$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft File: 9RwbzQ28E1ptm8RasFnm3ifpOwM.mft (raw, json) Hash identifier: eUORZ73wIfFYDOZsx5beWAPAqyHHsOywVGLn4Vu1H6o= Subject key identifier: 96:2C:91:A1:07:37:AA:D5:1B:FF:0A:B8:43:34:96:F4:B3:72:08:DB Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 Certificate issuer: /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft Manifest number: 016D Signing time: Fri 05 Sep 2025 04:12:58 +0000 Manifest this update: Fri 05 Sep 2025 04:12:57 +0000 Manifest next update: Fri 12 Sep 2025 04:12:57 +0000 Files and hashes: 1: 9RwbzQ28E1ptm8RasFnm3ifpOwM.crl (hash: z1jPXv6NZ9Km/1cIYEtMWyKFxen25A9nA2ZWOKIrU9w=) 2: 9EEDB94662C111EE8F200F60C4F9AE02.roa (hash: nyq8KHP8dGY9X8L7b113gFAzdF9IMtkS8NNdIrOA99k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1F9, serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Validity Not Before: Sep 5 04:12:57 2025 GMT Not After : Sep 12 04:12:57 2025 GMT Subject: CN=68ba634a-03ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:cf:ec:fc:ee:d2:29:dd:63:f6:1a:d3:d0: 0e:e5:fc:0f:c9:cb:70:66:67:b1:af:3d:3f:b5:d3: bb:02:4d:11:05:87:0b:b3:35:c6:6d:99:1a:f6:07: 0c:c3:48:85:9e:62:ba:3a:7a:ef:11:90:7a:de:9d: f3:44:51:40:ee:19:d3:7b:92:bc:3f:59:10:91:97: 48:90:4d:f9:3e:99:89:01:bc:8f:b2:c3:33:45:ed: c4:f3:77:b3:52:31:f5:b6:31:f2:0e:98:aa:9c:0b: c0:70:aa:a7:fd:62:ef:19:d1:d4:1f:52:eb:e5:54: 71:f1:28:37:d4:7b:dd:e0:98:77:4d:ae:9e:cc:d6: 07:5c:b9:3b:d6:83:bb:60:e7:ec:a4:51:3d:23:5a: d4:e9:68:33:87:97:ec:1c:3c:fb:b0:33:a5:ce:ac: b3:98:1c:00:a9:ce:bf:00:01:31:87:b6:79:ca:37: d9:8c:37:87:7c:87:4c:48:76:cb:c0:ec:72:97:7f: 6e:0e:cc:5c:c1:7d:e1:b2:5c:ec:ff:cf:c1:5e:4f: af:17:f3:9d:56:4d:26:f1:c9:65:7f:18:9c:73:6a: 61:14:8c:8e:c8:21:7c:fa:b7:3a:eb:0a:6f:f6:c3: 12:5f:7d:1d:56:a1:71:d9:81:cd:83:6a:bd:80:3b: db:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2C:91:A1:07:37:AA:D5:1B:FF:0A:B8:43:34:96:F4:B3:72:08:DB X509v3 Authority Key Identifier: keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ba:32:0c:e9:d1:8b:31:d1:f0:86:9e:52:2a:fa:32:d7:06: bf:41:2e:b0:ad:75:b4:7b:4d:f0:83:55:6e:9a:42:c1:ee:8e: 5c:37:c7:6d:40:ab:45:48:5d:d5:9a:2d:ab:a4:01:b3:d8:25: b4:6d:6a:9c:ff:bd:a6:04:58:36:41:cb:06:d9:be:19:60:80: 42:bf:11:f5:82:2a:5d:f7:48:92:3a:2d:62:92:4a:95:96:6c: 08:52:77:70:d1:e3:00:3b:fc:7b:b2:1b:44:ff:76:3d:f4:0d: fb:a1:1d:c8:62:62:c9:ac:7d:78:b9:b7:39:04:34:cf:c0:33: 93:9a:4c:cb:5e:b8:c7:c3:cb:c4:2f:f9:99:d8:b3:c5:af:ef: eb:ae:c1:a7:81:ea:d1:5d:6b:8a:e8:c0:2d:1e:03:8b:64:8a: f3:09:29:07:d2:c7:d9:ba:b2:6b:c0:4b:b1:44:c0:e3:18:67: 00:d3:05:07:fc:61:0a:fb:e2:8c:2a:cb:2f:48:bf:71:2d:32: 6e:0f:74:ad:08:eb:38:42:bf:32:15:72:b4:65:db:a3:80:85: 55:bb:a9:c6:37:47:d4:2a:69:85:80:64:ff:1e:54:32:9c:55: 6c:72:7f:5b:fb:52:5f:89:07:61:d4:4d:71:ee:d2:be:b2:fc: 2e:16:b1:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxRjkxMTAvBgNVBAUTKEY1MUMxQkNEMERCQzEzNUE2RDlCQzQ1QUIwNTlFNkRF MjdFOTNCMDMwHhcNMjUwOTA1MDQxMjU3WhcNMjUwOTEyMDQxMjU3WjAYMRYwFAYD VQQDEw02OGJhNjM0YS0wM2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSDP7Pzu0indY/Ya09AO5fwPyctwZmexrz0/tdO7Ak0RBYcLszXGbZka9gcM w0iFnmK6OnrvEZB63p3zRFFA7hnTe5K8P1kQkZdIkE35PpmJAbyPssMzRe3E83ez UjH1tjHyDpiqnAvAcKqn/WLvGdHUH1Lr5VRx8Sg31Hvd4Jh3Ta6ezNYHXLk71oO7 YOfspFE9I1rU6Wgzh5fsHDz7sDOlzqyzmBwAqc6/AAExh7Z5yjfZjDeHfIdMSHbL wOxyl39uDsxcwX3hslzs/8/BXk+vF/OdVk0m8cllfxicc2phFIyOyCF8+rc66wpv 9sMSX30dVqFx2YHNg2q9gDvb/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYskaEH N6rVG/8KuEM0lvSzcgjbMB8GA1UdIwQYMBaAFPUcG80NvBNabZvEWrBZ5t4n6TsD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFGOS83RTQzN0QwNjVE M0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUxcHRtOFJhc0ZubTNpZnBP d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSd2J6UTI4RTFwdG04UmFzRm5tM2lmcE93TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFGOS83RTQzN0QwNjVEM0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUx cHRtOFJhc0ZubTNpZnBPd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6ujIM6dGLMdHwhp5SKvoy1wa/QS6wrXW0e03wg1VumkLB7o5cN8dt QKtFSF3Vmi2rpAGz2CW0bWqc/72mBFg2QcsG2b4ZYIBCvxH1gipd90iSOi1ikkqV lmwIUndw0eMAO/x7shtE/3Y99A37oR3IYmLJrH14ubc5BDTPwDOTmkzLXrjHw8vE L/mZ2LPFr+/rrsGngerRXWuK6MAtHgOLZIrzCSkH0sfZurJrwEuxRMDjGGcA0wUH /GEK++KMKssvSL9xLTJuD3StCOs4Qr8yFXK0ZdujgIVVu6nGN0fUKmmFgGT/HlQy nFVscn9b+1JfiQdh1E1x7tK+svwuFrG8 -----END CERTIFICATE-----Generated at Sat Sep 6 12:52:50 2025 by rpki-client