$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json) Hash identifier: ltRFKXAbO8UsCsx/rzgSbmU6MC7R3GYMhl7o+mZWXqU= Subject key identifier: BA:8D:0F:E0:77:19:A0:78:7D:C2:DC:66:2D:5D:1D:2F:CF:88:58:2B Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft Manifest number: 06EB Signing time: Wed 10 Sep 2025 23:35:29 +0000 Manifest this update: Wed 10 Sep 2025 23:35:28 +0000 Manifest next update: Wed 17 Sep 2025 23:35:28 +0000 Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: 6zAp+ttk9iF2Hj/VQ6suo7yg0oHjq9CwShSSQ3gX5jA=) 2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: yTT1wU+7SDiGP1yf/wpGgeLBeSp2dcgSEJuvKyJu/s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 23:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Validity Not Before: Sep 10 23:35:28 2025 GMT Not After : Sep 17 23:35:28 2025 GMT Subject: CN=68c20b41-4a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:fc:5b:63:33:7b:fb:8e:db:2c:5a:83:d1: f4:07:97:78:19:57:88:75:14:97:db:9c:2d:a8:b6: bd:2a:5c:d1:77:0f:7c:4b:b9:2c:a0:0f:f5:79:26: 68:a3:ae:90:e1:64:c9:f4:f8:35:7c:da:25:47:2d: bd:76:61:90:04:27:c4:c8:4b:f5:3c:ef:97:5b:64: 41:5e:05:72:cb:fd:70:e7:54:e9:8c:ea:ee:9d:c9: 36:01:5d:2b:b1:6f:b3:c4:3c:f4:86:5b:3e:cd:a0: 4e:8c:8f:d7:37:88:90:7c:92:e5:16:83:59:ca:52: f0:46:10:45:37:f6:42:21:0a:63:0b:fc:2a:cd:0f: a2:6f:b2:fb:2b:af:d7:ef:3d:05:4f:e1:15:87:b0: e6:4b:0a:74:a0:9d:57:eb:d8:dc:1f:53:9a:51:c2: 5a:3d:36:e8:95:13:55:e6:20:ed:9a:53:a4:94:0e: 89:0e:10:11:87:c6:5d:6a:ff:0b:b4:8a:6c:0a:27: 8a:3c:ee:2b:b2:2b:b0:d2:86:05:91:5f:91:5f:21: 87:37:e1:7e:8a:f8:5e:46:0f:a4:f0:c7:0f:51:a5: 92:0b:3e:a6:dd:8b:8a:c6:a0:53:45:7f:c8:c4:dc: 35:62:2c:26:54:05:10:ed:1d:4d:7e:13:1a:36:7e: a1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8D:0F:E0:77:19:A0:78:7D:C2:DC:66:2D:5D:1D:2F:CF:88:58:2B X509v3 Authority Key Identifier: keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c9:ee:41:d2:ad:68:a9:d7:94:99:b1:1d:0b:d0:18:4b:2a: 49:de:22:80:b8:5b:3e:ec:53:c1:1a:b5:08:e5:9d:4f:b9:ff: 58:35:3e:a7:59:9f:9d:7c:a1:e1:76:ed:40:b1:08:06:51:32: d9:c1:c5:6e:c6:df:aa:23:eb:0f:0f:36:23:9e:ac:b7:db:35: f9:b5:3d:2a:93:1b:2c:fd:58:77:8d:40:bd:72:1f:62:1c:de: 50:35:87:ae:6f:c3:40:53:77:30:36:c1:81:03:80:5a:bb:bf: dc:f6:b6:bf:7f:3e:3a:a1:7f:c8:42:6f:50:d4:ae:cf:9d:c5: 7c:1e:a8:4c:81:3d:2a:9f:ea:b3:1a:7f:ad:52:08:f8:cc:55: db:91:65:da:ac:11:c5:ab:ab:73:ef:f9:cb:87:71:24:47:cf: a8:b6:78:48:f5:ae:45:7b:01:93:f1:8c:01:bb:31:e6:86:95: 61:65:2f:ef:c7:d1:79:6a:22:71:24:9c:ab:24:a9:57:13:b3: e6:a3:0e:5e:4b:13:41:78:65:f2:0a:00:a4:41:8c:07:30:f2: fe:d6:9f:4e:9d:05:db:71:b8:2a:01:1a:27:0e:a6:70:3d:52: bd:41:f7:a0:93:8d:dc:c1:39:fb:20:6b:87:d5:3e:3a:68:64: 68:7b:ae:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF NjY5QUU3RTAwHhcNMjUwOTEwMjMzNTI4WhcNMjUwOTE3MjMzNTI4WjAYMRYwFAYD VQQDEw02OGMyMGI0MS00YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJz8W2Mze/uO2yxag9H0B5d4GVeIdRSX25wtqLa9KlzRdw98S7ksoA/1eSZo o66Q4WTJ9Pg1fNolRy29dmGQBCfEyEv1PO+XW2RBXgVyy/1w51TpjOrunck2AV0r sW+zxDz0hls+zaBOjI/XN4iQfJLlFoNZylLwRhBFN/ZCIQpjC/wqzQ+ib7L7K6/X 7z0FT+EVh7DmSwp0oJ1X69jcH1OaUcJaPTbolRNV5iDtmlOklA6JDhARh8Zdav8L tIpsCieKPO4rsiuw0oYFkV+RXyGHN+F+ivheRg+k8McPUaWSCz6m3YuKxqBTRX/I xNw1YiwmVAUQ7R1NfhMaNn6hXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqND+B3 GaB4fcLcZi1dHS/PiFgrMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1 LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVn SUpiQXkyQm5hcUhtYWE1LUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPye5B0q1oqdeUmbEdC9AYSypJ3iKAuFs+7FPBGrUI5Z1Puf9YNT6n WZ+dfKHhdu1AsQgGUTLZwcVuxt+qI+sPDzYjnqy32zX5tT0qkxss/Vh3jUC9ch9i HN5QNYeub8NAU3cwNsGBA4Bau7/c9ra/fz46oX/IQm9Q1K7PncV8HqhMgT0qn+qz Gn+tUgj4zFXbkWXarBHFq6tz7/nLh3EkR8+otnhI9a5FewGT8YwBuzHmhpVhZS/v x9F5aiJxJJyrJKlXE7Pmow5eSxNBeGXyCgCkQYwHMPL+1p9OnQXbcbgqARonDqZw PVK9Qfegk43cwTn7IGuH1T46aGRoe64Z -----END CERTIFICATE-----Generated at Thu Sep 11 01:27:16 2025 by rpki-client