$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft File: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft (raw, json) Hash identifier: XdF2LMR1VFOlJniSHuQHZQw6QGToYJ7mc22hR67GN7A= Subject key identifier: D0:44:B3:86:DD:D6:D3:A6:88:FB:63:94:E0:F3:EA:9A:7F:09:64:22 Authority key identifier: AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B Certificate issuer: /CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft Manifest number: FF Signing time: Wed 17 Sep 2025 05:57:43 +0000 Manifest this update: Wed 17 Sep 2025 05:57:43 +0000 Manifest next update: Wed 24 Sep 2025 05:57:43 +0000 Files and hashes: 1: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl (hash: XkXg8Qo1qfipXL0OQf1umgzoHt2KCAO1OAZGibzg4C0=) 2: E51087D6F1A011EF8BCCFE7BC4F9AE02.roa (hash: /VsZS9ufttBO1fjkHbj0xKp60CqOiBgm395Efx5G+zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B4A, serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B Validity Not Before: Sep 17 05:57:43 2025 GMT Not After : Sep 24 05:57:43 2025 GMT Subject: CN=68ca4dd7-867a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7b:d3:65:1b:1c:83:9b:96:49:9e:39:bd:98: 8b:59:c9:c1:2a:38:91:9c:3d:be:7c:64:fc:f0:a3: 00:88:ed:05:ee:4c:45:ff:6b:6c:31:f3:8e:11:bf: e4:b5:ff:86:41:80:0c:79:77:48:87:53:85:16:44: 01:7c:cc:fc:64:73:dc:8e:c0:88:a0:f5:94:bd:e1: 98:1e:94:52:ff:aa:73:64:39:36:f3:98:8b:c1:bf: 6f:4c:f4:65:ad:7e:76:f8:06:5a:ba:6a:1d:48:51: b4:b2:f9:43:35:50:86:02:80:3c:86:5c:9e:ce:20: 3f:11:33:ca:bb:df:f8:bf:b6:38:6b:23:25:86:e8: a8:c4:50:59:3d:65:a4:5a:6a:b1:cc:ce:b7:10:aa: a2:79:ac:ef:58:fc:79:86:92:53:de:3c:bd:48:63: 47:e8:d0:8e:7d:17:f9:cb:e8:81:b1:e5:4c:40:99: f5:56:32:f7:ff:6a:2d:c0:e6:17:6e:9a:52:85:b6: 0c:5f:b2:ce:9f:9e:41:31:0a:f3:23:7d:0a:1e:9a: 76:94:0d:16:b4:c3:55:e6:eb:14:8e:b9:ca:f4:e5: e5:19:ce:be:d0:04:49:35:6a:d7:69:92:39:21:01: e2:ab:98:dd:27:95:40:a7:8a:6b:d2:b3:57:f5:8d: 96:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:44:B3:86:DD:D6:D3:A6:88:FB:63:94:E0:F3:EA:9A:7F:09:64:22 X509v3 Authority Key Identifier: keyid:AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:82:d0:b9:a5:a3:1a:cc:d9:48:e2:fd:ea:05:ec:b5:f6:fa: 00:86:3b:9e:3c:34:dc:f1:2c:81:f9:e6:b4:15:9d:0b:1e:8b: 82:e1:64:7e:e9:2b:58:9a:96:76:8e:e0:69:1e:6f:07:99:13: cc:24:9e:f9:4c:f1:23:e1:07:6d:cd:3e:be:73:e5:80:27:a1: 7c:19:68:6c:df:5c:9f:3c:88:1c:6e:07:c9:df:42:75:18:ef: b9:8c:f4:79:ba:f5:ab:90:dc:e5:73:5c:2d:16:52:a0:06:74: 54:42:ce:ed:7d:ef:08:7d:56:ce:a7:b3:68:cd:a6:61:38:d6: 8c:03:df:1c:db:69:18:d3:95:c6:64:1a:b3:0b:bb:71:ef:21: 4b:3d:d3:4c:9b:46:25:71:2c:13:1b:43:cb:28:75:09:b7:76: 6e:cb:ab:24:bd:1b:54:9b:17:a5:b8:47:ff:fc:8a:41:bb:5b: c8:b8:6c:f8:1e:9a:47:07:23:a9:20:e6:80:1d:22:98:9c:1b: 30:8f:35:10:fd:2c:81:27:79:e4:47:e6:c6:8d:20:eb:a4:07: 51:c8:25:44:3f:a8:be:5a:cc:0f:67:a3:39:e7:d1:6b:26:bc: 56:af:65:b3:40:1e:14:87:b4:d2:5c:bb:c6:77:67:01:fb:d4: 3a:1f:c4:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCNEExMTAvBgNVBAUTKEFDQ0JGMjZBMTlEOUUxNEMzMUY1RjM3RTFCOTY2RDg2 QTUwNEI0NkIwHhcNMjUwOTE3MDU1NzQzWhcNMjUwOTI0MDU1NzQzWjAYMRYwFAYD VQQDEw02OGNhNGRkNy04NjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXvTZRscg5uWSZ45vZiLWcnBKjiRnD2+fGT88KMAiO0F7kxF/2tsMfOOEb/k tf+GQYAMeXdIh1OFFkQBfMz8ZHPcjsCIoPWUveGYHpRS/6pzZDk285iLwb9vTPRl rX52+AZaumodSFG0svlDNVCGAoA8hlyeziA/ETPKu9/4v7Y4ayMlhuioxFBZPWWk WmqxzM63EKqieazvWPx5hpJT3jy9SGNH6NCOfRf5y+iBseVMQJn1VjL3/2otwOYX bppShbYMX7LOn55BMQrzI30KHpp2lA0WtMNV5usUjrnK9OXlGc6+0ARJNWrXaZI5 IQHiq5jdJ5VAp4pr0rNX9Y2W/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBEs4bd 1tOmiPtjlODz6pp/CWQiMB8GA1UdIwQYMBaAFKzL8moZ2eFMMfXzfhuWbYalBLRr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEI0QS9FQjM5M0Q0RTJG ODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9yTXZ5YWhuWjRVd3g5Zk4tRzVadGhxVUV0 R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNdnlhaG5aNFV3eDlmTi1HNVp0aHFVRXRHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEI0QS9FQjM5M0Q0RTJGODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9yTXZ5YWhuWjRV d3g5Zk4tRzVadGhxVUV0R3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtgtC5paMazNlI4v3qBey19voAhjuePDTc8SyB+ea0FZ0LHouC4WR+ 6StYmpZ2juBpHm8HmRPMJJ75TPEj4QdtzT6+c+WAJ6F8GWhs31yfPIgcbgfJ30J1 GO+5jPR5uvWrkNzlc1wtFlKgBnRUQs7tfe8IfVbOp7NozaZhONaMA98c22kY05XG ZBqzC7tx7yFLPdNMm0YlcSwTG0PLKHUJt3Zuy6skvRtUmxeluEf//IpBu1vIuGz4 HppHByOpIOaAHSKYnBswjzUQ/SyBJ3nkR+bGjSDrpAdRyCVEP6i+WswPZ6M559Fr JrxWr2WzQB4Uh7TSXLvGd2cB+9Q6H8S3 -----END CERTIFICATE-----Generated at Thu Sep 18 20:22:47 2025 by rpki-client