$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: It2Uq8rqrQfEsHtfPggQzuLFUVO1MLSO0sXX906BX0Q= Subject key identifier: 77:97:7A:B3:0D:07:5C:F5:81:71:35:DA:2B:37:43:A1:C8:BE:9E:7E Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 3520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 34D3 Signing time: Fri 18 Jul 2025 14:34:26 +0000 Manifest this update: Fri 18 Jul 2025 14:34:26 +0000 Manifest next update: Fri 25 Jul 2025 14:34:26 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: Iej3Yz9VIWtvUuv3QpbnAxvOw8DNzYdRRaB/6Wv/DKc=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: UAdWkh5fwATHMmIyVhd7P9Q5bEUDKKzkNfodKXfZ52I=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: NQGk9VrpAXTZXq5SUwR5lBrzM7K1d06qPjVq8qLZu/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13600 (0x3520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Jul 18 14:34:26 2025 GMT Not After : Jul 25 14:34:26 2025 GMT Subject: CN=687a5b72-2b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7d:7b:7f:15:75:c2:3e:0d:3e:a7:27:ae:10: 59:74:37:62:93:eb:90:8e:16:59:fd:30:4c:33:5c: 6f:ae:65:a8:a7:0b:d0:d0:32:dc:fd:7a:07:27:7a: 6e:d6:c0:4e:92:6c:eb:12:99:65:9c:00:54:e0:57: dc:a9:ba:8c:3f:39:a1:be:b3:c3:17:7d:34:42:c5: 74:8c:3f:6e:2f:0d:5f:ba:d4:48:fc:6e:9d:46:ef: 6d:e2:2f:80:0e:71:96:31:88:ff:2e:f6:82:1b:fb: f4:99:6e:3f:5b:98:0b:04:40:7d:7c:07:e9:00:f3: 4f:96:20:51:ce:28:7b:4a:b5:92:81:c8:c1:de:44: 0b:1a:f9:2f:b7:a8:b6:a8:6b:39:54:41:c7:9b:e0: d5:65:17:11:5d:f9:09:34:6b:dd:70:f6:86:57:9e: 5c:30:84:77:9d:f0:a7:75:e3:01:5b:6d:07:4a:e3: 62:ec:fb:e5:79:69:f3:69:e4:32:fa:1b:1c:c1:a8: d0:f6:81:07:ed:03:7e:49:3e:77:78:92:08:b9:39: 19:a9:b1:73:4e:b8:e5:85:c9:82:44:65:ae:b8:65: 0f:54:c1:8f:2e:d9:08:b4:33:3c:bc:8c:17:ee:b8: ac:e5:78:ad:ca:92:f3:e3:17:53:b9:c4:89:e3:fe: bd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:97:7A:B3:0D:07:5C:F5:81:71:35:DA:2B:37:43:A1:C8:BE:9E:7E X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ee:51:d9:a6:22:5c:83:37:e9:a9:4e:62:a6:a6:ee:9b:86: ea:5c:8f:41:ee:89:00:65:25:9d:e2:0b:e5:a5:25:a7:c3:3d: d5:79:b4:12:a0:1b:9d:9a:9f:11:cf:58:3f:4d:c0:1b:d5:17: f5:cb:39:4e:1e:84:d8:56:02:b1:6a:36:89:f1:ca:a4:37:e7: 13:16:9d:ae:62:73:01:56:b4:b1:59:93:bf:fd:10:83:c8:b6: f9:f0:1c:7a:14:b0:d5:07:22:7f:b9:77:92:62:0a:de:b4:3d: 61:f2:85:ea:e3:47:c0:75:db:55:f7:2a:d5:ba:f1:ce:e0:e9: 38:52:32:69:0b:c8:3b:3e:52:00:ef:85:83:75:35:5a:c6:8a: 09:89:4a:a1:90:84:6f:26:8f:df:9a:11:68:8a:62:65:01:47: 75:e2:d9:7e:e4:95:3f:bd:0e:9c:86:8c:56:a4:1d:cd:1b:47: 96:36:87:f7:e8:42:1b:83:68:f2:26:32:a0:1b:6c:04:5c:c8: 66:51:48:b1:6f:60:70:f5:9c:da:9c:fb:93:27:51:a9:6f:ea: 98:ae:9c:6d:de:35:f7:f0:cc:32:a9:2d:e8:33:dd:73:6d:ed: 92:49:34:71:85:d4:d2:d7:28:7e:1d:bf:4f:71:90:20:c5:4b: 53:73:d0:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjUwNzE4MTQzNDI2WhcNMjUwNzI1MTQzNDI2WjAYMRYwFAYD VQQDEw02ODdhNWI3Mi0yYjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArX17fxV1wj4NPqcnrhBZdDdik+uQjhZZ/TBMM1xvrmWopwvQ0DLc/XoHJ3pu 1sBOkmzrEpllnABU4FfcqbqMPzmhvrPDF300QsV0jD9uLw1futRI/G6dRu9t4i+A DnGWMYj/LvaCG/v0mW4/W5gLBEB9fAfpAPNPliBRzih7SrWSgcjB3kQLGvkvt6i2 qGs5VEHHm+DVZRcRXfkJNGvdcPaGV55cMIR3nfCndeMBW20HSuNi7PvleWnzaeQy +hscwajQ9oEH7QN+ST53eJIIuTkZqbFzTrjlhcmCRGWuuGUPVMGPLtkItDM8vIwX 7ris5XitypLz4xdTucSJ4/69dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeXerMN B1z1gXE12is3Q6HIvp5+MB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA07lHZpiJcgzfpqU5ipqbum4bqXI9B7okAZSWd4gvlpSWnwz3VebQS oBudmp8Rz1g/TcAb1Rf1yzlOHoTYVgKxajaJ8cqkN+cTFp2uYnMBVrSxWZO//RCD yLb58Bx6FLDVByJ/uXeSYgretD1h8oXq40fAddtV9yrVuvHO4Ok4UjJpC8g7PlIA 74WDdTVaxooJiUqhkIRvJo/fmhFoimJlAUd14tl+5JU/vQ6choxWpB3NG0eWNof3 6EIbg2jyJjKgG2wEXMhmUUixb2Bw9ZzanPuTJ1Gpb+qYrpxt3jX38MwyqS3oM91z be2SSTRxhdTS1yh+Hb9PcZAgxUtTc9CR -----END CERTIFICATE-----Generated at Sun Jul 20 07:38:32 2025 by rpki-client