$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json) Hash identifier: mNhYHgzdNZ+KF1htPNJPnlAFn99RwxNHSNeRrMln4Ao= Subject key identifier: 16:A7:51:80:00:4A:4E:4A:F4:2F:64:CF:03:D5:D2:13:B3:5A:C9:73 Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft Manifest number: 0215 Signing time: Fri 19 Sep 2025 02:32:13 +0000 Manifest this update: Fri 19 Sep 2025 02:32:13 +0000 Manifest next update: Fri 26 Sep 2025 02:32:13 +0000 Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: kheL2EtiBG3RazLxirDu0UlckVB7+6nzW+2ekfVFW4Y=) 2: B695C976638F11EDB427BF33C4F9AE02.roa (hash: Bfu/ALycXYH90jyLAqZWBRVy+FwJZTHe9HY8IeLE+Bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 02:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: Sep 19 02:32:13 2025 GMT Not After : Sep 26 02:32:13 2025 GMT Subject: CN=68ccc0ad-6cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:84:6b:03:71:6f:88:a2:1d:47:40:69:fb: 13:5c:d3:c2:f2:c4:b6:58:ae:64:bc:fe:8b:f0:92: be:65:d4:0c:81:3c:fc:83:89:30:ea:2c:ec:a5:ac: 22:fb:58:6b:86:02:ce:70:b4:2a:0b:34:36:f9:b2: dc:2d:f6:46:84:02:46:7d:83:2e:08:b7:d1:93:38: e7:66:43:b0:56:4b:0f:8b:18:fc:ac:c9:5c:7d:20: a7:30:7a:61:d2:e9:fc:44:1c:21:0d:88:1f:4b:13: 6d:a3:9b:8c:2e:e0:17:ac:36:b5:cb:70:dd:7c:73: 66:4b:61:a8:32:79:f3:09:56:2d:24:5c:76:95:66: dc:1f:46:a8:aa:e1:e2:c6:a4:23:db:9c:66:60:48: fc:e1:ac:0e:f9:3a:ca:f5:e8:89:34:37:06:1e:e1: 5d:19:a7:41:55:7e:dc:4a:58:9c:2b:7b:0b:22:70: b6:68:3d:14:42:35:78:3b:22:8a:d0:67:25:81:be: ab:d4:b7:59:02:a4:a9:16:80:8d:c6:4d:76:81:bb: 7f:6a:9c:aa:21:ec:2b:43:63:a3:1f:cb:81:42:1e: 18:59:83:ef:24:14:50:4d:20:d8:7b:d6:7e:b3:69: cb:be:bc:50:38:13:57:46:94:10:78:cd:7d:29:73: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A7:51:80:00:4A:4E:4A:F4:2F:64:CF:03:D5:D2:13:B3:5A:C9:73 X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e0:5c:fc:4e:bb:9f:a1:2c:12:9f:d0:72:68:f6:a1:9e:a4: 3c:e9:bc:95:a8:4a:f7:48:35:3a:56:71:c1:6f:38:89:be:10: ff:07:9f:3f:85:0e:01:09:58:3e:6a:3d:93:c5:a4:c8:9b:09: b9:6c:b2:51:97:73:10:42:ea:cf:18:15:d2:bd:67:f7:a8:d4: ff:0a:ca:94:32:48:7a:6c:06:89:dd:65:34:22:06:21:9b:4a: 36:1f:32:03:34:0b:a7:a1:b9:74:ad:9b:12:21:92:72:b2:78: 56:fb:98:95:44:ce:c0:83:f6:96:88:1f:91:c7:c5:d7:85:56: 1e:26:f1:b3:b9:6c:c0:75:97:73:8f:2a:f0:ba:a1:d2:3a:aa: 9b:95:23:db:5a:c3:37:fe:ec:0c:70:b7:f7:01:e3:75:07:01: de:39:06:e9:3c:5a:7b:52:ef:6c:74:8a:9b:5f:8f:c9:be:3c: 6c:77:9d:5e:15:ce:44:cb:56:28:79:93:47:49:cf:a2:6b:27: 63:52:9d:98:be:4e:36:b9:e6:69:67:06:f3:55:1f:46:b5:bd: 8e:6b:e6:79:c3:25:83:eb:1a:8e:23:e2:5b:a3:d1:4c:2f:fe: ac:c9:b3:07:b4:e1:cf:ef:bf:a5:3e:34:8e:7c:f5:2d:97:c9: 98:54:34:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjUwOTE5MDIzMjEzWhcNMjUwOTI2MDIzMjEzWjAYMRYwFAYD VQQDEw02OGNjYzBhZC02Y2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOKEawNxb4iiHUdAafsTXNPC8sS2WK5kvP6L8JK+ZdQMgTz8g4kw6izspawi +1hrhgLOcLQqCzQ2+bLcLfZGhAJGfYMuCLfRkzjnZkOwVksPixj8rMlcfSCnMHph 0un8RBwhDYgfSxNto5uMLuAXrDa1y3DdfHNmS2GoMnnzCVYtJFx2lWbcH0aoquHi xqQj25xmYEj84awO+TrK9eiJNDcGHuFdGadBVX7cSlicK3sLInC2aD0UQjV4OyKK 0Gclgb6r1LdZAqSpFoCNxk12gbt/apyqIewrQ2OjH8uBQh4YWYPvJBRQTSDYe9Z+ s2nLvrxQOBNXRpQQeM19KXPVkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBanUYAA Sk5K9C9kzwPV0hOzWslzMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK SUhmbnROWUJZd2Z0RXNIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+4Fz8TrufoSwSn9ByaPahnqQ86byVqEr3SDU6VnHBbziJvhD/B58/ hQ4BCVg+aj2TxaTImwm5bLJRl3MQQurPGBXSvWf3qNT/CsqUMkh6bAaJ3WU0IgYh m0o2HzIDNAunobl0rZsSIZJysnhW+5iVRM7Ag/aWiB+Rx8XXhVYeJvGzuWzAdZdz jyrwuqHSOqqblSPbWsM3/uwMcLf3AeN1BwHeOQbpPFp7Uu9sdIqbX4/Jvjxsd51e Fc5Ey1YoeZNHSc+iaydjUp2Yvk42ueZpZwbzVR9Gtb2Oa+Z5wyWD6xqOI+Jbo9FM L/6sybMHtOHP77+lPjSOfPUtl8mYVDS+ -----END CERTIFICATE-----Generated at Fri Sep 19 05:30:31 2025 by rpki-client