$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json) Hash identifier: kPAawZJv3kFOCPEftMIFOsEPQbwKaj8XpxxWGsofbxI= Subject key identifier: DB:BD:46:95:6D:CE:CC:54:48:0A:54:CD:1E:B1:96:C7:B7:5C:56:C1 Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 11DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft Manifest number: 11D4 Signing time: Thu 18 Sep 2025 17:19:49 +0000 Manifest this update: Thu 18 Sep 2025 17:19:49 +0000 Manifest next update: Thu 25 Sep 2025 17:19:49 +0000 Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: MuBy8QlBgOZUf1gSF0spk3jt+BD5YBz5mKXuwgi8qvg=) 2: DB056F0C688011F09D2C9A15C4F9AE02.roa (hash: coykcxq4VLCnsonSqLhttvR91cEiMTFYZHe/zqxnEJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4572 (0x11dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Sep 18 17:19:49 2025 GMT Not After : Sep 25 17:19:49 2025 GMT Subject: CN=68cc3f35-d84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e3:7a:91:ae:04:d5:4e:c0:4f:29:c6:92:c1: e9:60:31:03:45:f0:31:09:c5:67:c0:a7:7f:dd:7b: d0:47:23:6c:fe:45:fa:7a:64:5d:c7:b9:47:e4:1a: 1b:0e:a8:25:c3:07:4d:f5:f4:7a:4f:0b:ec:42:c4: e6:7f:11:3f:4e:55:88:60:1b:14:0d:48:87:27:30: 72:e1:1f:87:ce:7e:1a:6d:56:4b:87:77:b4:97:80: 02:01:0c:3b:61:f6:02:82:91:ab:99:b7:ba:a1:a8: 0f:e1:60:4b:ba:52:ae:4a:f4:43:8e:df:3f:b7:38: 89:0a:b4:3c:08:aa:9c:63:7a:22:46:b7:da:d7:82: 64:0c:19:c8:f9:df:40:2f:07:ce:90:79:34:08:1e: 87:8d:66:85:ed:7b:d5:75:ad:85:58:85:4a:40:89: 3f:99:f0:5c:af:93:8c:64:8f:2e:9f:47:91:91:94: a8:7c:cd:3b:9a:3d:9c:03:29:3e:c1:23:dd:d8:16: 75:d8:fd:e7:7b:42:54:3e:14:cd:e2:75:7d:94:ba: de:1a:44:b2:be:a2:c8:a0:c1:4a:3c:34:ba:82:fe: 5d:97:a5:37:62:c6:f1:41:32:fc:1d:2e:4c:bb:91: 30:a9:9c:15:94:18:c6:e3:e8:4a:93:85:7d:a6:54: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BD:46:95:6D:CE:CC:54:48:0A:54:CD:1E:B1:96:C7:B7:5C:56:C1 X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:0a:f9:52:4a:62:fd:fd:ce:65:43:5e:64:18:d4:5a:1a:18: 0f:d3:63:ec:ac:d3:d6:52:43:97:1b:5d:bb:5c:3b:d8:f2:4d: 2b:43:be:fd:02:40:5a:e7:a6:6f:70:ca:14:cb:a6:a8:57:60: fe:4c:e7:a7:d1:2e:61:91:73:f3:9e:a0:ad:b5:06:f3:09:54: 03:aa:fb:35:70:c8:52:03:17:f1:fa:ae:ea:1c:42:24:94:af: f1:9d:65:ed:03:cc:1f:46:7d:44:0b:b2:ac:ab:e9:b4:45:46: fe:e7:df:37:e7:45:1f:fb:fd:80:9b:eb:b9:03:23:26:7b:c2: 3a:9f:15:5f:15:ab:92:6c:fd:f2:5a:c2:a2:91:f4:a5:26:8c: 72:7d:e0:ca:b8:31:16:64:79:2e:a3:61:74:6e:56:18:b5:18: b7:42:46:b8:5f:15:44:bf:b5:63:9a:3b:f2:a0:49:76:d5:91: 36:78:fd:d0:02:35:1a:cc:cd:48:3c:20:63:55:c1:2b:32:be: 26:6c:2d:2a:12:49:e7:63:8f:ef:a7:2b:0a:f2:f0:0b:73:63: e4:ca:80:42:04:b8:a2:5a:b6:12:1f:2b:86:98:6a:9c:13:8c: 18:48:d6:48:d2:3c:95:fe:af:11:b8:ae:21:b1:74:04:0c:35: 40:76:dc:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjUwOTE4MTcxOTQ5WhcNMjUwOTI1MTcxOTQ5WjAYMRYwFAYD VQQDEw02OGNjM2YzNS1kODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteN6ka4E1U7ATynGksHpYDEDRfAxCcVnwKd/3XvQRyNs/kX6emRdx7lH5Bob DqglwwdN9fR6TwvsQsTmfxE/TlWIYBsUDUiHJzBy4R+Hzn4abVZLh3e0l4ACAQw7 YfYCgpGrmbe6oagP4WBLulKuSvRDjt8/tziJCrQ8CKqcY3oiRrfa14JkDBnI+d9A LwfOkHk0CB6HjWaF7XvVda2FWIVKQIk/mfBcr5OMZI8un0eRkZSofM07mj2cAyk+ wSPd2BZ12P3ne0JUPhTN4nV9lLreGkSyvqLIoMFKPDS6gv5dl6U3YsbxQTL8HS5M u5EwqZwVlBjG4+hKk4V9plTZ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNu9RpVt zsxUSApUzR6xlse3XFbBMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC N2FmQU8xTnExX1V1YkoxUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXCvlSSmL9/c5lQ15kGNRaGhgP02PsrNPWUkOXG127XDvY8k0rQ779 AkBa56ZvcMoUy6aoV2D+TOen0S5hkXPznqCttQbzCVQDqvs1cMhSAxfx+q7qHEIk lK/xnWXtA8wfRn1EC7Ksq+m0RUb+598350Uf+/2Am+u5AyMme8I6nxVfFauSbP3y WsKikfSlJoxyfeDKuDEWZHkuo2F0blYYtRi3Qka4XxVEv7VjmjvyoEl21ZE2eP3Q AjUazM1IPCBjVcErMr4mbC0qEknnY4/vpysK8vALc2PkyoBCBLiiWrYSHyuGmGqc E4wYSNZI0jyV/q8RuK4hsXQEDDVAdtyX -----END CERTIFICATE-----Generated at Fri Sep 19 00:57:57 2025 by rpki-client