$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft File: RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json) Hash identifier: FxvxH6JH8u4V9TiKa1W8eY/UAmuDtXooDffcGq9CVtg= Subject key identifier: 06:3E:AA:B5:02:DE:ED:E5:60:19:5D:99:BB:E6:65:4B:A9:58:E4:40 Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft Manifest number: 9B Signing time: Fri 05 Sep 2025 06:47:24 +0000 Manifest this update: Fri 05 Sep 2025 06:47:24 +0000 Manifest next update: Fri 12 Sep 2025 06:47:24 +0000 Files and hashes: 1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: iOfA5dIov+FBYQIZlsdSktEcMrAZ534PwBIwGi0s0NU=) 2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: CckqoSL6Kl8ijND7YWEunm6CSbx21plf0BMP2SCxoy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Validity Not Before: Sep 5 06:47:24 2025 GMT Not After : Sep 12 06:47:24 2025 GMT Subject: CN=68ba877c-f13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:fa:ea:3f:12:90:b3:1c:0e:73:84:5d:47: 9f:8a:97:13:92:5b:39:41:be:12:f7:b1:d6:b0:2e: 51:cc:64:de:5e:f9:a6:97:0f:8f:ed:df:96:bc:9d: e4:e0:0d:6c:52:43:89:49:8e:2a:b5:8d:9c:45:54: 5d:4e:11:ee:8a:61:98:32:47:8e:5e:62:0b:6a:48: e4:fe:78:ff:cb:1e:2b:55:e9:67:c5:39:32:89:8f: e2:0f:73:97:de:2a:29:0c:4f:38:05:91:78:42:56: d9:4c:61:fa:e9:00:29:5b:d7:12:1a:74:ea:3d:f9: 93:14:f5:17:e8:a2:ca:b5:2c:62:84:a0:d9:f2:1e: ff:13:3b:3f:5d:35:7a:b1:6b:14:5d:7b:40:75:60: 54:aa:83:e1:2a:50:bd:f6:68:4c:64:4c:9b:4f:0a: 0b:30:46:b5:ce:2a:22:9e:91:50:04:c3:d7:8e:a4: 35:9f:a5:f4:4e:a9:13:df:b5:02:d9:b9:98:44:fc: a6:4b:16:c7:a4:4d:4c:56:f6:2d:0d:9a:57:12:bd: 1f:82:f4:7c:e8:82:13:e8:e4:0e:b7:50:15:9d:86: 7c:18:66:55:18:38:7f:ec:7a:f7:a3:63:d7:71:26: 34:2e:39:34:4a:f8:7c:bb:20:fc:0b:f2:d2:e8:5c: 5d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3E:AA:B5:02:DE:ED:E5:60:19:5D:99:BB:E6:65:4B:A9:58:E4:40 X509v3 Authority Key Identifier: keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:6a:7c:58:7c:8a:85:ae:b7:bc:72:bf:8f:f3:b7:24:f1:21: 79:9c:3c:de:1f:0c:ac:2f:1b:5c:f1:3f:8e:c7:dd:8d:90:5e: fa:99:0b:61:03:49:d0:bd:02:b4:77:98:e4:a9:5d:8a:ba:64: 0e:c9:63:c8:02:4b:4c:a2:6f:32:95:56:2c:31:67:32:58:42: 8b:54:1b:dc:51:6b:67:18:4f:d4:1b:a1:0b:ee:2a:33:69:1f: 86:9c:01:24:6a:6f:d4:07:e5:f2:f3:67:b5:19:fa:59:d9:4c: 74:3d:a9:85:b6:d7:33:e1:24:eb:bd:7e:9d:41:4f:ca:d9:27: 2c:01:64:86:4c:1a:d1:77:5a:28:9d:fe:f6:25:58:90:6e:46: 11:49:d2:72:49:7e:b3:b6:e5:82:b1:1b:65:fc:37:d2:22:0a: 9e:49:5d:6d:28:b3:0d:92:d2:d0:50:55:d2:01:31:ba:29:bb: c8:b2:4f:95:72:12:53:8d:ad:a0:fb:dc:cf:f4:3c:e1:19:dc: 80:4f:0a:34:12:fe:b2:61:d8:35:a2:26:8b:18:0f:68:9e:aa: 89:f9:97:f7:3b:69:5e:c0:fb:02:b2:61:15:2d:6b:47:92:e0: c6:bc:b6:43:fe:5c:bb:fb:ec:af:f8:86:ae:40:9d:05:2f:79: 3c:45:fe:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QzcxMTAvBgNVBAUTKDQ0QkM3OEVERTYzRDVCNjIyQjdCQUMwM0IzNDk5NkIy RkU0MkUzMjcwHhcNMjUwOTA1MDY0NzI0WhcNMjUwOTEyMDY0NzI0WjAYMRYwFAYD VQQDEw02OGJhODc3Yy1mMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdn66j8SkLMcDnOEXUefipcTkls5Qb4S97HWsC5RzGTeXvmmlw+P7d+WvJ3k 4A1sUkOJSY4qtY2cRVRdThHuimGYMkeOXmILakjk/nj/yx4rVelnxTkyiY/iD3OX 3iopDE84BZF4QlbZTGH66QApW9cSGnTqPfmTFPUX6KLKtSxihKDZ8h7/Ezs/XTV6 sWsUXXtAdWBUqoPhKlC99mhMZEybTwoLMEa1zioinpFQBMPXjqQ1n6X0TqkT37UC 2bmYRPymSxbHpE1MVvYtDZpXEr0fgvR86IIT6OQOt1AVnYZ8GGZVGDh/7Hr3o2PX cSY0Ljk0Svh8uyD8C/LS6FxdgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAY+qrUC 3u3lYBldmbvmZUupWORAMB8GA1UdIwQYMBaAFES8eO3mPVtiK3usA7NJlrL+QuMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BMjQ1MTE0NjlE OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9STHg0N2VZOVcySXJlNndEczBtV3N2NUM0 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JMeDQ3ZVk5VzJJcmU2d0RzMG1Xc3Y1QzR5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdDNy9BMjQ1MTE0NjlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9STHg0N2VZOVcy SXJlNndEczBtV3N2NUM0eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlanxYfIqFrre8cr+P87ck8SF5nDzeHwysLxtc8T+Ox92NkF76mQth A0nQvQK0d5jkqV2KumQOyWPIAktMom8ylVYsMWcyWEKLVBvcUWtnGE/UG6EL7ioz aR+GnAEkam/UB+Xy82e1GfpZ2Ux0PamFttcz4STrvX6dQU/K2ScsAWSGTBrRd1oo nf72JViQbkYRSdJySX6ztuWCsRtl/DfSIgqeSV1tKLMNktLQUFXSATG6KbvIsk+V chJTja2g+9zP9DzhGdyATwo0Ev6yYdg1oiaLGA9onqqJ+Zf3O2lewPsCsmEVLWtH kuDGvLZD/ly7++yv+IauQJ0FL3k8Rf7H -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:12 2025 by rpki-client