$ rpki-client -vvf rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft File: 444NefP9KSMew_PjAp05P0MnfLM.mft (raw, json) Hash identifier: Meu2IRC/L/CQSyZ7OglD49hZKCx0nRdBGWv+YgkbjcE= Subject key identifier: AF:79:C1:40:DA:4C:38:FF:65:B7:63:2C:1A:29:4D:9F:33:C8:30:83 Authority key identifier: E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3 Certificate issuer: /CN=A9128298/serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3 Certificate serial: 0620 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft Manifest number: 061D Signing time: Thu 18 Sep 2025 23:04:38 +0000 Manifest this update: Thu 18 Sep 2025 23:04:37 +0000 Manifest next update: Thu 25 Sep 2025 23:04:37 +0000 Files and hashes: 1: 444NefP9KSMew_PjAp05P0MnfLM.crl (hash: rvDynmvvJV8svUVf7xAHa58sBum3Is9/3uWRXM8Btqs=) 2: 832F7D72B20E11EBB73B4E2FC4F9AE02.roa (hash: RWzQvPuAa0dvfgKQkKzubYejP/LcFU0xMaFFgk+jNhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128298, serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3 Validity Not Before: Sep 18 23:04:37 2025 GMT Not After : Sep 25 23:04:37 2025 GMT Subject: CN=68cc9006-5b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:c1:20:7f:bc:a2:18:ac:7a:cb:bf:fb:6d: c3:83:25:b5:42:e6:b9:75:3e:e7:7e:fa:d5:15:9e: 0c:5e:3c:ad:f0:fa:fa:d3:80:97:0e:3b:24:40:7a: e8:8e:96:98:df:42:fe:57:46:e4:02:39:77:a4:75: c1:7f:ea:60:26:8f:88:6c:36:f5:d3:56:e2:54:be: 12:25:5e:18:44:de:6e:f4:9b:3d:3f:ad:d0:55:61: 72:b9:7d:d3:66:e4:7b:99:80:50:60:70:63:f8:06: e7:38:4b:28:a7:e2:37:cc:c6:fe:e0:66:10:10:44: df:02:93:f3:25:d2:03:35:09:72:e9:72:97:51:ae: 3b:c4:d3:a7:79:bc:f2:d6:35:d4:26:a6:ed:1b:cb: c2:89:e7:69:72:89:78:78:38:62:60:38:7d:80:4a: 9e:0b:b5:b4:63:13:6d:28:d9:21:95:bc:2e:1e:89: 58:b9:76:9b:35:d8:e6:b3:29:16:3e:44:79:89:40: cf:5d:5e:92:53:af:67:b6:1f:43:ae:ab:b5:2a:8f: 73:0f:dc:17:8c:9b:83:1d:c1:24:87:37:5a:36:a1: 4a:ca:fa:61:15:47:8c:24:b5:ce:5b:dc:0a:7e:da: 94:9e:e7:85:e1:43:d9:d7:84:60:95:fe:7d:02:3f: ea:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:79:C1:40:DA:4C:38:FF:65:B7:63:2C:1A:29:4D:9F:33:C8:30:83 X509v3 Authority Key Identifier: keyid:E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:db:1c:14:f6:08:eb:87:b1:67:e4:10:53:67:5d:44:05:fe: 59:b5:3b:70:03:ed:05:b3:7d:36:8f:65:72:c0:27:bc:4a:a3: a9:8c:03:27:29:0a:72:1b:eb:40:4e:a3:67:9b:0d:90:06:df: 87:5d:25:1a:b6:27:0d:a1:a1:a4:d3:9c:4c:a6:cf:4a:7f:66: 39:42:dd:75:6a:69:c4:15:a1:07:7d:bf:01:07:f8:a5:10:5a: 58:d6:99:ce:8b:b8:b0:5c:53:3b:cf:c5:09:08:60:7a:af:e6: 02:f0:15:e5:ee:f2:2d:31:10:67:b4:0b:6a:76:70:77:ab:7d: 7e:ff:c5:70:ec:ce:4d:af:e0:6f:d5:5c:3e:2e:4a:1b:c6:a1: 81:7c:c0:72:52:d5:01:83:b1:6d:5e:35:92:dc:25:d7:4a:30: 91:96:60:04:56:b8:be:2e:a5:4c:cc:00:54:7a:ad:f8:61:ad: ff:b6:f0:43:fb:de:30:fc:27:f2:6e:85:fc:28:df:9e:cd:e4: e9:bd:48:c6:59:67:3d:3a:6b:7b:5b:b5:7b:79:3e:15:c2:72: 6e:03:c5:30:e7:b9:70:9b:88:45:4d:55:e8:0d:c4:e2:81:1f: 65:da:9c:62:f9:88:43:06:4c:b4:72:b3:31:07:28:94:22:c3: 5b:6c:ab:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgyOTgxMTAvBgNVBAUTKEUzOEUwRDc5RjNGRDI5MjMxRUMzRjNFMzAyOUQzOTNG NDMyNzdDQjMwHhcNMjUwOTE4MjMwNDM3WhcNMjUwOTI1MjMwNDM3WjAYMRYwFAYD VQQDEw02OGNjOTAwNi01YjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvr7BIH+8ohisesu/+23DgyW1Qua5dT7nfvrVFZ4MXjyt8Pr604CXDjskQHro jpaY30L+V0bkAjl3pHXBf+pgJo+IbDb101biVL4SJV4YRN5u9Js9P63QVWFyuX3T ZuR7mYBQYHBj+AbnOEsop+I3zMb+4GYQEETfApPzJdIDNQly6XKXUa47xNOnebzy 1jXUJqbtG8vCiedpcol4eDhiYDh9gEqeC7W0YxNtKNkhlbwuHolYuXabNdjmsykW PkR5iUDPXV6SU69nth9Drqu1Ko9zD9wXjJuDHcEkhzdaNqFKyvphFUeMJLXOW9wK ftqUnueF4UPZ14Rglf59Aj/qnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK95wUDa TDj/ZbdjLBopTZ8zyDCDMB8GA1UdIwQYMBaAFOOODXnz/SkjHsPz4wKdOT9DJ3yz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODI5OC83MjI0NzY2QUIy MEMxMUVCQUM4ODZBMkNDNEY5QUUwMi80NDROZWZQOUtTTWV3X1BqQXAwNVAwTW5m TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0NE5lZlA5S1NNZXdfUGpBcDA1UDBNbmZMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODI5OC83MjI0NzY2QUIyMEMxMUVCQUM4ODZBMkNDNEY5QUUwMi80NDROZWZQOUtT TWV3X1BqQXAwNVAwTW5mTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB2xwU9gjrh7Fn5BBTZ11EBf5ZtTtwA+0Fs302j2VywCe8SqOpjAMn KQpyG+tATqNnmw2QBt+HXSUaticNoaGk05xMps9Kf2Y5Qt11amnEFaEHfb8BB/il EFpY1pnOi7iwXFM7z8UJCGB6r+YC8BXl7vItMRBntAtqdnB3q31+/8Vw7M5Nr+Bv 1Vw+LkobxqGBfMByUtUBg7FtXjWS3CXXSjCRlmAEVri+LqVMzABUeq34Ya3/tvBD +94w/CfyboX8KN+ezeTpvUjGWWc9Omt7W7V7eT4VwnJuA8Uw57lwm4hFTVXoDcTi gR9l2pxi+YhDBky0crMxByiUIsNbbKvp -----END CERTIFICATE-----Generated at Fri Sep 19 03:57:42 2025 by rpki-client