Qze8sVnA5f+I1eoXcJfvj88EcWEwKWVdBJuXntq+RIo= Subject key identifier: 9E:60:7C:16:DA:D3:7D:DB:76:BD:93:9F:C7:DC:DA:B7:9A:AD:D4:56 Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Certificate serial: 0C54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft Manifest number: 0C49 Signing time: Fri 18 Jul 2025 18:42:12 +0000 Manifest this update: Fri 18 Jul 2025 18:42:12 +0000 Manifest next update: Fri 25 Jul 2025 18:42:12 +0000 Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: 3owXLpR939eRXh9amvWN1ZD0dT8GHapQgnNyrIiRRzg=) 2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: LoUT2MaD5/F/EBumNr9K+cDj9oFe1lrYI+mckDlhBHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3156 (0xc54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Validity Not Before: Jul 18 18:42:12 2025 GMT Not After : Jul 25 18:42:12 2025 GMT Subject: CN=687a9584-53ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:dc:a5:b4:ab:80:0d:01:3d:de:b1:75:f4: bc:0b:b6:d0:e5:1a:a1:e7:16:4c:22:d3:db:5a:8f: 59:d0:f3:2b:8f:bb:d0:99:5a:cc:87:44:41:c8:6e: a7:ef:5f:a1:4e:ef:a2:ed:09:ba:20:bb:14:ab:d5: 09:3d:8f:68:03:d9:f2:a5:54:39:66:53:95:a8:8a: 42:c0:96:86:1d:55:b8:52:f0:da:1b:9d:64:93:64: c5:9f:aa:f1:0a:dd:95:0c:4c:f3:01:bf:42:36:65: 32:4f:75:57:a3:58:b3:30:00:96:1e:ce:3c:6b:73: 22:1d:09:24:37:27:6a:9d:91:2c:d1:a8:73:e2:30: c0:9d:f2:54:42:52:e4:7c:d9:7c:d7:46:df:54:93: b2:19:b5:ce:f3:b0:99:0e:60:d8:47:fe:96:48:12: e2:0e:1a:44:3e:b4:6b:8b:94:ff:b0:7f:3a:d5:a9: 25:7a:b8:38:4c:57:d1:a2:09:31:6b:07:c5:cd:11: 0b:14:7c:79:39:87:05:fc:a2:e2:99:e6:97:86:46: 0c:17:13:d5:30:43:f0:25:c7:a5:74:d3:cd:a1:35: 12:b6:55:6b:e0:fd:24:27:53:0e:6d:4f:96:79:1f: dc:d3:95:23:cd:82:db:44:85:ae:fc:64:26:7f:21: 43:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:60:7C:16:DA:D3:7D:DB:76:BD:93:9F:C7:DC:DA:B7:9A:AD:D4:56 X509v3 Authority Key Identifier: keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ca:9b:f4:e0:12:26:3b:78:61:c8:7c:8d:77:97:d7:b3:a9: 5f:3d:f9:48:bc:1a:03:2d:a4:2b:85:e2:97:d7:10:c1:68:5b: 5b:18:19:91:f2:4b:83:72:09:60:eb:e7:49:39:1f:51:26:e9: 9b:3a:d2:d2:82:fb:ab:d0:19:1b:82:4d:87:59:9a:01:ae:72: 9a:a7:2d:67:1f:38:85:1a:58:2d:3e:e2:10:ee:35:84:53:d9: bb:de:0b:38:37:8b:6a:27:6d:9b:c8:bd:02:f5:ef:d8:9a:2a: 3d:17:04:eb:1d:13:66:fa:8d:41:a8:c2:dc:fe:e0:35:99:21: b6:97:6f:63:f5:7d:af:dc:da:e4:5a:e8:6c:93:d2:e6:99:b2: c7:8e:d1:9f:8a:48:2f:d8:d3:3c:0e:d2:b5:2f:23:9f:47:96: be:e6:23:3f:bd:c5:45:cb:ba:4e:ff:7e:c2:b0:40:86:c8:2c: 02:6b:9d:74:2d:6e:cf:1c:45:28:33:49:8a:35:21:19:43:ac: ee:93:4d:56:e7:a1:f6:97:4e:dc:3e:5d:c1:e2:8c:1b:fc:76: 54:28:12:24:57:65:37:21:78:aa:a9:67:f0:b5:1e:60:84:c9: 9e:34:0a:4f:d7:4d:a5:39:45:59:07:84:22:b4:99:26:44:9d: 29:c9:17:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx NzA3ODIwNzQwHhcNMjUwNzE4MTg0MjEyWhcNMjUwNzI1MTg0MjEyWjAYMRYwFAYD VQQDEw02ODdhOTU4NC01M2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6TcpbSrgA0BPd6xdfS8C7bQ5Rqh5xZMItPbWo9Z0PMrj7vQmVrMh0RByG6n 71+hTu+i7Qm6ILsUq9UJPY9oA9nypVQ5ZlOVqIpCwJaGHVW4UvDaG51kk2TFn6rx Ct2VDEzzAb9CNmUyT3VXo1izMACWHs48a3MiHQkkNydqnZEs0ahz4jDAnfJUQlLk fNl810bfVJOyGbXO87CZDmDYR/6WSBLiDhpEPrRri5T/sH861aklerg4TFfRogkx awfFzRELFHx5OYcF/KLimeaXhkYMFxPVMEPwJceldNPNoTUStlVr4P0kJ1MObU+W eR/c05UjzYLbRIWu/GQmfyFD5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5gfBba 033bdr2Tn8fc2reardRWMB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5 RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzA0OS9BREFDNTI4MjA5RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lY NFZnNUFxanZudVVYQjRJSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGypv04BImO3hhyHyNd5fXs6lfPflIvBoDLaQrheKX1xDBaFtbGBmR 8kuDcglg6+dJOR9RJumbOtLSgvur0Bkbgk2HWZoBrnKapy1nHziFGlgtPuIQ7jWE U9m73gs4N4tqJ22byL0C9e/Ymio9FwTrHRNm+o1BqMLc/uA1mSG2l29j9X2v3Nrk Wuhsk9LmmbLHjtGfikgv2NM8DtK1LyOfR5a+5iM/vcVFy7pO/37CsECGyCwCa510 LW7PHEUoM0mKNSEZQ6zuk01W56H2l07cPl3B4owb/HZUKBIkV2U3IXiqqWfwtR5g hMmeNApP102lOUVZB4QitJkmRJ0pyRca -----END CERTIFICATE-----Generated at Sun Jul 20 03:45:10 2025 by rpki-client