$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json) Hash identifier: vTX9NSHh0UU+2z11/MTJFor/R8Y15M3cwwXzJYCu0o4= Subject key identifier: 3C:16:30:68:8E:A4:77:F0:B9:D2:5A:E8:C4:59:32:39:00:A2:30:77 Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft Manifest number: 0579 Signing time: Thu 18 Sep 2025 23:35:23 +0000 Manifest this update: Thu 18 Sep 2025 23:35:23 +0000 Manifest next update: Thu 25 Sep 2025 23:35:23 +0000 Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: tETVlu9b5ykS7NWIxsfj9249SE6/ibs9zhFeB44WcLk=) 2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: LSj0rBxO9Z29e6JUXgqXeUATalGSgm5CqWXMd5B6WOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164655, serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Validity Not Before: Sep 18 23:35:23 2025 GMT Not After : Sep 25 23:35:23 2025 GMT Subject: CN=68cc973b-8fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:ce:3b:9f:88:c9:97:77:da:86:36:52:e2: e3:1b:7b:f8:7e:1f:f4:55:47:05:ba:46:3c:23:52: 9e:bb:06:90:c6:ac:3e:81:b3:81:51:97:6f:f5:e7: 79:ea:ee:1e:7b:ef:13:85:7a:39:b1:4b:71:40:04: 4c:56:8a:50:58:67:e0:56:6e:bf:0d:d9:8e:30:0f: 86:9f:c0:df:a0:a8:b5:54:51:69:53:c9:03:6e:fe: 8f:63:a4:e1:95:46:dd:ea:7b:2c:09:88:81:84:a2: ed:12:73:ba:d3:69:63:19:d6:0d:b8:5b:07:a0:13: 35:55:bd:f5:93:72:70:2a:9e:05:66:33:5d:ae:a3: d7:eb:fe:6b:3a:be:69:f5:52:c2:62:01:9d:91:dd: 22:3e:37:48:39:05:da:4a:4c:d8:b0:90:c8:90:17: 1c:64:20:79:55:1f:fe:c8:ff:83:0a:28:19:a1:4b: 1f:01:79:dc:d2:6a:1e:f7:80:2f:72:b7:d4:9c:60: b6:54:ee:32:18:c5:66:81:47:32:dc:e0:11:44:25: 4f:4d:ac:cb:06:65:78:71:64:3b:1a:a2:d1:79:83: 34:ea:d3:c6:e2:53:3e:0e:00:42:ad:5a:6b:1c:76: 61:21:9e:3e:50:fc:40:de:2d:a6:1c:ea:d7:4d:d0: 3e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:16:30:68:8E:A4:77:F0:B9:D2:5A:E8:C4:59:32:39:00:A2:30:77 X509v3 Authority Key Identifier: keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7c:b7:e1:0d:3c:19:92:ed:81:10:83:ea:b4:20:a8:7e:76: 97:b4:ad:54:64:3c:0d:c4:b1:14:06:ee:9e:e9:d1:73:ab:c9: d7:40:b5:f3:86:db:c8:06:ed:19:99:ed:cc:90:e3:7a:95:a0: 23:9e:3e:1d:0b:61:81:3c:4b:44:8f:be:85:1e:54:83:6e:1a: 93:b3:3b:79:f8:c0:ae:a0:63:94:70:a0:2c:cf:9d:35:91:e5: 1c:dc:e7:75:12:8c:f8:89:10:da:e0:80:7f:a7:b2:93:22:c9: d3:2d:29:32:d4:6a:00:ef:ec:94:03:be:6d:3d:e1:7c:05:f7: 39:bb:4c:b9:18:5e:56:99:f8:f7:1b:25:60:33:02:d8:e0:bf: 0d:34:b4:8a:64:8b:42:e7:51:87:54:7f:ca:70:a6:aa:d1:bf: 3c:2f:b2:db:6f:83:ce:be:4b:72:08:23:a2:81:56:7d:6e:58: f1:89:17:ee:6d:4c:46:39:42:f7:e0:41:5a:92:86:fe:c4:8e: 96:d1:ea:04:92:ba:8e:7a:5f:9e:6b:6a:26:1d:64:1b:70:e3: e7:bc:dc:7b:94:ce:36:fa:7b:cb:ca:88:a1:9b:4f:ec:97:f3: ab:7d:56:1d:45:6b:89:0d:97:8f:3f:92:2f:f9:90:b8:79:9b: 8d:8b:38:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NTUxMTAvBgNVBAUTKDZCRDE0NUVDRTQyQUU0RkQ4MkFENjdDRkQxQTQwNTlB OUVBQjNBNkQwHhcNMjUwOTE4MjMzNTIzWhcNMjUwOTI1MjMzNTIzWjAYMRYwFAYD VQQDEw02OGNjOTczYi04ZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXXOO5+IyZd32oY2UuLjG3v4fh/0VUcFukY8I1KeuwaQxqw+gbOBUZdv9ed5 6u4ee+8ThXo5sUtxQARMVopQWGfgVm6/DdmOMA+Gn8DfoKi1VFFpU8kDbv6PY6Th lUbd6nssCYiBhKLtEnO602ljGdYNuFsHoBM1Vb31k3JwKp4FZjNdrqPX6/5rOr5p 9VLCYgGdkd0iPjdIOQXaSkzYsJDIkBccZCB5VR/+yP+DCigZoUsfAXnc0moe94Av crfUnGC2VO4yGMVmgUcy3OARRCVPTazLBmV4cWQ7GqLReYM06tPG4lM+DgBCrVpr HHZhIZ4+UPxA3i2mHOrXTdA+iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwWMGiO pHfwudJa6MRZMjkAojB3MB8GA1UdIwQYMBaAFGvRRezkKuT9gq1nz9GkBZqeqzpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY1NS9EOEJCODQ5QUYz REUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQMkNyV2ZQMGFRRm1wNnJP bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5RkY3T1FxNVAyQ3JXZlAwYVFGbXA2ck9tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY1NS9EOEJCODQ5QUYzREUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQ MkNyV2ZQMGFRRm1wNnJPbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAafLfhDTwZku2BEIPqtCCofnaXtK1UZDwNxLEUBu6e6dFzq8nXQLXz htvIBu0Zme3MkON6laAjnj4dC2GBPEtEj76FHlSDbhqTszt5+MCuoGOUcKAsz501 keUc3Od1Eoz4iRDa4IB/p7KTIsnTLSky1GoA7+yUA75tPeF8Bfc5u0y5GF5Wmfj3 GyVgMwLY4L8NNLSKZItC51GHVH/KcKaq0b88L7Lbb4POvktyCCOigVZ9bljxiRfu bUxGOUL34EFakob+xI6W0eoEkrqOel+ea2omHWQbcOPnvNx7lM42+nvLyoihm0/s l/OrfVYdRWuJDZePP5Iv+ZC4eZuNiziN -----END CERTIFICATE-----Generated at Fri Sep 19 15:11:43 2025 by rpki-client