$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: cvYdunhKIaQZcW9tGudt4JAfuGJZXJhiY0ApphSZUPQ= Subject key identifier: C8:6E:2F:C1:D2:1C:CA:64:46:53:48:4A:DA:BD:72:54:AB:A0:CE:CF Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 0847 Signing time: Thu 18 Sep 2025 20:56:46 +0000 Manifest this update: Thu 18 Sep 2025 20:56:45 +0000 Manifest next update: Thu 25 Sep 2025 20:56:45 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: Q/U6w6UWAr3RuiwFwmi6u3q1QpMWyexhoXKLOWnoOxQ=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: uybnkX1k8gPyTR5CU7p1ceux1tCfl8jTIgkNDS2MSjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Sep 18 20:56:45 2025 GMT Not After : Sep 25 20:56:45 2025 GMT Subject: CN=68cc720e-fa3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a7:88:0a:4e:ff:38:9b:d7:e8:aa:81:f3:f6: 8d:13:38:3d:19:58:57:c9:48:92:64:ea:4e:1a:25: be:37:65:1c:7e:3c:30:84:68:87:76:71:df:87:6c: e2:e0:15:2a:4c:1c:7e:eb:2a:05:38:53:e4:17:2b: 06:e8:57:c2:59:97:7c:d0:9e:7f:1b:6e:52:5a:b3: bc:d8:ce:4f:ea:4e:0b:55:94:05:cd:b2:a3:85:44: 81:28:b7:97:b1:bd:63:49:5f:c3:26:19:0b:14:64: 1f:e9:fd:de:1b:98:dd:d9:17:bc:07:9c:c3:fa:4f: 40:3c:04:f8:c0:21:b6:62:49:5e:84:59:68:e6:93: f2:d9:96:1e:bb:c5:2e:f9:d8:b6:73:c4:26:bc:a6: b3:2b:1a:28:f7:9f:6f:91:25:d2:93:73:dd:c1:3a: d3:85:91:b9:d2:db:29:2b:45:fa:6f:1e:4d:b6:15: e3:da:d8:b6:c4:51:97:10:aa:38:87:57:ed:ed:d3: ec:22:57:95:d9:0d:f2:be:bb:65:aa:68:33:c8:2e: 86:c5:b1:05:45:c6:10:2d:e0:c2:d3:59:41:46:95: f3:5b:53:56:4a:99:bd:f7:bf:c0:2d:03:f0:60:f0: b5:6d:ca:d5:c9:c5:29:4b:5b:37:25:fb:8d:63:54: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6E:2F:C1:D2:1C:CA:64:46:53:48:4A:DA:BD:72:54:AB:A0:CE:CF X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e7:ad:2c:d3:88:4d:60:a5:86:66:de:47:fc:d3:d1:a4:fa: 93:b9:4e:33:2b:6c:af:63:33:6b:96:46:ff:d0:33:ce:d0:24: 67:5f:c2:fc:3b:8d:00:e5:a7:47:21:5a:69:1a:9a:ff:45:fc: fc:fb:c5:af:ac:26:59:0a:ed:84:a0:e7:6c:26:f6:15:95:76: 7b:06:eb:f5:1f:de:bc:00:39:cc:56:db:93:4f:8c:33:8b:eb: 78:91:e7:74:a9:36:e4:b7:d0:03:a6:3b:66:8d:8c:b6:f2:d7: 3a:e0:84:15:f6:48:05:9e:4c:1a:b4:51:ce:2f:59:52:fb:3b: ef:31:7e:8d:d9:e3:45:2e:0f:f7:c8:22:3d:32:42:ea:a4:3a: ba:d0:ef:db:a8:48:79:fb:c7:f4:20:b3:90:55:07:bb:36:52: d7:c3:56:d6:94:59:f3:5f:fd:7f:eb:5b:c8:d2:54:92:0f:83: c1:1f:f2:f4:1a:20:18:88:af:0c:9f:13:da:6b:55:cd:78:12: 02:e9:75:4c:38:5c:01:f9:a8:50:35:65:bb:d0:a3:09:73:52: 4b:49:e1:d0:55:b1:70:27:1b:46:c4:ce:25:9b:57:8f:d0:2f: 52:eb:21:84:27:00:47:ac:67:29:ca:60:53:64:c4:f1:33:b3: 32:e7:66:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjUwOTE4MjA1NjQ1WhcNMjUwOTI1MjA1NjQ1WjAYMRYwFAYD VQQDEw02OGNjNzIwZS1mYTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9aeICk7/OJvX6KqB8/aNEzg9GVhXyUiSZOpOGiW+N2UcfjwwhGiHdnHfh2zi 4BUqTBx+6yoFOFPkFysG6FfCWZd80J5/G25SWrO82M5P6k4LVZQFzbKjhUSBKLeX sb1jSV/DJhkLFGQf6f3eG5jd2Re8B5zD+k9APAT4wCG2YklehFlo5pPy2ZYeu8Uu +di2c8QmvKazKxoo959vkSXSk3PdwTrThZG50tspK0X6bx5NthXj2ti2xFGXEKo4 h1ft7dPsIleV2Q3yvrtlqmgzyC6GxbEFRcYQLeDC01lBRpXzW1NWSpm997/ALQPw YPC1bcrVycUpS1s3JfuNY1Q7jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhuL8HS HMpkRlNIStq9clSroM7PMB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK560s04hNYKWGZt5H/NPRpPqTuU4zK2yvYzNrlkb/0DPO0CRnX8L8 O40A5adHIVppGpr/Rfz8+8WvrCZZCu2EoOdsJvYVlXZ7Buv1H968ADnMVtuTT4wz i+t4ked0qTbkt9ADpjtmjYy28tc64IQV9kgFnkwatFHOL1lS+zvvMX6N2eNFLg/3 yCI9MkLqpDq60O/bqEh5+8f0ILOQVQe7NlLXw1bWlFnzX/1/61vI0lSSD4PBH/L0 GiAYiK8MnxPaa1XNeBIC6XVMOFwB+ahQNWW70KMJc1JLSeHQVbFwJxtGxM4lm1eP 0C9S6yGEJwBHrGcpymBTZMTxM7My52ZM -----END CERTIFICATE-----Generated at Fri Sep 19 09:15:25 2025 by rpki-client