$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft File: 5muokllQFHlLtkUdFCgchAAgYgM.mft (raw, json) Hash identifier: /K2gvBD8Jab1uwJnxnyxGOM69e3PP74HH7cfUX+u2+4= Subject key identifier: 86:C5:E2:1E:66:6C:51:5F:F8:9C:26:D4:41:A0:A3:E9:A9:93:AF:F9 Authority key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03 Certificate issuer: /CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203 Certificate serial: 14A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft Manifest number: 14A6 Signing time: Thu 18 Sep 2025 17:00:15 +0000 Manifest this update: Thu 18 Sep 2025 17:00:15 +0000 Manifest next update: Thu 25 Sep 2025 17:00:15 +0000 Files and hashes: 1: 5muokllQFHlLtkUdFCgchAAgYgM.crl (hash: +Nsf8j1QbHiPIGk4/UZKVZ7eC0xQpG6dFV8Z2uekIhY=) 2: 3FF298D41AFF11EFB20C2648C4F9AE02.roa (hash: K3UhQQDhvIK9kiqYEaaLUGkHSXsQC8El8DjsvYMTmMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5289 (0x14a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BA4, serialNumber=E66BA892595014794BB6451D14281C8400206203 Validity Not Before: Sep 18 17:00:15 2025 GMT Not After : Sep 25 17:00:15 2025 GMT Subject: CN=68cc3a9f-8cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:7b:00:02:0b:92:d7:17:54:3a:1a:77:ef: 2f:62:bb:c9:ac:94:43:e5:da:61:dd:1e:0c:e5:61: 9c:e0:d9:f3:1e:93:af:cb:a8:b1:44:6a:93:ad:fb: 1d:81:51:83:a9:d7:3d:ab:ca:47:05:f8:da:96:95: 8f:4a:98:d2:b9:fa:6a:5f:4d:4f:63:b1:17:26:ff: e9:5b:8d:0f:32:6c:47:59:b2:3e:03:57:00:14:5e: 74:4f:b3:87:20:38:06:91:e0:dd:e9:30:1d:69:0c: 89:29:93:01:f9:31:73:04:a1:0b:c3:a7:9c:83:f3: a3:2c:62:f7:1b:7f:9c:12:ac:21:29:7c:6f:09:94: 4a:e6:d3:b8:0e:c8:74:5f:ce:42:b5:11:26:b3:ec: f2:03:00:77:55:ce:2d:2d:70:9a:8e:3c:20:49:18: 7e:e4:62:3c:4e:16:ec:e5:38:34:8d:6b:ea:de:8e: 01:f6:40:29:89:27:9e:89:4d:dc:21:50:5a:02:c2: d5:b8:35:fc:90:0d:e4:17:d5:56:be:58:89:1b:88: 61:0d:82:68:bd:5c:0b:8c:26:5f:3a:7d:e9:a2:a3: 60:db:64:90:ef:17:26:52:64:1b:cd:68:71:0c:46: 0e:62:09:c3:40:5c:55:97:d2:cf:24:ba:38:96:7a: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C5:E2:1E:66:6C:51:5F:F8:9C:26:D4:41:A0:A3:E9:A9:93:AF:F9 X509v3 Authority Key Identifier: keyid:E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8a:9e:70:10:41:4b:30:20:06:4b:33:1b:03:60:c3:00:b8: 5a:de:3d:93:02:a1:1e:27:0d:bf:95:1f:5b:db:27:d2:6e:66: 39:1e:3b:66:dd:a1:2f:3e:a1:cd:43:a5:a1:e9:6d:6f:14:db: 2e:72:51:e3:db:f7:4a:bf:e7:a9:5a:49:9a:ca:aa:18:ab:54: 62:5e:a4:dc:d4:75:2c:f1:35:22:d1:ac:a0:17:96:34:21:3b: 3b:b6:8a:0c:66:b7:63:f3:9e:47:da:fe:7b:57:d6:e6:fc:78: ad:9c:75:db:a0:5e:bb:f7:2c:b6:7e:b4:78:99:a9:2c:dc:81: 04:53:7f:f1:a2:32:da:b0:cf:b4:a9:70:dd:61:6c:6e:f6:c1: f3:31:12:32:e0:93:ec:b9:4e:6f:9f:21:61:57:fc:90:c6:a1: e1:6a:37:cb:a4:09:da:e2:0d:ec:65:2f:30:29:fd:6e:2d:84: e6:ef:87:3f:72:ea:a7:59:71:03:32:31:32:86:b2:80:a9:46: f6:10:08:a1:67:77:43:fb:6f:f4:e1:63:19:71:13:34:24:72: 6b:b3:6c:02:e4:cd:0a:a9:da:c4:cc:6b:df:17:ac:9c:63:a6: e9:1a:e7:75:d8:ad:8f:83:e1:23:dc:36:d3:79:4c:91:4e:d3: 20:fc:84:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCQTQxMTAvBgNVBAUTKEU2NkJBODkyNTk1MDE0Nzk0QkI2NDUxRDE0MjgxQzg0 MDAyMDYyMDMwHhcNMjUwOTE4MTcwMDE1WhcNMjUwOTI1MTcwMDE1WjAYMRYwFAYD VQQDEw02OGNjM2E5Zi04Y2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHl7AAILktcXVDoad+8vYrvJrJRD5dph3R4M5WGc4NnzHpOvy6ixRGqTrfsd gVGDqdc9q8pHBfjalpWPSpjSufpqX01PY7EXJv/pW40PMmxHWbI+A1cAFF50T7OH IDgGkeDd6TAdaQyJKZMB+TFzBKELw6ecg/OjLGL3G3+cEqwhKXxvCZRK5tO4Dsh0 X85CtREms+zyAwB3Vc4tLXCajjwgSRh+5GI8Thbs5Tg0jWvq3o4B9kApiSeeiU3c IVBaAsLVuDX8kA3kF9VWvliJG4hhDYJovVwLjCZfOn3poqNg22SQ7xcmUmQbzWhx DEYOYgnDQFxVl9LPJLo4lnrZXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbF4h5m bFFf+Jwm1EGgo+mpk6/5MB8GA1UdIwQYMBaAFOZrqJJZUBR5S7ZFHRQoHIQAIGID MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJBNC80N0U5MjY4NjY4 RUQxMUU4OTBFMzk1NDlDNEY5QUUwMi81bXVva2xsUUZIbEx0a1VkRkNnY2hBQWdZ Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVtdW9rbGxRRkhsTHRrVWRGQ2djaEFBZ1lnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJBNC80N0U5MjY4NjY4RUQxMUU4OTBFMzk1NDlDNEY5QUUwMi81bXVva2xsUUZI bEx0a1VkRkNnY2hBQWdZZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKip5wEEFLMCAGSzMbA2DDALha3j2TAqEeJw2/lR9b2yfSbmY5Hjtm 3aEvPqHNQ6Wh6W1vFNsuclHj2/dKv+epWkmayqoYq1RiXqTc1HUs8TUi0aygF5Y0 ITs7tooMZrdj855H2v57V9bm/HitnHXboF679yy2frR4maks3IEEU3/xojLasM+0 qXDdYWxu9sHzMRIy4JPsuU5vnyFhV/yQxqHhajfLpAna4g3sZS8wKf1uLYTm74c/ cuqnWXEDMjEyhrKAqUb2EAihZ3dD+2/04WMZcRM0JHJrs2wC5M0KqdrEzGvfF6yc Y6bpGud12K2Pg+Ej3DbTeUyRTtMg/ISc -----END CERTIFICATE-----Generated at Thu Sep 18 21:55:27 2025 by rpki-client