$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft File: T9EeLMzVFBlTCsBKFCWPEahXfq0.mft (raw, json) Hash identifier: oKf6fnu86S+99hBuxd+FEWVLIDcq1UwlCZYVdrvoz/8= Subject key identifier: A5:48:76:15:9D:7A:B3:AD:90:64:0A:06:D3:1F:EA:FC:82:03:CA:50 Authority key identifier: 4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD Certificate issuer: /CN=A9172B65/serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft Manifest number: CC Signing time: Thu 21 Aug 2025 05:53:53 +0000 Manifest this update: Thu 21 Aug 2025 05:53:53 +0000 Manifest next update: Thu 28 Aug 2025 05:53:53 +0000 Files and hashes: 1: T9EeLMzVFBlTCsBKFCWPEahXfq0.crl (hash: 3vtYrAL7/bhXCG9ZenNOF+YJ4skyd0/TELcr4zvLgQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Validity Not Before: Aug 21 05:53:53 2025 GMT Not After : Aug 28 05:53:53 2025 GMT Subject: CN=68a6b471-8eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1d:20:39:da:eb:08:58:e0:f0:45:5d:0a:64: ef:0a:3d:72:8b:e0:b3:e4:d8:e3:9f:f0:60:b8:11: 78:74:f3:54:91:df:19:33:92:cf:bd:2d:e2:33:fc: 03:08:db:82:de:5b:9c:7d:d5:13:a5:d2:d2:4b:bb: 30:b9:49:83:ef:9c:46:fc:6d:97:14:cf:c2:92:e5: ac:7e:b2:59:e7:bc:97:b7:d4:54:0d:f1:7e:c0:44: 1e:50:b9:85:b1:e3:27:1c:d8:73:c6:3c:f4:e1:30: 9a:13:1e:ee:45:60:ec:9a:df:c7:7f:22:01:8d:2e: d0:62:42:65:86:d3:52:c2:48:f0:c6:c2:69:c8:90: 68:6e:b9:6e:47:e3:40:fd:24:eb:0a:39:69:dd:79: 96:3f:d6:de:2f:1e:55:cb:cf:f9:99:c7:df:41:b5: e9:d8:13:b9:c7:fe:0b:fc:11:99:64:9d:23:27:79: ff:bb:ba:7f:2a:d5:d5:94:d4:74:28:79:76:e0:77: c4:7d:d0:cd:91:54:bd:8d:72:fe:60:04:d8:3d:e9: 0f:3f:73:af:91:78:9f:60:74:d2:cd:a0:69:87:85: 0b:ea:e3:60:58:a8:59:93:74:42:56:3d:89:22:0f: 56:f8:4a:20:b7:51:1e:79:bd:72:fb:cf:2b:58:6b: f2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:48:76:15:9D:7A:B3:AD:90:64:0A:06:D3:1F:EA:FC:82:03:CA:50 X509v3 Authority Key Identifier: keyid:4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2a:a2:5f:48:34:99:f7:77:e3:96:3d:d7:3d:9c:ca:33:1a: 8a:b5:59:b4:56:27:55:93:1a:a6:02:ea:8a:06:10:07:ae:3c: fb:0e:fb:3e:45:26:b7:2e:75:5e:42:5e:1c:74:e1:20:98:94: b2:39:8b:9e:9d:70:b6:49:7b:ee:bc:a4:b6:26:47:07:70:c5: 63:a9:64:d6:30:d6:a1:36:08:a8:93:7e:24:44:60:44:53:62: e0:17:9b:73:ed:4e:50:18:33:72:92:28:b7:b1:87:6a:8f:e1: 5c:90:1e:d9:e3:77:42:2c:fa:cd:c0:63:83:94:fd:30:62:c4: 56:02:11:f4:65:24:b0:67:37:48:87:ae:d0:31:ca:4f:48:be: 06:f7:7a:02:e3:99:fd:3b:b0:5d:ed:1e:3e:83:56:0d:ba:77: a3:d5:7a:a9:1f:8e:2f:31:47:f9:7d:9d:be:5b:21:ec:1d:a7: 16:5f:03:b8:5b:f6:c5:90:f6:1b:f4:5a:2a:f0:f6:7d:31:fb: ef:4d:e8:c7:f8:72:39:a5:69:68:14:a5:fe:af:5b:fc:06:59: 4b:4e:c9:11:f4:20:93:a2:b2:f1:d0:e7:0a:41:61:0e:f7:73: d4:94:a1:bb:86:03:53:a0:1e:c7:89:e5:68:12:76:34:ef:c3: 40:04:9e:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDRGRDExRTJDQ0NENTE0MTk1MzBBQzA0QTE0MjU4RjEx QTg1NzdFQUQwHhcNMjUwODIxMDU1MzUzWhcNMjUwODI4MDU1MzUzWjAYMRYwFAYD VQQDEw02OGE2YjQ3MS04ZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1B0gOdrrCFjg8EVdCmTvCj1yi+Cz5Njjn/BguBF4dPNUkd8ZM5LPvS3iM/wD CNuC3lucfdUTpdLSS7swuUmD75xG/G2XFM/CkuWsfrJZ57yXt9RUDfF+wEQeULmF seMnHNhzxjz04TCaEx7uRWDsmt/HfyIBjS7QYkJlhtNSwkjwxsJpyJBobrluR+NA /STrCjlp3XmWP9beLx5Vy8/5mcffQbXp2BO5x/4L/BGZZJ0jJ3n/u7p/KtXVlNR0 KHl24HfEfdDNkVS9jXL+YATYPekPP3OvkXifYHTSzaBph4UL6uNgWKhZk3RCVj2J Ig9W+Eogt1Eeeb1y+88rWGvyPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVIdhWd erOtkGQKBtMf6vyCA8pQMB8GA1UdIwQYMBaAFE/RHizM1RQZUwrAShQljxGoV36t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wOTg1MEI4MjQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZCbFRDc0JLRkNXUEVhaFhm cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5RWVMTXpWRkJsVENzQktGQ1dQRWFoWGZxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wOTg1MEI4MjQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZC bFRDc0JLRkNXUEVhaFhmcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtKqJfSDSZ93fjlj3XPZzKMxqKtVm0VidVkxqmAuqKBhAHrjz7Dvs+ RSa3LnVeQl4cdOEgmJSyOYuenXC2SXvuvKS2JkcHcMVjqWTWMNahNgiok34kRGBE U2LgF5tz7U5QGDNykii3sYdqj+FckB7Z43dCLPrNwGODlP0wYsRWAhH0ZSSwZzdI h67QMcpPSL4G93oC45n9O7Bd7R4+g1YNunej1XqpH44vMUf5fZ2+WyHsHacWXwO4 W/bFkPYb9Foq8PZ9MfvvTejH+HI5pWloFKX+r1v8BllLTskR9CCTorLx0OcKQWEO 93PUlKG7hgNToB7HieVoEnY078NABJ57 -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:29 2025 by rpki-client