$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft File: -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json) Hash identifier: /XQDYLkOkomOacbyKvGrJU0MIXfrr+gefF+bgvOPgUY= Subject key identifier: 11:C5:8D:59:49:08:2A:D0:75:60:56:45:58:C7:A8:B4:CF:75:D9:DA Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Certificate serial: 0656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft Manifest number: 0644 Signing time: Wed 10 Sep 2025 22:54:54 +0000 Manifest this update: Wed 10 Sep 2025 22:54:53 +0000 Manifest next update: Wed 17 Sep 2025 22:54:53 +0000 Files and hashes: 1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: DWp+Er3Y7USXxLjaIQw7Of1DBxmoPX3SF1s518K5WIc=) 2: 93E364468FC111EFA7695485C4F9AE02.roa (hash: l40SoBbVMbccw1MSf6F6VE2N6tSNsGG3U/26S05rROc=) 3: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: WwU6SoQDG+8gwXxtD5WuoKkjOwOvaEm4Y976SHnYcTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 22:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Validity Not Before: Sep 10 22:54:53 2025 GMT Not After : Sep 17 22:54:53 2025 GMT Subject: CN=68c201be-4499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:50:f4:58:50:57:9d:f4:d9:b1:ff:44:9c: 2b:d4:09:e9:01:25:32:ce:55:2d:aa:58:c6:ee:06: d7:fc:fb:d9:c5:e9:dc:1b:37:63:fe:cd:f8:2a:72: a9:d2:db:4a:0a:4e:c4:41:45:3d:d5:42:5b:7a:90: 0a:05:63:e7:60:35:ff:87:5a:3b:f8:5e:8d:4b:24: 3b:d6:fe:bd:89:56:af:0b:f3:55:84:1e:ba:70:6d: 05:02:eb:51:94:0a:7c:a6:18:fd:e8:b2:6e:61:88: 0b:f0:bc:d8:d7:db:51:da:8b:7f:bd:3c:30:cd:87: 93:5c:f0:8a:1d:39:5d:16:1a:67:a0:ea:6a:1f:0f: 83:63:ac:8c:d6:cc:b7:9c:6c:11:32:ff:5e:75:50: 7e:bb:fe:6b:a2:f5:cb:fa:a1:4f:26:44:bf:0f:4c: 4a:e6:06:93:fb:c5:05:56:17:3f:ef:09:c4:39:0b: 2d:f2:32:8d:b5:08:a7:97:a1:84:d0:0d:29:47:2d: 67:c3:ea:2a:c0:97:93:52:03:d3:29:8c:03:2a:78: 02:9c:bd:54:ab:83:a2:48:88:84:d8:96:78:83:fb: 2b:22:5b:55:1f:f9:cf:28:9c:27:42:dc:67:8c:e3: 9f:8d:b7:a3:5b:69:37:7a:b8:2d:91:93:a3:e1:ed: 24:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C5:8D:59:49:08:2A:D0:75:60:56:45:58:C7:A8:B4:CF:75:D9:DA X509v3 Authority Key Identifier: keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:07:24:f7:04:0c:e3:29:cf:1c:89:99:b4:ef:9a:98:f4:a5: d2:2f:51:14:19:c9:bb:ae:95:c6:40:ac:3f:9f:92:84:11:5f: e3:8b:3e:fc:87:c2:08:89:69:ba:68:1f:19:3c:10:ef:a0:6e: 89:4f:61:87:b3:5c:10:9f:eb:4a:3c:a5:48:13:ee:d9:d3:d7: e7:62:1b:0e:b9:6e:8e:98:69:4d:98:30:2d:ac:f2:39:5e:16: 81:9f:05:cc:ab:f2:f4:19:e9:86:bb:47:74:c2:e9:f6:40:32: af:a4:33:92:3d:cc:33:cd:6e:d6:4d:b1:40:9f:37:45:cf:34: 56:32:7c:ef:e2:f0:91:bc:6d:24:c9:19:58:c7:44:b1:d9:6e: 97:6e:df:7f:9e:21:a9:54:ae:1d:c5:81:21:73:ac:a3:32:ee: 27:30:6c:e3:66:07:e9:ea:6c:64:18:70:f7:10:41:e9:6b:c6: ac:ba:67:86:ca:51:7a:1e:56:f2:51:14:c4:6e:c2:29:8d:8c: 80:4a:0a:ce:63:40:89:f2:0f:51:4d:4c:ed:92:55:31:f9:79: e7:b5:5e:db:1e:d4:00:44:6a:21:c3:df:fd:38:ba:9d:e8:04: d5:c4:d3:9e:53:b9:85:a7:14:48:5b:4a:24:a8:55:e4:40:5f: e0:a0:1a:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNUUxMTAvBgNVBAUTKEZBMzU2MDI5RkM3NzJBNUI0MzI2OUMzMTZBRDY4NUM0 QkI1QTY1NkQwHhcNMjUwOTEwMjI1NDUzWhcNMjUwOTE3MjI1NDUzWjAYMRYwFAYD VQQDEw02OGMyMDFiZS00NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFNQ9FhQV5302bH/RJwr1AnpASUyzlUtqljG7gbX/PvZxencGzdj/s34KnKp 0ttKCk7EQUU91UJbepAKBWPnYDX/h1o7+F6NSyQ71v69iVavC/NVhB66cG0FAutR lAp8phj96LJuYYgL8LzY19tR2ot/vTwwzYeTXPCKHTldFhpnoOpqHw+DY6yM1sy3 nGwRMv9edVB+u/5rovXL+qFPJkS/D0xK5gaT+8UFVhc/7wnEOQst8jKNtQinl6GE 0A0pRy1nw+oqwJeTUgPTKYwDKngCnL1Uq4OiSIiE2JZ4g/srIltVH/nPKJwnQtxn jOOfjbejW2k3ergtkZOj4e0kaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHFjVlJ CCrQdWBWRVjHqLTPddnaMB8GA1UdIwQYMBaAFPo1YCn8dypbQyacMWrWhcS7WmVt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI1RS9GNThDNTY5NEE2 RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0tsdERKcHd4YXRhRnhMdGFa VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1qVmdLZngzS2x0REpwd3hhdGFGeEx0YVpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI1RS9GNThDNTY5NEE2RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0ts dERKcHd4YXRhRnhMdGFaVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApByT3BAzjKc8ciZm075qY9KXSL1EUGcm7rpXGQKw/n5KEEV/jiz78 h8IIiWm6aB8ZPBDvoG6JT2GHs1wQn+tKPKVIE+7Z09fnYhsOuW6OmGlNmDAtrPI5 XhaBnwXMq/L0GemGu0d0wun2QDKvpDOSPcwzzW7WTbFAnzdFzzRWMnzv4vCRvG0k yRlYx0Sx2W6Xbt9/niGpVK4dxYEhc6yjMu4nMGzjZgfp6mxkGHD3EEHpa8asumeG ylF6HlbyURTEbsIpjYyASgrOY0CJ8g9RTUztklUx+XnntV7bHtQARGohw9/9OLqd 6ATVxNOeU7mFpxRIW0okqFXkQF/goBrC -----END CERTIFICATE-----Generated at Thu Sep 11 00:28:29 2025 by rpki-client