$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft File: C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json) Hash identifier: SLwWUL72C60rVENKi+KaURYnlJsNZel9z0t8x5hihQI= Subject key identifier: C3:4A:C9:93:67:9E:7D:37:88:98:E3:93:9E:C0:94:C7:4B:91:39:3B Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 Certificate issuer: /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft Manifest number: 0115 Signing time: Fri 05 Sep 2025 05:16:57 +0000 Manifest this update: Fri 05 Sep 2025 05:16:56 +0000 Manifest next update: Fri 12 Sep 2025 05:16:56 +0000 Files and hashes: 1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: 6/rm7r7kj0M+oHg5KpEO7BfcAxoyOpcBXizyS8eVW0M=) 2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: EyKD4I3R8YSy4asXY+8xvf07IP4owJwI772hb1AAhAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Validity Not Before: Sep 5 05:16:56 2025 GMT Not After : Sep 12 05:16:56 2025 GMT Subject: CN=68ba7248-9850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:70:a6:92:d1:62:02:2c:02:3f:62:24:60: da:bc:4f:fb:69:2d:12:88:05:29:2e:67:8e:02:cb: 08:7b:86:2c:49:57:04:46:fb:70:dc:d6:30:c2:96: c9:2d:3f:e7:f0:7c:03:4f:8f:d9:a9:4f:4e:aa:3c: 5e:cc:89:ee:60:d7:39:81:9e:01:b8:30:d3:bf:ac: 11:86:32:a6:6f:c9:86:be:b9:3e:d0:cf:8b:f1:4f: 1d:e6:49:72:6e:37:c5:56:02:2c:f5:64:cd:c9:d1: ec:23:23:94:ff:3e:8f:bd:de:f6:02:7c:77:39:52: 06:5a:94:43:28:7d:74:5e:3c:1f:45:cd:14:84:4f: e9:82:4f:a7:4b:9b:2f:02:ad:0c:02:ae:b6:2a:0a: cb:df:a0:37:af:7f:11:fc:fb:a6:f4:5b:d8:38:d4: cd:27:05:9a:00:8c:18:9e:35:8b:e5:fa:76:01:64: 1b:96:5a:e6:af:79:b8:26:f5:b2:c5:32:21:1c:dc: e5:9f:9d:da:43:38:63:1c:46:3c:2b:2d:eb:bf:cd: 5e:3b:3f:3f:a1:3b:5f:83:9c:27:53:73:8d:4f:a2: de:52:08:d9:a0:82:a0:0f:87:9e:6c:b3:2b:25:7a: 9b:c3:4a:52:64:6a:b8:29:a0:16:f7:3c:2c:3f:d4: 56:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4A:C9:93:67:9E:7D:37:88:98:E3:93:9E:C0:94:C7:4B:91:39:3B X509v3 Authority Key Identifier: keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:0f:38:6a:49:b2:31:72:72:db:c5:ff:51:90:03:9e:10:55: 5e:81:db:e4:7a:3e:d9:ff:7f:d4:13:b4:23:9e:0a:3b:2f:2c: 74:f6:16:87:4f:8f:4c:3f:98:ea:76:25:d4:3f:00:6e:a5:de: 96:7a:2f:44:5b:d4:66:48:2f:d9:38:e4:8b:c0:bd:0b:1f:94: 11:da:19:17:b1:97:4c:bb:0d:f9:c2:c5:f6:70:91:55:5f:d1: ec:0e:e8:7b:14:b8:df:65:43:25:f3:00:1f:4d:52:8e:36:84: 37:62:77:6a:fd:1b:66:05:b2:dc:83:41:a0:73:cf:60:08:6f: 05:de:b4:6f:43:a4:8d:b9:7a:9c:84:87:92:3a:51:2b:0b:7d: 17:9f:f5:8e:84:0a:51:51:47:15:41:e8:b9:b9:83:0f:ba:83: df:0e:e8:88:4c:7a:65:c2:42:92:c2:bc:52:b6:c9:f2:c8:4d: 05:82:da:9c:04:22:a9:ba:1b:7b:5a:d3:5e:9c:17:6f:ff:ee: 1d:ee:11:bc:f2:d9:f6:9e:f0:4f:d6:06:53:54:01:dc:39:8d: 69:c9:2a:b9:9c:27:60:5c:32:71:3b:2d:c2:23:c2:18:83:4d: 41:80:11:63:61:7d:34:38:3c:8d:61:8a:08:5b:e0:24:2c:a4: 95:66:f2:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2QjMxMTAvBgNVBAUTKDBCREFCNjA4NjE3RjNDMzE4M0M0NzBGNEU2MTlCMjc5 NUY3NUMzODkwHhcNMjUwOTA1MDUxNjU2WhcNMjUwOTEyMDUxNjU2WjAYMRYwFAYD VQQDEw02OGJhNzI0OC05ODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlpwppLRYgIsAj9iJGDavE/7aS0SiAUpLmeOAssIe4YsSVcERvtw3NYwwpbJ LT/n8HwDT4/ZqU9OqjxezInuYNc5gZ4BuDDTv6wRhjKmb8mGvrk+0M+L8U8d5kly bjfFVgIs9WTNydHsIyOU/z6Pvd72Anx3OVIGWpRDKH10XjwfRc0UhE/pgk+nS5sv Aq0MAq62KgrL36A3r38R/Pum9FvYONTNJwWaAIwYnjWL5fp2AWQbllrmr3m4JvWy xTIhHNzln53aQzhjHEY8Ky3rv81eOz8/oTtfg5wnU3ONT6LeUgjZoIKgD4eebLMr JXqbw0pSZGq4KaAW9zwsP9RWzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNKyZNn nn03iJjjk57AlMdLkTk7MB8GA1UdIwQYMBaAFAvatghhfzwxg8Rw9OYZsnlfdcOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DNTU0MjNBQUU2 OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BER0R4SEQwNWhteWVWOTF3 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M5cTJDR0ZfUERHRHhIRDA1aG15ZVY5MXc0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZCMy9DNTU0MjNBQUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BE R0R4SEQwNWhteWVWOTF3NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBDzhqSbIxcnLbxf9RkAOeEFVegdvkej7Z/3/UE7Qjngo7Lyx09haH T49MP5jqdiXUPwBupd6Wei9EW9RmSC/ZOOSLwL0LH5QR2hkXsZdMuw35wsX2cJFV X9HsDuh7FLjfZUMl8wAfTVKONoQ3Yndq/RtmBbLcg0Ggc89gCG8F3rRvQ6SNuXqc hIeSOlErC30Xn/WOhApRUUcVQei5uYMPuoPfDuiITHplwkKSwrxStsnyyE0Fgtqc BCKpuht7WtNenBdv/+4d7hG88tn2nvBP1gZTVAHcOY1pySq5nCdgXDJxOy3CI8IY g01BgBFjYX00ODyNYYoIW+AkLKSVZvIW -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:11 2025 by rpki-client