$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft File: o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json) Hash identifier: W+u7AcgzaQtPOQCEQausdST8s/Ef6/6ocp4y5dvYUSs= Subject key identifier: 2A:11:C8:6F:24:E6:6B:2E:83:72:59:C7:62:28:AA:21:AF:38:76:AE Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 Certificate issuer: /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Certificate serial: 03D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft Manifest number: 03D3 Signing time: Thu 21 Aug 2025 00:44:15 +0000 Manifest this update: Thu 21 Aug 2025 00:44:14 +0000 Manifest next update: Thu 28 Aug 2025 00:44:14 +0000 Files and hashes: 1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: tKphTKr1hUGRVL2ZGhN19HjKllbthP5UYBCYqlVqJ+A=) 2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: 82bmKccqbBzTdNqrTXoGpBcJx8ypp4VeLlhE4Yo0df8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Validity Not Before: Aug 21 00:44:14 2025 GMT Not After : Aug 28 00:44:14 2025 GMT Subject: CN=68a66bde-6c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:3a:57:2e:85:41:4e:13:42:34:18:24:45: d4:bf:91:af:f2:1d:29:e3:c1:51:32:d3:3b:b9:c6: fb:81:b8:fd:44:26:cb:ab:d1:75:13:e8:5e:75:c6: af:4d:6c:ca:6c:9d:2f:4f:0d:7a:5d:e4:72:5a:9d: b5:cf:09:e6:3a:ad:f3:de:94:cc:f3:0d:8e:9f:1e: 06:cb:9a:15:bd:b7:fa:f0:b2:85:24:f6:36:4a:d4: 79:36:c6:6e:40:b9:15:2b:c7:66:41:1d:dc:0d:9b: 95:b3:13:cb:a7:ef:d4:ce:6f:71:6a:f6:d7:75:5b: 45:c2:dd:7c:ea:17:47:03:fe:39:74:44:c4:43:52: 97:67:d9:34:1f:de:97:4a:f7:59:c6:0b:3f:70:63: 93:09:8a:80:be:5b:55:26:fd:fa:4d:fb:67:aa:f3: 27:e4:94:dc:41:d7:4d:0a:83:e3:58:2d:c1:6d:84: 83:59:92:a9:cc:81:24:91:76:87:ff:43:a4:06:bb: 2e:93:0a:6a:06:8c:58:66:e5:bf:31:2e:6d:75:48: 43:f2:26:4b:66:71:d6:9a:4d:11:f4:21:ad:5b:f0: bd:71:83:21:de:a3:24:31:11:81:f5:e4:42:3d:4e: 34:44:e3:a7:04:41:78:6c:1f:dc:8d:24:08:71:b9: f5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:11:C8:6F:24:E6:6B:2E:83:72:59:C7:62:28:AA:21:AF:38:76:AE X509v3 Authority Key Identifier: keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:6a:eb:55:45:cf:e7:cc:2b:79:23:c4:75:b3:61:6e:46:7a: b4:7e:ed:55:98:cc:ea:e0:99:5a:97:f7:d5:cd:17:91:ba:88: 91:2b:bf:cd:e8:6d:a8:8b:b9:b5:28:97:ce:2c:68:41:f3:d9: 08:d0:a8:8a:96:4f:f3:2c:36:3c:b8:17:51:f3:14:6d:20:80: 1c:7d:61:50:4b:4a:c9:a6:0a:db:9e:0e:77:ea:81:34:6d:c5: 04:95:98:21:80:f2:f8:c3:6c:1e:3a:a8:d1:eb:2b:4f:85:33: 91:b1:47:29:1a:ad:8d:37:7c:de:2f:c0:c2:07:76:27:e8:b6: ca:bc:72:2f:28:1a:41:0f:32:d2:d6:ec:de:70:3c:e7:7e:03: f6:ea:39:b3:76:ad:d9:13:00:b8:d9:b8:2d:69:9c:b6:c1:0a: 02:1c:bd:53:c8:f7:54:26:b0:7f:e9:bc:c0:90:48:04:8f:d5: 20:1f:c6:82:e0:d3:70:61:cf:be:ef:2e:83:ef:4e:4a:5f:a4: ae:a0:63:30:50:e6:69:12:e4:72:ed:61:48:dc:3e:30:4a:80: 8d:f7:e7:ab:59:56:5d:2f:37:38:59:1a:e6:00:c0:d5:b1:88: b9:e2:2c:19:ac:19:b2:7b:31:ff:7f:a9:e5:b4:c8:ee:db:fa: a9:88:f2:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0QTExMTAvBgNVBAUTKEEzRDczQTRFOUYxMDQzREUzQUJGNEY1RUQxMDg2OEFG NkQzMzVCRjQwHhcNMjUwODIxMDA0NDE0WhcNMjUwODI4MDA0NDE0WjAYMRYwFAYD VQQDEw02OGE2NmJkZS02YzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlk6Vy6FQU4TQjQYJEXUv5Gv8h0p48FRMtM7ucb7gbj9RCbLq9F1E+hedcav TWzKbJ0vTw16XeRyWp21zwnmOq3z3pTM8w2Onx4Gy5oVvbf68LKFJPY2StR5NsZu QLkVK8dmQR3cDZuVsxPLp+/Uzm9xavbXdVtFwt186hdHA/45dETEQ1KXZ9k0H96X SvdZxgs/cGOTCYqAvltVJv36TftnqvMn5JTcQddNCoPjWC3BbYSDWZKpzIEkkXaH /0OkBrsukwpqBoxYZuW/MS5tdUhD8iZLZnHWmk0R9CGtW/C9cYMh3qMkMRGB9eRC PU40ROOnBEF4bB/cjSQIcbn1LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoRyG8k 5msug3JZx2IoqiGvOHauMB8GA1UdIwQYMBaAFKPXOk6fEEPeOr9PXtEIaK9tM1v0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRBMS82OENFQzA5NDk1 NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5NDZ2MDllMFFob3IyMHpX X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285YzZUcDhRUTk0NnYwOWUwUWhvcjIweldfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTRBMS82OENFQzA5NDk1NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5 NDZ2MDllMFFob3IyMHpXX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHautVRc/nzCt5I8R1s2FuRnq0fu1VmMzq4Jlal/fVzReRuoiRK7/N 6G2oi7m1KJfOLGhB89kI0KiKlk/zLDY8uBdR8xRtIIAcfWFQS0rJpgrbng536oE0 bcUElZghgPL4w2weOqjR6ytPhTORsUcpGq2NN3zeL8DCB3Yn6LbKvHIvKBpBDzLS 1uzecDznfgP26jmzdq3ZEwC42bgtaZy2wQoCHL1TyPdUJrB/6bzAkEgEj9UgH8aC 4NNwYc++7y6D705KX6SuoGMwUOZpEuRy7WFI3D4wSoCN9+erWVZdLzc4WRrmAMDV sYi54iwZrBmyezH/f6nltMju2/qpiPIT -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:12 2025 by rpki-client