$ rpki-client -vvf rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft File: i99RGJodvfloQ0tec2qpq_1FVhw.mft (raw, json) Hash identifier: LZ3JB0gMWCGscEllwnm4uRFwHObdy/DYtwiCqu7189s= Subject key identifier: 1E:7C:CE:5C:5F:53:D7:6A:A5:C3:A1:4A:80:28:82:9C:5E:46:B9:A0 Authority key identifier: 8B:DF:51:18:9A:1D:BD:F9:68:43:4B:5E:73:6A:A9:AB:FD:45:56:1C Certificate issuer: /CN=A9119510/serialNumber=8BDF51189A1DBDF968434B5E736AA9ABFD45561C Certificate serial: 1940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i99RGJodvfloQ0tec2qpq_1FVhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft Manifest number: 1937 Signing time: Mon 08 Sep 2025 16:25:55 +0000 Manifest this update: Mon 08 Sep 2025 16:25:55 +0000 Manifest next update: Mon 15 Sep 2025 16:25:55 +0000 Files and hashes: 1: i99RGJodvfloQ0tec2qpq_1FVhw.crl (hash: RWnww9vcl4C0NBPp6x+r0+GSMKQTyFDXsl2yfFmjUxk=) 2: F13A6FB883D011E7948A8052C4F9AE02.roa (hash: kYdu5SvSND0wTBbIu3Tyn2sefHAK5eSHyt8KcNAu2Mw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.crl rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i99RGJodvfloQ0tec2qpq_1FVhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6464 (0x1940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119510, serialNumber=8BDF51189A1DBDF968434B5E736AA9ABFD45561C Validity Not Before: Sep 8 16:25:55 2025 GMT Not After : Sep 15 16:25:55 2025 GMT Subject: CN=68bf0393-7868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a6:2e:e1:3d:c9:7c:a8:78:3b:d4:16:9a:29: 05:8f:d2:b0:ce:a3:17:82:fb:7a:3d:8d:ba:6b:42: 35:09:81:a2:2e:18:26:33:89:2a:9f:d0:aa:6c:a7: ab:95:62:1b:6a:5b:47:59:e8:b5:9b:13:a4:cd:47: e5:12:75:aa:73:4a:d1:a6:79:c1:c1:7c:c3:81:df: bd:54:bd:44:2d:a3:5a:33:0d:fb:1a:3f:db:96:b8: d4:63:ca:48:ec:8b:c0:81:19:98:1b:df:6c:38:d5: 5a:be:50:64:8f:0e:83:86:3e:95:55:84:21:a3:28: b4:5a:92:a3:ab:7c:52:61:bb:5a:a2:56:9c:06:d7: df:40:e3:07:db:fa:c1:b8:01:d8:e0:74:48:33:8a: b4:31:e3:3d:f7:38:cd:a2:f8:d1:35:94:99:d8:48: cc:32:3d:84:03:e7:ee:1b:0d:8a:75:8e:fa:dc:53: ae:cd:92:09:90:9a:72:63:e4:0e:2f:ae:a8:ce:2d: 53:9c:b9:52:fb:2b:2a:e7:35:90:88:3d:24:87:8b: 8a:bd:cf:4c:04:ea:be:39:2c:15:f1:b4:30:88:ea: 40:9e:df:44:11:3d:e0:42:5f:08:78:8d:68:11:40: f0:e2:3d:39:38:c3:64:c8:03:97:a4:26:9d:a5:13: e0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7C:CE:5C:5F:53:D7:6A:A5:C3:A1:4A:80:28:82:9C:5E:46:B9:A0 X509v3 Authority Key Identifier: keyid:8B:DF:51:18:9A:1D:BD:F9:68:43:4B:5E:73:6A:A9:AB:FD:45:56:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i99RGJodvfloQ0tec2qpq_1FVhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:fa:ec:5a:bf:2f:2b:d8:8b:9f:e6:2f:f0:d0:e3:d7:06:7d: 6f:dd:3d:a1:18:32:20:75:78:70:68:32:c4:32:6a:04:a0:a7: fe:51:eb:56:4b:96:d5:62:93:55:03:c7:05:75:90:35:91:7f: 0b:7a:29:ea:0c:ea:9d:0f:53:32:8b:a2:9d:0e:49:bb:26:5b: a4:05:2d:32:0d:79:ed:88:43:67:39:6e:dc:52:16:5c:2b:3f: c6:3b:38:c2:84:90:31:17:9c:93:91:2d:f1:7d:d8:5e:2e:8a: 16:9e:5b:4d:02:d8:d1:5c:2d:5d:27:ed:67:04:64:0c:59:1c: ee:ab:6b:b8:df:7e:02:c6:1d:a4:5f:7c:6f:f7:06:91:97:e4: 83:70:e0:88:97:c6:b1:01:77:4c:de:e4:58:b3:1d:73:71:a0: cb:65:60:ff:a3:fa:6f:28:24:08:b8:32:ab:20:4e:a7:56:5a: b6:ed:e7:e4:79:73:1d:bb:a3:b4:7b:d9:3a:fc:97:40:f0:19: 77:d8:05:0c:20:37:53:01:9f:7c:b4:04:8d:48:0b:5c:29:d0: 41:50:aa:0e:5d:f4:ca:c5:29:c2:ac:c2:4e:cb:ca:21:6f:3f: fe:6a:e9:2a:8b:03:2e:06:48:22:1b:e9:5f:6e:cd:64:1f:3b: 70:b7:fa:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MTAxMTAvBgNVBAUTKDhCREY1MTE4OUExREJERjk2ODQzNEI1RTczNkFBOUFC RkQ0NTU2MUMwHhcNMjUwOTA4MTYyNTU1WhcNMjUwOTE1MTYyNTU1WjAYMRYwFAYD VQQDEw02OGJmMDM5My03ODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8KYu4T3JfKh4O9QWmikFj9KwzqMXgvt6PY26a0I1CYGiLhgmM4kqn9CqbKer lWIbaltHWei1mxOkzUflEnWqc0rRpnnBwXzDgd+9VL1ELaNaMw37Gj/blrjUY8pI 7IvAgRmYG99sONVavlBkjw6Dhj6VVYQhoyi0WpKjq3xSYbtaolacBtffQOMH2/rB uAHY4HRIM4q0MeM99zjNovjRNZSZ2EjMMj2EA+fuGw2KdY763FOuzZIJkJpyY+QO L66ozi1TnLlS+ysq5zWQiD0kh4uKvc9MBOq+OSwV8bQwiOpAnt9EET3gQl8IeI1o EUDw4j05OMNkyAOXpCadpRPghwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB58zlxf U9dqpcOhSoAogpxeRrmgMB8GA1UdIwQYMBaAFIvfURiaHb35aENLXnNqqav9RVYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUxMC8wRERGNUIwODgz Q0YxMUU3ODM4RUE4NEVDNEY5QUUwMi9pOTlSR0pvZHZmbG9RMHRlYzJxcHFfMUZW aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5OVJHSm9kdmZsb1EwdGVjMnFwcV8xRlZody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUxMC8wRERGNUIwODgzQ0YxMUU3ODM4RUE4NEVDNEY5QUUwMi9pOTlSR0pvZHZm bG9RMHRlYzJxcHFfMUZWaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF+uxavy8r2Iuf5i/w0OPXBn1v3T2hGDIgdXhwaDLEMmoEoKf+UetW S5bVYpNVA8cFdZA1kX8LeinqDOqdD1Myi6KdDkm7JlukBS0yDXntiENnOW7cUhZc Kz/GOzjChJAxF5yTkS3xfdheLooWnltNAtjRXC1dJ+1nBGQMWRzuq2u4334Cxh2k X3xv9waRl+SDcOCIl8axAXdM3uRYsx1zcaDLZWD/o/pvKCQIuDKrIE6nVlq27efk eXMdu6O0e9k6/JdA8Bl32AUMIDdTAZ98tASNSAtcKdBBUKoOXfTKxSnCrMJOy8oh bz/+aukqiwMuBkgiG+lfbs1kHztwt/qG -----END CERTIFICATE-----Generated at Tue Sep 9 13:20:56 2025 by rpki-client