$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json) Hash identifier: SKAB7ECuknQyfcVITHYa3QprdabIoTti2FYQ3NFkUEs= Subject key identifier: 92:00:10:D4:0A:F1:95:CD:50:AC:11:26:8B:B5:C5:BB:D0:F4:14:B1 Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft Manifest number: 91 Signing time: Sun 07 Sep 2025 08:13:18 +0000 Manifest this update: Sun 07 Sep 2025 08:13:17 +0000 Manifest next update: Sun 14 Sep 2025 08:13:17 +0000 Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: HXL5Vx+Xm4Nay+fPIGXROFYHJ+NJYdRNnK+6FCe9gyA=) 2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: D+69mUBWbfPIx9I29lHFNCCeA9/VSH+mKqw7jvFWkuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Validity Not Before: Sep 7 08:13:17 2025 GMT Not After : Sep 14 08:13:17 2025 GMT Subject: CN=68bd3e9e-9248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:bf:05:ca:24:17:70:ed:85:c8:5e:68:de: 60:48:11:c1:b2:0e:a5:a8:18:f6:a8:f8:85:0d:83: 15:ad:d9:91:9e:ee:08:76:82:da:8e:d5:60:38:7d: 48:69:2c:ab:48:17:2c:51:e8:5c:6b:2a:87:f9:99: 79:9f:31:38:42:df:09:1d:9c:c5:31:3c:a5:83:b4: 96:7c:da:f9:da:bb:c7:69:ef:df:61:0b:ac:b8:46: e3:98:af:11:9a:c8:a8:d7:bb:a0:23:6d:8e:5f:cf: 82:15:d1:6c:94:2b:84:c3:53:ef:6e:67:c9:72:67: ef:e8:23:30:a9:2e:63:11:e9:8d:0f:4c:38:e3:26: da:f8:59:48:8e:0d:fe:fa:d8:15:82:4b:8c:59:c1: 93:2e:a6:86:e1:28:1b:09:bd:c5:f9:3d:8f:24:e6: 7d:1d:dc:8f:e0:90:0a:f9:a8:fe:f5:be:c4:6f:58: c1:f9:13:91:06:c7:96:81:e7:45:17:ca:29:68:37: 9a:30:e4:36:6c:08:e9:67:ac:89:3b:db:f2:cd:09: 70:24:dd:cc:15:72:2e:f4:be:2d:bd:7f:33:0e:78: 90:4a:4d:3f:25:1b:d2:e2:d0:59:f8:5a:70:e5:9e: 33:fd:4d:7a:35:79:47:12:cb:92:5c:b9:44:d1:6b: 78:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:00:10:D4:0A:F1:95:CD:50:AC:11:26:8B:B5:C5:BB:D0:F4:14:B1 X509v3 Authority Key Identifier: keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:7d:33:ba:ac:03:d2:f1:8e:81:a7:b6:7e:48:fa:9f:af:c9: a1:a7:d0:93:94:44:b4:d1:0a:f4:11:2e:41:d0:04:16:43:8a: 2d:2f:2d:e9:85:83:6b:fa:37:db:44:b3:46:06:c6:09:a0:53: fc:11:91:ca:5f:ec:fd:e1:d8:b0:8f:63:28:dd:ba:ca:a4:fa: 2a:c8:e7:3f:aa:b2:7a:29:68:0c:91:ac:7d:ed:c4:30:e4:3d: a6:a8:a1:4c:e5:09:cb:e7:6c:96:9f:22:78:0a:62:83:7b:2d: 3c:70:81:d8:ef:de:be:fe:4f:78:37:8c:be:b1:e3:27:9c:1a: 30:42:03:39:93:2c:f4:46:cd:fc:97:44:d2:41:a1:09:79:64: f6:f9:2d:ad:17:78:06:dc:8e:28:b6:11:d1:fd:36:15:9b:04: 24:69:e2:dd:c3:4a:5d:2f:3a:bd:9e:79:02:94:6a:68:61:b1: 71:52:bd:6c:12:02:14:bb:df:17:72:58:b7:06:da:41:45:f6: 80:64:f8:b3:6d:7a:29:8d:28:d2:48:01:bb:00:7d:2b:b3:78: fc:cf:f9:2f:d1:c7:28:36:fa:89:9a:54:61:3b:30:5f:9f:8a: 2f:05:94:d2:d9:5f:4b:d2:b7:79:c1:19:a3:0b:75:a6:e6:6b: e8:35:a0:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM5MTgxMTAvBgNVBAUTKDc5QzdGQzVEMUE1RUVGMEIyOThFMDA3MjMyNkFCNzM2 ODZCREZFNzgwHhcNMjUwOTA3MDgxMzE3WhcNMjUwOTE0MDgxMzE3WjAYMRYwFAYD VQQDEw02OGJkM2U5ZS05MjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtji/BcokF3DthcheaN5gSBHBsg6lqBj2qPiFDYMVrdmRnu4IdoLajtVgOH1I aSyrSBcsUehcayqH+Zl5nzE4Qt8JHZzFMTylg7SWfNr52rvHae/fYQusuEbjmK8R msio17ugI22OX8+CFdFslCuEw1PvbmfJcmfv6CMwqS5jEemND0w44yba+FlIjg3+ +tgVgkuMWcGTLqaG4SgbCb3F+T2PJOZ9HdyP4JAK+aj+9b7Eb1jB+RORBseWgedF F8opaDeaMOQ2bAjpZ6yJO9vyzQlwJN3MFXIu9L4tvX8zDniQSk0/JRvS4tBZ+Fpw 5Z4z/U16NXlHEsuSXLlE0Wt4iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIAENQK 8ZXNUKwRJou1xbvQ9BSxMB8GA1UdIwQYMBaAFHnH/F0aXu8LKY4AcjJqtzaGvf54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxOC84RUU3MTQ4NkI2 QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJwZTd3c3BqZ0J5TW1xM05vYTlf bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjZjhYUnBlN3dzcGpnQnlNbXEzTm9hOV9uZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzkxOC84RUU3MTQ4NkI2QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJwZTd3 c3BqZ0J5TW1xM05vYTlfbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXfTO6rAPS8Y6Bp7Z+SPqfr8mhp9CTlES00Qr0ES5B0AQWQ4otLy3p hYNr+jfbRLNGBsYJoFP8EZHKX+z94diwj2Mo3brKpPoqyOc/qrJ6KWgMkax97cQw 5D2mqKFM5QnL52yWnyJ4CmKDey08cIHY796+/k94N4y+seMnnBowQgM5kyz0Rs38 l0TSQaEJeWT2+S2tF3gG3I4othHR/TYVmwQkaeLdw0pdLzq9nnkClGpoYbFxUr1s EgIUu98Xcli3BtpBRfaAZPizbXopjSjSSAG7AH0rs3j8z/kv0ccoNvqJmlRhOzBf n4ovBZTS2V9L0rd5wRmjC3Wm5mvoNaC0 -----END CERTIFICATE-----Generated at Sun Sep 7 14:46:15 2025 by rpki-client