$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json) Hash identifier: rZ6MAqK3ZjJ9TCV0RrXM6D1kE5i9c2kyyqpqOcVGHDY= Subject key identifier: 3B:8A:0B:F6:D6:65:A6:EE:A0:A6:5B:53:CE:39:EF:94:80:26:FA:64 Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft Manifest number: 0182 Signing time: Wed 17 Sep 2025 04:12:19 +0000 Manifest this update: Wed 17 Sep 2025 04:12:18 +0000 Manifest next update: Wed 24 Sep 2025 04:12:18 +0000 Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: P2iXGCTKTMH30TFBpyuP2ICHq+2tdtreR/4s9QLRHfQ=) 2: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: LhhhRZ9rRf4tKP+wa+0RqCOvGKNOYKeYqEjxUmyjiLQ=) 3: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: QFhCans14JnqpL9Jwv4rbJ2pg2u9bZu64HPsOXqSkiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121995, serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Validity Not Before: Sep 17 04:12:18 2025 GMT Not After : Sep 24 04:12:18 2025 GMT Subject: CN=68ca3522-e2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:05:8f:68:7c:71:5b:6b:b9:9b:b8:4c:c4: 06:57:b9:e8:26:4d:57:af:c9:1f:ab:e0:45:85:9f: cc:f0:55:ae:c2:66:4c:0f:02:25:b1:80:c3:6b:bc: 3e:28:f6:9b:14:11:fe:27:2b:58:dd:39:fd:9c:46: 4e:d7:45:3b:b4:93:6a:61:89:04:5e:96:95:30:76: e4:ba:d9:7d:35:ef:7b:bf:6b:5b:18:3e:ac:9f:8f: f0:9a:66:42:98:8a:72:b5:1b:df:d6:0f:e1:90:bb: 47:cc:8e:52:f7:01:89:dd:a2:79:2b:63:de:81:4d: 7c:ca:f4:3d:43:3d:d8:f0:89:cf:4c:51:70:fc:b5: 3c:fc:f6:80:59:1a:21:fc:f6:3e:03:b9:fd:75:b1: ef:10:a3:e0:64:bb:cd:d2:c9:34:79:62:2c:6f:26: e7:31:86:45:cd:90:fc:0a:07:82:d6:36:50:56:0e: 4a:16:1c:1b:80:af:47:c6:0e:1a:c6:bf:3a:ec:c8: 7b:f2:2e:c4:6b:aa:6d:3b:3b:ee:87:ee:59:4f:04: 30:4c:50:15:90:ec:d1:db:c8:89:05:7c:d9:54:80: 17:ee:80:12:c4:81:16:8d:8c:bf:f0:da:aa:ac:8f: bb:f3:89:18:cd:3c:d7:07:bf:71:56:c1:a2:3c:c3: 40:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8A:0B:F6:D6:65:A6:EE:A0:A6:5B:53:CE:39:EF:94:80:26:FA:64 X509v3 Authority Key Identifier: keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:aa:cb:58:30:52:6a:f3:31:c0:48:af:39:9c:83:4e:36:1b: c5:14:b4:22:3c:b7:d4:3a:b4:df:a4:97:0f:3a:47:f5:0c:e0: 4f:1b:58:d0:c9:d4:2e:38:c2:3a:9a:8a:a2:c1:e2:73:c9:31: e0:e5:08:7b:83:17:26:4d:f0:a6:09:7f:7e:69:61:bb:c6:10: 59:9b:40:72:c3:e1:23:52:ce:82:44:9c:60:99:e3:b0:e1:fa: d9:22:00:6d:6d:f4:34:e0:d5:97:ae:fc:4b:94:9b:79:e8:8e: 26:b6:9b:58:de:f1:81:64:c1:6d:84:3c:41:b3:ed:4e:e9:40: a6:a0:66:bb:bd:15:61:bc:97:93:97:48:f2:6a:0d:81:92:76: 0b:70:47:21:a9:34:50:c6:3b:66:ea:d8:00:00:9d:16:d3:2f: 80:93:d3:c3:e3:69:37:db:d6:96:fd:70:d7:8b:da:0b:b0:0d: f9:2e:34:6c:ea:54:00:a3:3f:7f:80:2c:2d:d1:c8:f7:e2:e9: f6:0f:ab:b2:ec:fc:45:53:e5:8d:74:7f:46:61:23:46:db:c4: 15:1c:0f:ba:8b:7d:d9:8c:b0:9f:c6:2d:5d:31:53:8e:5b:62: 82:37:07:56:18:a8:ce:79:46:0e:55:9f:43:cf:e8:ab:06:6b: 7f:c5:2e:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5OTUxMTAvBgNVBAUTKDIyOUUwNjRBQ0Y0MzJGNjREQUE3MDE3QTY2QkU4QjYx QTk2QjE4NUEwHhcNMjUwOTE3MDQxMjE4WhcNMjUwOTI0MDQxMjE4WjAYMRYwFAYD VQQDEw02OGNhMzUyMi1lMmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmYFj2h8cVtruZu4TMQGV7noJk1Xr8kfq+BFhZ/M8FWuwmZMDwIlsYDDa7w+ KPabFBH+JytY3Tn9nEZO10U7tJNqYYkEXpaVMHbkutl9Ne97v2tbGD6sn4/wmmZC mIpytRvf1g/hkLtHzI5S9wGJ3aJ5K2PegU18yvQ9Qz3Y8InPTFFw/LU8/PaAWRoh /PY+A7n9dbHvEKPgZLvN0sk0eWIsbybnMYZFzZD8CgeC1jZQVg5KFhwbgK9Hxg4a xr867Mh78i7Ea6ptOzvuh+5ZTwQwTFAVkOzR28iJBXzZVIAX7oASxIEWjYy/8Nqq rI+784kYzTzXB79xVsGiPMNAyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuKC/bW ZabuoKZbU84575SAJvpkMB8GA1UdIwQYMBaAFCKeBkrPQy9k2qcBema+i2Gpaxha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTk5NS85RTM2QkZBNDRD MTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwyVGFwd0Y2WnI2TFlhbHJH Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwNEdTczlETDJUYXB3RjZacjZMWWFsckdGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTk5NS85RTM2QkZBNDRDMTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwy VGFwd0Y2WnI2TFlhbHJHRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKqstYMFJq8zHASK85nINONhvFFLQiPLfUOrTfpJcPOkf1DOBPG1jQ ydQuOMI6moqiweJzyTHg5Qh7gxcmTfCmCX9+aWG7xhBZm0Byw+EjUs6CRJxgmeOw 4frZIgBtbfQ04NWXrvxLlJt56I4mtptY3vGBZMFthDxBs+1O6UCmoGa7vRVhvJeT l0jyag2BknYLcEchqTRQxjtm6tgAAJ0W0y+Ak9PD42k329aW/XDXi9oLsA35LjRs 6lQAoz9/gCwt0cj34un2D6uy7PxFU+WNdH9GYSNG28QVHA+6i33ZjLCfxi1dMVOO W2KCNwdWGKjOeUYOVZ9Dz+irBmt/xS5O -----END CERTIFICATE-----Generated at Fri Sep 19 05:29:21 2025 by rpki-client