$ rpki-client -vvf rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft File: ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft (raw, json) Hash identifier: nft+G7z2tuB+We2KUAxH0z+Nyqw2F6A5QdgY65rzEMY= Subject key identifier: 9F:54:0F:5B:60:A4:A2:1E:12:08:D2:F8:05:DB:40:10:D6:69:26:0E Authority key identifier: 22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 Certificate issuer: /CN=A911A828/serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft Manifest number: 01E6 Signing time: Wed 17 Sep 2025 03:04:43 +0000 Manifest this update: Wed 17 Sep 2025 03:04:43 +0000 Manifest next update: Wed 24 Sep 2025 03:04:43 +0000 Files and hashes: 1: ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl (hash: MIiYCZp1nZ5FoKh8rqOlEgG9o/D9DX4YRcEkRzbPvq8=) 2: E816DFFAA90111ED867DA161C4F9AE02.roa (hash: J+hbcg1f000uZywitLiVEmVwojqXye5u/Ee0tXQliec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A828, serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Validity Not Before: Sep 17 03:04:43 2025 GMT Not After : Sep 24 03:04:43 2025 GMT Subject: CN=68ca254b-53d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:ea:47:a9:2c:ed:28:cd:97:21:0a:16:a0: 8a:7f:f5:77:9f:f4:02:47:da:03:eb:35:f2:9a:5c: 14:be:45:a3:7d:9a:9c:d0:c3:6a:97:c8:08:a2:e3: 4e:de:93:85:8c:72:6d:23:db:e7:b3:23:dd:e7:e3: 08:41:5e:0c:dd:0e:cc:d4:7e:4a:d8:73:08:43:07: 81:bd:3c:be:ef:07:54:23:61:f2:35:66:25:57:9e: e9:4c:0c:51:32:17:33:19:f5:af:1a:af:dd:f7:08: ec:ba:d3:8b:69:7b:bb:5e:2f:f5:85:b1:64:d4:f2: 8a:6b:f4:e7:c6:92:0a:92:e8:b7:2b:40:0a:c5:0e: b4:b8:8d:47:0e:4f:a4:9b:4e:f3:20:60:f5:28:40: b3:5e:10:3a:89:4a:5d:56:ac:b6:3c:5d:19:74:d8: 6a:9b:f4:5d:3a:5b:16:7c:62:60:fe:e5:1c:0e:20: 3e:87:42:02:8b:8d:b1:76:5f:ee:71:93:89:93:b6: 98:ee:f3:75:a1:0b:c0:ef:5d:0e:b8:9b:3a:69:13: 04:2e:e6:8d:a2:aa:03:fe:1c:3c:a1:ae:1d:9b:b6: 28:f5:79:4e:bf:e3:22:89:92:b0:3d:30:20:b8:22: 54:af:14:17:e9:d1:6e:fd:b0:1d:15:49:a2:ec:3f: 9b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:54:0F:5B:60:A4:A2:1E:12:08:D2:F8:05:DB:40:10:D6:69:26:0E X509v3 Authority Key Identifier: keyid:22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6f:00:a0:e8:13:5e:3d:35:ac:6f:5f:01:ac:e9:4e:cc:70: ab:00:ed:fe:2f:d0:c3:29:50:38:d8:3b:af:3f:59:48:9f:f6: 04:c8:f8:c2:a2:5e:d1:a8:0a:23:09:00:17:71:b2:86:bc:5e: 16:74:7f:2c:df:d7:0c:a4:83:06:91:61:7f:91:1d:3a:32:4c: 31:6b:f2:44:7e:b9:cb:16:9b:69:21:9d:2d:4a:8e:af:c2:ca: b8:95:27:ff:d8:63:82:c0:a0:ab:c6:e0:e0:b8:2a:71:7c:4d: 25:42:f9:18:1f:c1:d8:23:63:5b:ec:f1:38:3b:10:da:13:db: ab:88:cd:12:38:2e:cf:b0:3d:09:4d:15:3d:7b:b6:5f:20:7f: 82:2b:96:ee:2c:68:f4:f1:5a:8a:cc:b9:a8:a3:8b:fc:ef:1f: 6c:2f:30:44:df:f3:3f:d0:d7:e5:18:6a:f3:77:80:f6:d9:b1: 1a:8c:ec:d8:38:a6:93:13:8c:64:54:5b:b2:d2:80:63:08:fc: 37:39:b2:67:f5:55:9d:21:19:a5:36:ff:d0:ec:ed:ff:4c:ec: 61:69:e3:f4:5c:10:66:41:bb:2b:15:45:99:7b:b8:1c:97:54: a2:9d:e6:32:d6:2b:b6:34:f9:3d:5d:9c:85:80:c5:e5:2f:64: f2:98:1d:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE4MjgxMTAvBgNVBAUTKDIyNjAzRDZBMzNGMDZFMEE5RDEwRkJCMUVEOUUxRDM3 NDkyNDcwMDEwHhcNMjUwOTE3MDMwNDQzWhcNMjUwOTI0MDMwNDQzWjAYMRYwFAYD VQQDEw02OGNhMjU0Yi01M2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHrqR6ks7SjNlyEKFqCKf/V3n/QCR9oD6zXymlwUvkWjfZqc0MNql8gIouNO 3pOFjHJtI9vnsyPd5+MIQV4M3Q7M1H5K2HMIQweBvTy+7wdUI2HyNWYlV57pTAxR MhczGfWvGq/d9wjsutOLaXu7Xi/1hbFk1PKKa/TnxpIKkui3K0AKxQ60uI1HDk+k m07zIGD1KECzXhA6iUpdVqy2PF0ZdNhqm/RdOlsWfGJg/uUcDiA+h0ICi42xdl/u cZOJk7aY7vN1oQvA710OuJs6aRMELuaNoqoD/hw8oa4dm7Yo9XlOv+MiiZKwPTAg uCJUrxQX6dFu/bAdFUmi7D+bJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9UD1tg pKIeEgjS+AXbQBDWaSYOMB8GA1UdIwQYMBaAFCJgPWoz8G4KnRD7se2eHTdJJHAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTgyOC9EREY5MDA1QUE4 RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2JncWRFUHV4N1o0ZE4wa2tj QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ltQTlhalB3YmdxZEVQdXg3WjRkTjBra2NBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTgyOC9EREY5MDA1QUE4RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2Jn cWRFUHV4N1o0ZE4wa2tjQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvbwCg6BNePTWsb18BrOlOzHCrAO3+L9DDKVA42DuvP1lIn/YEyPjC ol7RqAojCQAXcbKGvF4WdH8s39cMpIMGkWF/kR06Mkwxa/JEfrnLFptpIZ0tSo6v wsq4lSf/2GOCwKCrxuDguCpxfE0lQvkYH8HYI2Nb7PE4OxDaE9uriM0SOC7PsD0J TRU9e7ZfIH+CK5buLGj08VqKzLmoo4v87x9sLzBE3/M/0NflGGrzd4D22bEajOzY OKaTE4xkVFuy0oBjCPw3ObJn9VWdIRmlNv/Q7O3/TOxhaeP0XBBmQbsrFUWZe7gc l1SineYy1iu2NPk9XZyFgMXlL2TymB2s -----END CERTIFICATE-----Generated at Fri Sep 19 00:57:37 2025 by rpki-client