$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: sLMMmcqIDb7+Xa+0ykjA68DcI7hz5Efw86c945hoaSk= Subject key identifier: 2E:AE:2F:37:8D:1A:87:15:95:FD:BD:A7:34:B3:19:12:81:1A:72:B4 Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: A9 Signing time: Sat 19 Jul 2025 06:23:49 +0000 Manifest this update: Sat 19 Jul 2025 06:23:49 +0000 Manifest next update: Sat 26 Jul 2025 06:23:48 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: rGornFmDJw+Ap02ZSxSD2WtlObJ358302OICkF04ISQ=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: 4PdtbIsL2ZotyQ7lOujn962oNOjC34OWUPtAk2nb5/I=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: 8qwHnAzkWpQMSqbxW4gRTYW6uWniUVjWaHfJJJJlxJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: Jul 19 06:23:49 2025 GMT Not After : Jul 26 06:23:48 2025 GMT Subject: CN=687b39f5-b847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:78:19:ca:d7:f1:64:91:b6:a6:3b:11:b9: e7:02:c4:d7:ec:7a:71:13:dc:91:78:59:85:04:fd: ef:d7:5c:9c:61:05:ff:40:73:86:48:42:8b:39:f8: b5:eb:0c:2c:84:fb:16:4d:95:16:00:07:33:82:d1: eb:f4:42:7a:65:89:14:37:32:41:23:89:0b:5c:25: dd:ac:13:96:b2:15:ed:27:fe:70:ca:31:5b:77:db: 2b:42:07:49:b2:aa:4a:b4:86:9a:14:bb:36:7a:5d: 82:7c:71:12:fc:59:be:e5:2c:01:39:b5:8b:9b:35: df:3b:77:46:6c:22:0a:7f:b4:45:00:93:15:e1:13: 0e:5b:88:da:f6:f7:b6:b9:63:c8:4d:21:3e:4e:e6: b5:df:a2:95:c3:8c:f8:b9:2e:c1:8f:39:d4:7f:38: f6:29:0e:f5:a0:59:e4:ae:82:77:80:89:6b:cb:7e: 40:e6:ef:66:01:b4:36:f4:95:00:f8:8c:eb:83:7f: a0:74:6a:69:40:72:a4:37:8b:51:3c:b1:6e:28:a3: 62:d3:20:cf:98:02:47:d1:46:64:46:f2:57:b4:2c: eb:9b:3c:c4:3b:fb:ba:e9:79:03:17:e1:fd:f5:6a: 22:6f:f0:1b:b1:99:a5:a6:f5:8b:6f:ee:16:e8:29: 24:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AE:2F:37:8D:1A:87:15:95:FD:BD:A7:34:B3:19:12:81:1A:72:B4 X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:ee:56:41:5d:d8:1e:3a:ba:da:00:14:a8:49:97:dd:39:78: 3b:90:50:6e:b3:5b:e0:d2:58:73:3e:af:ac:ed:f6:48:ae:90: 6a:c9:b0:dd:48:f4:70:fb:54:66:2e:f0:e4:1b:17:15:12:be: 47:97:c4:f6:2c:2b:03:6d:05:5a:0b:58:c3:2d:1e:b4:24:ae: 5c:95:8e:af:ba:28:ed:2a:12:ed:4f:01:26:71:b8:13:21:09: ea:46:c6:33:83:86:49:52:14:fd:e6:2f:af:7a:ca:17:2b:31: 17:39:f8:7c:d6:a0:f2:a4:a1:ee:dd:0b:a0:0b:d4:17:cc:e9: 90:fa:92:91:e3:4a:00:2a:79:66:05:93:cb:1c:3e:3e:cb:26: b1:b9:37:20:b1:64:e4:a1:22:9f:df:da:95:6e:f0:43:7d:49: c2:8e:c5:9b:4f:fa:d7:0e:8b:f7:dd:e4:62:4a:2d:24:36:38: 02:86:43:89:57:3a:c9:4c:14:86:4e:31:bc:b5:dc:5d:e7:2c: a9:cf:2b:49:4b:82:19:cb:b9:26:02:95:d9:7d:8f:36:08:4d: cb:a8:27:5d:4a:52:0a:03:b5:52:93:4d:98:02:2d:79:00:f8: e0:f1:bd:7d:08:ee:74:36:3d:0a:6f:ea:f6:28:ae:3b:33:dc: 4d:7c:a4:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5 MzZDMTYxNjkwHhcNMjUwNzE5MDYyMzQ5WhcNMjUwNzI2MDYyMzQ4WjAYMRYwFAYD VQQDEw02ODdiMzlmNS1iODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPN4GcrX8WSRtqY7EbnnAsTX7HpxE9yReFmFBP3v11ycYQX/QHOGSEKLOfi1 6wwshPsWTZUWAAczgtHr9EJ6ZYkUNzJBI4kLXCXdrBOWshXtJ/5wyjFbd9srQgdJ sqpKtIaaFLs2el2CfHES/Fm+5SwBObWLmzXfO3dGbCIKf7RFAJMV4RMOW4ja9ve2 uWPITSE+Tua136KVw4z4uS7BjznUfzj2KQ71oFnkroJ3gIlry35A5u9mAbQ29JUA +Izrg3+gdGppQHKkN4tRPLFuKKNi0yDPmAJH0UZkRvJXtCzrmzzEO/u66XkDF+H9 9Woib/AbsZmlpvWLb+4W6CkkSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6uLzeN GocVlf29pzSzGRKBGnK0MB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1 QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ dnpYazBHVzhSNHFUYkJZV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj7lZBXdgeOrraABSoSZfdOXg7kFBus1vg0lhzPq+s7fZIrpBqybDd SPRw+1RmLvDkGxcVEr5Hl8T2LCsDbQVaC1jDLR60JK5clY6vuijtKhLtTwEmcbgT IQnqRsYzg4ZJUhT95i+vesoXKzEXOfh81qDypKHu3QugC9QXzOmQ+pKR40oAKnlm BZPLHD4+yyaxuTcgsWTkoSKf39qVbvBDfUnCjsWbT/rXDov33eRiSi0kNjgChkOJ VzrJTBSGTjG8tdxd5yypzytJS4IZy7kmApXZfY82CE3LqCddSlIKA7VSk02YAi15 APjg8b19CO50Nj0Kb+r2KK47M9xNfKR/ -----END CERTIFICATE-----Generated at Sun Jul 20 07:59:17 2025 by rpki-client