$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft File: G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json) Hash identifier: QKRJsTR1xm48Ay8nwhqEgm5AkEOS4v22VS77CrJrnxc= Subject key identifier: 7D:BA:41:82:D2:DD:8E:E0:24:F5:74:37:0B:DC:AC:F0:91:E0:21:F8 Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87 Certificate issuer: /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft Manifest number: 08 Signing time: Sat 19 Jul 2025 08:25:31 +0000 Manifest this update: Sat 19 Jul 2025 08:25:31 +0000 Manifest next update: Sat 26 Jul 2025 08:25:31 +0000 Files and hashes: 1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: wKqeLO+8GbRLwru5H6llSHhXR5zG32iNsJM6Kq0BnnY=) 2: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: BfA3s4/uFwS/+pxJ7ydc7p+vBZQ3SLc68WxBr74xpL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487 Validity Not Before: Jul 19 08:25:31 2025 GMT Not After : Jul 26 08:25:31 2025 GMT Subject: CN=687b567b-dbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d3:e1:b9:29:9c:f6:32:97:a1:a5:a5:22:06: 64:9a:f0:b6:86:1d:ea:34:d0:b4:c3:e2:94:16:53: 85:20:e7:11:a4:14:ad:bd:77:4a:05:a5:a3:f0:e5: e2:f4:cb:af:85:d6:e7:9d:cd:55:84:41:d9:31:7c: 40:bd:34:3d:94:c6:5f:69:33:d6:24:2e:93:c0:ad: 6b:94:03:1e:84:62:34:5f:dc:d5:3b:3d:f9:62:be: 9e:48:45:64:07:ba:66:98:cf:ee:87:85:28:d2:18: 9e:0d:f7:6d:9a:25:78:3b:fd:a9:8e:86:bc:26:38: bd:78:32:9b:e9:ad:5b:bb:99:cf:83:ea:53:81:43: 58:5c:ed:e4:15:6e:2a:49:3a:51:17:9b:49:ee:dd: 8a:89:d6:be:52:76:be:75:f3:2b:28:86:22:44:35: 38:7e:e2:57:08:35:9a:c3:5b:07:e7:d7:b3:f3:d5: 2b:f3:56:41:02:aa:d8:0f:74:e5:b7:e4:c0:f3:13: f6:de:a7:4e:25:0a:ab:89:86:88:40:3c:24:fa:e5: ed:01:41:be:be:de:93:22:db:7d:7c:2c:bf:11:0c: 18:a5:7a:eb:ab:66:d7:40:fe:9c:21:62:27:dc:6b: 25:70:62:0b:94:af:af:f1:f1:5b:6f:4b:e1:a8:6d: 89:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BA:41:82:D2:DD:8E:E0:24:F5:74:37:0B:DC:AC:F0:91:E0:21:F8 X509v3 Authority Key Identifier: keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:78:5b:5f:b0:d0:4f:9c:3c:79:13:13:03:b6:02:38:65:dc: fa:bf:04:3c:56:b2:43:8f:78:9b:00:77:3b:22:05:1f:91:d3: eb:1b:b6:83:e7:86:54:13:c4:42:af:3f:cf:c2:98:6a:ba:db: ba:e9:05:10:c5:76:80:5c:1f:26:80:0a:dd:43:4f:bf:dd:25: 0e:29:78:3a:d2:ad:17:5b:80:67:6f:1a:bd:ff:6f:98:da:cc: d8:a6:b7:94:8b:d9:a7:2b:c9:ed:46:cb:4d:55:a4:78:90:b2: bf:7c:e0:f2:f3:8d:b6:be:57:59:a3:95:83:ab:99:77:a3:b3: dc:cd:8a:84:30:15:9d:6c:69:45:34:d9:36:54:53:a7:9a:32: a3:ca:29:d7:4d:41:6d:2b:13:99:19:08:72:b4:68:53:4e:e8: 96:4b:6f:40:f4:59:30:a8:8d:c0:4b:39:30:8b:d0:d1:b2:ad: c4:cb:d3:7d:07:c7:c8:1e:c6:3a:b3:1e:c8:52:bc:29:75:fb: 88:10:d6:14:3e:41:96:6e:2a:29:13:5b:f3:fb:2c:dd:53:34: 70:bd:37:59:72:53:4c:6a:ba:91:c0:4f:d6:f1:98:7d:aa:7e: fe:0a:7c:6a:1f:55:39:32:28:72:8e:a0:6a:57:5a:c0:fe:6e: fe:b3:0e:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REY1NjExMC8GA1UEBRMoMUJENjMzNkI5Nzg2OEMyRjU0RUIzRDk0NzhEMzlFNDE3 MzFENDQ4NzAeFw0yNTA3MTkwODI1MzFaFw0yNTA3MjYwODI1MzFaMBgxFjAUBgNV BAMTDTY4N2I1NjdiLWRiYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB0+G5KZz2MpehpaUiBmSa8LaGHeo00LTD4pQWU4Ug5xGkFK29d0oFpaPw5eL0 y6+F1uedzVWEQdkxfEC9ND2Uxl9pM9YkLpPArWuUAx6EYjRf3NU7Pflivp5IRWQH umaYz+6HhSjSGJ4N922aJXg7/amOhrwmOL14MpvprVu7mc+D6lOBQ1hc7eQVbipJ OlEXm0nu3YqJ1r5Sdr518ysohiJENTh+4lcINZrDWwfn17Pz1SvzVkECqtgPdOW3 5MDzE/bep04lCquJhohAPCT65e0BQb6+3pMi2318LL8RDBileuurZtdA/pwhYifc ayVwYguUr6/x8VtvS+GobYn3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfbpBgtLd juAk9XQ3C9ys8JHgIfgwHwYDVR0jBBgwFoAUG9Yza5eGjC9U6z2UeNOeQXMdRIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERjU2LzZENUU2QTU0NUJE MjExRjBCNzM3RDQ1QUM0RjlBRTAyL0c5WXphNWVHakM5VTZ6MlVlTk9lUVhNZFJJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRzlZemE1ZUdqQzlVNnoyVWVOT2VRWE1kUkljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RjU2LzZENUU2QTU0NUJEMjExRjBCNzM3RDQ1QUM0RjlBRTAyL0c5WXphNWVHakM5 VTZ6MlVlTk9lUVhNZFJJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKt4W1+w0E+cPHkTEwO2Ajhl3Pq/BDxWskOPeJsAdzsiBR+R0+sbtoPn hlQTxEKvP8/CmGq627rpBRDFdoBcHyaACt1DT7/dJQ4peDrSrRdbgGdvGr3/b5ja zNimt5SL2acrye1Gy01VpHiQsr984PLzjba+V1mjlYOrmXejs9zNioQwFZ1saUU0 2TZUU6eaMqPKKddNQW0rE5kZCHK0aFNO6JZLb0D0WTCojcBLOTCL0NGyrcTL030H x8gexjqzHshSvCl1+4gQ1hQ+QZZuKikTW/P7LN1TNHC9N1lyU0xqupHAT9bxmH2q fv4KfGofVTkyKHKOoGpXWsD+bv6zDgc= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:48 2025 by rpki-client