$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft File: lyuQ2cUZIlatlkdbOSurGnp5zC0.mft (raw, json) Hash identifier: k8VGcmuSB78OkVhm15rYpV/t/svRuhWfRZNw+ebc+Lg= Subject key identifier: 1F:2B:AB:F9:2D:DE:76:F0:B6:27:A0:2B:8F:8F:68:6F:1E:5C:7C:7B Authority key identifier: 97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D Certificate issuer: /CN=A9132FD9/serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft Manifest number: 4A Signing time: Fri 19 Sep 2025 08:08:34 +0000 Manifest this update: Fri 19 Sep 2025 08:08:34 +0000 Manifest next update: Fri 26 Sep 2025 08:08:34 +0000 Files and hashes: 1: lyuQ2cUZIlatlkdbOSurGnp5zC0.crl (hash: UOV8i6qE2pMJdFUhhswBZxw2tgFm93IAN4L/N3w0s+k=) 2: DCC2224A313011F0BE214A64C4F9AE02.roa (hash: boAAaQY0nzMtC8MdALGWU7uiMFPgsCoPJLOiVmNOgmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FD9, serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D Validity Not Before: Sep 19 08:08:34 2025 GMT Not After : Sep 26 08:08:34 2025 GMT Subject: CN=68cd0f82-fcba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:9c:f4:99:55:31:b9:cd:75:37:0d:0b:45: 34:c4:b5:61:43:3f:34:39:9b:77:f2:0b:bb:67:8f: 70:58:e4:4d:2c:c6:e5:35:cb:59:ab:bc:d2:dc:95: c5:c2:8d:e9:33:19:9e:0b:18:e1:64:2e:79:dd:84: 4a:4d:7a:16:7d:b6:2b:0c:96:59:fb:26:8d:64:3d: 65:0a:ce:5f:64:53:3f:00:b7:44:15:00:51:e7:27: 7a:0b:05:ab:05:26:4d:94:90:3a:c4:2d:13:7f:e1: 71:76:98:b2:d7:45:d3:3e:8d:78:df:9a:aa:0b:cd: 3a:4f:f4:14:2d:7c:4f:24:bc:15:de:d9:79:4f:45: 97:12:b3:08:ee:7f:f9:ca:3e:3f:c7:92:19:5e:fc: 6c:57:12:4f:1c:de:ed:59:f9:65:ea:ac:7d:ae:be: ff:bd:97:d8:5b:e1:d2:05:46:ea:03:1f:fb:43:5a: 9b:59:60:1a:8b:dc:3e:57:21:c4:69:a7:c5:bb:52: 76:4e:90:8d:c7:0d:47:84:c5:15:de:66:3e:bd:c3: 91:2f:af:7f:00:62:29:5c:8c:3b:66:75:d2:e2:83: e1:bc:04:85:0e:b9:32:5a:51:a7:8a:e3:ee:e5:94: c2:38:e3:b3:03:86:e7:2c:68:c5:0c:00:6c:ff:90: 38:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2B:AB:F9:2D:DE:76:F0:B6:27:A0:2B:8F:8F:68:6F:1E:5C:7C:7B X509v3 Authority Key Identifier: keyid:97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:6d:d3:24:c4:74:20:66:c6:81:f1:ed:e6:54:77:9a:18:12: 3c:d9:f8:3a:01:57:5a:69:ff:87:96:1a:9e:b3:4e:9e:df:99: 21:39:1e:4d:28:f9:8f:bd:04:e6:41:b1:3d:8b:82:be:a7:ca: 00:fa:60:fa:59:7d:56:c3:d2:ed:7a:35:70:05:a1:f4:c8:fb: 5e:ad:3c:28:e9:85:14:12:0d:a5:ab:5a:76:d6:7c:1d:b3:1a: 05:09:3e:5a:6b:a2:22:0f:11:b6:2b:eb:21:3a:72:6d:24:f8: 21:3a:08:1b:75:95:46:03:1f:53:90:12:de:c3:0b:ac:26:0a: 44:d6:be:2a:c1:38:61:e3:68:d9:6a:14:fb:56:e0:64:ac:7e: 0f:83:30:99:fc:33:eb:bb:5a:32:dd:03:d4:30:1a:73:23:5a: ad:d7:8e:6c:35:90:46:60:a1:67:dc:cd:43:1a:4e:f6:53:42: ab:66:a4:22:f4:e7:b5:e1:55:ba:ff:f0:6c:54:28:cd:97:71: 0b:3b:c5:bf:65:ff:53:1a:4d:6e:88:51:7d:28:d1:f8:bd:cf: ad:71:78:50:67:60:3b:ba:10:63:e9:d7:39:be:7b:a6:7f:22: 8e:1c:ef:7a:b2:a7:96:60:4b:6a:75:d5:a1:32:5e:a5:71:65: ae:47:0b:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MkZEOTExMC8GA1UEBRMoOTcyQjkwRDlDNTE5MjI1NkFEOTY0NzVCMzkyQkFCMUE3 QTc5Q0MyRDAeFw0yNTA5MTkwODA4MzRaFw0yNTA5MjYwODA4MzRaMBgxFjAUBgNV BAMTDTY4Y2QwZjgyLWZjYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLe5z0mVUxuc11Nw0LRTTEtWFDPzQ5m3fyC7tnj3BY5E0sxuU1y1mrvNLclcXC jekzGZ4LGOFkLnndhEpNehZ9tisMlln7Jo1kPWUKzl9kUz8At0QVAFHnJ3oLBasF Jk2UkDrELRN/4XF2mLLXRdM+jXjfmqoLzTpP9BQtfE8kvBXe2XlPRZcSswjuf/nK Pj/Hkhle/GxXEk8c3u1Z+WXqrH2uvv+9l9hb4dIFRuoDH/tDWptZYBqL3D5XIcRp p8W7UnZOkI3HDUeExRXeZj69w5Evr38AYilcjDtmddLig+G8BIUOuTJaUaeK4+7l lMI447MDhucsaMUMAGz/kDhXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHyur+S3e dvC2J6Arj49obx5cfHswHwYDVR0jBBgwFoAUlyuQ2cUZIlatlkdbOSurGnp5zC0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyRkQ5LzdGOUE3MDM0MkJC NTExRjA5REU1QkE0RUM0RjlBRTAyL2x5dVEyY1VaSWxhdGxrZGJPU3VyR25wNXpD MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHl1UTJjVVpJbGF0bGtkYk9TdXJHbnA1ekMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy RkQ5LzdGOUE3MDM0MkJCNTExRjA5REU1QkE0RUM0RjlBRTAyL2x5dVEyY1VaSWxh dGxrZGJPU3VyR25wNXpDMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABJt0yTEdCBmxoHx7eZUd5oYEjzZ+DoBV1pp/4eWGp6zTp7fmSE5Hk0o +Y+9BOZBsT2Lgr6nygD6YPpZfVbD0u16NXAFofTI+16tPCjphRQSDaWrWnbWfB2z GgUJPlproiIPEbYr6yE6cm0k+CE6CBt1lUYDH1OQEt7DC6wmCkTWvirBOGHjaNlq FPtW4GSsfg+DMJn8M+u7WjLdA9QwGnMjWq3Xjmw1kEZgoWfczUMaTvZTQqtmpCL0 57XhVbr/8GxUKM2XcQs7xb9l/1MaTW6IUX0o0fi9z61xeFBnYDu6EGPp1zm+e6Z/ Io4c73qyp5ZgS2p11aEyXqVxZa5HCxE= -----END CERTIFICATE-----Generated at Fri Sep 19 10:16:14 2025 by rpki-client