$ rpki-client -vvf rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft File: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft (raw, json) Hash identifier: M/6I7Xmmir5P4otumbaPB3LnStNvoOcufgAx4DjqjJA= Subject key identifier: 0F:36:29:03:A3:63:4F:71:AB:2A:69:0F:59:1D:78:4C:46:58:4A:E6 Authority key identifier: FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 Certificate issuer: /CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Certificate serial: 0874 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft Manifest number: 0866 Signing time: Thu 18 Sep 2025 20:54:55 +0000 Manifest this update: Thu 18 Sep 2025 20:54:55 +0000 Manifest next update: Thu 25 Sep 2025 20:54:55 +0000 Files and hashes: 1: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl (hash: ro5+HpiBXi53X0pTWY+Av0ymeRpHUNKv0zkKbVRZ4RE=) 2: 22FDFFE88DF511EFB5AC9269C4F9AE02.roa (hash: aH5SgttT3yBxPoJZcOUIaaeUL8JdCzJhMaUjR/JZqLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2164 (0x874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91226E9, serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Validity Not Before: Sep 18 20:54:55 2025 GMT Not After : Sep 25 20:54:55 2025 GMT Subject: CN=68cc719f-4ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:02:95:c6:98:c1:8a:f7:e7:3d:85:8d:d7: ad:f2:7b:48:63:76:42:94:ce:84:e7:89:64:58:9a: 31:2a:df:62:a4:4f:ef:68:b0:15:a7:72:43:8e:62: b9:1a:f4:40:55:60:10:ea:4c:33:1b:60:06:ad:2d: f5:47:8e:66:c9:c6:e0:a3:34:6d:5e:c7:2a:13:d8: ca:ec:85:b0:6f:bb:11:12:1b:22:35:c6:8a:06:a3: 7a:03:95:d7:52:2f:14:ab:df:36:b1:e6:59:7a:a1: be:70:ae:bb:15:8d:b3:39:bb:3a:99:4b:ed:d6:e1: da:6d:2a:6e:c2:a8:9a:74:36:e0:27:76:28:68:2c: 33:c3:7c:96:35:67:41:09:e2:f8:26:b8:97:fd:f5: 79:d0:a6:b3:6a:46:32:03:50:88:ca:e9:c4:94:2f: ed:04:57:8b:32:75:bf:0e:5d:24:0a:a8:bb:67:32: 03:4e:46:65:ad:5e:82:b4:a5:d3:00:be:ca:81:db: f9:6e:67:73:3a:69:58:3d:3e:a8:ef:fd:b3:41:b2: 21:ab:1b:ed:92:ce:7b:83:b0:36:da:c9:d4:59:24: 2b:24:89:eb:71:d7:cb:c4:63:36:7a:96:25:bd:f2: 31:d2:e6:cd:5a:55:e6:e4:e4:c6:74:f0:ad:27:79: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:36:29:03:A3:63:4F:71:AB:2A:69:0F:59:1D:78:4C:46:58:4A:E6 X509v3 Authority Key Identifier: keyid:FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:85:ba:3a:63:fa:c5:4b:0a:3a:99:26:fe:66:fd:46:66:9e: 40:e8:8d:82:d4:24:1d:3b:6a:cd:3d:aa:3e:c8:37:b6:2d:db: f9:3f:8d:df:cd:97:45:ce:2d:54:b7:e8:7c:a5:bd:0b:2f:70: ab:62:a2:66:43:23:66:f3:3a:3f:de:bb:4d:16:62:a4:b8:cb: d1:6b:58:3c:d4:e1:ef:d1:0c:4a:ff:78:79:59:96:12:88:e5: 8f:ef:2f:f8:11:45:6e:f6:dc:fa:84:5c:ef:65:9c:65:86:91: 1f:94:42:1c:d7:87:0e:f6:79:29:05:64:e8:66:de:61:c4:b0: 00:b3:c8:5c:ce:dd:2b:f1:75:3c:58:89:a9:dc:51:aa:30:4e: 46:68:59:ea:9d:8d:b0:63:4e:61:24:82:1b:0e:3f:f7:a4:f8: 08:07:cf:25:29:a9:7b:ad:78:c1:49:f0:31:f8:8c:12:04:ac: e5:fd:b9:05:87:30:2f:56:5b:27:f2:0d:d3:d5:56:ca:11:3b: 63:e8:dd:79:eb:45:bb:d0:1d:60:90:2f:34:f6:e4:3d:03:72: eb:17:be:4e:ea:3a:57:26:46:1a:9c:18:8c:e0:8e:b1:a7:df: df:93:4f:4b:3c:6c:81:e8:1a:3f:67:b2:d6:71:b5:f5:e6:b5: cf:e9:3b:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI2RTkxMTAvBgNVBAUTKEZDOEVEMDhGQzkyMzAxNzRFMzExOTBFREFENTg1MkFD NDVDMzg1MDMwHhcNMjUwOTE4MjA1NDU1WhcNMjUwOTI1MjA1NDU1WjAYMRYwFAYD VQQDEw02OGNjNzE5Zi00ZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVkClcaYwYr35z2Fjdet8ntIY3ZClM6E54lkWJoxKt9ipE/vaLAVp3JDjmK5 GvRAVWAQ6kwzG2AGrS31R45mycbgozRtXscqE9jK7IWwb7sREhsiNcaKBqN6A5XX Ui8Uq982seZZeqG+cK67FY2zObs6mUvt1uHabSpuwqiadDbgJ3YoaCwzw3yWNWdB CeL4JriX/fV50KazakYyA1CIyunElC/tBFeLMnW/Dl0kCqi7ZzIDTkZlrV6CtKXT AL7Kgdv5bmdzOmlYPT6o7/2zQbIhqxvtks57g7A22snUWSQrJInrcdfLxGM2epYl vfIx0ubNWlXm5OTGdPCtJ3lCmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA82KQOj Y09xqyppD1kdeExGWErmMB8GA1UdIwQYMBaAFPyO0I/JIwF04xGQ7a1YUqxFw4UD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjZFOS84M0RFNjg3OEQx RjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFYVGpFWkR0clZoU3JFWERo UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JN1FqOGtqQVhUakVaRHRyVmhTckVYRGhRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjZFOS84M0RFNjg3OEQxRjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFY VGpFWkR0clZoU3JFWERoUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBghbo6Y/rFSwo6mSb+Zv1GZp5A6I2C1CQdO2rNPao+yDe2Ldv5P43f zZdFzi1Ut+h8pb0LL3CrYqJmQyNm8zo/3rtNFmKkuMvRa1g81OHv0QxK/3h5WZYS iOWP7y/4EUVu9tz6hFzvZZxlhpEflEIc14cO9nkpBWToZt5hxLAAs8hczt0r8XU8 WImp3FGqME5GaFnqnY2wY05hJIIbDj/3pPgIB88lKal7rXjBSfAx+IwSBKzl/bkF hzAvVlsn8g3T1VbKETtj6N1560W70B1gkC809uQ9A3LrF75O6jpXJkYanBiM4I6x p9/fk09LPGyB6Bo/Z7LWcbX15rXP6Ttn -----END CERTIFICATE-----Generated at Fri Sep 19 02:36:19 2025 by rpki-client