$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft File: nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json) Hash identifier: TTqHQ9407sa/TR+VsQu/NTRKc5oqSC/OeHwAwe+I5DY= Subject key identifier: 0E:EC:99:66:00:E2:88:BA:9D:AA:81:C2:E9:F4:A8:6A:0C:72:AC:5B Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 Certificate issuer: /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft Manifest number: E9 Signing time: Wed 17 Sep 2025 05:57:32 +0000 Manifest this update: Wed 17 Sep 2025 05:57:31 +0000 Manifest next update: Wed 24 Sep 2025 05:57:31 +0000 Files and hashes: 1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: yF0JmM7Y26sDY2VctUEl5TZlgZeFEqXwMyTuSyCTbGM=) 2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: C3woTmy4KRh8oZfuokqoz+ySn5YpmljqQzslPnXWG7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113E7, serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Validity Not Before: Sep 17 05:57:31 2025 GMT Not After : Sep 24 05:57:31 2025 GMT Subject: CN=68ca4dcc-8df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:5c:ed:7b:a3:66:f8:db:c6:81:fa:b7:d0: 2c:2e:9b:73:e3:4e:af:fa:a8:28:75:a6:79:78:f4: 23:58:aa:4e:6c:43:0d:fe:3a:97:33:72:4c:9e:23: eb:4d:b5:55:d0:10:07:c1:80:e6:d1:b9:28:80:ed: 76:b8:fb:5b:a0:c1:d1:f8:88:e2:8e:a2:6a:ea:1d: d9:ba:23:5b:43:36:a2:e1:ba:74:68:3a:87:90:83: 1d:b1:a8:af:f3:0f:d7:d1:4b:9f:df:4c:28:cf:96: 88:33:b9:1d:90:25:6b:a8:e9:45:98:6f:e4:45:03: 52:57:fc:dd:a9:e1:cd:42:21:15:80:42:74:fe:36: fb:95:51:e6:d4:37:85:4e:cd:92:68:90:15:18:15: dc:c8:2e:14:76:fe:65:ea:0d:56:5b:7a:93:57:7f: fb:3a:c1:37:07:69:4a:7d:d1:93:e2:6f:38:92:66: 3b:fb:90:58:4b:f2:89:28:1f:f8:8b:b0:b3:d3:e7: af:e9:c8:69:bb:dd:3e:ab:6c:22:ee:1b:4f:bf:6b: 21:04:2a:07:9a:1e:94:5e:e1:8a:8d:e9:15:58:ed: 52:be:b7:9c:00:e2:2d:67:3e:84:4b:f0:67:4d:8c: 29:95:ee:96:25:80:bf:82:09:09:b1:5b:c5:d4:f3: 15:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EC:99:66:00:E2:88:BA:9D:AA:81:C2:E9:F4:A8:6A:0C:72:AC:5B X509v3 Authority Key Identifier: keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:80:a1:23:d9:5e:c8:6b:bc:5a:ba:3e:e3:07:d0:f1:9c:b7: d1:81:db:cd:e1:aa:c4:33:ff:38:5b:d7:07:14:cb:62:fa:cf: 05:fe:97:93:b3:c4:48:0e:40:cf:2f:2c:59:fb:32:29:6b:0a: dd:9a:29:26:8a:27:48:09:2c:58:4c:ac:91:08:78:38:a3:88: 70:e9:1c:90:f4:13:a6:a6:64:96:be:c4:4c:08:17:6f:74:31: e9:18:c2:08:f3:ba:90:05:1a:75:18:b9:dd:14:8a:f7:0b:ea: b4:8d:57:5f:94:4c:8a:9d:9f:2a:88:b7:10:42:94:5e:54:7e: c2:1b:e6:0e:bc:ec:6e:8e:4c:1f:07:22:20:9e:27:c7:83:9c: 6a:d6:a9:a8:5c:b4:0c:d6:8b:34:8e:ec:06:e9:7b:78:c1:76: 16:21:a7:1c:0d:f4:3c:5b:d1:02:5d:ac:51:67:7a:70:8f:23: 86:c9:25:18:60:0f:54:80:10:dc:00:74:8a:90:18:a6:f8:3d: 5b:8d:08:35:c4:78:ff:a5:78:3f:82:58:6a:c8:75:e8:5c:cb: e9:87:7a:06:0f:88:8e:4f:6f:50:c0:27:2f:04:19:85:d6:c2: 25:ac:b2:f9:d6:23:4f:a6:44:16:fe:1c:ea:6f:32:58:f7:33: 61:75:3d:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzRTcxMTAvBgNVBAUTKDlENkM3NTBDRTAzOTNDMjAwQUJGOEE2NzFDMUYyQzIw NkEwQ0I0NzEwHhcNMjUwOTE3MDU1NzMxWhcNMjUwOTI0MDU1NzMxWjAYMRYwFAYD VQQDEw02OGNhNGRjYy04ZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPxc7XujZvjbxoH6t9AsLptz406v+qgodaZ5ePQjWKpObEMN/jqXM3JMniPr TbVV0BAHwYDm0bkogO12uPtboMHR+IjijqJq6h3ZuiNbQzai4bp0aDqHkIMdsaiv 8w/X0Uuf30woz5aIM7kdkCVrqOlFmG/kRQNSV/zdqeHNQiEVgEJ0/jb7lVHm1DeF Ts2SaJAVGBXcyC4Udv5l6g1WW3qTV3/7OsE3B2lKfdGT4m84kmY7+5BYS/KJKB/4 i7Cz0+ev6chpu90+q2wi7htPv2shBCoHmh6UXuGKjekVWO1SvrecAOItZz6ES/Bn TYwple6WJYC/ggkJsVvF1PMVcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7smWYA 4oi6naqBwun0qGoMcqxbMB8GA1UdIwQYMBaAFJ1sdQzgOTwgCr+KZxwfLCBqDLRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNFNy85RDNBMjAwMDJG NTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBDQUt2NHBuSEI4c0lHb010 SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XeDFET0E1UENBS3Y0cG5IQjhzSUdvTXRIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTNFNy85RDNBMjAwMDJGNTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBD QUt2NHBuSEI4c0lHb010SEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAggKEj2V7Ia7xauj7jB9DxnLfRgdvN4arEM/84W9cHFMti+s8F/peT s8RIDkDPLyxZ+zIpawrdmikmiidICSxYTKyRCHg4o4hw6RyQ9BOmpmSWvsRMCBdv dDHpGMII87qQBRp1GLndFIr3C+q0jVdflEyKnZ8qiLcQQpReVH7CG+YOvOxujkwf ByIgnifHg5xq1qmoXLQM1os0juwG6Xt4wXYWIaccDfQ8W9ECXaxRZ3pwjyOGySUY YA9UgBDcAHSKkBim+D1bjQg1xHj/pXg/glhqyHXoXMvph3oGD4iOT29QwCcvBBmF 1sIlrLL51iNPpkQW/hzqbzJY9zNhdT0j -----END CERTIFICATE-----Generated at Fri Sep 19 05:17:08 2025 by rpki-client