$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft File: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json) Hash identifier: dkw4pJe1dtMS/W66Onqxm+9hVwbtX4A033RSRBBbnkM= Subject key identifier: D3:BE:DA:65:6B:FD:D9:44:0E:A7:94:FD:A8:52:B4:B2:A2:E7:7D:CE Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 Certificate issuer: /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft Manifest number: 0122 Signing time: Tue 09 Sep 2025 04:48:58 +0000 Manifest this update: Tue 09 Sep 2025 04:48:57 +0000 Manifest next update: Tue 16 Sep 2025 04:48:57 +0000 Files and hashes: 1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: 7Pld5cdl9HpBcO71buGASFazZB4UYXTPhaXa6DIneGA=) 2: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: hU10WaMZMWvcWJ+v9bo24BcgNYMioZ0sb+F6hOJfmbc=) 3: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: sPtVs53bSiEnKQBpC6mQNEMcK8QGbiyEvPYg/bLQ/os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913150F, serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Validity Not Before: Sep 9 04:48:57 2025 GMT Not After : Sep 16 04:48:57 2025 GMT Subject: CN=68bfb1b9-e111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:9e:6f:ec:6e:04:91:e8:68:04:db:5b:87: 45:0b:cf:f9:85:2d:0c:8c:7d:c9:7f:44:8f:d6:14: 01:ef:df:4e:12:d1:b6:3b:92:d0:2b:6a:5e:c4:02: d2:14:41:ff:be:b7:12:3a:33:43:03:d5:4c:64:96: 1e:df:8e:da:d5:df:fc:45:c1:3a:5b:de:70:80:2f: 1f:e2:98:6d:92:64:62:79:7c:46:9d:65:9e:a5:9d: 5c:ba:91:52:49:de:5f:7d:cc:05:9f:27:f6:f8:99: 7f:4f:24:15:5a:5f:d2:f2:99:50:5c:b6:27:f5:6e: 8d:a0:57:5f:e2:ef:13:94:92:97:0a:63:cc:4a:3b: 67:3a:38:04:0d:42:c7:91:74:fc:f5:3f:3c:49:67: 6e:16:d0:f8:a7:27:f1:0f:de:87:3a:a0:ff:90:6f: 4f:1c:e8:d7:ca:96:93:f5:44:9e:06:81:aa:2d:eb: 77:d1:b5:a2:8d:f1:1e:6a:93:ae:0b:7b:66:56:04: a6:24:dd:9f:a9:3c:e9:7f:11:a3:ec:c7:6a:a0:79: 63:54:40:64:7d:ce:b5:46:54:61:13:9d:bc:51:71: 62:e3:80:de:04:ba:35:d0:57:af:96:da:bc:db:c4: 65:89:3c:3a:de:8c:93:50:50:3c:fb:20:1d:37:62: c0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BE:DA:65:6B:FD:D9:44:0E:A7:94:FD:A8:52:B4:B2:A2:E7:7D:CE X509v3 Authority Key Identifier: keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:85:65:0e:4b:5b:28:73:ac:ef:02:7f:b2:5f:4b:fb:e9:d8: 0a:0e:c4:ef:9a:ed:15:8a:2a:1f:20:98:75:9e:7b:e1:63:91: 13:0a:4a:4f:3a:ff:35:22:6c:d1:7f:22:07:17:6e:d2:95:0f: ff:96:a7:23:fb:c7:c0:6c:d6:82:e6:0f:ef:7e:4d:8f:f4:a1: 6b:c5:3b:eb:0c:43:48:e9:d2:b2:24:cd:d4:0b:4f:9b:fc:bb: 64:46:40:c1:e2:d9:1f:33:b4:a3:b6:dc:c5:b1:30:6a:5a:18: 22:ec:3c:34:3b:88:0d:b4:13:23:b4:ee:67:90:dc:77:0c:b4: 0e:05:2e:72:b0:1a:07:3e:7a:f4:3e:91:c8:26:b5:a8:ca:0b: 6d:99:ac:09:39:a8:f5:17:29:a3:58:99:92:2f:d4:0a:71:44: 19:70:82:8e:fe:09:80:4a:bb:52:cf:f0:8e:e7:5b:0f:63:5a: 47:4e:2f:b0:78:9d:b1:d7:87:af:0d:a8:62:b1:83:8c:66:53: 67:7b:1a:e9:df:6f:11:88:66:d2:77:61:fb:00:dd:9e:1a:24: 8b:6c:ee:34:15:60:53:c1:12:f6:c5:7c:1d:7e:d5:45:2c:20: 2c:83:f7:48:5e:03:b9:4b:8d:1d:b9:52:68:59:29:c4:a6:24: 54:c5:aa:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1MEYxMTAvBgNVBAUTKDY2M0Y0RDVGQzgyNzBBNDQyMEZFMUU2MUY5MUFERkE4 MzdGRjFFRTQwHhcNMjUwOTA5MDQ0ODU3WhcNMjUwOTE2MDQ0ODU3WjAYMRYwFAYD VQQDEw02OGJmYjFiOS1lMTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWCeb+xuBJHoaATbW4dFC8/5hS0MjH3Jf0SP1hQB799OEtG2O5LQK2pexALS FEH/vrcSOjNDA9VMZJYe347a1d/8RcE6W95wgC8f4phtkmRieXxGnWWepZ1cupFS Sd5ffcwFnyf2+Jl/TyQVWl/S8plQXLYn9W6NoFdf4u8TlJKXCmPMSjtnOjgEDULH kXT89T88SWduFtD4pyfxD96HOqD/kG9PHOjXypaT9USeBoGqLet30bWijfEeapOu C3tmVgSmJN2fqTzpfxGj7MdqoHljVEBkfc61RlRhE528UXFi44DeBLo10Fevltq8 28RliTw63oyTUFA8+yAdN2LAOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNO+2mVr /dlEDqeU/ahStLKi533OMB8GA1UdIwQYMBaAFGY/TV/IJwpEIP4eYfka36g3/x7k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTUwRi81NzcxOTg1NEQx MzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNrUWdfaDVoLVJyZnFEZl9I dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqOU5YOGduQ2tRZ19oNWgtUnJmcURmX0h1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTUwRi81NzcxOTg1NEQxMzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNr UWdfaDVoLVJyZnFEZl9IdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRhWUOS1soc6zvAn+yX0v76dgKDsTvmu0ViiofIJh1nnvhY5ETCkpP Ov81ImzRfyIHF27SlQ//lqcj+8fAbNaC5g/vfk2P9KFrxTvrDENI6dKyJM3UC0+b /LtkRkDB4tkfM7SjttzFsTBqWhgi7Dw0O4gNtBMjtO5nkNx3DLQOBS5ysBoHPnr0 PpHIJrWoygttmawJOaj1FymjWJmSL9QKcUQZcIKO/gmASrtSz/CO51sPY1pHTi+w eJ2x14evDahisYOMZlNnexrp328RiGbSd2H7AN2eGiSLbO40FWBTwRL2xXwdftVF LCAsg/dIXgO5S40duVJoWSnEpiRUxaoZ -----END CERTIFICATE-----Generated at Tue Sep 9 06:39:23 2025 by rpki-client