$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json) Hash identifier: 4lvkXH0ZXN9BmNccxMRz6v67Ubn1vvOEesjl7vQ6Ck0= Subject key identifier: A1:59:FB:1E:2A:F0:1B:01:40:51:9F:37:F0:5E:9F:53:83:85:EF:8C Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Certificate serial: 055B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft Manifest number: 0557 Signing time: Fri 18 Jul 2025 23:42:15 +0000 Manifest this update: Fri 18 Jul 2025 23:42:14 +0000 Manifest next update: Fri 25 Jul 2025 23:42:14 +0000 Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: O3bFBGhftdFAubegNJBZKt7upZ6BoWabCbtrHr/CtY4=) 2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: AKQYRTBp1uq5xNSQ+35Oq/CNR0101RtjFiouleUDl3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1371 (0x55b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164655, serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Validity Not Before: Jul 18 23:42:14 2025 GMT Not After : Jul 25 23:42:14 2025 GMT Subject: CN=687adbd6-a9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f8:de:a2:fb:b7:4f:b6:a2:9e:0f:90:e5:22: fb:0a:bc:95:c9:38:c8:8a:17:de:15:93:5d:d8:70: 76:91:b7:92:54:6c:67:6d:7e:4c:1e:33:e3:c1:c6: 66:37:48:eb:8a:be:55:8d:0a:09:61:1d:cf:11:f0: 63:ee:97:50:f9:35:00:05:3d:54:00:d3:be:e2:a7: 5e:64:c2:9c:28:e7:a3:07:e2:5b:d0:86:0c:cd:e2: 88:01:9d:a9:81:2b:98:15:8e:5e:26:74:73:3e:80: e7:33:eb:8c:01:f8:fb:f7:a9:cc:ae:af:50:88:65: cc:49:c0:a1:bb:68:65:1c:39:a4:18:e3:58:05:2d: 96:57:25:f6:c1:26:eb:04:57:74:e1:58:02:19:a2: 3f:d2:ab:f2:71:e4:c9:27:56:eb:47:86:6f:b4:c9: c7:b8:d5:d1:fe:35:a5:87:81:11:f1:4c:bc:d6:4c: 72:21:d0:bf:af:f2:d8:b8:b7:07:0f:ed:20:b3:0d: 02:8b:23:7a:0e:a5:55:1f:ae:be:53:a4:a2:6b:c0: ec:27:5a:fd:66:dc:12:87:f8:54:50:9c:4a:b0:fe: 17:6e:73:3b:73:ca:2e:9b:0a:da:64:88:36:14:59: 16:84:c0:ea:97:05:38:85:bd:30:21:ef:bf:15:59: 62:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:59:FB:1E:2A:F0:1B:01:40:51:9F:37:F0:5E:9F:53:83:85:EF:8C X509v3 Authority Key Identifier: keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4f:a0:9e:1b:73:64:88:94:14:31:c8:08:d9:fd:c1:65:ef: 41:6a:da:26:e1:9f:ef:08:a7:98:d4:99:4c:a8:af:6c:b8:d6: 62:0b:67:8b:bf:c4:23:19:1d:f8:db:17:98:de:fe:9e:8d:df: ae:94:b7:70:d5:41:38:dc:88:ae:78:27:5c:cb:30:15:34:88: 95:d6:68:56:3c:ec:58:d6:09:4e:02:a5:04:9f:16:a9:39:e0: b0:ea:b2:c5:ee:e4:8a:dc:a9:3d:cb:ab:8b:b0:c2:b7:c2:e5: 20:56:d7:26:ab:3f:16:16:54:b7:2c:d6:fd:6b:a0:10:f5:c7: 27:6c:cc:fc:93:c2:66:05:03:73:36:96:f1:9a:15:1b:89:ff: e9:5b:e4:15:58:10:43:63:c0:ac:cb:f6:25:7d:ab:2d:8f:b7: 12:8e:22:74:31:52:4f:55:4d:a9:45:74:07:ad:4a:5f:8d:3d: a1:97:4c:40:aa:17:ed:4a:e1:dc:a5:72:aa:69:b9:da:24:be: e3:40:8d:bc:ee:41:c9:d0:60:0a:81:7a:f1:57:82:f4:ac:44: d2:fd:b7:aa:77:71:37:97:ff:c0:bb:ae:7f:2c:e6:48:e1:da: 5f:8e:c8:1a:e4:b1:f0:89:c6:13:d5:c0:8b:8f:fd:54:7c:c8: 26:f3:80:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NTUxMTAvBgNVBAUTKDZCRDE0NUVDRTQyQUU0RkQ4MkFENjdDRkQxQTQwNTlB OUVBQjNBNkQwHhcNMjUwNzE4MjM0MjE0WhcNMjUwNzI1MjM0MjE0WjAYMRYwFAYD VQQDEw02ODdhZGJkNi1hOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vjeovu3T7aing+Q5SL7CryVyTjIihfeFZNd2HB2kbeSVGxnbX5MHjPjwcZm N0jrir5VjQoJYR3PEfBj7pdQ+TUABT1UANO+4qdeZMKcKOejB+Jb0IYMzeKIAZ2p gSuYFY5eJnRzPoDnM+uMAfj796nMrq9QiGXMScChu2hlHDmkGONYBS2WVyX2wSbr BFd04VgCGaI/0qvyceTJJ1brR4ZvtMnHuNXR/jWlh4ER8Uy81kxyIdC/r/LYuLcH D+0gsw0CiyN6DqVVH66+U6Sia8DsJ1r9ZtwSh/hUUJxKsP4XbnM7c8oumwraZIg2 FFkWhMDqlwU4hb0wIe+/FVli6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFZ+x4q 8BsBQFGfN/Ben1ODhe+MMB8GA1UdIwQYMBaAFGvRRezkKuT9gq1nz9GkBZqeqzpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY1NS9EOEJCODQ5QUYz REUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQMkNyV2ZQMGFRRm1wNnJP bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5RkY3T1FxNVAyQ3JXZlAwYVFGbXA2ck9tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY1NS9EOEJCODQ5QUYzREUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQ MkNyV2ZQMGFRRm1wNnJPbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9T6CeG3NkiJQUMcgI2f3BZe9Batom4Z/vCKeY1JlMqK9suNZiC2eL v8QjGR342xeY3v6ejd+ulLdw1UE43IiueCdcyzAVNIiV1mhWPOxY1glOAqUEnxap OeCw6rLF7uSK3Kk9y6uLsMK3wuUgVtcmqz8WFlS3LNb9a6AQ9ccnbMz8k8JmBQNz NpbxmhUbif/pW+QVWBBDY8Csy/Ylfastj7cSjiJ0MVJPVU2pRXQHrUpfjT2hl0xA qhftSuHcpXKqabnaJL7jQI287kHJ0GAKgXrxV4L0rETS/beqd3E3l//Au65/LOZI 4dpfjsga5LHwicYT1cCLj/1UfMgm84DM -----END CERTIFICATE-----Generated at Sun Jul 20 07:32:12 2025 by rpki-client