$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: oygHzSxIHyiNnFimpBj928tL89YUgi2WtwarW/0nSkU= Subject key identifier: 63:0E:67:91:60:90:6C:79:53:01:07:80:F0:17:6B:FC:FF:CD:D3:2A Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 0827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 0804 Signing time: Thu 04 Sep 2025 21:16:05 +0000 Manifest this update: Thu 04 Sep 2025 21:16:05 +0000 Manifest next update: Thu 11 Sep 2025 21:16:05 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: 3NHDvbTo9U88SsXqsgmK74ZHWPhAJWxbgvhuTZNJcLY=) 2: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: D2PIDDhjMLrJzP//kuZEMaof293KC1FejYs4Z1FlT9g=) 3: BF07B0DA16AF11F08B8C4061C4F9AE02.roa (hash: m5fvUWDyLmphSj+hveftDjH5v8ZvHtc3dCRNArmrofc=) 4: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: RVujGjgRtNml2s4B1MbyglZHc1wuuQ8z+GSwbNfvR2o=) 5: 1070E6CA9A8311EF8BE0F826C4F9AE02.roa (hash: 5usMHuwC29/GKSbCm/Fabiikjfpjet0V04t/dPRj3vM=) 6: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: AjNKnPWs+wQxA57p7oeqhPGR6IMIStHtSJ7A+NHTTwU=) 7: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: vJqvl3p3GZGjPo1+bFOu/lz3UGNmQtiNtsOQmfP7QoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Sep 4 21:16:05 2025 GMT Not After : Sep 11 21:16:05 2025 GMT Subject: CN=68ba0195-e42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:e3:01:46:9a:01:4c:4f:58:48:b4:4c:dd: d2:bf:bb:de:1d:d3:33:d5:a1:3d:85:43:a1:da:df: 88:74:a4:cd:b0:81:4c:6b:cf:47:45:9e:78:fa:3c: a4:07:f9:1c:5a:0c:3a:85:45:eb:35:e6:c7:25:96: 19:dc:66:49:44:9a:04:de:de:70:3e:3c:5d:10:bb: 09:b8:9a:82:30:e5:1c:06:9c:f3:eb:63:9a:d8:19: b4:f4:02:f6:fc:e4:27:0c:8e:25:ce:77:77:fd:aa: b0:0c:e9:76:c0:ec:a6:a7:3b:a9:0b:66:f5:85:3b: 08:08:b7:45:a0:e0:08:eb:dd:88:ae:58:da:0a:ee: 0b:ed:4d:b3:d0:cb:75:8c:13:70:fb:a5:38:98:87: 51:92:da:fb:ca:30:3d:cb:69:e2:a2:e5:3b:ce:64: af:4a:9e:e5:89:40:87:38:1e:0e:25:d2:c8:8b:99: 16:1a:6d:1a:4e:57:4d:04:55:0e:63:86:97:44:0e: 8b:22:74:28:21:d8:8a:23:b4:4e:20:70:a7:c1:0f: 50:97:25:38:1d:c1:f3:4f:c1:2f:9b:ec:e3:d7:ce: ca:33:1b:24:58:10:0c:3c:51:f7:93:e8:8b:5f:7c: 78:74:76:ad:e6:35:3d:d1:b3:20:99:56:98:7c:58: 37:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0E:67:91:60:90:6C:79:53:01:07:80:F0:17:6B:FC:FF:CD:D3:2A X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:87:86:c6:a2:fc:7d:65:36:a4:d3:02:0e:d3:16:8c:83:c8: 0d:4b:9c:f3:6f:e3:b6:d3:b2:9e:78:d3:d1:49:1c:4b:f6:60: f9:25:77:a2:ad:81:c7:2a:80:c2:d3:b7:18:1e:96:a6:08:6a: 51:2e:12:7f:7d:6e:89:6e:08:bf:59:2d:68:d1:e9:22:62:e1: 7b:be:e6:21:70:1e:11:bf:a3:49:b8:19:6f:44:c8:26:ed:87: 1e:20:5c:c8:38:f9:5a:f3:87:c3:45:3d:ec:e3:c4:6f:2a:7b: f7:62:fb:f2:b7:b0:5f:27:55:5d:4f:5c:15:10:b5:24:f2:07: 3e:54:c3:fd:26:3d:53:93:06:e3:20:eb:c4:c6:67:00:27:d3: d9:fe:be:98:39:26:e6:e5:63:59:95:14:66:91:15:ae:0b:b8: 1a:bd:88:48:69:a2:68:7d:e0:fe:d3:40:f9:eb:6e:40:f5:f1: 72:73:fa:62:08:36:68:e9:db:e2:fe:01:06:6b:61:ea:63:0a: 51:fb:fb:94:64:57:ac:3f:d9:ab:08:8b:74:cc:06:4c:5b:78: 99:a4:0f:1a:9e:04:81:2b:fb:10:37:2b:52:c8:ef:28:1e:73: 3b:44:c1:37:07:1a:a4:d6:97:29:95:ea:27:9f:fd:cd:72:be: 96:d9:69:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjUwOTA0MjExNjA1WhcNMjUwOTExMjExNjA1WjAYMRYwFAYD VQQDEw02OGJhMDE5NS1lNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyvjAUaaAUxPWEi0TN3Sv7veHdMz1aE9hUOh2t+IdKTNsIFMa89HRZ54+jyk B/kcWgw6hUXrNebHJZYZ3GZJRJoE3t5wPjxdELsJuJqCMOUcBpzz62Oa2Bm09AL2 /OQnDI4lznd3/aqwDOl2wOympzupC2b1hTsICLdFoOAI692IrljaCu4L7U2z0Mt1 jBNw+6U4mIdRktr7yjA9y2niouU7zmSvSp7liUCHOB4OJdLIi5kWGm0aTldNBFUO Y4aXRA6LInQoIdiKI7ROIHCnwQ9QlyU4HcHzT8Evm+zj187KMxskWBAMPFH3k+iL X3x4dHat5jU90bMgmVaYfFg3KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMOZ5Fg kGx5UwEHgPAXa/z/zdMqMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOh4bGovx9ZTak0wIO0xaMg8gNS5zzb+O207KeeNPRSRxL9mD5JXei rYHHKoDC07cYHpamCGpRLhJ/fW6Jbgi/WS1o0ekiYuF7vuYhcB4Rv6NJuBlvRMgm 7YceIFzIOPla84fDRT3s48RvKnv3Yvvyt7BfJ1VdT1wVELUk8gc+VMP9Jj1Tkwbj IOvExmcAJ9PZ/r6YOSbm5WNZlRRmkRWuC7gavYhIaaJofeD+00D5625A9fFyc/pi CDZo6dvi/gEGa2HqYwpR+/uUZFesP9mrCIt0zAZMW3iZpA8angSBK/sQNytSyO8o HnM7RME3Bxqk1pcpleonn/3Ncr6W2Wkh -----END CERTIFICATE-----Generated at Sat Sep 6 15:09:06 2025 by rpki-client