$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json) Hash identifier: uwrpGZkEvBCgG+lpxgzjz88sufasUsva3rn6jSd6vYM= Subject key identifier: 0D:AA:F0:1F:06:7B:45:3C:1A:6E:2C:24:3E:A1:E4:6B:CB:6A:14:AC Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft Manifest number: CA Signing time: Tue 09 Sep 2025 05:50:45 +0000 Manifest this update: Tue 09 Sep 2025 05:50:44 +0000 Manifest next update: Tue 16 Sep 2025 05:50:44 +0000 Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: CdgK50c/uRtzFzw8BudYd6FFh9to/g0mfMJ+H/bWKSw=) 2: 444375E25B9C11EFA181A044C4F9AE02.roa (hash: Yhh6V+gIv+Ld1DK0VM67Fxc3c5mvFHS895j33+/A8nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Validity Not Before: Sep 9 05:50:44 2025 GMT Not After : Sep 16 05:50:44 2025 GMT Subject: CN=68bfc035-3388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c2:ea:6c:15:dd:3a:09:7f:82:ba:27:82:d1: ca:89:14:4d:89:21:6c:83:77:da:c1:56:04:c2:2f: ce:43:6f:48:22:31:b7:bf:56:43:4d:30:b4:4d:c4: 09:3d:f7:c4:96:03:f0:45:90:79:e2:f8:e6:85:97: 5c:73:23:d8:36:29:51:fc:8f:6b:6b:ca:a8:97:bb: 20:3d:97:01:43:8e:2e:f9:b6:d9:a0:69:3a:d8:07: ae:93:26:ff:63:48:51:3a:55:0f:22:13:83:c3:34: 49:0f:7e:80:84:19:bb:4e:f5:db:26:df:39:e9:a5: 71:5a:34:fc:43:ed:45:31:e7:79:1a:d1:cd:24:05: 6c:7e:0d:c4:5e:2f:e9:75:50:ae:91:2c:fb:6c:c0: 13:32:c3:b9:8b:4f:35:8a:9c:96:2b:78:86:d0:b1: 28:b9:27:b8:27:90:9c:83:e1:9f:ad:87:c8:61:76: f2:01:25:bf:fa:77:90:52:e8:ab:bd:04:e7:de:a7: 02:29:b9:9b:59:d0:be:97:68:41:44:36:f4:13:27: ee:88:b8:c8:9b:52:b9:eb:03:ef:d3:58:e6:dd:f0: 45:7d:0c:4c:00:35:12:c0:08:ab:2d:0b:e7:d3:c4: b6:87:c3:81:56:65:33:0a:cd:b6:9f:e3:53:2f:22: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AA:F0:1F:06:7B:45:3C:1A:6E:2C:24:3E:A1:E4:6B:CB:6A:14:AC X509v3 Authority Key Identifier: keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:70:47:71:b2:3e:91:36:6d:7e:a9:a3:b4:69:63:48:99:7e: 95:68:a2:a5:5e:ba:32:a8:cd:87:1f:f5:3e:23:34:0d:70:69: b8:5e:28:c3:cf:6d:98:06:50:67:6d:cf:ba:b4:55:d3:5f:f3: c8:88:55:55:77:66:69:fc:61:13:1b:e0:e7:b9:0b:95:67:31: 55:5e:94:40:a5:de:6a:d6:55:54:34:e5:9f:5e:b4:df:ba:d2: aa:02:a8:3a:68:75:55:d1:00:9d:37:e4:70:60:05:68:04:3a: 2f:e6:2d:d8:f2:ad:71:76:13:1d:a5:cb:32:bb:5e:e7:c4:5e: 3f:16:cd:a5:f3:92:47:19:06:95:32:f6:b7:22:0e:20:ba:c1: c4:28:19:cd:b7:ab:4c:92:2b:de:cc:0f:cd:4d:62:71:03:3c: de:28:15:36:78:58:f3:00:18:c5:d1:ad:9c:5b:46:f3:4c:ed: eb:ef:15:4a:12:e4:ab:c8:88:0a:82:0d:38:6c:46:89:b7:a0: 64:d5:53:4a:47:a8:5c:a9:e0:28:33:ad:5e:f5:17:31:c0:54: 71:65:3a:de:f3:ec:d1:cd:f5:b5:d0:54:3b:39:78:e8:23:c0: d2:4d:5a:37:ba:28:6e:3e:21:97:d8:54:cd:19:14:32:dd:5a: 6f:63:89:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRENEYxMTAvBgNVBAUTKDY4Nzc0MURFMTVDRDg4M0MxMEREQkM0RkMzQTJEQ0Y1 NDg1RTdERjMwHhcNMjUwOTA5MDU1MDQ0WhcNMjUwOTE2MDU1MDQ0WjAYMRYwFAYD VQQDEw02OGJmYzAzNS0zMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMLqbBXdOgl/grongtHKiRRNiSFsg3fawVYEwi/OQ29IIjG3v1ZDTTC0TcQJ PffElgPwRZB54vjmhZdccyPYNilR/I9ra8qol7sgPZcBQ44u+bbZoGk62Aeukyb/ Y0hROlUPIhODwzRJD36AhBm7TvXbJt856aVxWjT8Q+1FMed5GtHNJAVsfg3EXi/p dVCukSz7bMATMsO5i081ipyWK3iG0LEouSe4J5Ccg+GfrYfIYXbyASW/+neQUuir vQTn3qcCKbmbWdC+l2hBRDb0EyfuiLjIm1K56wPv01jm3fBFfQxMADUSwAirLQvn 08S2h8OBVmUzCs22n+NTLyLI4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2q8B8G e0U8Gm4sJD6h5GvLahSsMB8GA1UdIwQYMBaAFGh3Qd4VzYg8EN28T8Oi3PVIXn3z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQ0Ri8wRTNBQ0NGQzVC OUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlEd1EzYnhQdzZMYzlVaGVm Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIZEIzaFhOaUR3UTNieFB3NkxjOVVoZWZmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQ0Ri8wRTNBQ0NGQzVCOUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlE d1EzYnhQdzZMYzlVaGVmZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAncEdxsj6RNm1+qaO0aWNImX6VaKKlXroyqM2HH/U+IzQNcGm4XijD z22YBlBnbc+6tFXTX/PIiFVVd2Zp/GETG+DnuQuVZzFVXpRApd5q1lVUNOWfXrTf utKqAqg6aHVV0QCdN+RwYAVoBDov5i3Y8q1xdhMdpcsyu17nxF4/Fs2l85JHGQaV Mva3Ig4gusHEKBnNt6tMkivezA/NTWJxAzzeKBU2eFjzABjF0a2cW0bzTO3r7xVK EuSryIgKgg04bEaJt6Bk1VNKR6hcqeAoM61e9RcxwFRxZTre8+zRzfW10FQ7OXjo I8DSTVo3uihuPiGX2FTNGRQy3VpvY4ly -----END CERTIFICATE-----Generated at Tue Sep 9 14:10:46 2025 by rpki-client