$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft File: G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json) Hash identifier: hnFXiGo5tUtjCwnBnRoIlKTIPgNAzg5daqGp/rE+tOQ= Subject key identifier: 1A:B1:F2:9C:48:24:57:70:E0:AE:82:40:42:CF:83:9F:63:A9:FE:28 Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87 Certificate issuer: /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft Manifest number: 21 Signing time: Fri 05 Sep 2025 08:21:00 +0000 Manifest this update: Fri 05 Sep 2025 08:20:59 +0000 Manifest next update: Fri 12 Sep 2025 08:20:59 +0000 Files and hashes: 1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: QPXA6KS3dsNXwcoAEcCzZ31BxiJKeor3Mo3wz+yYLiM=) 2: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: BfA3s4/uFwS/+pxJ7ydc7p+vBZQ3SLc68WxBr74xpL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487 Validity Not Before: Sep 5 08:20:59 2025 GMT Not After : Sep 12 08:20:59 2025 GMT Subject: CN=68ba9d6b-7c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:46:76:b8:8d:dd:81:b9:ca:02:7a:18:8a:df: 91:d9:21:6c:83:4a:74:83:9f:b3:6b:75:a5:a7:09: d7:35:24:04:0a:31:33:fb:45:74:0b:12:0a:48:f3: 05:ef:1a:90:09:24:45:0d:c9:87:c3:50:4e:63:d9: 4c:97:7d:03:03:95:a9:a6:f5:f0:74:b7:78:0e:8f: ab:68:0c:1d:51:82:86:6f:e9:57:af:c2:bd:ac:04: 7b:80:f4:ec:2a:10:c6:95:91:18:aa:59:43:59:60: 98:15:94:8b:3b:34:6c:53:b1:64:db:26:9b:34:2a: de:0f:d0:e5:2a:b4:56:94:a8:f1:f6:3b:e3:12:cd: 82:89:cc:72:69:4c:5e:92:06:cb:96:81:82:7f:ad: 13:bf:b5:21:85:e0:6a:eb:19:51:3e:ba:2a:29:75: f9:e2:d6:02:da:42:44:aa:f0:98:65:b8:89:a4:45: 60:23:d6:2d:83:15:15:11:38:be:14:d2:42:7e:c2: 40:a3:7a:e9:36:27:77:b8:95:8b:6d:b7:0c:c7:f2: 0e:8d:6d:d2:e6:99:e9:15:f7:e9:c3:ce:85:d5:6f: ac:86:75:22:6f:03:cd:5d:e3:65:b4:e0:eb:78:5c: f6:eb:dd:07:4d:a7:78:76:a6:39:d6:35:d5:85:e4: 7b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:F2:9C:48:24:57:70:E0:AE:82:40:42:CF:83:9F:63:A9:FE:28 X509v3 Authority Key Identifier: keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:55:4a:ab:7c:27:6b:bf:f1:0b:43:f4:e5:6a:a7:bb:1d:b5: d1:81:e0:87:2b:34:ad:7c:cb:48:9b:08:f8:9f:28:7e:5f:6b: 7d:eb:11:c0:8a:4f:04:9d:57:93:5a:bc:6b:c0:62:f3:2b:be: 3f:01:c3:d8:d1:7b:3c:d4:8d:42:9a:70:6e:19:df:26:96:9f: b8:29:a8:88:dd:d5:14:96:df:42:f9:2c:f8:77:23:eb:ba:00: 50:df:03:a8:50:01:7f:6e:53:43:ee:53:4a:bf:50:52:ce:47: dd:f9:b5:af:47:b7:5c:a6:be:84:9d:b7:85:61:68:5b:ea:15: 47:d8:8a:5d:54:a0:44:d4:fd:f6:f7:7e:f8:ef:7c:fd:19:df: f5:25:95:68:91:f1:a4:16:77:20:6a:84:74:f8:79:f3:ae:50: e6:56:58:72:fc:20:19:68:1b:86:d8:72:13:ae:c4:1f:d0:92: e0:1d:b2:64:08:c7:35:48:35:7f:e2:7f:d1:4f:32:44:9e:6f: d1:cd:90:4c:60:29:ee:4f:b9:0f:55:fc:a8:c2:67:01:b2:aa: 85:20:58:2c:60:b4:94:68:de:ad:c4:a6:54:69:42:80:09:2d: 3e:00:36:c1:f4:82:93:2a:c8:e1:7e:66:01:91:54:84:09:08: 64:7d:2b:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REY1NjExMC8GA1UEBRMoMUJENjMzNkI5Nzg2OEMyRjU0RUIzRDk0NzhEMzlFNDE3 MzFENDQ4NzAeFw0yNTA5MDUwODIwNTlaFw0yNTA5MTIwODIwNTlaMBgxFjAUBgNV BAMTDTY4YmE5ZDZiLTdjMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPRna4jd2BucoCehiK35HZIWyDSnSDn7NrdaWnCdc1JAQKMTP7RXQLEgpI8wXv GpAJJEUNyYfDUE5j2UyXfQMDlamm9fB0t3gOj6toDB1RgoZv6Vevwr2sBHuA9Owq EMaVkRiqWUNZYJgVlIs7NGxTsWTbJps0Kt4P0OUqtFaUqPH2O+MSzYKJzHJpTF6S BsuWgYJ/rRO/tSGF4GrrGVE+uiopdfni1gLaQkSq8JhluImkRWAj1i2DFRUROL4U 0kJ+wkCjeuk2J3e4lYtttwzH8g6NbdLmmekV9+nDzoXVb6yGdSJvA81d42W04Ot4 XPbr3QdNp3h2pjnWNdWF5HtNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGrHynEgk V3DgroJAQs+Dn2Op/igwHwYDVR0jBBgwFoAUG9Yza5eGjC9U6z2UeNOeQXMdRIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERjU2LzZENUU2QTU0NUJE MjExRjBCNzM3RDQ1QUM0RjlBRTAyL0c5WXphNWVHakM5VTZ6MlVlTk9lUVhNZFJJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRzlZemE1ZUdqQzlVNnoyVWVOT2VRWE1kUkljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RjU2LzZENUU2QTU0NUJEMjExRjBCNzM3RDQ1QUM0RjlBRTAyL0c5WXphNWVHakM5 VTZ6MlVlTk9lUVhNZFJJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAZVSqt8J2u/8QtD9OVqp7sdtdGB4IcrNK18y0ibCPifKH5fa33rEcCK TwSdV5NavGvAYvMrvj8Bw9jRezzUjUKacG4Z3yaWn7gpqIjd1RSW30L5LPh3I+u6 AFDfA6hQAX9uU0PuU0q/UFLOR935ta9Ht1ymvoSdt4VhaFvqFUfYil1UoETU/fb3 fvjvfP0Z3/UllWiR8aQWdyBqhHT4efOuUOZWWHL8IBloG4bYchOuxB/QkuAdsmQI xzVINX/if9FPMkSeb9HNkExgKe5PuQ9V/KjCZwGyqoUgWCxgtJRo3q3EplRpQoAJ LT4ANsH0gpMqyOF+ZgGRVIQJCGR9K+c= -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:18 2025 by rpki-client