$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft File: trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json) Hash identifier: Vb9CE0lbWz+GSqVALqrn6A4V2fSZjux6DcLfbT0sTMg= Subject key identifier: 50:98:DE:D3:54:B9:BD:7B:1A:CD:46:13:3C:20:1F:46:3F:26:1D:59 Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC Certificate issuer: /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Certificate serial: 098B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft Manifest number: 0981 Signing time: Thu 18 Sep 2025 20:21:35 +0000 Manifest this update: Thu 18 Sep 2025 20:21:34 +0000 Manifest next update: Thu 25 Sep 2025 20:21:34 +0000 Files and hashes: 1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: ehLhYxzQoj29Tco9D+p34z4aei2SnBeT7bCdN8z8e5o=) 2: 25295764036811ED9D8E5F3EC4F9AE02.roa (hash: tZaPoTXH9PYuZmi5WQPi/UkCOHiXWsrwkIuE69EcCaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2443 (0x98b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Validity Not Before: Sep 18 20:21:34 2025 GMT Not After : Sep 25 20:21:34 2025 GMT Subject: CN=68cc69ce-883c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:de:cd:d0:42:b2:09:56:f4:36:be:b9:2a: cd:a6:35:68:62:c4:1a:9c:a3:a2:8c:c2:df:70:77: 8d:9f:45:06:f8:3a:13:42:03:15:a6:eb:d2:c5:bf: 1c:9d:fa:a3:fe:dc:e0:33:e6:4d:af:a3:9d:2f:ca: 56:14:23:f5:2a:ea:3d:06:76:d6:45:0e:a2:e3:13: 20:97:68:bc:4d:b1:2d:c1:8f:eb:08:9f:43:d3:1f: c8:9b:67:6a:f6:06:87:c7:64:09:89:87:1a:a4:4a: 07:12:4e:c3:ba:94:07:75:e0:1e:b7:57:67:f1:95: ca:ae:e2:3a:6d:98:af:9d:90:99:1a:b7:a9:ec:77: 07:ac:15:64:3f:33:8c:d5:37:24:ed:43:08:5b:94: 47:b7:a7:94:c7:8d:c3:5e:5f:bf:8f:7d:7b:c6:d1: 10:46:16:11:db:a9:b7:82:8c:0a:54:10:07:e8:48: 51:07:9a:ad:dd:b4:aa:39:fa:a6:9f:9e:68:41:0a: f3:fa:fd:fc:67:bc:a2:ee:13:96:2a:da:fe:81:ad: 75:fa:0f:75:a8:a2:14:0d:bc:9a:c4:9e:26:ca:42: e2:63:08:7b:b9:a1:49:a7:b9:82:f9:b9:b4:95:e0: 9d:d7:21:04:0d:42:e1:cb:b7:12:88:5a:6a:3e:53: 8b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:98:DE:D3:54:B9:BD:7B:1A:CD:46:13:3C:20:1F:46:3F:26:1D:59 X509v3 Authority Key Identifier: keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:40:0d:e2:b6:10:83:95:d0:98:ea:d4:c4:1b:c6:22:7e:91: b3:5d:66:df:89:4c:9a:f5:fb:f5:6e:7a:0e:42:46:4c:73:1a: f8:2c:90:7d:d1:8e:5d:29:b0:38:cc:62:8c:19:ac:b3:5d:f8: 5f:f6:a3:73:14:22:b6:70:f1:8e:ad:60:29:5b:60:88:cf:2a: f9:79:be:d9:4e:12:a7:d9:77:12:9a:68:4f:4c:6b:59:b3:fd: b2:f4:25:f1:39:88:da:5a:94:94:04:8a:00:ab:4c:c0:ee:a8: 5c:7b:f1:d4:c8:5e:56:c2:ad:6b:18:e4:b8:01:e7:34:3c:7e: 7f:53:1c:59:06:2d:bc:fb:f9:17:95:ee:7a:8d:0c:0f:dc:00: 31:eb:8e:86:8d:f1:71:d6:d3:9b:2a:a1:9a:ea:64:7d:ed:f9: 38:66:0e:72:a1:ee:6f:88:dd:7c:99:6c:7e:48:39:fc:af:52: 6c:97:cf:83:bf:f1:84:eb:76:32:db:6c:a9:bb:8a:39:b0:cf: 0e:75:09:6f:59:23:f8:28:e2:c3:b5:e0:4c:35:f9:75:2a:70: 91:19:3c:2c:93:80:f2:30:78:ec:fc:0e:b7:de:64:b0:85:88: 52:4c:b6:c5:46:43:ee:fe:b7:e9:69:a3:84:19:ca:d7:4b:f9: a6:91:e7:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCOEIxMTAvBgNVBAUTKEI2QkI2MzY0QkNFNDg1Q0VDMDZEMzM5OTQ5MTU4N0E0 ODI1OTFDQkMwHhcNMjUwOTE4MjAyMTM0WhcNMjUwOTI1MjAyMTM0WjAYMRYwFAYD VQQDEw02OGNjNjljZS04ODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskLezdBCsglW9Da+uSrNpjVoYsQanKOijMLfcHeNn0UG+DoTQgMVpuvSxb8c nfqj/tzgM+ZNr6OdL8pWFCP1Kuo9BnbWRQ6i4xMgl2i8TbEtwY/rCJ9D0x/Im2dq 9gaHx2QJiYcapEoHEk7DupQHdeAet1dn8ZXKruI6bZivnZCZGrep7HcHrBVkPzOM 1Tck7UMIW5RHt6eUx43DXl+/j317xtEQRhYR26m3gowKVBAH6EhRB5qt3bSqOfqm n55oQQrz+v38Z7yi7hOWKtr+ga11+g91qKIUDbyaxJ4mykLiYwh7uaFJp7mC+bm0 leCd1yEEDULhy7cSiFpqPlOLJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCY3tNU ub17Gs1GEzwgH0Y/Jh1ZMB8GA1UdIwQYMBaAFLa7Y2S85IXOwG0zmUkVh6SCWRy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0I4Qi83QUNDQ0I0MDlD NkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hjN0FiVE9aU1JXSHBJSlpI THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RydGpaTHpraGM3QWJUT1pTUldIcElKWkhMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0I4Qi83QUNDQ0I0MDlDNkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hj N0FiVE9aU1JXSHBJSlpITHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeQA3ithCDldCY6tTEG8YifpGzXWbfiUya9fv1bnoOQkZMcxr4LJB9 0Y5dKbA4zGKMGayzXfhf9qNzFCK2cPGOrWApW2CIzyr5eb7ZThKn2XcSmmhPTGtZ s/2y9CXxOYjaWpSUBIoAq0zA7qhce/HUyF5Wwq1rGOS4Aec0PH5/UxxZBi28+/kX le56jQwP3AAx646GjfFx1tObKqGa6mR97fk4Zg5yoe5viN18mWx+SDn8r1Jsl8+D v/GE63Yy22ypu4o5sM8OdQlvWSP4KOLDteBMNfl1KnCRGTwsk4DyMHjs/A633mSw hYhSTLbFRkPu/rfpaaOEGcrXS/mmkedo -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:08 2025 by rpki-client