$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json) Hash identifier: fxdfhcHxNea6MCfMuUckSayle+PXhqw9Jv8+XhOyi9s= Subject key identifier: 4F:15:27:AB:0B:DE:B0:29:C6:09:25:90:51:81:89:86:C9:11:CB:9E Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Certificate serial: 34F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft Manifest number: 34DE Signing time: Thu 18 Sep 2025 14:45:30 +0000 Manifest this update: Thu 18 Sep 2025 14:45:29 +0000 Manifest next update: Thu 25 Sep 2025 14:45:29 +0000 Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: y6PV8szz8GEg+7hRNoTUhRUuhAU6jV9OAFEFPD3uPuQ=) 2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: o3Ceb2MSjRakfXXsxsrz1v3BRN+sMCeTig6Z0QGV2lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 14:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13561 (0x34f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Validity Not Before: Sep 18 14:45:29 2025 GMT Not After : Sep 25 14:45:29 2025 GMT Subject: CN=68cc1b0a-a042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:43:f0:8b:3e:f5:9e:53:4b:69:be:15:6c: 7d:4c:e9:92:c3:96:06:88:2d:2c:b9:18:76:5f:9a: 2f:f2:c7:04:3a:8d:cb:ea:60:d7:d4:0e:43:12:cf: bf:cd:a5:64:b8:ee:c0:2c:71:e5:5f:34:e0:8c:ea: 97:c8:8c:d7:8b:69:0c:68:13:89:a6:57:a0:74:b9: b6:29:83:4d:60:83:c1:6c:68:34:d8:41:b9:0f:bf: 3c:32:67:a8:77:47:79:bb:c1:a3:71:38:b5:65:4b: 44:c7:c4:bf:d8:cd:08:d0:2d:b9:56:d6:36:f8:22: 64:97:f8:50:56:93:97:f9:7c:4f:f1:dd:e7:84:59: 75:7a:36:67:cb:e8:2e:e6:c5:ae:79:82:06:ff:9c: 81:dd:72:3d:7d:61:3c:f8:1a:e6:42:af:fd:8e:e7: 8d:d9:bd:0d:68:15:44:59:b0:1d:65:6e:b7:8c:d0: 0f:c5:1f:eb:a1:5b:3c:46:70:f4:eb:52:ca:ec:aa: 32:ae:92:ad:ec:7b:d9:ec:50:41:90:b7:8d:55:1d: 44:f4:be:54:49:f4:ed:13:9d:bd:f9:70:87:1e:24: 57:a9:12:d9:6b:2b:1c:0d:3f:28:be:93:7c:69:b9: fe:9c:92:43:0d:e9:e9:8f:40:f9:9c:39:64:2d:79: 21:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:15:27:AB:0B:DE:B0:29:C6:09:25:90:51:81:89:86:C9:11:CB:9E X509v3 Authority Key Identifier: keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:71:4a:83:c7:22:c4:92:34:8f:cb:a9:94:02:26:eb:06:cb: 4e:bc:cb:e3:dd:04:e3:cf:45:85:f0:b5:eb:4a:d9:39:66:90: f1:36:e1:94:53:4f:0e:ed:f8:9d:09:7b:b7:a1:f8:a6:78:b8: e7:0b:bb:45:32:b6:a4:07:6c:5b:8f:93:db:3e:73:2b:07:b1: da:87:c3:02:48:da:47:c8:82:4f:07:20:18:9d:56:d0:26:74: 07:52:bc:ea:1b:4e:c3:f1:95:98:f0:03:2d:3c:b1:b2:81:d9: 2d:b0:d5:69:b5:08:51:7d:88:14:4b:28:1f:46:2d:b8:4c:dd: 86:cc:71:88:37:a5:ae:4e:3e:f9:09:d7:40:5e:a2:6d:2f:c2: e7:8b:4d:1e:bb:42:9c:5a:53:96:bb:ce:1b:81:78:39:d9:a8: 01:f3:46:12:36:80:c6:62:57:5e:cd:40:2b:a0:cd:19:fc:4b: bf:15:46:d4:22:be:57:2d:b7:13:5c:3e:2e:68:86:d0:a7:0c: e3:7a:d3:a7:98:60:cb:0e:12:6a:b1:2d:6c:e1:24:9f:3c:21: 50:fc:ce:5d:68:6d:82:3d:4d:87:15:f0:c0:ce:63:02:1e:39: 6c:ca:e9:ed:e7:f8:f3:61:31:22:35:5b:83:dc:33:7b:41:b1: 24:40:dc:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF MEE0MTkzMjEwHhcNMjUwOTE4MTQ0NTI5WhcNMjUwOTI1MTQ0NTI5WjAYMRYwFAYD VQQDEw02OGNjMWIwYS1hMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrZD8Is+9Z5TS2m+FWx9TOmSw5YGiC0suRh2X5ov8scEOo3L6mDX1A5DEs+/ zaVkuO7ALHHlXzTgjOqXyIzXi2kMaBOJplegdLm2KYNNYIPBbGg02EG5D788Mmeo d0d5u8GjcTi1ZUtEx8S/2M0I0C25VtY2+CJkl/hQVpOX+XxP8d3nhFl1ejZny+gu 5sWueYIG/5yB3XI9fWE8+BrmQq/9jueN2b0NaBVEWbAdZW63jNAPxR/roVs8RnD0 61LK7KoyrpKt7HvZ7FBBkLeNVR1E9L5USfTtE529+XCHHiRXqRLZayscDT8ovpN8 abn+nJJDDenpj0D5nDlkLXkhLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8VJ6sL 3rApxgklkFGBiYbJEcueMB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUZENi82RUVDNjQzMDFEOTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5 b2h5MHZ1djAzMHpncEJreUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwcUqDxyLEkjSPy6mUAibrBstOvMvj3QTjz0WF8LXrStk5ZpDxNuGU U08O7fidCXu3ofimeLjnC7tFMrakB2xbj5PbPnMrB7Hah8MCSNpHyIJPByAYnVbQ JnQHUrzqG07D8ZWY8AMtPLGygdktsNVptQhRfYgUSygfRi24TN2GzHGIN6WuTj75 CddAXqJtL8Lni00eu0KcWlOWu84bgXg52agB80YSNoDGYldezUAroM0Z/Eu/FUbU Ir5XLbcTXD4uaIbQpwzjetOnmGDLDhJqsS1s4SSfPCFQ/M5daG2CPU2HFfDAzmMC Hjlsyunt5/jzYTEiNVuD3DN7QbEkQNxq -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:13 2025 by rpki-client