$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft File: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft (raw, json) Hash identifier: teAjqh+Ev+ssyO8X6KcWmHzuhH2uj5cMoYgMFsvcLys= Subject key identifier: DF:82:58:F9:00:73:EE:55:B4:1B:72:43:C7:53:03:FF:96:59:09:7F Authority key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 Certificate issuer: /CN=A9193B7A/serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft Manifest number: 0D Signing time: Wed 03 Sep 2025 08:49:19 +0000 Manifest this update: Wed 03 Sep 2025 08:49:18 +0000 Manifest next update: Wed 10 Sep 2025 08:49:18 +0000 Files and hashes: 1: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl (hash: dilStxk9/OD/1O9NpPeLvxLPT9a/FCnH9mzP3TkBPss=) 2: 62B3880C7E5D11F0ACC14A80C4F9AE02.roa (hash: UYXy4In2ej15vB1SThN5OwmV+NPLJjrhZVDmU16GLKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Validity Not Before: Sep 3 08:49:18 2025 GMT Not After : Sep 10 08:49:18 2025 GMT Subject: CN=68b8010e-a055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:3c:37:7d:78:fd:1c:b4:e5:54:3c:7a:36:27: 6e:a3:7c:7c:c9:2a:1d:05:b3:f1:a5:a9:ee:bb:6e: 1f:ae:d0:22:0c:aa:c9:6b:75:e6:c2:97:ad:71:bb: ea:4e:b2:7e:76:94:50:3a:75:dd:d7:37:0b:ed:8c: 78:f8:7d:e2:91:b1:b2:3f:34:0e:5d:f6:7f:0d:bc: de:3d:89:67:f1:e7:79:fc:8c:be:59:76:05:13:29: 33:4f:5f:a9:a3:c6:d2:71:8b:15:31:b4:47:45:3b: 08:3f:0e:88:93:32:10:af:02:0f:15:6e:e6:e3:8e: e2:8a:2a:b1:05:ea:f4:0e:a8:90:50:6a:59:34:a0: 75:15:b0:5a:05:7e:b1:75:6e:60:07:40:90:6b:ff: 47:66:8b:5a:3e:79:b7:2f:3d:59:85:27:8a:00:40: ad:c1:ee:54:ad:64:55:0e:46:70:82:89:87:89:58: f0:9f:f0:9c:35:5a:01:7a:b9:48:cb:4c:d6:88:4a: a0:41:56:c2:85:24:eb:52:fe:72:79:c6:0c:95:3b: 1d:ca:eb:b9:85:b8:6d:fc:d0:1c:fc:df:88:9f:01: 2e:8a:75:9f:ab:18:3e:00:a4:e3:58:89:dc:7c:b1: 0b:83:15:32:e6:dc:95:89:04:ae:5c:ba:b3:3f:b6: fb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:82:58:F9:00:73:EE:55:B4:1B:72:43:C7:53:03:FF:96:59:09:7F X509v3 Authority Key Identifier: keyid:0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:1a:a3:20:90:d1:f0:04:bf:cd:48:c1:d6:b0:a0:b9:3d:bf: a4:07:f5:fe:12:16:54:ed:a0:77:f6:0e:b6:bb:e8:5b:5a:25: 74:f2:49:0e:32:2c:88:e5:3b:4d:e2:7f:20:61:04:5c:ea:ad: a1:49:06:8f:dc:7a:7e:94:05:76:14:72:39:a4:3f:63:11:65: 03:ad:58:a4:99:8f:92:45:bb:f4:fd:7f:e0:9b:ea:6c:e4:6f: 61:fb:51:b5:69:8b:30:01:97:cd:93:d1:f4:03:e1:ca:7c:10: 4d:e1:e1:9d:70:b0:3b:85:2a:6d:5b:a7:bd:94:b4:87:3a:c3: 68:9d:0a:af:a1:92:b5:c1:6e:f2:0c:bf:f1:20:ba:27:f9:88: 61:98:18:54:0e:bb:de:a1:ee:0b:a4:c7:3d:aa:da:64:00:37: 19:52:53:cf:30:af:34:26:1e:aa:b0:9e:e0:d2:95:8b:39:fd: 30:68:fd:cb:82:3f:10:8b:d4:45:9f:ca:71:ac:29:f2:51:98: 92:00:bf:b4:fd:7e:3c:db:31:c0:63:73:4f:ae:2d:f8:de:0f: 31:60:bd:eb:15:64:06:4b:c3:e9:98:a7:e4:9a:6f:88:94:14: eb:4b:dc:5a:fc:15:cc:6d:ff:43:1c:29:62:39:1a:26:9f:62: 59:16:7d:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I3QTExMC8GA1UEBRMoMEMyRjQ1QjZDODg2MjIzMjQyRUM5QkY5M0IzNDY5N0Y2 NERERjY4MDAeFw0yNTA5MDMwODQ5MThaFw0yNTA5MTAwODQ5MThaMBgxFjAUBgNV BAMTDTY4YjgwMTBlLWEwNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD6PDd9eP0ctOVUPHo2J26jfHzJKh0Fs/Glqe67bh+u0CIMqslrdebCl61xu+pO sn52lFA6dd3XNwvtjHj4feKRsbI/NA5d9n8NvN49iWfx53n8jL5ZdgUTKTNPX6mj xtJxixUxtEdFOwg/DoiTMhCvAg8VbubjjuKKKrEF6vQOqJBQalk0oHUVsFoFfrF1 bmAHQJBr/0dmi1o+ebcvPVmFJ4oAQK3B7lStZFUORnCCiYeJWPCf8Jw1WgF6uUjL TNaISqBBVsKFJOtS/nJ5xgyVOx3K67mFuG380Bz834ifAS6KdZ+rGD4ApONYidx8 sQuDFTLm3JWJBK5curM/tvuTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU34JY+QBz 7lW0G3JDx1MD/5ZZCX8wHwYDVR0jBBgwFoAUDC9FtsiGIjJC7Jv5OzRpf2Td9oAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjdBL0MwODUwNjkyN0RC QjExRjBCQzRENzc2MUM0RjlBRTAyL0RDOUZ0c2lHSWpKQzdKdjVPelJwZjJUZDlv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREM5RnRzaUdJakpDN0p2NU96UnBmMlRkOW9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz QjdBL0MwODUwNjkyN0RCQjExRjBCQzRENzc2MUM0RjlBRTAyL0RDOUZ0c2lHSWpK QzdKdjVPelJwZjJUZDlvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALMaoyCQ0fAEv81IwdawoLk9v6QH9f4SFlTtoHf2Dra76FtaJXTySQ4y LIjlO03ifyBhBFzqraFJBo/cen6UBXYUcjmkP2MRZQOtWKSZj5JFu/T9f+Cb6mzk b2H7UbVpizABl82T0fQD4cp8EE3h4Z1wsDuFKm1bp72UtIc6w2idCq+hkrXBbvIM v/Eguif5iGGYGFQOu96h7gukxz2q2mQANxlSU88wrzQmHqqwnuDSlYs5/TBo/cuC PxCL1EWfynGsKfJRmJIAv7T9fjzbMcBjc0+uLfjeDzFgvesVZAZLw+mYp+Sab4iU FOtL3Fr8Fcxt/0McKWI5GiafYlkWfSk= -----END CERTIFICATE-----Generated at Thu Sep 4 15:58:58 2025 by rpki-client