$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft File: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json) Hash identifier: xlJnhZWK88hmIfZYSUwq96vF7wtk7ADqQ+YzGw1fLpg= Subject key identifier: 6E:A2:9A:EF:C9:13:D3:81:0B:6D:B4:95:90:37:08:3E:F3:7C:5D:4A Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D Certificate issuer: /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Certificate serial: 09B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft Manifest number: 09B1 Signing time: Thu 18 Sep 2025 20:16:25 +0000 Manifest this update: Thu 18 Sep 2025 20:16:24 +0000 Manifest next update: Thu 25 Sep 2025 20:16:24 +0000 Files and hashes: 1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: qXr7Ht9bdV9jaTltUc5bltbkxmOFpsHpv4F/HbYNt/M=) 2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: 2KXnyRjzRL6Ajbgx/szbyFBTyK8pjQMyBf0qPFxtz+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2487 (0x9b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Validity Not Before: Sep 18 20:16:24 2025 GMT Not After : Sep 25 20:16:24 2025 GMT Subject: CN=68cc6899-11e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:96:36:4a:46:7a:b3:15:44:a3:d2:dc:e6: 37:7a:cc:20:fc:eb:21:76:b2:e0:68:fe:31:ec:d2: 1f:c4:1b:08:e5:b9:72:db:0a:08:03:3d:b5:19:86: 7b:7a:01:3f:ce:b6:6a:ca:25:5e:0d:52:12:eb:93: 38:84:2f:8e:58:98:a8:3d:9a:8c:8e:b7:01:56:96: 50:41:3d:ae:32:ae:83:b2:f6:d2:59:f8:58:36:c1: be:7f:36:89:e7:a5:68:12:8e:8d:91:e4:29:1a:55: 92:fe:12:f9:8f:8b:4d:4b:1d:5a:e4:c6:e0:9d:68: 1f:74:1d:f9:da:fc:ab:2a:66:58:8e:5d:8e:19:e1: 7a:d0:69:95:49:2f:99:30:ee:71:6c:fd:90:15:63: 61:52:8c:69:f3:52:1a:2c:fe:3b:15:90:04:d6:56: b5:78:ef:78:0d:47:4a:e7:2c:08:6f:1e:2f:76:59: 73:5f:2a:e8:74:43:e2:bb:47:7f:6c:0b:1f:e1:a4: f3:d5:cb:9e:f3:34:a9:0d:d5:a0:b7:dc:74:0f:7c: 7e:3c:f2:c3:9b:1b:fc:8b:dd:1c:41:f2:87:45:13: 82:4a:17:39:32:9d:9a:46:e4:e6:ad:6a:96:38:4a: 6e:f6:24:35:0e:c5:a6:36:c3:5a:eb:00:0f:2a:5e: 54:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A2:9A:EF:C9:13:D3:81:0B:6D:B4:95:90:37:08:3E:F3:7C:5D:4A X509v3 Authority Key Identifier: keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:17:cf:cb:57:64:45:d1:63:9a:62:05:14:1f:15:9b:53:e9: 97:20:cf:21:8b:2c:af:58:64:f6:e8:9f:30:1b:93:c7:8d:de: 3f:29:b4:96:09:3f:46:50:c9:7d:b2:34:ac:60:d3:c0:db:89: 26:6a:24:d3:11:62:e9:e7:6d:8d:4c:6a:2a:01:98:32:25:92: e2:28:bf:5c:f7:72:4d:d5:64:63:54:3b:1e:7c:0c:41:bd:e7: 63:fd:58:48:18:46:2d:72:2d:88:c8:6e:c8:2a:1b:e8:82:cd: 8e:be:98:1d:e7:3c:84:48:47:53:bd:ea:41:85:86:ba:6d:bf: 85:7f:fe:01:e1:ce:fa:5e:41:17:a7:b2:e6:a2:1f:c2:03:64: e2:4f:76:02:53:f4:d0:ed:34:71:9a:41:d4:6e:fa:d1:36:5a: c8:d3:80:b7:3a:c2:67:9c:92:1c:40:f0:be:21:1c:d8:0d:8a: 93:6e:23:06:05:33:85:29:dc:0f:00:39:fd:c9:ba:6c:d2:43: f3:af:34:28:cf:a3:ab:8a:63:a1:ff:12:95:0a:1a:6f:c7:ad: 8f:ac:d7:5f:51:64:52:e1:d9:0b:d9:3d:75:8e:58:52:aa:fc: 75:6a:0e:16:24:7e:fd:ac:cd:b9:99:ce:b0:e9:e6:9e:b5:44: 73:df:8c:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA1NjYxMTAvBgNVBAUTKDlCRDY0NDgzQTI0MjFGQTZGMEVFNjM5OTc1QzcwNTk3 NjJBRkYwNUQwHhcNMjUwOTE4MjAxNjI0WhcNMjUwOTI1MjAxNjI0WjAYMRYwFAYD VQQDEw02OGNjNjg5OS0xMWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDCWNkpGerMVRKPS3OY3eswg/OshdrLgaP4x7NIfxBsI5bly2woIAz21GYZ7 egE/zrZqyiVeDVIS65M4hC+OWJioPZqMjrcBVpZQQT2uMq6DsvbSWfhYNsG+fzaJ 56VoEo6NkeQpGlWS/hL5j4tNSx1a5MbgnWgfdB352vyrKmZYjl2OGeF60GmVSS+Z MO5xbP2QFWNhUoxp81IaLP47FZAE1la1eO94DUdK5ywIbx4vdllzXyrodEPiu0d/ bAsf4aTz1cue8zSpDdWgt9x0D3x+PPLDmxv8i90cQfKHRROCShc5Mp2aRuTmrWqW OEpu9iQ1DsWmNsNa6wAPKl5UYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6imu/J E9OBC220lZA3CD7zfF1KMB8GA1UdIwQYMBaAFJvWRIOiQh+m8O5jmXXHBZdir/Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU2Ni82QjQ1NjA5Qzkw OEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2Ync3bU9aZGNjRmwyS3Y4 RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL205WkVnNkpDSDZidzdtT1pkY2NGbDJLdjhGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDU2Ni82QjQ1NjA5QzkwOEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2 Ync3bU9aZGNjRmwyS3Y4RjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0F8/LV2RF0WOaYgUUHxWbU+mXIM8hiyyvWGT26J8wG5PHjd4/KbSW CT9GUMl9sjSsYNPA24kmaiTTEWLp522NTGoqAZgyJZLiKL9c93JN1WRjVDsefAxB vedj/VhIGEYtci2IyG7IKhvogs2Ovpgd5zyESEdTvepBhYa6bb+Ff/4B4c76XkEX p7Lmoh/CA2TiT3YCU/TQ7TRxmkHUbvrRNlrI04C3OsJnnJIcQPC+IRzYDYqTbiMG BTOFKdwPADn9ybps0kPzrzQoz6OrimOh/xKVChpvx62PrNdfUWRS4dkL2T11jlhS qvx1ag4WJH79rM25mc6w6eaetURz34zr -----END CERTIFICATE-----Generated at Fri Sep 19 03:44:56 2025 by rpki-client