$ rpki-client -vvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft File: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft (raw, json) Hash identifier: Awx/nFj9oGEaT9+ICkA0YPOfBaj2SPQqwqIjvjeE/7A= Subject key identifier: A9:68:B3:4F:93:5F:93:EE:2F:1A:9E:9E:5F:56:ED:10:B2:F5:CA:6B Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 Certificate issuer: /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Certificate serial: 0DEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft Manifest number: 0DE5 Signing time: Fri 18 Jul 2025 18:02:23 +0000 Manifest this update: Fri 18 Jul 2025 18:02:22 +0000 Manifest next update: Fri 25 Jul 2025 18:02:22 +0000 Files and hashes: 1: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl (hash: uWz38+7HcymVv6YxrQDEL1n6ynqI4VYQ3y146XLYrAc=) 2: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (hash: NGmhercCoJ9hcEnfypdSk09ukBq8+ACpPHXM0iho7j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3564 (0xdec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165226, serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Validity Not Before: Jul 18 18:02:22 2025 GMT Not After : Jul 25 18:02:22 2025 GMT Subject: CN=687a8c2f-6666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c9:6e:20:b2:7b:bd:9f:3a:d6:4a:12:72:1c: 79:e1:85:eb:8b:61:02:e6:33:c1:c1:27:75:1f:7f: 98:1d:c9:41:42:bd:55:76:68:ee:a2:6b:3f:aa:89: 79:a0:98:2d:a7:4c:5a:d0:95:3d:21:1f:ad:f3:99: 17:65:f3:d3:30:fa:56:3f:92:48:15:54:2e:2d:af: b9:0a:7d:13:a2:46:cd:b9:2e:63:02:2d:50:a7:9f: b9:89:70:a4:e7:50:76:b7:f4:51:9e:d0:71:b4:4f: 78:87:01:95:50:b9:a4:36:91:8c:0f:e4:06:96:99: 63:ed:09:ee:88:79:d7:62:a4:42:57:bd:5b:08:0b: 4d:4b:54:94:87:af:d9:d9:1a:95:f0:cd:a0:fc:ba: 83:68:29:2b:f4:9e:05:3c:16:53:f9:f9:e7:c0:98: 4b:de:b3:32:07:ee:20:99:d9:0d:33:40:19:55:8f: 4a:24:42:d9:d3:23:65:98:4f:c3:f5:ff:64:06:93: 98:31:59:b2:0a:a7:f0:32:3b:74:82:b8:e1:15:53: 4b:df:f9:29:4f:df:47:4d:14:ed:66:11:7a:00:db: cb:81:93:f5:79:d0:d6:66:e7:90:a5:ab:88:e6:3e: 27:9f:fa:5d:ba:ea:42:dd:af:94:80:74:67:9f:82: 46:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:68:B3:4F:93:5F:93:EE:2F:1A:9E:9E:5F:56:ED:10:B2:F5:CA:6B X509v3 Authority Key Identifier: keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3b:b0:24:01:4d:48:57:89:b5:bc:23:5f:58:0b:e7:05:e2: a2:c6:6d:a0:88:97:f8:49:59:6a:cc:57:17:66:ab:00:35:f7: eb:a5:40:f6:24:d9:b5:a7:f6:0a:e0:85:bf:12:c4:cb:15:4b: 6f:9d:80:d0:1c:e3:ea:3f:06:43:bd:a0:80:80:93:e5:f9:c8: 12:35:7c:97:da:93:b4:bc:b4:c8:24:f4:93:2d:87:3e:05:e4: 95:79:20:76:97:b8:d2:eb:97:3a:35:1f:68:8d:c9:8f:7c:61: 20:4b:a5:6b:45:8c:12:e7:52:92:04:bf:cc:7a:d4:17:3d:d3: bf:a4:33:a5:a3:52:fc:7f:63:5a:67:d1:b0:69:9b:b6:9a:30: 78:00:07:49:d8:87:00:93:a3:1b:a2:06:02:8c:c8:f0:4a:a6: 0b:0e:ed:e1:74:a3:a5:f5:f1:a7:73:f7:a7:19:e6:13:18:22: 91:0c:93:4a:0c:44:3c:61:66:bb:f4:c5:ce:e3:9c:df:a3:bd: bb:cd:77:a3:bd:bc:1a:60:7a:1c:99:86:e7:d9:be:54:ea:46: ae:98:6e:c2:ad:ca:f9:a3:db:8d:52:86:a5:e6:6f:6d:12:d8: b2:e5:ea:a8:17:c0:ad:c0:29:88:4e:ec:ff:12:38:83:69:fd: 69:8c:3b:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyMjYxMTAvBgNVBAUTKEY1MzZBREQ2RTE3RDFDRTIyQ0JCODkzQTdGQTBDRjA4 QkQ4RTNGQzAwHhcNMjUwNzE4MTgwMjIyWhcNMjUwNzI1MTgwMjIyWjAYMRYwFAYD VQQDEw02ODdhOGMyZi02NjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsluILJ7vZ861koSchx54YXri2EC5jPBwSd1H3+YHclBQr1Vdmjuoms/qol5 oJgtp0xa0JU9IR+t85kXZfPTMPpWP5JIFVQuLa+5Cn0TokbNuS5jAi1Qp5+5iXCk 51B2t/RRntBxtE94hwGVULmkNpGMD+QGlplj7QnuiHnXYqRCV71bCAtNS1SUh6/Z 2RqV8M2g/LqDaCkr9J4FPBZT+fnnwJhL3rMyB+4gmdkNM0AZVY9KJELZ0yNlmE/D 9f9kBpOYMVmyCqfwMjt0grjhFVNL3/kpT99HTRTtZhF6ANvLgZP1edDWZueQpauI 5j4nn/pduupC3a+UgHRnn4JGgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlos0+T X5PuLxqenl9W7RCy9cprMB8GA1UdIwQYMBaAFPU2rdbhfRziLLuJOn+gzwi9jj/A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTIyNi8zQzlDRjA0Q0I3 M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhPSXN1NGs2ZjZEUENMMk9Q OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUYXQxdUY5SE9Jc3U0azZmNkRQQ0wyT1A4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTIyNi8zQzlDRjA0Q0I3M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhP SXN1NGs2ZjZEUENMMk9QOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9O7AkAU1IV4m1vCNfWAvnBeKixm2giJf4SVlqzFcXZqsANffrpUD2 JNm1p/YK4IW/EsTLFUtvnYDQHOPqPwZDvaCAgJPl+cgSNXyX2pO0vLTIJPSTLYc+ BeSVeSB2l7jS65c6NR9ojcmPfGEgS6VrRYwS51KSBL/MetQXPdO/pDOlo1L8f2Na Z9GwaZu2mjB4AAdJ2IcAk6MbogYCjMjwSqYLDu3hdKOl9fGnc/enGeYTGCKRDJNK DEQ8YWa79MXO45zfo727zXejvbwaYHocmYbn2b5U6kaumG7Crcr5o9uNUoal5m9t Etiy5eqoF8CtwCmITuz/EjiDaf1pjDu8 -----END CERTIFICATE-----Generated at Sun Jul 20 06:23:15 2025 by rpki-client