$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json) Hash identifier: S2+e3OUrafB85wT7+H07MIileUhjsdxWss50KxH7vzE= Subject key identifier: 73:4D:C4:D0:23:69:48:BF:66:42:A6:1E:C0:E4:90:C4:A4:AD:7B:85 Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 07CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft Manifest number: 07C6 Signing time: Sat 06 Sep 2025 21:26:31 +0000 Manifest this update: Sat 06 Sep 2025 21:26:31 +0000 Manifest next update: Sat 13 Sep 2025 21:26:31 +0000 Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: +9FfLpHKDb/Ew+2ANXCIheG7uu20gManpftN78HGN6I=) 2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: OxZStMenvNbbBM0B5p11XZWipGKvwq8HkkBRgx7lHnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: Sep 6 21:26:31 2025 GMT Not After : Sep 13 21:26:31 2025 GMT Subject: CN=68bca707-ef06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:67:b6:59:be:4e:93:c3:e9:36:43:08:06: d5:0b:03:45:85:f7:e9:f9:3f:77:36:01:f8:6d:c9: 53:eb:91:81:e0:bf:f8:bc:ce:80:d7:ab:9a:d4:ce: 5e:24:4f:b7:38:40:bf:a3:36:2d:b5:a3:d0:fe:a7: a1:40:dc:f4:4c:38:03:21:64:c8:79:b4:75:af:d8: c6:0d:e6:50:52:0c:3c:eb:f4:99:1c:29:bc:a6:ea: ca:80:eb:13:79:f7:08:3b:f3:3e:58:8a:d1:fe:dd: 87:fb:b8:80:84:66:41:9c:50:39:e1:2e:69:44:14: a2:fa:e6:e7:11:35:17:b8:ce:04:f2:d4:1a:90:df: 09:51:fe:4c:ea:f5:76:69:df:f7:7f:a9:de:5e:b8: 26:e9:75:10:4f:7c:c7:45:73:8b:76:9d:25:dc:0c: b1:6f:84:f6:df:d7:a6:47:ee:b0:c0:1a:12:65:6c: 77:f4:f9:d5:9b:16:b6:34:4f:9d:69:cc:da:2d:bc: 30:59:e4:f2:23:02:d2:de:f1:06:5d:8a:14:81:6f: a9:9d:70:4a:26:bc:30:0b:48:41:90:33:37:1d:f1: 11:5d:f3:f4:60:1d:7c:31:5d:43:76:1a:66:35:61: f8:ca:66:7c:b3:9b:79:de:27:13:d8:a8:8d:a2:11: 8b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4D:C4:D0:23:69:48:BF:66:42:A6:1E:C0:E4:90:C4:A4:AD:7B:85 X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:cf:b0:26:74:98:f1:c1:ca:45:6c:bd:a2:38:00:bd:6a:f2: a7:52:4c:a2:1c:9b:72:f0:d6:e4:93:12:38:26:40:bd:e7:71: 53:49:2d:e2:db:ce:d8:57:88:04:15:ad:ab:1d:56:f5:ea:e0: b0:18:91:74:a5:11:d5:a8:cb:5f:ec:a6:71:9d:d9:7c:b7:f2: 03:29:cc:ea:e4:f0:e3:3c:d5:fa:36:0d:7e:31:37:d0:f2:47: 2f:fd:11:f1:f1:b9:df:88:43:56:2e:07:80:b9:8a:cc:a2:a5: b7:4a:22:88:11:29:72:3e:13:51:31:02:cb:9a:71:81:e8:00: 6a:47:14:02:b3:65:eb:07:fd:05:ee:72:63:85:f6:43:6d:57: 5c:ed:8b:d7:a2:b0:6e:cd:ca:4a:08:ca:95:19:78:01:ee:e4: 9e:d3:59:d1:79:e4:bb:81:65:2f:55:d5:fd:84:de:d9:7f:8a: d1:c3:d5:c2:2d:e4:b0:c4:59:ea:6a:a1:31:f7:b6:33:ea:aa: 04:65:32:bb:cd:c7:79:9f:3d:cc:87:5a:4a:0a:33:51:a6:bc: e9:4f:08:16:16:af:87:f9:ad:11:8c:fb:10:c6:45:3b:a1:bc: c7:ec:52:9f:83:b9:8e:cc:d7:9a:4a:eb:c1:0d:79:1b:95:48: c0:f5:60:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjUwOTA2MjEyNjMxWhcNMjUwOTEzMjEyNjMxWjAYMRYwFAYD VQQDEw02OGJjYTcwNy1lZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKVntlm+TpPD6TZDCAbVCwNFhffp+T93NgH4bclT65GB4L/4vM6A16ua1M5e JE+3OEC/ozYttaPQ/qehQNz0TDgDIWTIebR1r9jGDeZQUgw86/SZHCm8purKgOsT efcIO/M+WIrR/t2H+7iAhGZBnFA54S5pRBSi+ubnETUXuM4E8tQakN8JUf5M6vV2 ad/3f6neXrgm6XUQT3zHRXOLdp0l3Ayxb4T239emR+6wwBoSZWx39PnVmxa2NE+d aczaLbwwWeTyIwLS3vEGXYoUgW+pnXBKJrwwC0hBkDM3HfERXfP0YB18MV1Ddhpm NWH4ymZ8s5t53icT2KiNohGLHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNNxNAj aUi/ZkKmHsDkkMSkrXuFMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0REOS83QzkyQjhFMjA5REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJ dURnUk9iTW5DWVRBb1EtckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVz7AmdJjxwcpFbL2iOAC9avKnUkyiHJty8NbkkxI4JkC953FTSS3i 287YV4gEFa2rHVb16uCwGJF0pRHVqMtf7KZxndl8t/IDKczq5PDjPNX6Ng1+MTfQ 8kcv/RHx8bnfiENWLgeAuYrMoqW3SiKIESlyPhNRMQLLmnGB6ABqRxQCs2XrB/0F 7nJjhfZDbVdc7YvXorBuzcpKCMqVGXgB7uSe01nReeS7gWUvVdX9hN7Zf4rRw9XC LeSwxFnqaqEx97Yz6qoEZTK7zcd5nz3Mh1pKCjNRprzpTwgWFq+H+a0RjPsQxkU7 obzH7FKfg7mOzNeaSuvBDXkblUjA9WAQ -----END CERTIFICATE-----Generated at Sun Sep 7 14:24:53 2025 by rpki-client