$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft File: D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft (raw, json) Hash identifier: jSPNoexPdXNoqZk/QZkLISI//fak3BTxNOgnbx1dg5E= Subject key identifier: B2:24:A8:BF:F1:9B:DA:66:07:80:7F:1C:CC:78:5D:32:F8:03:F6:FC Authority key identifier: 0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 Certificate issuer: /CN=A9139661/serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft Manifest number: 2D Signing time: Fri 05 Sep 2025 08:20:12 +0000 Manifest this update: Fri 05 Sep 2025 08:20:12 +0000 Manifest next update: Fri 12 Sep 2025 08:20:12 +0000 Files and hashes: 1: D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl (hash: XdMtOLhq/zKYc2gzqMNrQ5UtCBmIHYA7KC2Nw71XeO0=) 2: C4C4028A5B4C11F0807A3A60C4F9AE02.roa (hash: PluL4u9/W0M7wPOfAaOa3JDqqwKeth4r4yq9LLQTP5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Validity Not Before: Sep 5 08:20:12 2025 GMT Not After : Sep 12 08:20:12 2025 GMT Subject: CN=68ba9d3c-c163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:78:32:5f:08:4f:d8:ac:98:68:13:b8:4a:a1: 76:32:69:b2:f9:ec:2b:1e:63:c0:1c:a1:fe:64:bf: 24:fc:46:2f:cd:3a:6c:23:72:e2:de:dd:52:c3:d0: b5:b1:ce:e7:ac:a5:9c:f3:af:0d:78:af:13:36:b8: 3a:c3:4b:bf:72:b4:24:09:a1:91:8c:25:71:0f:17: 09:78:bc:1b:0f:e5:70:ba:01:a4:78:6f:19:4e:17: a1:68:99:8b:b2:80:94:0a:1c:be:65:54:9a:6d:71: b9:78:bc:04:ae:42:2a:5a:72:a6:ba:1d:24:fc:5f: a0:6b:30:12:26:eb:d2:10:d3:87:8a:52:c3:20:4d: 02:91:89:7e:be:aa:5f:07:9f:ac:3b:68:18:cc:ad: 98:d1:2d:98:e4:1e:24:e3:2d:39:3e:19:86:9a:51: 61:fe:6f:83:29:60:7b:a9:aa:59:96:73:7b:fe:c4: 6e:59:69:25:86:e3:c6:35:4b:fb:f7:4b:6c:ad:e9: 35:10:bf:6f:e9:28:86:74:e8:fa:a7:fd:5c:ab:c8: 37:99:37:6f:03:e3:c9:fb:62:fa:13:68:3b:45:c0: ad:2f:c4:53:2e:aa:1f:0a:e5:fe:78:68:8c:2b:91: dd:a1:db:f1:ad:0e:53:95:7c:85:c0:11:95:35:14: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:24:A8:BF:F1:9B:DA:66:07:80:7F:1C:CC:78:5D:32:F8:03:F6:FC X509v3 Authority Key Identifier: keyid:0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:df:f2:51:11:ec:c5:c9:02:75:b9:02:ff:ac:a3:78:19:52: f9:75:29:bd:28:c1:a0:61:4b:97:f9:c3:4a:ad:d0:2f:3e:7f: 6a:9e:9d:79:40:27:aa:d6:6b:84:1a:d4:62:35:59:d6:34:8c: 87:25:0e:2e:cc:41:61:81:00:35:b3:32:f8:5e:dd:13:d1:14: ed:49:78:02:3c:a0:07:6d:48:63:22:3c:47:23:b3:e4:13:13: 4b:f7:c4:dc:09:d0:1e:8c:a5:87:ad:a0:d9:ab:e1:e5:d2:d9: ab:90:11:b5:d9:c8:64:f0:10:f3:23:2d:1d:46:a8:b4:7d:68: 68:cd:dd:78:1d:46:1b:b1:b2:17:3b:51:0b:12:37:f0:aa:cd: 99:ea:17:4e:e3:eb:92:07:a8:e5:f9:41:e4:91:2b:5f:ee:cd: 05:37:53:3d:7b:55:a8:a2:9b:0d:6a:ca:7d:c7:7b:b4:04:04: e0:02:01:52:f0:76:38:cc:ee:d8:65:1b:76:9b:a3:b0:73:d3: b4:4e:1e:1f:a4:0a:dc:38:8f:78:5d:74:67:28:af:8c:f6:d6: bc:32:f7:4c:e8:9c:9f:02:04:11:41:c2:90:fc:8d:5d:40:54: 4b:92:bc:32:1a:9c:7d:dd:b6:2b:9c:2e:02:a6:59:4d:96:1f: 87:d0:a0:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTY2MTExMC8GA1UEBRMoMEY5MTRBMURDOTRGNUJFNDJFODgzQzJBREQ1NDMwQkNE RjZERjMzNDAeFw0yNTA5MDUwODIwMTJaFw0yNTA5MTIwODIwMTJaMBgxFjAUBgNV BAMTDTY4YmE5ZDNjLWMxNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXeDJfCE/YrJhoE7hKoXYyabL57CseY8Acof5kvyT8Ri/NOmwjcuLe3VLD0LWx zuespZzzrw14rxM2uDrDS79ytCQJoZGMJXEPFwl4vBsP5XC6AaR4bxlOF6FomYuy gJQKHL5lVJptcbl4vASuQipacqa6HST8X6BrMBIm69IQ04eKUsMgTQKRiX6+ql8H n6w7aBjMrZjRLZjkHiTjLTk+GYaaUWH+b4MpYHupqlmWc3v+xG5ZaSWG48Y1S/v3 S2yt6TUQv2/pKIZ06Pqn/VyryDeZN28D48n7YvoTaDtFwK0vxFMuqh8K5f54aIwr kd2h2/GtDlOVfIXAEZU1FHrTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsiSov/Gb 2mYHgH8czHhdMvgD9vwwHwYDVR0jBBgwFoAUD5FKHclPW+QuiDwq3VQwvN9t8zQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NjYxLzBGNDNFQzNDNThF NDExRjA4NzI2QTU3QUM0RjlBRTAyL0Q1RktIY2xQVy1RdWlEd3EzVlF3dk45dDh6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDVGS0hjbFBXLVF1aUR3cTNWUXd2Tjl0OHpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NjYxLzBGNDNFQzNDNThFNDExRjA4NzI2QTU3QUM0RjlBRTAyL0Q1RktIY2xQVy1R dWlEd3EzVlF3dk45dDh6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAETf8lER7MXJAnW5Av+so3gZUvl1Kb0owaBhS5f5w0qt0C8+f2qenXlA J6rWa4Qa1GI1WdY0jIclDi7MQWGBADWzMvhe3RPRFO1JeAI8oAdtSGMiPEcjs+QT E0v3xNwJ0B6MpYetoNmr4eXS2auQEbXZyGTwEPMjLR1GqLR9aGjN3XgdRhuxshc7 UQsSN/CqzZnqF07j65IHqOX5QeSRK1/uzQU3Uz17Vaiimw1qyn3He7QEBOACAVLw djjM7thlG3abo7Bz07ROHh+kCtw4j3hddGcor4z21rwy90zonJ8CBBFBwpD8jV1A VEuSvDIanH3dtiucLgKmWU2WH4fQoNU= -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:08 2025 by rpki-client