$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft File: P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json) Hash identifier: Pqt6VTVAUQtFRwB81CeFobVv3THUpsKrRnTeQgT0qTg= Subject key identifier: DC:2A:E6:97:C8:EB:E0:D7:26:6F:30:A8:54:A9:EF:26:A0:E9:A2:47 Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D Certificate issuer: /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Certificate serial: 052C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft Manifest number: 0528 Signing time: Thu 18 Sep 2025 23:52:29 +0000 Manifest this update: Thu 18 Sep 2025 23:52:28 +0000 Manifest next update: Thu 25 Sep 2025 23:52:28 +0000 Files and hashes: 1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: +6M2dOcNbkv8VXnoQfgefWgeeVEjPqY5hnYCjoypZtA=) 2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: ECduF6HgxTLoDLFAm0PdDIfSdNYqt9EVcY+nm8e4XyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Validity Not Before: Sep 18 23:52:28 2025 GMT Not After : Sep 25 23:52:28 2025 GMT Subject: CN=68cc9b3d-97bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:ef:47:71:09:ad:5e:1f:3c:69:2f:c6:5a: 9a:e3:2e:c7:b8:80:43:78:49:02:ea:97:61:75:cb: 03:f3:44:b4:be:42:39:9e:bc:96:8d:f4:f2:2a:b2: 81:79:3c:cf:79:80:3c:c1:89:41:df:a6:72:8d:4c: d9:50:50:d8:a8:46:c3:c8:77:fa:bc:3b:d7:f2:82: db:b7:ac:19:45:b1:40:34:0d:a2:d1:db:19:25:f1: cd:06:bb:12:ae:db:c9:74:7a:34:d6:08:4f:42:05: 92:05:a7:31:27:e8:b4:49:fc:64:46:cd:82:12:ce: 49:06:a7:8b:8a:c0:5a:45:25:a7:86:b1:e9:6f:19: 5d:1f:06:9c:cd:da:3c:7e:63:15:88:bb:09:98:b9: b3:dc:bd:c0:22:77:e2:1b:a1:e8:37:90:76:4b:71: 9d:0d:bf:9f:4e:4f:cb:e6:57:be:90:07:9f:af:64: 14:8c:10:03:e6:81:90:14:8d:bd:98:d3:6f:97:61: c4:1e:82:9d:73:a5:84:87:b3:82:e3:25:b8:0e:9c: 6d:61:86:ea:5f:e6:2b:3f:1f:af:97:14:86:10:0f: e3:07:02:a6:03:1b:5e:5f:ed:32:2e:9b:48:ea:70: 06:40:8c:b0:e2:cf:52:52:de:bf:59:de:29:c2:9c: de:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2A:E6:97:C8:EB:E0:D7:26:6F:30:A8:54:A9:EF:26:A0:E9:A2:47 X509v3 Authority Key Identifier: keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:89:96:ec:7b:b7:b5:47:6b:80:62:f9:cf:e9:32:f4:f2:dc: a3:de:14:8c:89:74:74:df:66:e6:ca:e1:c4:20:88:82:2d:40: 17:21:83:51:ec:d1:47:37:94:5f:fa:5b:6b:f5:19:9c:bb:2a: 87:2e:a7:84:6a:84:c4:f2:9f:c2:cf:9a:99:96:dc:32:15:09: 05:67:1b:2b:51:48:32:13:50:83:52:10:a5:fd:46:3f:45:b8: 67:40:4a:70:5e:01:14:f6:df:61:e8:86:ea:91:3e:41:cd:5a: 6b:90:f2:d0:40:7d:76:8b:f1:71:b1:ab:0e:db:54:55:1d:0f: 90:e0:54:35:11:6d:aa:29:5f:b8:e2:70:61:c1:8d:fb:81:c2: 8b:db:1c:fa:e4:bf:ac:a9:5a:f8:11:5d:5c:9a:99:59:92:b7: 20:78:18:56:10:f0:26:12:a1:b5:11:a7:e5:94:ed:a3:00:18: a6:bf:6a:2c:26:32:b5:3e:cc:5c:36:67:61:c2:21:5e:92:ee: 0a:52:ab:c6:66:2c:a0:80:9b:40:cc:97:33:14:e4:82:a6:82: 94:dd:5b:30:97:ff:8f:98:a6:47:15:c6:e0:cf:d1:95:c9:fc: cf:85:72:b1:ea:d6:38:08:5d:41:29:5d:04:19:f7:0b:99:38: 99:52:d4:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ1MUMxMTAvBgNVBAUTKDNGRDUzMTYwMjU3REIwMUIyRUUwRUYwMTNDMUUyRDQy RUIxQTI4OEQwHhcNMjUwOTE4MjM1MjI4WhcNMjUwOTI1MjM1MjI4WjAYMRYwFAYD VQQDEw02OGNjOWIzZC05N2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusPvR3EJrV4fPGkvxlqa4y7HuIBDeEkC6pdhdcsD80S0vkI5nryWjfTyKrKB eTzPeYA8wYlB36ZyjUzZUFDYqEbDyHf6vDvX8oLbt6wZRbFANA2i0dsZJfHNBrsS rtvJdHo01ghPQgWSBacxJ+i0SfxkRs2CEs5JBqeLisBaRSWnhrHpbxldHwaczdo8 fmMViLsJmLmz3L3AInfiG6HoN5B2S3GdDb+fTk/L5le+kAefr2QUjBAD5oGQFI29 mNNvl2HEHoKdc6WEh7OC4yW4DpxtYYbqX+YrPx+vlxSGEA/jBwKmAxteX+0yLptI 6nAGQIyw4s9SUt6/Wd4pwpze0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwq5pfI 6+DXJm8wqFSp7yag6aJHMB8GA1UdIwQYMBaAFD/VMWAlfbAbLuDvATweLULrGiiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDUxQy9CRDMxMjcxNjE0 NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNCc3U0TzhCUEI0dFF1c2FL STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5VXhZQ1Y5c0JzdTRPOEJQQjR0UXVzYUtJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDUxQy9CRDMxMjcxNjE0NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNC c3U0TzhCUEI0dFF1c2FLSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGiZbse7e1R2uAYvnP6TL08tyj3hSMiXR032bmyuHEIIiCLUAXIYNR 7NFHN5Rf+ltr9RmcuyqHLqeEaoTE8p/Cz5qZltwyFQkFZxsrUUgyE1CDUhCl/UY/ RbhnQEpwXgEU9t9h6IbqkT5BzVprkPLQQH12i/FxsasO21RVHQ+Q4FQ1EW2qKV+4 4nBhwY37gcKL2xz65L+sqVr4EV1cmplZkrcgeBhWEPAmEqG1EafllO2jABimv2os JjK1PsxcNmdhwiFeku4KUqvGZiyggJtAzJczFOSCpoKU3Vswl/+PmKZHFcbgz9GV yfzPhXKx6tY4CF1BKV0EGfcLmTiZUtQn -----END CERTIFICATE-----Generated at Fri Sep 19 02:38:17 2025 by rpki-client