$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json) Hash identifier: ePdndWk+t3sRvmnujQ7IJQN9pMrl1t7BSuhOoG3IqCE= Subject key identifier: AA:71:A1:62:49:AC:7F:F5:5E:01:7E:5A:B9:05:B8:5A:33:E7:70:B2 Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft Manifest number: 01CA Signing time: Tue 09 Sep 2025 02:58:19 +0000 Manifest this update: Tue 09 Sep 2025 02:58:18 +0000 Manifest next update: Tue 16 Sep 2025 02:58:18 +0000 Files and hashes: 1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: s1bwLUNsW5A8fp4LXjnOptv7mJqnkCofB9Aw2p5o25w=) 2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: 56O4jNAGsWq8QxLhQ86Wzd380hCjYQVi8/lo+JDEK9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135604, serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Validity Not Before: Sep 9 02:58:18 2025 GMT Not After : Sep 16 02:58:18 2025 GMT Subject: CN=68bf97cb-d361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d8:8b:da:8c:3a:83:9e:5c:82:f4:16:fa:1a: 46:07:7f:11:a4:a2:6c:ed:0a:23:db:fd:84:de:3c: b2:19:2e:ef:31:af:a1:da:4b:15:b6:59:59:09:e1: fa:7c:19:23:cb:42:64:49:b6:b7:1d:32:13:d5:bc: 47:be:06:e6:d7:26:f6:f5:85:a5:ce:c9:5c:eb:de: 4e:b2:cb:eb:c6:b8:99:aa:ae:ef:fa:4b:5e:63:92: 67:8d:01:b1:bd:40:82:fd:c8:e9:be:11:63:86:d4: 8b:fc:f0:1f:31:1d:67:40:23:9b:05:33:ab:6d:db: a3:ea:9b:03:1b:21:2c:2e:98:9a:f4:10:b7:dd:8b: 08:cb:68:b2:f9:78:4d:1d:7c:dd:b1:f8:43:e2:66: 7a:3d:33:77:c6:ca:11:29:4e:c9:67:f2:49:17:9b: ae:d8:9d:c2:21:a3:ba:f8:77:04:6b:ee:d9:77:9d: df:2f:24:ab:79:7a:de:e9:fc:32:49:49:d9:e5:d1: 15:9d:a4:ad:7b:eb:0d:c7:57:de:db:30:dd:1b:9b: 35:d3:e9:db:b5:34:09:be:77:f8:6a:82:5b:bf:f5: c5:96:98:77:51:5d:22:3c:92:bb:04:89:04:81:e8: 0a:d0:12:96:0a:4b:d9:e6:0b:e2:53:d7:d6:63:07: 8d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:71:A1:62:49:AC:7F:F5:5E:01:7E:5A:B9:05:B8:5A:33:E7:70:B2 X509v3 Authority Key Identifier: keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:17:88:a1:7f:02:56:6d:2d:d5:2f:af:00:c5:94:af:72:6b: 35:f8:63:43:16:b5:1b:cd:f3:e6:55:cd:11:fe:7e:b1:28:90: 45:5d:af:16:bc:74:cf:29:19:bf:67:ae:20:d0:5d:4f:98:9a: 46:02:43:fd:bf:82:62:4e:32:40:08:d6:2c:2a:b4:2c:14:88: db:7f:89:d5:bc:c9:6a:82:19:89:7f:8a:05:dc:58:17:7c:75: a6:e0:70:c3:f9:c5:3e:6e:bb:65:5c:53:e4:d1:45:00:95:5a: 5f:f4:5c:f3:ec:4e:6c:a9:c1:dc:7d:45:0f:52:88:25:09:ab: 64:02:b1:ff:ee:76:63:44:77:a2:b4:79:84:3f:f3:cc:02:d8: 5f:49:e9:76:0e:60:16:3e:4f:a4:46:84:e9:b1:3d:82:03:4e: a9:7f:87:23:77:93:24:1d:d3:27:75:46:35:c2:00:51:2a:d2: d3:f3:0f:68:cf:71:f5:44:df:0b:bb:d9:d4:b7:52:db:9f:83: b4:21:e1:41:1d:3c:a5:57:93:b9:2a:ee:58:5d:a7:eb:b4:27: e8:fa:cb:d4:35:28:22:ef:81:df:dd:c4:ca:f2:43:89:8a:72: 98:13:b8:71:67:b5:08:fe:b4:51:bf:f2:68:0c:cb:0f:d1:3e: ad:a1:19:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2MDQxMTAvBgNVBAUTKEY2NDk4Qjk5Qjc3QThGMDFCMzk5MjYxRkJDQjkwNEUx NDI4MjU1MkUwHhcNMjUwOTA5MDI1ODE4WhcNMjUwOTE2MDI1ODE4WjAYMRYwFAYD VQQDEw02OGJmOTdjYi1kMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tiL2ow6g55cgvQW+hpGB38RpKJs7Qoj2/2E3jyyGS7vMa+h2ksVtllZCeH6 fBkjy0JkSba3HTIT1bxHvgbm1yb29YWlzslc695OssvrxriZqq7v+kteY5JnjQGx vUCC/cjpvhFjhtSL/PAfMR1nQCObBTOrbduj6psDGyEsLpia9BC33YsIy2iy+XhN HXzdsfhD4mZ6PTN3xsoRKU7JZ/JJF5uu2J3CIaO6+HcEa+7Zd53fLySreXre6fwy SUnZ5dEVnaSte+sNx1fe2zDdG5s10+nbtTQJvnf4aoJbv/XFlph3UV0iPJK7BIkE gegK0BKWCkvZ5gviU9fWYweN0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpxoWJJ rH/1XgF+WrkFuFoz53CyMB8GA1UdIwQYMBaAFPZJi5m3eo8Bs5kmH7y5BOFCglUu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTYwNC8xMDI2NDhEQ0Qy OUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3R3ptU1lmdkxrRTRVS0NW UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlrbUxtYmQ2andHem1TWWZ2TGtFNFVLQ1ZTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTYwNC8xMDI2NDhEQ0QyOUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3 R3ptU1lmdkxrRTRVS0NWUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkF4ihfwJWbS3VL68AxZSvcms1+GNDFrUbzfPmVc0R/n6xKJBFXa8W vHTPKRm/Z64g0F1PmJpGAkP9v4JiTjJACNYsKrQsFIjbf4nVvMlqghmJf4oF3FgX fHWm4HDD+cU+brtlXFPk0UUAlVpf9Fzz7E5sqcHcfUUPUoglCatkArH/7nZjRHei tHmEP/PMAthfSel2DmAWPk+kRoTpsT2CA06pf4cjd5MkHdMndUY1wgBRKtLT8w9o z3H1RN8Lu9nUt1Lbn4O0IeFBHTylV5O5Ku5YXafrtCfo+svUNSgi74Hf3cTK8kOJ inKYE7hxZ7UI/rRRv/JoDMsP0T6toRlu -----END CERTIFICATE-----Generated at Tue Sep 9 20:25:55 2025 by rpki-client