$ rpki-client -vvf rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft File: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft (raw, json) Hash identifier: S2epYA5Ngs+x15sfexM+G/AUrq/LCTf0sZlllS7bgs8= Subject key identifier: 58:B7:F4:E3:AC:94:5C:2D:FA:71:3B:C7:B6:04:10:36:56:28:54:81 Authority key identifier: 07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 Certificate issuer: /CN=A9129162/serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft Manifest number: 9D Signing time: Wed 17 Sep 2025 07:06:48 +0000 Manifest this update: Wed 17 Sep 2025 07:06:48 +0000 Manifest next update: Wed 24 Sep 2025 07:06:48 +0000 Files and hashes: 1: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl (hash: P+sdkhgTfxaMhhYECDPk5XBxhZboC60yTXIXpDlUXeA=) 2: A5CE322CAD4311EF8552641BC4F9AE02.roa (hash: oXiSJMCySt2dFDYGEcN3qaUXeVsh5lk+krDNaZUgJ2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129162, serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Validity Not Before: Sep 17 07:06:48 2025 GMT Not After : Sep 24 07:06:48 2025 GMT Subject: CN=68ca5e08-416f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:ee:82:89:7a:c6:2b:a1:33:12:68:66:c2: 40:56:16:c9:8a:fa:be:9c:f7:03:d0:49:22:0c:f5: a9:ba:eb:d0:c8:15:b5:83:9e:91:81:f4:bf:a6:fb: a7:62:e2:8a:fa:c4:00:f3:77:ed:17:53:ac:ce:a7: b4:39:55:56:4a:ac:2d:34:e5:d9:8d:02:d4:b5:39: 89:a6:f6:8d:42:6c:54:3a:fd:43:a5:0c:52:66:8a: 32:6a:d0:35:91:03:53:10:51:87:f2:60:be:21:95: 8b:d2:9d:c2:dc:8c:51:78:23:c4:1d:b4:b4:7d:91: 79:86:57:05:e5:79:a4:89:92:73:99:64:ed:3f:1d: 63:39:3a:f2:c7:f9:3c:55:66:8c:49:5f:97:80:0b: 99:c4:08:4b:55:25:39:11:60:28:d7:4b:77:8e:6c: 37:cd:34:29:5f:16:16:41:eb:35:5e:22:f4:a1:65: 31:1a:83:a5:97:c2:38:0b:24:b6:2b:a5:51:55:1e: b1:8c:ae:32:f7:99:29:40:ad:8e:cd:d6:b7:ac:a3: 41:71:62:6c:e5:0a:12:48:24:e8:d1:7e:7c:b6:8d: 3c:5e:ad:ea:07:e7:2d:b6:28:89:77:d3:da:30:e7: 4c:01:25:91:b1:74:f2:7f:15:07:24:ee:a8:4b:95: 33:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B7:F4:E3:AC:94:5C:2D:FA:71:3B:C7:B6:04:10:36:56:28:54:81 X509v3 Authority Key Identifier: keyid:07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:f0:bb:57:28:b2:78:22:99:4f:c2:cc:c7:07:63:85:3e:51: ac:e8:20:c0:8c:95:5a:b1:31:85:b8:9a:52:f5:ee:6b:35:ba: ec:6f:d1:9c:e7:04:22:9a:f6:1f:ec:90:4b:88:c7:4a:3c:9c: 92:62:39:e2:bb:0a:2f:7b:f7:6d:44:07:26:05:fb:a0:0b:90: c5:55:df:f3:60:44:0b:8b:e7:55:b7:8f:cb:89:d4:82:41:1f: f2:0f:f0:b9:95:97:3a:9d:f9:48:c0:90:0c:cd:8f:95:12:4e: e4:62:e3:bd:d1:20:27:dd:5d:c6:b2:c5:d0:c8:fd:5d:4d:1b: 9b:ee:1a:90:7d:95:41:6a:1b:d3:31:e7:15:71:17:c4:cd:05: 82:1a:ab:4d:df:e1:7a:d5:0e:83:4d:8d:08:5c:d9:f5:79:f9: eb:4d:e3:33:41:67:57:8a:b1:5d:af:b2:14:e8:19:60:1b:65: 85:76:e2:c9:ad:ab:20:2c:f3:83:64:98:ad:9a:17:65:78:05: 6b:87:ca:e4:2d:9e:f9:f5:b6:34:d8:05:7f:cf:16:ff:28:c6: 25:a1:b5:b8:2a:28:12:0c:9a:6b:12:d0:ac:e3:da:51:a6:83: 57:e0:fc:ff:1b:fe:cc:55:29:3c:23:59:e5:8f:c0:32:f5:71: d9:b3:42:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkxNjIxMTAvBgNVBAUTKDA3QTY4MUM5MUMzRTA1MTJEMzY4OUU5OUJDRTVCQzY2 NDA5MTY3MzQwHhcNMjUwOTE3MDcwNjQ4WhcNMjUwOTI0MDcwNjQ4WjAYMRYwFAYD VQQDEw02OGNhNWUwOC00MTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzzugol6xiuhMxJoZsJAVhbJivq+nPcD0EkiDPWpuuvQyBW1g56RgfS/pvun YuKK+sQA83ftF1Oszqe0OVVWSqwtNOXZjQLUtTmJpvaNQmxUOv1DpQxSZooyatA1 kQNTEFGH8mC+IZWL0p3C3IxReCPEHbS0fZF5hlcF5XmkiZJzmWTtPx1jOTryx/k8 VWaMSV+XgAuZxAhLVSU5EWAo10t3jmw3zTQpXxYWQes1XiL0oWUxGoOll8I4CyS2 K6VRVR6xjK4y95kpQK2Ozda3rKNBcWJs5QoSSCTo0X58to08Xq3qB+cttiiJd9Pa MOdMASWRsXTyfxUHJO6oS5Uz1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFi39OOs lFwt+nE7x7YEEDZWKFSBMB8GA1UdIwQYMBaAFAemgckcPgUS02iembzlvGZAkWc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE2Mi81QTM4MEQ2QUFE NDMxMUVGQUE4NkMzMUFDNEY5QUUwMi9CNmFCeVJ3LUJSTFRhSjZadk9XOFprQ1Ja elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2YUJ5UnctQlJMVGFKNlp2T1c4WmtDUlp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTE2Mi81QTM4MEQ2QUFENDMxMUVGQUE4NkMzMUFDNEY5QUUwMi9CNmFCeVJ3LUJS TFRhSjZadk9XOFprQ1JaelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy8LtXKLJ4IplPwszHB2OFPlGs6CDAjJVasTGFuJpS9e5rNbrsb9Gc 5wQimvYf7JBLiMdKPJySYjniuwove/dtRAcmBfugC5DFVd/zYEQLi+dVt4/LidSC QR/yD/C5lZc6nflIwJAMzY+VEk7kYuO90SAn3V3GssXQyP1dTRub7hqQfZVBahvT MecVcRfEzQWCGqtN3+F61Q6DTY0IXNn1efnrTeMzQWdXirFdr7IU6BlgG2WFduLJ rasgLPODZJitmhdleAVrh8rkLZ759bY02AV/zxb/KMYlobW4KigSDJprEtCs49pR poNX4Pz/G/7MVSk8I1nlj8Ay9XHZs0J9 -----END CERTIFICATE-----Generated at Fri Sep 19 02:38:28 2025 by rpki-client