$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: lRboHmABh+ULVWVmg1y98tX7zQr053x2yUGypAOzjaA= Subject key identifier: C9:BE:C1:D9:F2:39:59:34:21:7A:91:D6:C6:4D:B8:C1:B3:89:09:0E Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 09FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 09E1 Signing time: Sat 06 Sep 2025 20:10:30 +0000 Manifest this update: Sat 06 Sep 2025 20:10:29 +0000 Manifest next update: Sat 13 Sep 2025 20:10:29 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: FJdTGk7FLtlrpBlx70tISwSGZu3t7kppNsNsutgud6A=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: 5Gk4b25F0uq7efelkFmxT/VKGia42LkwXqnCVKORjVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2557 (0x9fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Sep 6 20:10:29 2025 GMT Not After : Sep 13 20:10:29 2025 GMT Subject: CN=68bc9535-c615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:b7:44:24:c5:a0:54:db:82:ae:53:f1:6f: c6:0c:83:9f:7a:12:ca:bd:39:01:23:a3:72:89:a8: e4:ae:81:ca:ff:49:0f:05:43:b0:d3:bb:f2:51:f8: c6:20:16:8a:1a:67:90:e0:85:ab:0b:4a:27:cc:2f: 84:aa:1b:c1:8a:74:23:a9:3a:19:72:f1:f9:a9:0b: 0f:27:cb:4f:a2:dd:dd:dc:ec:15:5a:9c:a0:7c:7c: a5:77:f7:52:83:cd:4d:40:bf:c8:aa:bf:3f:fd:a0: 85:49:d2:72:17:e5:30:a8:33:9b:9a:e2:fb:de:99: ff:68:71:b3:21:a7:ad:3e:57:25:ad:65:39:3a:11: 56:0e:0e:e3:9b:a8:3d:b2:87:00:43:db:94:fd:29: f8:8c:8b:17:ce:02:b8:2a:cc:f3:16:a8:a1:80:65: 99:85:bd:63:c2:45:97:de:99:68:49:cf:3a:6c:1a: 65:55:c5:0d:4e:c7:9e:03:67:a6:17:a5:36:39:57: a8:84:63:7a:6d:46:af:62:7a:01:57:0e:8e:2f:c8: fa:95:06:f8:90:ba:2c:a6:00:b9:9f:df:6c:12:c9: 2d:00:40:e1:c1:13:d2:5c:19:d0:b0:d8:db:bd:59: b3:e0:7e:c2:e1:c4:b4:7d:73:14:53:a5:eb:2e:b8: 56:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BE:C1:D9:F2:39:59:34:21:7A:91:D6:C6:4D:B8:C1:B3:89:09:0E X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:52:bf:52:b2:a7:fe:3a:5c:89:a8:13:2f:cb:c9:68:c5:a1: 30:4b:8c:60:de:3c:af:e9:63:52:d5:75:14:8d:c5:bc:2e:ca: f7:04:58:29:c6:68:f9:f7:13:f6:c9:f3:c6:58:ad:fc:49:26: 0b:23:73:cd:45:c0:bd:9f:b3:2e:8a:8b:97:4e:12:58:77:1a: f9:df:bd:ff:33:02:85:45:e3:c5:63:bc:7f:d8:bb:aa:95:32: 02:89:97:fd:73:c6:a0:c9:76:1e:0c:65:71:e8:77:19:c2:5d: 89:02:1f:23:60:47:a1:10:9a:65:f8:14:9f:58:e5:d1:72:41: c1:b7:93:8f:65:d5:26:73:cb:96:fc:0e:d1:1f:17:a3:48:7d: e8:db:c2:95:b8:ce:95:59:ef:21:5f:72:67:94:43:89:6f:a4: 21:f0:ff:ce:1d:e1:44:37:9d:c4:63:a0:69:99:2c:71:dc:84: c3:ae:ab:35:4e:4f:6d:b8:db:06:e7:31:3f:40:05:7b:70:93: 3a:db:c6:a5:28:eb:7a:87:45:22:99:a4:99:f1:c4:78:8c:9f: ef:14:9d:85:46:72:03:7d:31:35:c9:f6:ee:e6:81:00:ff:76: 12:26:7b:54:b1:62:83:1b:33:e4:66:88:00:e9:a7:7e:2b:2c: cd:c4:c6:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjUwOTA2MjAxMDI5WhcNMjUwOTEzMjAxMDI5WjAYMRYwFAYD VQQDEw02OGJjOTUzNS1jNjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3a3RCTFoFTbgq5T8W/GDIOfehLKvTkBI6NyiajkroHK/0kPBUOw07vyUfjG IBaKGmeQ4IWrC0onzC+EqhvBinQjqToZcvH5qQsPJ8tPot3d3OwVWpygfHyld/dS g81NQL/Iqr8//aCFSdJyF+UwqDObmuL73pn/aHGzIaetPlclrWU5OhFWDg7jm6g9 socAQ9uU/Sn4jIsXzgK4KszzFqihgGWZhb1jwkWX3ploSc86bBplVcUNTseeA2em F6U2OVeohGN6bUavYnoBVw6OL8j6lQb4kLospgC5n99sEsktAEDhwRPSXBnQsNjb vVmz4H7C4cS0fXMUU6XrLrhWowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMm+wdny OVk0IXqR1sZNuMGziQkOMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeUr9Ssqf+OlyJqBMvy8loxaEwS4xg3jyv6WNS1XUUjcW8Lsr3BFgp xmj59xP2yfPGWK38SSYLI3PNRcC9n7MuiouXThJYdxr5373/MwKFRePFY7x/2Luq lTICiZf9c8agyXYeDGVx6HcZwl2JAh8jYEehEJpl+BSfWOXRckHBt5OPZdUmc8uW /A7RHxejSH3o28KVuM6VWe8hX3JnlEOJb6Qh8P/OHeFEN53EY6BpmSxx3ITDrqs1 Tk9tuNsG5zE/QAV7cJM628alKOt6h0UimaSZ8cR4jJ/vFJ2FRnIDfTE1yfbu5oEA /3YSJntUsWKDGzPkZogA6ad+KyzNxMYq -----END CERTIFICATE-----Generated at Mon Sep 8 04:08:55 2025 by rpki-client