$ rpki-client -vvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft File: 9yY4deggn7olR_uOOH2AP3WAvtY.mft (raw, json) Hash identifier: 075+Pdptfqy2Ud8HvQvKhbEKOlG5QIbwZyoSdzFkeqo= Subject key identifier: C9:0A:D7:E0:52:01:62:BC:7A:77:3C:A7:1F:4D:3B:1E:B5:56:09:EA Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 Certificate issuer: /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Certificate serial: 0667 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft Manifest number: 0660 Signing time: Thu 18 Sep 2025 22:52:08 +0000 Manifest this update: Thu 18 Sep 2025 22:52:07 +0000 Manifest next update: Thu 25 Sep 2025 22:52:07 +0000 Files and hashes: 1: 9yY4deggn7olR_uOOH2AP3WAvtY.crl (hash: GBPw2be6nIGf4IrkKer5DJc6mBLxjZSXCzcK0lwjtiM=) 2: B46F501C994D11EBB61C0C71C4F9AE02.roa (hash: j/GF9Fp/8A3iAGqlLey+nPmFjem1hKBzyG3C/3FfPBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1639 (0x667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126AFE, serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Validity Not Before: Sep 18 22:52:07 2025 GMT Not After : Sep 25 22:52:07 2025 GMT Subject: CN=68cc8d18-e20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:7b:a8:65:6b:b1:60:79:5d:d0:f7:71:7b: 49:4b:c9:88:2b:b7:33:19:b9:df:32:17:c2:93:b5: 95:2e:70:51:18:8a:56:96:9e:4e:67:c3:8d:bf:94: 05:21:39:b7:00:a5:da:41:4b:e9:a8:74:6a:ba:3d: 35:0f:a3:18:b7:90:c4:8e:9d:45:8e:9b:79:05:8b: 56:b1:9b:8a:04:d0:b0:36:d7:3a:b3:cb:e8:bb:5f: 94:ad:c0:7a:e5:a2:eb:10:eb:bb:bc:09:83:63:87: 25:b4:a1:1e:9a:11:a4:68:a5:58:56:ff:e0:6c:f3: 60:b5:d0:88:29:11:8a:2b:86:0d:e7:93:19:1d:10: 56:87:96:96:75:7c:a7:92:1b:55:34:f5:f5:62:d6: 6a:a4:6c:7d:b8:df:64:62:ec:4f:75:3a:e4:68:b1: d1:f9:df:b5:12:e5:c5:92:08:51:58:cf:76:33:b6: 21:0e:93:88:c9:d6:54:94:f2:2d:9d:1e:d0:8a:42: e4:5f:02:91:ae:45:04:1c:c4:d5:4d:56:14:16:e5: 35:fa:92:bd:f7:3e:63:4f:0a:47:d2:bf:d6:f8:ab: a9:3c:5a:e5:45:49:90:19:ee:28:02:f2:49:2b:be: 01:21:73:db:64:cd:85:14:6f:42:a0:e1:8a:79:d1: 4f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0A:D7:E0:52:01:62:BC:7A:77:3C:A7:1F:4D:3B:1E:B5:56:09:EA X509v3 Authority Key Identifier: keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b1:6a:67:01:da:86:fe:cf:b2:b8:6b:86:45:62:6d:b1:f4: ec:de:61:b1:06:2c:dc:f5:b7:da:cc:03:90:b8:ad:98:73:8a: d6:62:69:f9:4e:cd:29:28:4f:a8:1b:6b:f5:e1:1e:80:7c:0a: 28:5b:ec:b4:8c:8d:0a:f4:4a:ba:04:99:f7:0e:ff:11:65:f9: b2:0e:b8:ad:c5:d8:73:36:82:85:a2:72:db:c5:f3:92:ab:99: 83:e5:6f:c5:82:99:5d:fa:3a:d7:5d:f2:a6:6b:0c:ff:8c:69: 02:f8:89:9a:1e:e1:c4:eb:17:cd:c6:3e:de:e2:e7:55:0f:68: 10:07:d2:a4:a0:83:6d:a2:13:b7:4f:a8:63:a4:e2:4a:bb:0c: da:b5:64:48:ad:6b:68:1d:54:0d:96:c1:d5:cf:a6:77:06:00: 1f:5e:6b:a0:e9:37:7d:62:6e:89:44:d7:f9:89:de:7b:23:8c: 22:bf:f2:88:a5:1f:fd:bf:02:d3:9e:eb:af:1b:de:dd:cf:d4: c8:02:dc:1b:81:35:3f:39:2a:de:49:74:83:aa:3b:6a:bd:51: 02:42:10:b9:b5:1b:4e:5d:b4:7a:6c:1a:c5:d2:2c:b7:13:03: 2f:aa:d6:9d:0e:eb:1b:a6:40:a3:37:8c:13:d9:91:54:06:ba: 2b:ef:1f:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBRkUxMTAvBgNVBAUTKEY3MjYzODc1RTgyMDlGQkEyNTQ3RkI4RTM4N0Q4MDNG NzU4MEJFRDYwHhcNMjUwOTE4MjI1MjA3WhcNMjUwOTI1MjI1MjA3WjAYMRYwFAYD VQQDEw02OGNjOGQxOC1lMjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwL97qGVrsWB5XdD3cXtJS8mIK7czGbnfMhfCk7WVLnBRGIpWlp5OZ8ONv5QF ITm3AKXaQUvpqHRquj01D6MYt5DEjp1Fjpt5BYtWsZuKBNCwNtc6s8vou1+UrcB6 5aLrEOu7vAmDY4cltKEemhGkaKVYVv/gbPNgtdCIKRGKK4YN55MZHRBWh5aWdXyn khtVNPX1YtZqpGx9uN9kYuxPdTrkaLHR+d+1EuXFkghRWM92M7YhDpOIydZUlPIt nR7QikLkXwKRrkUEHMTVTVYUFuU1+pK99z5jTwpH0r/W+KupPFrlRUmQGe4oAvJJ K74BIXPbZM2FFG9CoOGKedFPFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkK1+BS AWK8enc8px9NOx61VgnqMB8GA1UdIwQYMBaAFPcmOHXoIJ+6JUf7jjh9gD91gL7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkFGRS81ODI3MjkzQTk5 NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243b2xSX3VPT0gyQVAzV0F2 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5WTRkZWdnbjdvbFJfdU9PSDJBUDNXQXZ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkFGRS81ODI3MjkzQTk5NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243 b2xSX3VPT0gyQVAzV0F2dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUsWpnAdqG/s+yuGuGRWJtsfTs3mGxBizc9bfazAOQuK2Yc4rWYmn5 Ts0pKE+oG2v14R6AfAooW+y0jI0K9Eq6BJn3Dv8RZfmyDritxdhzNoKFonLbxfOS q5mD5W/Fgpld+jrXXfKmawz/jGkC+ImaHuHE6xfNxj7e4udVD2gQB9KkoINtohO3 T6hjpOJKuwzatWRIrWtoHVQNlsHVz6Z3BgAfXmug6Td9Ym6JRNf5id57I4wiv/KI pR/9vwLTnuuvG97dz9TIAtwbgTU/OSreSXSDqjtqvVECQhC5tRtOXbR6bBrF0iy3 EwMvqtadDusbpkCjN4wT2ZFUBror7x8D -----END CERTIFICATE-----Generated at Fri Sep 19 01:17:31 2025 by rpki-client