$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft File: McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json) Hash identifier: VGR0AmonzFK+3f6VTg4/k/AVavrGGQIFKQSAY5vOt3Q= Subject key identifier: D7:15:09:37:3C:29:AA:90:44:B1:0E:7B:3E:3A:97:ED:79:A2:2D:BC Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E Certificate issuer: /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E Certificate serial: 0933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft Manifest number: 0927 Signing time: Thu 04 Sep 2025 20:31:57 +0000 Manifest this update: Thu 04 Sep 2025 20:31:57 +0000 Manifest next update: Thu 11 Sep 2025 20:31:57 +0000 Files and hashes: 1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: LTtdWK+OJvh/WVXtZBIGhF3Gxkqbqgl4ysEW3ywywfQ=) 2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: Lf+OpNRolRnNyf7s3LctxABHJRYGwAmVNkJb5Q4x0vo=) 3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: GurqPE7vf79zU82Gehwj1ctZametXlaKlIqkpoDGL9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E Validity Not Before: Sep 4 20:31:57 2025 GMT Not After : Sep 11 20:31:57 2025 GMT Subject: CN=68b9f73d-4b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:da:f0:af:e6:ed:b4:30:1e:6a:fb:20:c2: df:53:84:6d:73:a9:c5:f8:05:f3:63:e6:73:bc:5e: 6f:a8:21:e1:41:33:e9:a2:e2:81:83:6a:1c:e3:0d: b8:50:6c:7b:67:aa:ee:06:b2:16:db:27:81:43:b5: 74:3d:cf:24:2a:f3:07:01:8f:47:19:32:a4:ba:07: bb:33:33:38:6a:25:2e:27:d5:ee:5a:9d:2b:f1:40: 67:1c:f4:42:02:43:c1:bf:76:8d:ad:57:46:83:0a: 07:e0:33:14:3e:ba:bc:8a:dc:2b:36:1a:9f:f4:ad: b0:a0:9c:d9:69:43:a1:4b:e3:52:5f:ad:af:f3:9b: ec:56:6d:39:7e:2d:16:70:bd:80:b6:1f:3e:c1:0a: 4b:ba:1f:71:c7:2c:7f:af:63:82:e6:30:1c:f2:a4: c9:98:68:fc:a9:f7:ba:51:62:97:d8:1f:45:a2:f5: ad:44:e0:f8:df:85:f5:de:ff:9e:48:55:f2:88:3f: f7:34:34:64:45:fd:52:15:14:32:c3:49:24:ab:e0: d8:dd:ae:9e:3f:44:8c:80:4a:29:ee:0c:67:03:02: db:de:70:8a:19:05:c8:fa:0f:eb:12:33:39:0e:c1: 35:97:91:8e:6b:fe:7e:03:d8:a7:4e:03:19:45:33: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:15:09:37:3C:29:AA:90:44:B1:0E:7B:3E:3A:97:ED:79:A2:2D:BC X509v3 Authority Key Identifier: keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ef:31:7a:bc:bb:dd:bd:47:1e:56:c0:1d:e7:de:97:2e:20: 0a:dc:7f:e1:8e:9e:06:05:c5:61:24:64:61:b4:99:05:17:8a: de:c2:6a:2e:01:3a:b6:5d:95:cb:1c:4c:3e:9f:a7:8f:6d:81: 09:72:b1:b1:9f:9f:3f:cd:ca:ea:3e:f4:f3:ac:d0:07:34:5d: 87:a7:91:60:50:ec:86:03:6f:ff:05:85:d4:43:83:13:68:85: 4e:40:b0:9e:71:de:71:a7:63:94:e6:60:1e:30:86:09:8c:6c: 4e:76:68:60:d3:69:c2:c1:45:21:bb:94:98:df:e8:48:43:b4: 40:2f:6a:2e:02:cd:b9:aa:d4:5e:77:2e:67:fc:c8:67:0c:12: 59:b0:c4:ea:2d:c7:71:da:06:c7:76:b9:b2:00:79:9c:ac:a6: 78:83:9d:89:dc:a3:c3:68:c2:91:ad:36:b6:48:ac:b4:48:1d: d1:7d:20:d5:7a:f1:ec:1b:78:ac:0e:35:50:31:66:8b:54:9b: 67:d0:d0:29:50:ec:71:cf:a1:8d:78:96:3d:d1:75:10:9b:41: c4:b8:cf:af:8e:19:2f:e1:f5:89:10:2a:c4:a3:53:bd:4e:5c: 36:06:93:2d:40:f9:ab:bb:0f:ff:f3:34:9a:cc:d8:95:45:6d: 4b:51:bb:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDMxQzRGOTA2NEY4OUU1NkIxOTRFQjg4NDkyRTkwMjFD MTUyREVCM0UwHhcNMjUwOTA0MjAzMTU3WhcNMjUwOTExMjAzMTU3WjAYMRYwFAYD VQQDEw02OGI5ZjczZC00YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrPa8K/m7bQwHmr7IMLfU4Rtc6nF+AXzY+ZzvF5vqCHhQTPpouKBg2oc4w24 UGx7Z6ruBrIW2yeBQ7V0Pc8kKvMHAY9HGTKkuge7MzM4aiUuJ9XuWp0r8UBnHPRC AkPBv3aNrVdGgwoH4DMUPrq8itwrNhqf9K2woJzZaUOhS+NSX62v85vsVm05fi0W cL2Ath8+wQpLuh9xxyx/r2OC5jAc8qTJmGj8qfe6UWKX2B9FovWtROD434X13v+e SFXyiD/3NDRkRf1SFRQyw0kkq+DY3a6eP0SMgEop7gxnAwLb3nCKGQXI+g/rEjM5 DsE1l5GOa/5+A9inTgMZRTPIDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcVCTc8 KaqQRLEOez46l+15oi28MB8GA1UdIwQYMBaAFDHE+QZPieVrGU64hJLpAhwVLes+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9EQzU0RDlBNkFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVXc1pUcmlFa3VrQ0hCVXQ2 ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01jVDVCay1KNVdzWlRyaUVrdWtDSEJVdDZ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9EQzU0RDlBNkFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVX c1pUcmlFa3VrQ0hCVXQ2ejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn7zF6vLvdvUceVsAd596XLiAK3H/hjp4GBcVhJGRhtJkFF4rewmou ATq2XZXLHEw+n6ePbYEJcrGxn58/zcrqPvTzrNAHNF2Hp5FgUOyGA2//BYXUQ4MT aIVOQLCecd5xp2OU5mAeMIYJjGxOdmhg02nCwUUhu5SY3+hIQ7RAL2ouAs25qtRe dy5n/MhnDBJZsMTqLcdx2gbHdrmyAHmcrKZ4g52J3KPDaMKRrTa2SKy0SB3RfSDV evHsG3isDjVQMWaLVJtn0NApUOxxz6GNeJY90XUQm0HEuM+vjhkv4fWJECrEo1O9 Tlw2BpMtQPmruw//8zSazNiVRW1LUbvj -----END CERTIFICATE-----Generated at Sat Sep 6 10:05:42 2025 by rpki-client