$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json) Hash identifier: mhSFjUhun4ZRsuzgw32/htjnIKxHUKr/FQ/7yjfgW6Y= Subject key identifier: 59:D3:2E:FD:D0:CC:F1:26:79:F8:AA:D5:ED:30:50:48:2F:F1:0C:0E Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 234B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft Manifest number: 2332 Signing time: Thu 18 Sep 2025 15:55:41 +0000 Manifest this update: Thu 18 Sep 2025 15:55:40 +0000 Manifest next update: Thu 25 Sep 2025 15:55:40 +0000 Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: P9QnV3hJxik7KwAuY7hQeV46bmDavmD5Kimop0gl8AQ=) 2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: 6e21k1t3PwcFuMYhxFKByN0N0S9Vi6EW4w95vWK0udo=) 3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: w2d5iGO1DzNwRW9XaGG0C+Ss9EnEjj1pHZpwfJJ5U1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9035 (0x234b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: Sep 18 15:55:40 2025 GMT Not After : Sep 25 15:55:40 2025 GMT Subject: CN=68cc2b7c-bde5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5f:88:68:d0:3b:cc:4e:ed:33:6f:c2:05:37: 51:ff:72:80:a8:ba:ff:54:65:b4:5a:d6:44:bb:c5: 96:22:66:9c:78:b4:19:58:bb:df:68:83:cd:1b:f9: be:2d:7b:73:52:9e:fb:24:b8:2d:e7:06:86:ce:2b: c2:6b:d0:59:4e:59:3a:b7:60:0d:a7:70:69:f5:04: 6a:26:e2:de:83:89:61:d6:fc:88:bb:14:0f:a6:67: 75:ec:71:5e:38:8a:b1:2e:35:84:76:7a:ed:71:cd: 70:65:96:d1:5c:97:19:fd:83:af:a6:6d:8b:e3:30: d7:a7:d5:8b:94:d9:38:4d:2e:89:c9:87:6a:b2:f2: 0f:d3:f5:45:e5:fa:9d:a0:7f:e7:a1:90:4c:cb:53: af:29:44:b2:20:db:bf:6c:a0:5f:43:af:25:51:09: 8d:bb:7f:ac:33:6d:59:3b:59:2d:20:49:ca:97:cf: 70:6a:3a:e0:b4:97:d1:f1:6a:5e:43:01:ba:1e:c4: 70:2f:58:b9:79:98:0b:e5:e4:3e:84:32:cb:72:f8: b9:56:f3:6c:ba:73:75:dc:4e:4b:48:0b:55:92:f5: dd:dd:07:7b:a6:16:c6:33:b6:46:c2:1e:bc:c3:1f: 5e:0b:98:03:45:2d:5c:85:0e:e6:3a:fa:fc:8f:ff: 68:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D3:2E:FD:D0:CC:F1:26:79:F8:AA:D5:ED:30:50:48:2F:F1:0C:0E X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2d:a8:a3:dd:4e:54:9c:44:a8:9f:f5:75:40:2e:32:1a:2a: 74:68:5a:46:58:27:77:47:17:83:a7:aa:b8:a4:f3:18:c5:8f: 98:ca:8f:1b:55:01:e1:2e:55:56:c8:61:ba:9e:03:56:56:61: 4f:29:03:c5:79:45:e0:2a:00:d6:52:b1:20:a8:24:1b:e6:8a: 4d:eb:c8:28:fc:b5:27:49:7a:c4:f8:55:cc:0b:81:67:b4:20: dd:a5:e3:e7:8b:09:b8:46:cc:8b:2e:f6:8c:cc:80:2f:d9:b3: 3e:08:95:a2:0e:35:b9:a2:bb:93:15:68:f7:e2:e2:b0:42:0a: 76:86:93:16:2e:89:d5:2c:52:eb:94:f1:81:81:53:1b:58:18: d5:5f:49:09:1e:e7:65:0d:b3:5b:73:bc:6f:b8:8d:3b:2f:29: c3:34:b2:99:7d:eb:18:01:6c:dd:72:42:14:bb:af:91:f8:e4: b3:11:be:b2:c4:96:66:ab:40:4e:76:96:c7:43:7a:d4:c4:37: be:41:ad:45:ee:3e:00:11:17:6b:12:ef:c8:df:d2:a2:9f:19: fe:85:e5:d9:0e:d8:38:2c:4a:3a:1a:76:79:45:db:48:6f:3d: be:b3:00:3b:52:6e:c9:91:4a:b1:3c:ab:fc:18:6f:42:ec:92: 72:52:f6:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjUwOTE4MTU1NTQwWhcNMjUwOTI1MTU1NTQwWjAYMRYwFAYD VQQDEw02OGNjMmI3Yy1iZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoV+IaNA7zE7tM2/CBTdR/3KAqLr/VGW0WtZEu8WWImaceLQZWLvfaIPNG/m+ LXtzUp77JLgt5waGzivCa9BZTlk6t2ANp3Bp9QRqJuLeg4lh1vyIuxQPpmd17HFe OIqxLjWEdnrtcc1wZZbRXJcZ/YOvpm2L4zDXp9WLlNk4TS6JyYdqsvIP0/VF5fqd oH/noZBMy1OvKUSyINu/bKBfQ68lUQmNu3+sM21ZO1ktIEnKl89wajrgtJfR8Wpe QwG6HsRwL1i5eZgL5eQ+hDLLcvi5VvNsunN13E5LSAtVkvXd3Qd7phbGM7ZGwh68 wx9eC5gDRS1chQ7mOvr8j/9oaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnTLv3Q zPEmefiq1e0wUEgv8QwOMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzM0Mi82RERCQzdGQzkzMjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10 ZERoQXZHZjloNy1PQVZSbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBALaij3U5UnESon/V1QC4yGip0aFpGWCd3RxeDp6q4pPMYxY+Yyo8b VQHhLlVWyGG6ngNWVmFPKQPFeUXgKgDWUrEgqCQb5opN68go/LUnSXrE+FXMC4Fn tCDdpePniwm4RsyLLvaMzIAv2bM+CJWiDjW5oruTFWj34uKwQgp2hpMWLonVLFLr lPGBgVMbWBjVX0kJHudlDbNbc7xvuI07LynDNLKZfesYAWzdckIUu6+R+OSzEb6y xJZmq0BOdpbHQ3rUxDe+Qa1F7j4AERdrEu/I39Kinxn+heXZDtg4LEo6GnZ5RdtI bz2+swA7Um7JkUqxPKv8GG9C7JJyUvYm -----END CERTIFICATE-----Generated at Thu Sep 18 21:51:03 2025 by rpki-client