$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json) Hash identifier: qthrTmyJ44/CHZT8wki523NOqPE8i0iO5woS96+BtMU= Subject key identifier: 86:3E:26:0D:6E:7D:99:2D:08:7E:57:8E:CE:70:13:FF:F1:E3:C3:2B Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 Certificate issuer: /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft Manifest number: 3F Signing time: Wed 17 Sep 2025 08:12:43 +0000 Manifest this update: Wed 17 Sep 2025 08:12:42 +0000 Manifest next update: Wed 24 Sep 2025 08:12:42 +0000 Files and hashes: 1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: GOiJNQ/I2VtQWfQMMWnQ1sma7It4xxBhXOJom4D1ny4=) 2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Validity Not Before: Sep 17 08:12:42 2025 GMT Not After : Sep 24 08:12:42 2025 GMT Subject: CN=68ca6d7a-0e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:59:91:5b:82:b5:fa:f7:7f:46:b2:a0:34: 98:74:62:2a:63:89:be:93:92:03:63:27:51:c1:5c: e3:34:99:d2:2e:4f:5e:5b:30:cc:bd:bd:2c:7a:25: 99:f1:9a:d9:2b:21:8d:bb:88:0a:90:f1:30:4a:40: 2a:f6:7a:ff:97:40:a5:f7:b6:13:db:21:15:9a:31: c7:1a:f6:80:b9:b6:6e:d9:ff:3b:ff:54:65:6a:64: a2:2b:e9:2c:bb:c7:b6:61:df:c1:69:67:b7:65:8a: 47:cb:1e:50:59:77:50:6f:56:22:fe:96:d2:4f:76: eb:df:3c:c3:d9:a1:43:3a:de:62:b2:b1:06:a2:92: 76:d6:52:9d:13:d9:11:21:18:c9:58:a8:39:5d:9e: 49:12:e9:c2:45:84:89:d9:4a:2f:9d:76:5a:88:6f: 10:bb:7c:c0:3c:9c:e7:37:b1:a1:bb:62:20:ee:77: b5:45:88:3e:c4:49:22:ab:97:0e:a4:9e:cd:ec:b1: 26:e5:9a:12:a6:ae:41:ca:ab:07:20:f6:dd:f3:0c: e9:bb:71:d1:ba:81:6b:13:95:cb:a9:ec:6d:10:16: 1f:ee:a5:b3:e1:00:db:1e:01:25:78:74:22:38:6a: b8:44:6f:53:ab:79:ad:cf:b5:11:a5:7c:12:f7:1a: cd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3E:26:0D:6E:7D:99:2D:08:7E:57:8E:CE:70:13:FF:F1:E3:C3:2B X509v3 Authority Key Identifier: keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:84:73:73:f8:fc:09:32:94:52:eb:ae:3b:8f:31:b4:2d:4b: 15:9e:c2:55:cd:28:59:bc:a0:1c:49:95:8b:83:c0:aa:ba:05: 25:21:3e:9f:ab:82:0a:e5:33:6f:1a:f4:c4:4f:8c:0d:eb:e0: 66:68:ed:41:23:c6:0a:f5:38:34:e4:48:90:73:f4:ec:1d:89: 58:e8:57:fe:5c:09:be:a5:d4:11:87:1e:37:8c:c0:2d:3c:69: 9f:0d:6f:fb:a3:ca:23:91:5d:d5:bb:65:38:3f:93:cf:60:ef: 6a:75:c1:fe:54:4c:38:57:c4:e6:f7:12:c7:d9:a6:1f:91:2c: 3c:ba:5b:24:14:d0:62:7c:7a:cb:61:e2:aa:86:b6:53:29:7b: ac:14:71:e2:15:d6:62:4f:e7:6f:d9:ad:1c:26:66:e0:b4:90: e6:bd:12:62:d8:f3:65:df:43:82:79:c7:df:23:70:14:91:c8: d0:6e:05:8f:5f:21:0d:fb:67:53:98:81:94:68:2f:3a:2c:63: 1d:23:ff:7e:30:99:a4:1d:9c:2d:b6:e7:1e:29:2b:1b:70:ec: 0c:ac:70:c7:eb:d8:29:e7:41:44:30:12:46:44:eb:b0:00:07: 36:d7:9d:85:39:3e:79:d9:02:3c:08:0e:4d:a7:ee:b4:3b:d8: cb:b2:44:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RUZGRDExMC8GA1UEBRMoRjZGMzg1REYxRkVBMjg1N0I2ODQzRjY2MzU2NTQzRkI3 NkJGMDhBNjAeFw0yNTA5MTcwODEyNDJaFw0yNTA5MjQwODEyNDJaMBgxFjAUBgNV BAMTDTY4Y2E2ZDdhLTBlNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4nVmRW4K1+vd/RrKgNJh0Yipjib6TkgNjJ1HBXOM0mdIuT15bMMy9vSx6JZnx mtkrIY27iAqQ8TBKQCr2ev+XQKX3thPbIRWaMcca9oC5tm7Z/zv/VGVqZKIr6Sy7 x7Zh38FpZ7dlikfLHlBZd1BvViL+ltJPduvfPMPZoUM63mKysQaiknbWUp0T2REh GMlYqDldnkkS6cJFhInZSi+ddlqIbxC7fMA8nOc3saG7YiDud7VFiD7ESSKrlw6k ns3ssSblmhKmrkHKqwcg9t3zDOm7cdG6gWsTlcup7G0QFh/upbPhANseASV4dCI4 arhEb1Orea3PtRGlfBL3Gs0hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhj4mDW59 mS0IfleOznAT//HjwyswHwYDVR0jBBgwFoAU9vOF3x/qKFe2hD9mNWVD+3a/CKYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFRkZEL0VBMTI5OTBFMzMy MjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0ZlMmhEOW1OV1ZELTNhX0NL WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXZPRjN4X3FLRmUyaEQ5bU5XVkQtM2FfQ0tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF RkZEL0VBMTI5OTBFMzMyMjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0Zl MmhEOW1OV1ZELTNhX0NLWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADuEc3P4/AkylFLrrjuPMbQtSxWewlXNKFm8oBxJlYuDwKq6BSUhPp+r ggrlM28a9MRPjA3r4GZo7UEjxgr1ODTkSJBz9OwdiVjoV/5cCb6l1BGHHjeMwC08 aZ8Nb/ujyiORXdW7ZTg/k89g72p1wf5UTDhXxOb3EsfZph+RLDy6WyQU0GJ8esth 4qqGtlMpe6wUceIV1mJP52/ZrRwmZuC0kOa9EmLY82XfQ4J5x98jcBSRyNBuBY9f IQ37Z1OYgZRoLzosYx0j/34wmaQdnC225x4pKxtw7AyscMfr2CnnQUQwEkZE67AA BzbXnYU5PnnZAjwIDk2n7rQ72MuyRD0= -----END CERTIFICATE-----Generated at Fri Sep 19 09:08:18 2025 by rpki-client