$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft File: Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json) Hash identifier: FFVLiYSRcrMrFLXovJCZCBjcWuZT+v63adaMYXSyBfI= Subject key identifier: 6F:06:5F:BF:2F:B2:AF:7E:17:18:34:4C:92:1A:16:BA:C8:74:23:4E Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 0933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft Manifest number: 092A Signing time: Tue 16 Sep 2025 20:28:30 +0000 Manifest this update: Tue 16 Sep 2025 20:28:29 +0000 Manifest next update: Tue 23 Sep 2025 20:28:29 +0000 Files and hashes: 1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: OOX6PnRlTUp7lGTtZhOxC/ScIFr7VtFOq8Uu8ViKFCg=) 2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: jRtR6pa7Kbd4t5WQwGEkXAFFvqrdSVQIMkPT9eeq4Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 20:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Validity Not Before: Sep 16 20:28:29 2025 GMT Not After : Sep 23 20:28:29 2025 GMT Subject: CN=68c9c86d-11de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:01:e9:5f:60:89:7f:51:3f:3e:9e:12:61: 52:d2:3d:a4:fd:a9:e3:d8:e8:e3:95:07:27:dc:c2: 11:0e:68:f9:2b:a3:55:f9:2f:25:33:ad:7e:8e:0e: 20:96:78:6b:ca:be:d8:86:a2:02:fa:9f:1d:74:cf: 41:c8:30:4a:2e:15:61:25:f2:b7:af:14:6c:09:e1: 5b:31:8e:45:69:65:62:7a:91:b1:cd:69:b5:07:4c: f2:ba:8a:6f:17:3a:41:e4:fc:a2:ec:6d:68:1e:40: a5:4a:8b:ca:9c:ef:0b:45:55:fb:63:38:79:00:0b: 13:07:79:04:30:37:33:88:da:75:6b:bc:4e:a0:56: f7:41:d2:d2:8d:34:65:49:fe:67:39:5a:ed:ac:2c: 3f:ba:9b:78:49:c3:c4:b4:03:28:ac:32:93:e8:93: f1:ad:6e:d3:11:dd:59:9a:1a:e4:19:65:f1:de:43: d1:05:68:92:f2:57:33:3b:1d:a1:08:59:c0:6c:36: 8c:9c:74:a0:53:d2:a2:b4:2f:92:8c:b8:bd:c3:84: 13:72:08:9f:72:83:dd:64:3c:aa:78:c9:c8:f5:00: b3:95:21:d6:67:95:56:f1:08:7b:fe:56:2c:8e:24: 42:7f:b7:1d:f5:08:31:25:08:40:61:95:59:fd:b6: 6f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:06:5F:BF:2F:B2:AF:7E:17:18:34:4C:92:1A:16:BA:C8:74:23:4E X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:14:92:c3:55:04:5e:64:81:b2:51:5c:62:8b:90:e6:5e:0b: 18:a3:51:d4:a5:11:f8:06:20:03:87:49:27:2c:32:c5:63:94: 01:d0:2f:00:4c:8a:93:d2:fd:b0:3d:97:09:d2:39:d0:0d:e1: f4:86:a5:aa:f2:03:08:ae:28:b4:5e:b1:9e:d2:98:85:64:5e: 83:7a:97:ed:30:9c:86:88:68:9d:92:fd:7c:1c:ac:fb:ea:88: de:e7:e5:5e:e0:a1:db:f2:0f:e2:b2:4e:ad:3d:b3:9c:05:70: 51:c8:db:c6:30:8e:38:de:d5:01:06:53:2e:e8:3a:cb:51:65: de:55:3c:cc:c2:a8:01:31:3b:7d:07:95:15:30:bc:d7:14:0e: 8d:74:02:4d:b4:f4:d6:03:b9:1b:34:6d:3d:54:27:16:e1:08: 38:ef:c1:34:5e:ad:f6:dd:c1:2e:d8:58:9a:d2:bb:a6:9f:f6: d6:7f:df:27:34:96:31:a6:4c:a5:7a:31:d0:65:22:83:eb:e5: 4c:b7:09:39:9f:75:04:1a:93:9e:be:3d:80:96:8c:9c:2c:fb: 10:76:90:49:bf:32:8f:d4:0a:d5:d9:c3:51:c1:02:10:a8:de: cb:5c:1d:7a:c9:c7:85:57:24:1b:74:d1:71:a3:de:74:60:94: 2c:c6:52:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjUwOTE2MjAyODI5WhcNMjUwOTIzMjAyODI5WjAYMRYwFAYD VQQDEw02OGM5Yzg2ZC0xMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAor4B6V9giX9RPz6eEmFS0j2k/anj2OjjlQcn3MIRDmj5K6NV+S8lM61+jg4g lnhryr7YhqIC+p8ddM9ByDBKLhVhJfK3rxRsCeFbMY5FaWViepGxzWm1B0zyuopv FzpB5Pyi7G1oHkClSovKnO8LRVX7Yzh5AAsTB3kEMDcziNp1a7xOoFb3QdLSjTRl Sf5nOVrtrCw/upt4ScPEtAMorDKT6JPxrW7TEd1ZmhrkGWXx3kPRBWiS8lczOx2h CFnAbDaMnHSgU9KitC+SjLi9w4QTcgifcoPdZDyqeMnI9QCzlSHWZ5VW8Qh7/lYs jiRCf7cd9QgxJQhAYZVZ/bZvGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8GX78v sq9+Fxg0TJIaFrrIdCNOMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4 amw4SEowa0FYSVFWSlMyNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLFJLDVQReZIGyUVxii5DmXgsYo1HUpRH4BiADh0knLDLFY5QB0C8A TIqT0v2wPZcJ0jnQDeH0hqWq8gMIrii0XrGe0piFZF6DepftMJyGiGidkv18HKz7 6oje5+Ve4KHb8g/isk6tPbOcBXBRyNvGMI443tUBBlMu6DrLUWXeVTzMwqgBMTt9 B5UVMLzXFA6NdAJNtPTWA7kbNG09VCcW4Qg478E0Xq323cEu2Fia0rumn/bWf98n NJYxpkylejHQZSKD6+VMtwk5n3UEGpOevj2AloycLPsQdpBJvzKP1ArV2cNRwQIQ qN7LXB16yceFVyQbdNFxo950YJQsxlLC -----END CERTIFICATE-----Generated at Thu Sep 18 20:32:45 2025 by rpki-client