$ rpki-client -vvf rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft File: S6E9VJoFZMMeqLIxX84wI7tiiKc.mft (raw, json) Hash identifier: t/s+so6VTJaBSNDmsChQ+QkhJoB3zWaFxF3rhVbaPCw= Subject key identifier: 70:77:19:F6:10:1A:1A:F5:61:C9:4E:EF:EC:55:0C:34:0D:A2:97:AB Authority key identifier: 4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7 Certificate issuer: /CN=A9120208/serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft Manifest number: 3E Signing time: Wed 17 Sep 2025 08:16:35 +0000 Manifest this update: Wed 17 Sep 2025 08:16:35 +0000 Manifest next update: Wed 24 Sep 2025 08:16:35 +0000 Files and hashes: 1: S6E9VJoFZMMeqLIxX84wI7tiiKc.crl (hash: +FWZNFstB58sQdrhWgbyjIMr9fYiP2ipVmGYBrGFfcQ=) 2: FB24C32041DC11F091D21255C4F9AE02.roa (hash: YkPIdT5pU6s6PBK/cXBQwdkKPPO1WquYP5q3kmQJuaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120208, serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7 Validity Not Before: Sep 17 08:16:35 2025 GMT Not After : Sep 24 08:16:35 2025 GMT Subject: CN=68ca6e63-8b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:44:a9:fc:bd:50:3b:aa:fa:1e:fd:56:c0: 4f:b3:64:04:0d:22:fd:47:fb:ab:75:09:ae:da:52: 61:22:8b:bf:5c:40:43:fe:28:70:80:8f:32:89:f5: b7:18:0f:e4:8d:de:99:40:7e:ef:ab:44:ac:46:e9: a0:76:c3:73:f7:c4:06:de:d3:69:10:e4:f5:c0:bf: d1:8a:41:0d:cd:4c:1e:e6:5d:ae:6a:a4:a4:22:b5: af:01:4d:0e:fc:7f:8f:1e:6a:a9:aa:9e:ba:71:19: 86:01:ce:b5:c0:eb:59:71:e6:74:1e:9f:39:b4:ab: 44:12:51:5d:38:25:74:d8:48:e6:64:02:26:a7:00: 29:fd:6e:33:2d:a5:71:58:eb:c2:ba:04:07:86:ed: 4d:85:83:e3:df:b1:a3:10:53:4f:bb:fd:c1:c8:ed: ac:e8:3f:8f:34:80:e1:b7:ad:91:81:20:4c:33:70: 44:5f:93:f0:0a:b2:f0:04:bc:41:72:39:5e:af:1d: 96:48:05:51:fb:5e:cc:14:97:a2:c0:4f:3c:7f:7d: d7:c9:ff:1e:f6:08:07:59:3a:9f:66:ea:d5:2b:49: a4:f8:a3:18:a2:69:d0:0f:8e:fb:4a:b0:b6:f9:83: ee:54:70:7a:96:52:9c:99:d3:3b:93:1f:c5:0d:55: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:77:19:F6:10:1A:1A:F5:61:C9:4E:EF:EC:55:0C:34:0D:A2:97:AB X509v3 Authority Key Identifier: keyid:4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:05:88:37:f6:c5:14:74:dc:44:ed:66:db:9f:57:50:e7:2c: 0b:88:bd:3c:7c:b8:77:3d:56:13:b8:4c:be:68:4f:ce:a0:9a: 72:0e:04:f2:a9:31:96:2e:f6:f8:95:ee:05:2c:46:85:47:7e: 6a:65:94:5f:c7:c9:d1:4c:fc:69:33:70:03:91:2b:01:fc:9d: e4:fa:71:36:ae:79:fe:ff:85:d9:c7:e5:67:87:a9:cb:50:86: 22:4b:16:9f:ff:14:83:7d:1b:4a:c4:4f:6c:bb:50:54:15:37: 4b:4b:ae:2f:5c:3e:8e:0a:bb:26:ab:3e:71:dd:fb:45:8b:54: d9:49:4e:4e:55:dc:19:f0:df:58:9d:ba:17:96:43:48:59:53: 9b:48:0c:65:be:fe:ad:ba:d6:e3:ed:79:50:60:a2:08:49:d6: 3b:7c:a8:73:10:e2:7b:5f:6f:d1:cb:d6:cc:f8:2f:6e:de:0f: 92:a3:ef:63:d3:0a:67:20:b0:9e:f1:5a:dd:03:4d:2a:86:05: d1:de:04:68:92:cf:bb:3c:1e:89:4c:0e:26:1b:b7:a0:d3:8e: bb:89:f0:da:71:65:88:e1:fa:81:b7:f7:ec:b6:24:7b:1a:92: d0:3c:21:6e:09:35:24:6c:54:66:d7:15:f5:1e:0c:54:b1:1c: b6:ba:d5:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDIwODExMC8GA1UEBRMoNEJBMTNENTQ5QTA1NjRDMzFFQThCMjMxNUZDRTMwMjNC QjYyODhBNzAeFw0yNTA5MTcwODE2MzVaFw0yNTA5MjQwODE2MzVaMBgxFjAUBgNV BAMTDTY4Y2E2ZTYzLThiM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh3kSp/L1QO6r6Hv1WwE+zZAQNIv1H+6t1Ca7aUmEii79cQEP+KHCAjzKJ9bcY D+SN3plAfu+rRKxG6aB2w3P3xAbe02kQ5PXAv9GKQQ3NTB7mXa5qpKQita8BTQ78 f48eaqmqnrpxGYYBzrXA61lx5nQenzm0q0QSUV04JXTYSOZkAianACn9bjMtpXFY 68K6BAeG7U2Fg+PfsaMQU0+7/cHI7azoP480gOG3rZGBIEwzcERfk/AKsvAEvEFy OV6vHZZIBVH7XswUl6LATzx/fdfJ/x72CAdZOp9m6tUrSaT4oxiiadAPjvtKsLb5 g+5UcHqWUpyZ0zuTH8UNVWZhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcHcZ9hAa GvVhyU7v7FUMNA2il6swHwYDVR0jBBgwFoAUS6E9VJoFZMMeqLIxX84wI7tiiKcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMjA4L0JBODY3NDI2M0I5 NzExRjBBMTcwQzc3NUM0RjlBRTAyL1M2RTlWSm9GWk1NZXFMSXhYODR3STd0aWlL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzZFOVZKb0ZaTU1lcUxJeFg4NHdJN3RpaUtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw MjA4L0JBODY3NDI2M0I5NzExRjBBMTcwQzc3NUM0RjlBRTAyL1M2RTlWSm9GWk1N ZXFMSXhYODR3STd0aWlLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHAFiDf2xRR03ETtZtufV1DnLAuIvTx8uHc9VhO4TL5oT86gmnIOBPKp MZYu9viV7gUsRoVHfmpllF/HydFM/GkzcAORKwH8neT6cTauef7/hdnH5WeHqctQ hiJLFp//FIN9G0rET2y7UFQVN0tLri9cPo4KuyarPnHd+0WLVNlJTk5V3Bnw31id uheWQ0hZU5tIDGW+/q261uPteVBgoghJ1jt8qHMQ4ntfb9HL1sz4L27eD5Kj72PT CmcgsJ7xWt0DTSqGBdHeBGiSz7s8HolMDiYbt6DTjruJ8NpxZYjh+oG39+y2JHsa ktA8IW4JNSRsVGbXFfUeDFSxHLa61Xg= -----END CERTIFICATE-----Generated at Fri Sep 19 02:36:53 2025 by rpki-client