$ rpki-client -vvf rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft File: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft (raw, json) Hash identifier: Y5sexjvs4t8s9m9qEwQblSohNN8tpFo7gT2Z/OOdymA= Subject key identifier: 5D:07:FC:58:53:DD:2C:35:45:CA:4F:65:42:76:89:A2:2C:CC:94:F9 Authority key identifier: 95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0 Certificate issuer: /CN=A9118749/serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft Manifest number: 81 Signing time: Fri 19 Sep 2025 07:29:00 +0000 Manifest this update: Fri 19 Sep 2025 07:28:59 +0000 Manifest next update: Fri 26 Sep 2025 07:28:59 +0000 Files and hashes: 1: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl (hash: ksHjyE/PErKmJoVGSGxMyzFcU4VkgRhS0OxOllKSCfM=) 2: 0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa (hash: 03QUr5ZAl3/ykq0wAZ+dvJyS4Q+1vw+rUu54WRSVzn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118749, serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0 Validity Not Before: Sep 19 07:28:59 2025 GMT Not After : Sep 26 07:28:59 2025 GMT Subject: CN=68cd063c-c713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ea:8f:97:c3:bb:af:57:6f:e4:e2:f8:dd:5d: 12:b0:a6:51:ce:b2:e5:81:07:9a:78:92:6a:58:d8: d2:a8:24:4f:56:e2:f3:f2:4b:a3:76:c3:1e:10:5c: 0c:b3:2f:f5:aa:86:d1:3d:01:69:83:ce:b5:c9:74: f3:7f:dd:96:1d:5a:94:7b:c7:d6:d4:69:f1:63:25: 1a:0a:3d:d3:8e:8d:90:ea:f4:56:74:2d:ac:e9:81: cb:2a:b2:e9:8d:47:35:d1:21:1b:69:c3:4f:51:3c: e5:a4:6a:03:72:a8:18:85:2f:e4:ac:8c:20:56:d1: a3:71:28:9b:6c:0b:b8:b6:c9:e7:4c:ad:f8:91:00: e6:e1:73:ec:2e:09:e3:e8:a0:8a:b0:34:0b:03:05: 70:b6:f8:27:78:42:16:12:fb:74:ec:93:30:37:1a: 3d:ad:6c:df:74:f5:f1:1b:61:e8:b1:94:f2:14:29: 0a:72:e2:89:87:77:c2:79:d1:16:6c:f8:d0:1c:27: 6b:ad:36:81:ef:dd:4b:38:74:e8:57:cc:15:43:85: fa:7e:dc:47:18:38:55:ee:ed:3b:74:c0:6f:92:f8: cb:b6:8e:df:25:33:27:9d:b0:82:c9:f7:42:12:bd: 99:8e:5f:76:01:fc:16:90:42:82:84:a9:0a:da:af: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:07:FC:58:53:DD:2C:35:45:CA:4F:65:42:76:89:A2:2C:CC:94:F9 X509v3 Authority Key Identifier: keyid:95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:11:53:ce:f4:c2:a3:ae:92:fc:5b:35:d6:f0:52:e9:d7:d3: 5f:a4:5f:cf:fb:52:1e:8c:e4:cb:9b:30:98:f4:77:ef:18:34: d4:27:7b:7b:16:f9:62:f4:39:ac:d8:e2:87:2d:eb:97:0c:09: 54:9e:24:a3:7c:37:0b:ce:6d:48:13:37:2d:7e:81:ae:aa:54: f1:21:f0:ed:1a:00:9b:b3:d1:d0:cb:8f:f6:94:da:56:0a:6f: 87:c3:57:f2:91:a8:94:2a:3d:61:30:57:29:87:ab:08:07:43: 90:7b:54:f5:82:81:a5:db:27:cb:3b:48:6a:76:9e:5d:8a:04: bd:02:bc:d2:ac:5d:2a:38:06:47:af:91:d0:02:b7:c4:63:82: b0:05:a5:6f:c4:0f:64:5f:00:a0:ae:fd:1a:47:8b:44:9d:59: 82:cb:80:42:e0:ef:29:07:33:fc:f9:82:e6:25:96:c1:d1:e1: 92:7d:9b:0a:d7:51:ef:d3:10:e8:b0:64:fd:dc:e9:c3:40:b4: 1a:79:4e:a3:6a:ec:b5:96:83:22:7a:2c:9b:d9:6d:5a:29:dd: c5:c8:ae:c4:7e:f1:36:f6:9c:35:d4:26:28:c0:13:d9:3b:95: 7d:67:2f:1c:65:80:59:8a:62:25:97:0b:cc:21:0d:eb:cb:49: 05:e7:08:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3NDkxMTAvBgNVBAUTKDk1NDU5RDVEMUVCMDQwOTVGRDE2M0YwRDg0RDFGM0E0 NkMxNUU0RjAwHhcNMjUwOTE5MDcyODU5WhcNMjUwOTI2MDcyODU5WjAYMRYwFAYD VQQDEw02OGNkMDYzYy1jNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eqPl8O7r1dv5OL43V0SsKZRzrLlgQeaeJJqWNjSqCRPVuLz8kujdsMeEFwM sy/1qobRPQFpg861yXTzf92WHVqUe8fW1GnxYyUaCj3Tjo2Q6vRWdC2s6YHLKrLp jUc10SEbacNPUTzlpGoDcqgYhS/krIwgVtGjcSibbAu4tsnnTK34kQDm4XPsLgnj 6KCKsDQLAwVwtvgneEIWEvt07JMwNxo9rWzfdPXxG2HosZTyFCkKcuKJh3fCedEW bPjQHCdrrTaB791LOHToV8wVQ4X6ftxHGDhV7u07dMBvkvjLto7fJTMnnbCCyfdC Er2Zjl92AfwWkEKChKkK2q86GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0H/FhT 3Sw1RcpPZUJ2iaIszJT5MB8GA1UdIwQYMBaAFJVFnV0esECV/RY/DYTR86RsFeTw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODc0OS9CQTU3REJBNkRD MjAxMUVGOTFCNTQwMUVDNEY5QUUwMi9sVVdkWFI2d1FKWDlGajhOaE5IenBHd1Y1 UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xVV2RYUjZ3UUpYOUZqOE5oTkh6cEd3VjVQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODc0OS9CQTU3REJBNkRDMjAxMUVGOTFCNTQwMUVDNEY5QUUwMi9sVVdkWFI2d1FK WDlGajhOaE5IenBHd1Y1UEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQEVPO9MKjrpL8WzXW8FLp19NfpF/P+1IejOTLmzCY9HfvGDTUJ3t7 Fvli9Dms2OKHLeuXDAlUniSjfDcLzm1IEzctfoGuqlTxIfDtGgCbs9HQy4/2lNpW Cm+Hw1fykaiUKj1hMFcph6sIB0OQe1T1goGl2yfLO0hqdp5digS9ArzSrF0qOAZH r5HQArfEY4KwBaVvxA9kXwCgrv0aR4tEnVmCy4BC4O8pBzP8+YLmJZbB0eGSfZsK 11Hv0xDosGT93OnDQLQaeU6jauy1loMieiyb2W1aKd3FyK7EfvE29pw11CYowBPZ O5V9Zy8cZYBZimIllwvMIQ3ry0kF5whI -----END CERTIFICATE-----Generated at Fri Sep 19 10:47:05 2025 by rpki-client