$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft File: ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json) Hash identifier: nVMprTLlQ3kZqz4c7k9pQaUIGkOWechO5Z1wl3I/6Qc= Subject key identifier: BA:8C:15:51:EF:F2:64:C4:4A:E3:F0:9C:78:73:BB:0B:D3:2F:0C:E9 Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 0F7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft Manifest number: 0F6E Signing time: Wed 20 Aug 2025 17:39:38 +0000 Manifest this update: Wed 20 Aug 2025 17:39:38 +0000 Manifest next update: Wed 27 Aug 2025 17:39:38 +0000 Files and hashes: 1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: NgTKrgKnl29CBGkT60jG9CvvgVkNfGIyZ7LJtYbNjXo=) 2: D193920E709411E99F95933EC4F9AE02.roa (hash: cGhnDxeygmjtWG8DkCbsMlX+1o7K6dnzIlHaIw6aiaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3965 (0xf7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Validity Not Before: Aug 20 17:39:38 2025 GMT Not After : Aug 27 17:39:38 2025 GMT Subject: CN=68a6085a-324f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:7d:f0:fd:94:ed:c5:4d:5a:8a:a8:ec:6c: dd:32:7e:64:8e:40:ab:ef:80:d9:23:4b:79:92:5c: b4:36:10:c9:7e:e9:ec:58:9b:7f:fa:c6:dc:ce:b2: 0c:fb:d3:df:55:b4:9c:ae:d6:43:ce:37:ec:06:10: 5d:61:44:0f:a5:f9:6f:09:2a:56:6b:a7:ea:d3:d5: 80:c5:f6:e2:89:11:63:69:d1:a7:38:b0:57:61:0d: 8f:03:18:45:5c:b5:d8:26:e9:a6:11:d0:9e:f6:f0: 89:ae:b8:5b:f1:c0:c5:4a:a7:b1:dc:82:96:ed:0c: 44:88:61:1c:f1:ce:08:fa:ba:5e:80:ac:6b:d2:e7: 57:c5:04:43:44:b6:c2:32:7b:9f:d6:db:61:59:5a: 0d:8a:b1:e5:37:a0:ac:94:cf:77:4b:28:ec:80:3c: 60:bb:ed:2a:57:3d:bc:bf:07:5d:fc:6e:30:4a:ef: ff:9a:b4:50:c6:7a:d6:f5:00:20:38:0d:7d:0c:f0: 92:78:a2:fc:fa:7e:60:eb:32:8f:49:88:0e:ea:15: 77:c9:e7:16:61:51:d1:c7:e8:86:a1:ad:a9:7f:bb: 7c:11:47:6d:e1:45:3e:9c:57:78:84:dc:bc:97:0d: 76:78:47:23:be:9d:ea:86:2a:d8:fd:74:71:8f:67: cf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8C:15:51:EF:F2:64:C4:4A:E3:F0:9C:78:73:BB:0B:D3:2F:0C:E9 X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:dd:e4:a1:47:bc:1e:ce:20:76:25:87:c6:bb:e2:ff:71:3d: b6:4c:c2:bc:72:d5:d7:55:b5:c0:5a:bc:eb:5d:e0:3f:74:79: 6e:e4:c6:14:6c:3c:1e:47:81:65:01:8b:39:d8:e9:12:bf:fe: 89:18:d6:c4:f5:dd:b5:56:c9:24:b4:71:7c:f9:72:21:5e:eb: 0f:8f:5d:d5:da:c7:a8:df:c5:1c:a5:2d:8f:30:14:3a:21:7b: 56:17:7a:a0:c2:dc:ef:d8:2f:03:88:67:ae:19:4e:6f:d8:30: 0d:f5:86:25:da:c0:fd:bf:65:5c:f5:8d:00:b2:33:0d:93:a6: 8c:04:04:a7:c0:b4:3d:16:03:a0:79:44:c8:b3:e3:90:50:7b: 52:2c:93:7e:a5:d9:40:b8:9e:73:b7:b2:fb:09:61:ae:14:dc: fc:e2:07:05:d4:68:98:0c:2c:b1:ab:82:5b:90:9b:2e:b7:d6: b9:d5:62:e2:6f:40:8b:aa:5f:fd:55:7d:f1:87:34:cc:ab:d9: e5:f1:fc:d3:a8:3d:7d:c2:08:f3:99:f3:bf:91:52:7b:82:93: 82:b9:57:8e:b5:bc:a7:51:8c:57:66:63:6f:bc:18:b0:1c:d8: 1c:4b:50:f8:69:8c:5e:c9:b0:05:77:e3:d5:d2:5b:a4:7b:83: 42:11:66:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjUwODIwMTczOTM4WhcNMjUwODI3MTczOTM4WjAYMRYwFAYD VQQDEw02OGE2MDg1YS0zMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXV98P2U7cVNWoqo7GzdMn5kjkCr74DZI0t5kly0NhDJfunsWJt/+sbczrIM +9PfVbScrtZDzjfsBhBdYUQPpflvCSpWa6fq09WAxfbiiRFjadGnOLBXYQ2PAxhF XLXYJummEdCe9vCJrrhb8cDFSqex3IKW7QxEiGEc8c4I+rpegKxr0udXxQRDRLbC Mnuf1tthWVoNirHlN6CslM93SyjsgDxgu+0qVz28vwdd/G4wSu//mrRQxnrW9QAg OA19DPCSeKL8+n5g6zKPSYgO6hV3yecWYVHRx+iGoa2pf7t8EUdt4UU+nFd4hNy8 lw12eEcjvp3qhirY/XRxj2fPRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqMFVHv 8mTESuPwnHhzuwvTLwzpMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUJERi9FNzBFMEE5ODcwOTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThH Z1paTmhZLVJST0JTdTRpWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD3eShR7weziB2JYfGu+L/cT22TMK8ctXXVbXAWrzrXeA/dHlu5MYU bDweR4FlAYs52OkSv/6JGNbE9d21VskktHF8+XIhXusPj13V2seo38UcpS2PMBQ6 IXtWF3qgwtzv2C8DiGeuGU5v2DAN9YYl2sD9v2Vc9Y0AsjMNk6aMBASnwLQ9FgOg eUTIs+OQUHtSLJN+pdlAuJ5zt7L7CWGuFNz84gcF1GiYDCyxq4JbkJsut9a51WLi b0CLql/9VX3xhzTMq9nl8fzTqD19wgjzmfO/kVJ7gpOCuVeOtbynUYxXZmNvvBiw HNgcS1D4aYxeybAFd+PV0luke4NCEWZm -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:06 2025 by rpki-client