$ rpki-client -vvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft File: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft (raw, json) Hash identifier: zb5hLfPyRqC/cA23XYqRTlo/GYaKdhnSBO0aRkq/WqU= Subject key identifier: 97:A0:29:57:C8:E4:09:6D:CF:03:0F:CD:69:6F:B9:5B:B0:05:CA:5E Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 Certificate issuer: /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Certificate serial: 34E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft Manifest number: 34D1 Signing time: Thu 18 Sep 2025 15:09:27 +0000 Manifest this update: Thu 18 Sep 2025 15:09:26 +0000 Manifest next update: Thu 25 Sep 2025 15:09:26 +0000 Files and hashes: 1: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl (hash: CY8bTB9ce8HMkT/kASpjLfzGmdeae8vUKGl8KQVPXuA=) 2: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (hash: i+oLVOiTvF13PBUoOa9UfIxFEQhcYfTJRD1Exsj8GIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13537 (0x34e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132AEB, serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Validity Not Before: Sep 18 15:09:26 2025 GMT Not After : Sep 25 15:09:26 2025 GMT Subject: CN=68cc20a7-6586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:dc:13:a0:31:af:f2:dc:20:8d:44:d9:6a: 57:7f:a9:ea:ac:ac:80:4f:ea:f4:db:79:2a:11:5b: 48:6f:d9:37:0c:cc:c9:9b:6c:30:1c:8b:69:13:38: 7a:14:7f:74:b8:96:4c:03:21:59:88:ea:3f:42:ea: c2:5f:aa:4b:8b:23:02:22:0e:b6:09:a6:0c:77:d1: 1c:27:d6:bf:2e:4f:77:1c:14:77:36:7b:65:46:e7: 6e:d1:35:e7:ce:ac:85:38:3c:fa:08:d7:61:a9:30: ad:16:f6:e6:e6:ab:03:f4:21:9e:b2:89:20:0a:ca: 43:0a:4d:02:fb:98:49:34:ce:cb:48:f1:55:c8:5c: 0d:4e:81:e1:58:8d:66:22:16:58:59:d1:44:e9:0d: c5:71:16:6c:18:fd:08:5b:46:fd:ed:70:83:e1:83: 9b:bc:1e:0d:35:ab:83:28:51:76:94:32:27:f7:d5: 4b:cb:0b:67:78:ec:b5:26:03:ef:3c:a9:f0:08:a3: 93:84:cf:07:9d:e3:b6:53:5d:8f:82:a2:1e:25:47: a4:bd:7c:e3:1c:0b:e8:37:c9:b8:f0:4a:8f:02:b2: d6:10:7c:0d:17:59:9c:19:94:d7:7a:d3:7b:5a:09: 5e:74:d9:54:87:1a:32:2c:ed:e6:ca:53:8a:f0:ef: 97:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A0:29:57:C8:E4:09:6D:CF:03:0F:CD:69:6F:B9:5B:B0:05:CA:5E X509v3 Authority Key Identifier: keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:57:0a:85:b4:fd:c6:e2:d1:b5:42:97:bc:62:6c:93:1f:15: bf:e1:3d:ff:8a:00:53:8c:3c:64:d2:69:79:c2:e3:c1:31:fc: ba:13:28:47:b7:74:f2:0f:ad:52:c4:69:bb:34:0b:42:20:1c: 06:c8:d8:50:8d:b5:45:45:f7:78:00:87:01:d5:dd:9e:66:e3: 1d:9c:28:a8:b4:dc:f7:8c:2a:64:03:97:fb:b1:5f:78:37:8f: a6:fb:ca:a0:9b:b0:43:db:a1:78:48:a4:f8:53:5f:16:d3:2e: b2:ba:f1:74:e7:65:0a:7c:fd:02:66:f3:40:e7:ab:27:51:2f: 34:aa:02:cb:64:18:e2:7b:d0:fd:9d:c5:67:71:4f:db:8a:57: 2e:5d:9a:b0:f9:e0:b3:2d:07:77:86:06:4d:a2:13:f1:2e:02: a2:65:fd:9f:2c:95:1f:e8:e3:a0:c0:d2:04:0c:a1:7a:11:e7: 39:b9:43:e6:26:c6:43:24:14:69:47:fb:0d:85:b7:de:45:00: 2d:0f:93:80:0e:97:2a:c3:e7:0c:76:19:32:15:86:93:d4:7e: 76:3b:7e:2d:cb:c8:98:34:37:65:6f:82:6b:ce:fc:53:71:69: dc:e0:10:b7:26:3d:fa:26:22:f2:57:39:b8:f1:e6:a6:ab:93: 4f:55:0b:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJBRUIxMTAvBgNVBAUTKDBGOTUyQTI3RUYzRUYyN0NFQTA4QzU3RDIwMkEzODA2 OUVDQjU4NDAwHhcNMjUwOTE4MTUwOTI2WhcNMjUwOTI1MTUwOTI2WjAYMRYwFAYD VQQDEw02OGNjMjBhNy02NTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutPcE6Axr/LcII1E2WpXf6nqrKyAT+r023kqEVtIb9k3DMzJm2wwHItpEzh6 FH90uJZMAyFZiOo/QurCX6pLiyMCIg62CaYMd9EcJ9a/Lk93HBR3NntlRudu0TXn zqyFODz6CNdhqTCtFvbm5qsD9CGesokgCspDCk0C+5hJNM7LSPFVyFwNToHhWI1m IhZYWdFE6Q3FcRZsGP0IW0b97XCD4YObvB4NNauDKFF2lDIn99VLywtneOy1JgPv PKnwCKOThM8HneO2U12PgqIeJUekvXzjHAvoN8m48EqPArLWEHwNF1mcGZTXetN7 WgledNlUhxoyLO3mylOK8O+XywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJegKVfI 5AltzwMPzWlvuVuwBcpeMB8GA1UdIwQYMBaAFA+VKifvPvJ86gjFfSAqOAaey1hA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkFFQi9FRjI5QkEyQTFE QTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThuenFDTVY5SUNvNEJwN0xX RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1VXFKLTgtOG56cUNNVjlJQ280QnA3TFdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkFFQi9FRjI5QkEyQTFEQTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThu enFDTVY5SUNvNEJwN0xXRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAVwqFtP3G4tG1Qpe8YmyTHxW/4T3/igBTjDxk0ml5wuPBMfy6EyhH t3TyD61SxGm7NAtCIBwGyNhQjbVFRfd4AIcB1d2eZuMdnCiotNz3jCpkA5f7sV94 N4+m+8qgm7BD26F4SKT4U18W0y6yuvF052UKfP0CZvNA56snUS80qgLLZBjie9D9 ncVncU/bilcuXZqw+eCzLQd3hgZNohPxLgKiZf2fLJUf6OOgwNIEDKF6Eec5uUPm JsZDJBRpR/sNhbfeRQAtD5OADpcqw+cMdhkyFYaT1H52O34ty8iYNDdlb4JrzvxT cWnc4BC3Jj36JiLyVzm48eamq5NPVQth -----END CERTIFICATE-----Generated at Fri Sep 19 01:27:29 2025 by rpki-client