$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: DuuxXtyDaemOUdj0MfuKqvRjCJHLANcetRp4ffYs4Ss= Subject key identifier: 37:3F:4C:ED:62:F3:79:2E:25:EF:A0:39:F6:43:F2:48:9A:8F:28:F3 Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 085D Signing time: Thu 04 Sep 2025 20:54:19 +0000 Manifest this update: Thu 04 Sep 2025 20:54:19 +0000 Manifest next update: Thu 11 Sep 2025 20:54:19 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: P+BtIC8iQBTeV7lX4btl309yC3C3EzYfM+Tk5ucNPDM=) 2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: p0dIujYYWiasSIWvw6oLscevhcZ90zAQp0NU1grDjpM=) 3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: p+z2UT/W5OYfrXw3co6VYs+yj2ELqUUcJwCs0uSGYiM=) 4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: 44y5fkFaBcGQTsnME/P81706WXBnFbq6HjZsUti9jmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: Sep 4 20:54:19 2025 GMT Not After : Sep 11 20:54:19 2025 GMT Subject: CN=68b9fc7b-1a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d0:38:12:09:3e:a6:01:f0:04:34:d0:93:f7: 16:dc:65:cb:6f:2d:a7:6c:a9:9e:a0:a7:ec:5e:6a: fd:24:c4:2d:13:cf:40:40:8d:5c:69:6b:65:90:b8: b4:cb:60:5e:3d:8d:c1:ec:9a:00:6b:01:ff:f7:a0: 02:73:49:b9:d0:91:21:31:a5:9e:d3:3a:e3:3e:53: e4:87:c8:06:27:23:f0:99:e6:a6:47:9d:9b:33:5c: ad:2b:c4:d8:9e:9f:7d:81:41:9b:8c:0e:a6:a5:12: 3d:71:5f:34:04:a4:00:0a:a5:59:af:cd:88:df:3a: a8:0f:d4:f1:76:1e:79:59:53:b3:3e:b6:07:f6:86: ad:76:7e:3b:d2:55:3b:ad:f8:85:78:8a:63:37:ca: f1:c3:e2:af:73:ac:f9:79:25:5a:a3:dd:c4:5f:a8: 1c:d3:c8:5b:a8:22:91:22:ef:7f:17:2c:02:b4:46: 9f:56:1d:d4:9d:9b:67:e3:9a:14:97:9c:f3:61:89: fa:56:6e:1c:e8:2b:a2:ab:4c:d4:be:62:72:cb:df: 19:38:d9:c4:e7:f9:32:81:2d:b3:94:fc:2e:be:99: df:7d:a6:14:42:43:01:92:e1:8d:77:d6:d6:26:2d: 64:4b:55:e5:ce:95:b8:47:88:50:8e:93:0b:c3:d5: aa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3F:4C:ED:62:F3:79:2E:25:EF:A0:39:F6:43:F2:48:9A:8F:28:F3 X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:8d:4c:85:e3:0d:17:17:fa:46:c6:a4:f1:b7:b4:fe:51:b1: 71:32:7e:7d:f3:ae:70:cd:11:c5:4e:81:a2:10:c0:30:1b:bf: 4c:ce:13:ca:72:5d:96:8a:7e:82:c7:14:6b:f4:ee:eb:ad:b0: 5d:f1:87:92:51:0d:2b:1c:15:61:9b:3c:c7:2c:1a:22:4e:80: 92:94:48:13:36:81:fb:ef:6c:c3:ac:1d:70:99:7f:5f:c9:d5: 4e:13:89:13:ae:44:88:3c:89:70:93:f7:fc:d1:db:8a:c9:b4: 1a:d4:ba:26:5b:6c:6d:91:76:34:79:d1:6b:10:ad:f6:5f:1a: 58:e5:82:f8:b0:42:1f:9d:15:62:8e:f2:09:78:21:07:47:04: e4:68:82:23:55:ee:f0:b4:fd:74:1a:56:e2:51:49:ba:74:71: 00:83:77:88:a7:4e:67:7b:d5:6c:46:ed:05:01:09:4f:71:74: 12:63:ac:6e:12:af:bb:3b:52:ee:06:70:69:e5:39:1a:3a:59: c4:d6:ac:3d:5a:b1:ca:8e:f5:f2:02:cd:ea:d9:33:63:54:a9: 3f:71:54:0f:1a:67:bc:ae:e8:40:22:95:de:c1:1f:f3:5b:1a: 99:6a:1c:37:87:2f:36:58:cd:48:a4:4d:15:18:0b:dd:b9:aa: 7d:af:cc:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjUwOTA0MjA1NDE5WhcNMjUwOTExMjA1NDE5WjAYMRYwFAYD VQQDEw02OGI5ZmM3Yi0xYTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dA4Egk+pgHwBDTQk/cW3GXLby2nbKmeoKfsXmr9JMQtE89AQI1caWtlkLi0 y2BePY3B7JoAawH/96ACc0m50JEhMaWe0zrjPlPkh8gGJyPwmeamR52bM1ytK8TY np99gUGbjA6mpRI9cV80BKQACqVZr82I3zqoD9Txdh55WVOzPrYH9oatdn470lU7 rfiFeIpjN8rxw+Kvc6z5eSVao93EX6gc08hbqCKRIu9/FywCtEafVh3UnZtn45oU l5zzYYn6Vm4c6Cuiq0zUvmJyy98ZONnE5/kygS2zlPwuvpnffaYUQkMBkuGNd9bW Ji1kS1XlzpW4R4hQjpMLw9WqZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDc/TO1i 83kuJe+gOfZD8kiajyjzMB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIjUyF4w0XF/pGxqTxt7T+UbFxMn59865wzRHFToGiEMAwG79MzhPK cl2Win6CxxRr9O7rrbBd8YeSUQ0rHBVhmzzHLBoiToCSlEgTNoH772zDrB1wmX9f ydVOE4kTrkSIPIlwk/f80duKybQa1LomW2xtkXY0edFrEK32XxpY5YL4sEIfnRVi jvIJeCEHRwTkaIIjVe7wtP10GlbiUUm6dHEAg3eIp05ne9VsRu0FAQlPcXQSY6xu Eq+7O1LuBnBp5TkaOlnE1qw9WrHKjvXyAs3q2TNjVKk/cVQPGme8ruhAIpXewR/z WxqZahw3hy82WM1IpE0VGAvduap9r8xE -----END CERTIFICATE-----Generated at Sat Sep 6 14:26:10 2025 by rpki-client