$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: 33zSZXHtBtNuCOJtQ0RYFNjqun6Ilo25tt8PDWyf7tE= Subject key identifier: 97:45:54:7F:8D:D6:AD:3D:95:26:8E:22:0D:9D:76:8E:D6:9B:A1:3C Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0B0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 0AFD Signing time: Thu 18 Sep 2025 19:34:50 +0000 Manifest this update: Thu 18 Sep 2025 19:34:50 +0000 Manifest next update: Thu 25 Sep 2025 19:34:50 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: QJp8RvCIvKwJjmlauqbivm+EP5YwJlOSs2GNJZcowmM=) 2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: lHB3EjiVIRGj7eZK04nTZOWleSjetiCEVc7tdPvMiiA=) 3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: iND3Lx5ArlZCn+bmlp3Mm/3K9nvCqz4EFEYZ5pfFFhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: Sep 18 19:34:50 2025 GMT Not After : Sep 25 19:34:50 2025 GMT Subject: CN=68cc5eda-4bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:8d:4a:66:8b:c7:4a:68:2f:a8:7a:42:aa: aa:f3:85:27:77:18:3b:69:9c:dd:cf:70:09:1c:cb: b9:4c:78:b2:06:c5:6d:9c:9e:7e:0d:1a:40:0b:89: aa:6b:f4:56:06:a5:5b:48:51:d9:33:e5:58:93:64: 24:a3:c9:b2:38:02:3f:72:f8:37:fd:70:c7:24:3c: cd:07:5a:97:75:2d:82:76:75:9b:c0:8b:c9:e1:83: 7c:a2:78:54:f3:99:a5:77:0f:76:b9:6d:4a:be:d1: e8:dd:90:e3:bf:ba:66:2b:18:d4:c8:41:5d:25:87: 73:d3:a9:75:da:f4:99:e0:dd:19:65:c3:f2:f1:9a: d2:d2:cc:66:b3:95:bc:b9:86:0c:36:9f:0d:e1:60: 1f:58:61:bf:db:d1:b2:c3:05:76:92:8e:8a:d3:59: a5:3c:c6:b2:19:4e:73:ab:eb:41:e3:40:82:4c:ab: dd:cc:8d:34:39:4b:03:78:56:b2:a2:c2:9d:e6:c3: 81:ac:ce:30:55:02:d9:e3:0e:6e:a7:81:c2:2b:f5: 2c:da:b2:8e:a9:d9:4a:66:c0:52:e8:04:e0:be:a2: ee:66:ee:e0:82:98:88:6b:14:f9:01:b5:b0:10:be: 64:20:89:73:cc:02:78:76:2b:29:af:0b:bf:20:df: e4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:45:54:7F:8D:D6:AD:3D:95:26:8E:22:0D:9D:76:8E:D6:9B:A1:3C X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:74:e6:f8:b1:cf:5a:91:5f:5e:a0:96:c6:48:98:1d:a7:ce: ab:94:67:6c:68:7c:82:36:7b:71:cd:6b:45:d7:16:ba:fb:48: b1:4b:02:e5:83:bb:0b:77:b6:7c:25:85:f6:24:b6:7d:9b:85: f4:1e:56:d3:d6:cd:12:31:2c:cf:fd:bb:da:37:7a:23:48:c7: da:b1:36:d0:2c:cb:eb:34:2f:a1:25:16:df:32:f0:84:ba:e6: 49:d2:82:08:b7:2a:79:34:a2:14:39:dc:db:22:ce:05:5d:9c: 1e:5c:73:02:ed:87:70:7b:13:4d:84:03:f1:ed:5b:60:13:72: c2:6e:20:fb:11:b8:8c:e5:8e:24:5c:31:83:d8:d8:2d:8f:50: de:e2:ef:c2:6a:3a:c8:71:3c:ae:60:20:e8:b0:9c:ce:48:a4: 62:28:1f:8a:f3:77:ab:25:3d:30:1a:ca:da:c5:d5:78:67:00: 9c:1e:e4:af:da:8b:82:0e:5e:21:9a:80:f7:38:82:4c:43:21: d8:22:62:ed:d9:39:bb:a5:66:6a:a6:1a:c0:2b:ba:fb:e4:86: 3d:5a:42:d9:26:a8:2b:ef:99:65:2a:98:02:f9:07:89:20:50: b3:4e:6d:35:d9:0c:91:5f:20:26:2d:67:79:6a:be:b4:c7:da: 85:4d:35:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjUwOTE4MTkzNDUwWhcNMjUwOTI1MTkzNDUwWjAYMRYwFAYD VQQDEw02OGNjNWVkYS00YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuS6NSmaLx0poL6h6Qqqq84Undxg7aZzdz3AJHMu5THiyBsVtnJ5+DRpAC4mq a/RWBqVbSFHZM+VYk2Qko8myOAI/cvg3/XDHJDzNB1qXdS2CdnWbwIvJ4YN8onhU 85mldw92uW1KvtHo3ZDjv7pmKxjUyEFdJYdz06l12vSZ4N0ZZcPy8ZrS0sxms5W8 uYYMNp8N4WAfWGG/29GywwV2ko6K01mlPMayGU5zq+tB40CCTKvdzI00OUsDeFay osKd5sOBrM4wVQLZ4w5up4HCK/Us2rKOqdlKZsBS6ATgvqLuZu7ggpiIaxT5AbWw EL5kIIlzzAJ4disprwu/IN/kTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdFVH+N 1q09lSaOIg2ddo7Wm6E8MB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8dOb4sc9akV9eoJbGSJgdp86rlGdsaHyCNntxzWtF1xa6+0ixSwLl g7sLd7Z8JYX2JLZ9m4X0HlbT1s0SMSzP/bvaN3ojSMfasTbQLMvrNC+hJRbfMvCE uuZJ0oIItyp5NKIUOdzbIs4FXZweXHMC7YdwexNNhAPx7VtgE3LCbiD7EbiM5Y4k XDGD2Ngtj1De4u/CajrIcTyuYCDosJzOSKRiKB+K83erJT0wGsraxdV4ZwCcHuSv 2ouCDl4hmoD3OIJMQyHYImLt2Tm7pWZqphrAK7r75IY9WkLZJqgr75llKpgC+QeJ IFCzTm012QyRXyAmLWd5ar60x9qFTTUp -----END CERTIFICATE-----Generated at Thu Sep 18 23:51:17 2025 by rpki-client