$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft File: n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json) Hash identifier: pExPtRkVIn6kcPYvKDlC/PQxh3wuiica2lLjTJWO4t0= Subject key identifier: EB:5A:2D:C3:03:87:D9:B1:A8:92:DB:CB:3A:5D:4F:A6:5F:BB:DC:31 Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft Manifest number: E8 Signing time: Fri 05 Sep 2025 05:47:00 +0000 Manifest this update: Fri 05 Sep 2025 05:47:00 +0000 Manifest next update: Fri 12 Sep 2025 05:47:00 +0000 Files and hashes: 1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: J+KcYSEZnM0LQ4CQWGoUK2ajN9pORdv8eihp060Aj9M=) 2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: 9SfUJfJUPtuZxpNRWiY6Pmy+Ome8ao9OIJR1s6GbHE8=) 3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: F0SsWsfme5DR54sccnOQA0ilylY47//E27uoZDHPm3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Validity Not Before: Sep 5 05:47:00 2025 GMT Not After : Sep 12 05:47:00 2025 GMT Subject: CN=68ba7954-f08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7f:01:b4:98:50:1d:4e:06:23:53:17:91:5a: d9:f8:6f:b0:e4:9c:ca:b9:16:97:89:11:08:7e:a8: 6b:7c:2e:47:26:6a:a0:db:30:51:38:76:28:3a:c9: 6c:fc:37:6a:98:4f:3e:20:43:64:e4:4c:a0:8c:27: 74:bd:e9:42:12:e6:3e:7c:62:20:ea:bf:cf:59:c1: d0:61:39:d2:5a:5d:57:0c:b0:58:91:0e:fb:15:36: 30:1f:b9:33:4c:0d:39:90:b5:b3:0f:5c:d3:56:4e: ae:8d:df:cf:49:0b:36:14:af:de:9e:ea:3a:31:03: 60:88:7c:71:ce:89:55:6b:7f:36:12:34:22:08:d2: 7b:3f:3e:32:5e:3a:4d:f0:61:86:dd:19:c2:a0:b2: ac:a7:ed:21:e3:57:b0:90:21:0d:5f:34:ca:97:c6: 0b:32:52:7d:32:34:ad:df:9e:eb:38:64:82:0c:af: 85:fc:70:bc:e8:f4:d4:8b:bc:4b:98:32:4b:fd:da: e8:c4:40:44:bf:84:a2:01:07:7d:20:cc:e8:f4:f9: 3e:82:c4:71:ed:d4:21:8a:42:e9:72:3e:5c:dc:75: 1b:c1:43:e8:b3:84:e4:a8:4a:21:5c:7f:c5:92:42: 0f:90:62:d3:e5:c1:67:85:30:eb:b7:d3:d7:07:46: 41:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5A:2D:C3:03:87:D9:B1:A8:92:DB:CB:3A:5D:4F:A6:5F:BB:DC:31 X509v3 Authority Key Identifier: keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:46:74:e0:1a:b2:6f:25:f5:d7:69:56:12:11:d1:bc:6b:51: da:6a:a3:46:ee:a8:37:77:a4:f5:6c:33:63:fb:f8:70:d9:9d: 44:a3:f3:2a:ed:97:35:c0:6c:b2:dd:0d:7b:03:da:b8:c1:0f: 94:01:62:29:07:15:44:2d:f6:20:4f:1e:10:34:b5:68:41:ab: ac:8b:2a:e3:a4:2b:e1:f6:b2:98:59:7e:75:d1:dd:dd:4d:d9: f1:c0:cb:d8:e1:5c:da:f4:3c:62:70:56:b7:d0:dc:c7:77:8a: 07:f2:fa:54:66:c5:15:e3:7b:f7:da:1a:0b:d0:2f:5f:66:28: 55:77:0d:57:46:52:95:f6:eb:08:79:38:6e:ff:d2:61:30:81: 84:62:0f:70:03:b7:26:4e:a5:f8:68:76:5e:68:3c:0e:23:2e: 1d:46:e6:4f:9d:c0:5a:12:27:b2:a6:f6:4d:ff:d6:63:d1:f0: 55:1d:9d:3a:ac:ea:88:2a:f8:d8:63:b3:9c:bb:a7:49:1a:0e: 5f:18:81:80:f2:b3:5c:cc:5a:3b:ab:dc:2f:cc:2d:32:6d:dc: 53:0b:70:20:bf:aa:fc:d0:df:7f:81:c8:4c:d7:5f:9c:60:f3: e0:91:6d:82:c4:48:ec:e2:f1:3b:40:40:95:8f:75:1c:3e:81: 57:56:b8:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGRkExMTAvBgNVBAUTKDlGRTg4MUQ4QkQzMkFEMTVBQjdCRTdCNEVDNEY3NTIy MTI1NDZDNzYwHhcNMjUwOTA1MDU0NzAwWhcNMjUwOTEyMDU0NzAwWjAYMRYwFAYD VQQDEw02OGJhNzk1NC1mMDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2X8BtJhQHU4GI1MXkVrZ+G+w5JzKuRaXiREIfqhrfC5HJmqg2zBROHYoOsls /DdqmE8+IENk5EygjCd0velCEuY+fGIg6r/PWcHQYTnSWl1XDLBYkQ77FTYwH7kz TA05kLWzD1zTVk6ujd/PSQs2FK/enuo6MQNgiHxxzolVa382EjQiCNJ7Pz4yXjpN 8GGG3RnCoLKsp+0h41ewkCENXzTKl8YLMlJ9MjSt357rOGSCDK+F/HC86PTUi7xL mDJL/droxEBEv4SiAQd9IMzo9Pk+gsRx7dQhikLpcj5c3HUbwUPos4TkqEohXH/F kkIPkGLT5cFnhTDrt9PXB0ZBkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtaLcMD h9mxqJLbyzpdT6Zfu9wxMB8GA1UdIwQYMBaAFJ/ogdi9Mq0Vq3vntOxPdSISVGx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEZGQS8wNTg2MDY4QTJC N0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJSV3JlLWUwN0U5MUloSlVi SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24taUIyTDB5clJXcmUtZTA3RTkxSWhKVWJIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEZGQS8wNTg2MDY4QTJCN0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJS V3JlLWUwN0U5MUloSlViSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDRnTgGrJvJfXXaVYSEdG8a1HaaqNG7qg3d6T1bDNj+/hw2Z1Eo/Mq 7Zc1wGyy3Q17A9q4wQ+UAWIpBxVELfYgTx4QNLVoQausiyrjpCvh9rKYWX510d3d TdnxwMvY4Vza9DxicFa30NzHd4oH8vpUZsUV43v32hoL0C9fZihVdw1XRlKV9usI eThu/9JhMIGEYg9wA7cmTqX4aHZeaDwOIy4dRuZPncBaEieypvZN/9Zj0fBVHZ06 rOqIKvjYY7Ocu6dJGg5fGIGA8rNczFo7q9wvzC0ybdxTC3Agv6r80N9/gchM11+c YPPgkW2CxEjs4vE7QECVj3UcPoFXVrii -----END CERTIFICATE-----Generated at Sat Sep 6 15:30:49 2025 by rpki-client