$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft File: G96wwnXJDoG_o6r-IT5OcSHrc0o.mft (raw, json) Hash identifier: Dm56dK+4+/p7tIM7Ghl2T9k/EYvzvDHd5/S1ZEPQWAs= Subject key identifier: 86:6C:AC:D9:E8:6D:AA:BD:4B:4D:A3:CA:7A:F1:EE:C5:91:2D:E8:4F Authority key identifier: 1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A Certificate issuer: /CN=A9142E1E/serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft Manifest number: B1 Signing time: Wed 03 Sep 2025 06:43:27 +0000 Manifest this update: Wed 03 Sep 2025 06:43:27 +0000 Manifest next update: Wed 10 Sep 2025 06:43:27 +0000 Files and hashes: 1: G96wwnXJDoG_o6r-IT5OcSHrc0o.crl (hash: yMQ+kIHLSseHfaEOjQxD2Y0GQHU1gd/fIVPRDz50uR0=) 2: 31B5D564824311EF9C69B985C4F9AE02.roa (hash: IVX22Sj0l4iAKc50j77MELQdp1CwcB3skhe7+xJHsEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Validity Not Before: Sep 3 06:43:27 2025 GMT Not After : Sep 10 06:43:27 2025 GMT Subject: CN=68b7e38f-1ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e4:04:43:e1:4d:da:e8:a2:76:77:00:dc:15: 4f:35:48:dd:33:b2:2d:1f:f0:3d:76:6f:27:3f:8e: 8a:fe:c3:5b:73:89:0e:58:ab:8a:98:da:74:5f:d5: 44:91:fb:e2:89:4f:13:08:91:f8:52:1a:1e:30:af: ca:df:30:29:01:06:98:5f:96:a6:59:2e:5d:39:f2: a9:1d:0b:5b:d8:ee:05:68:41:b4:bb:bb:b2:80:a3: 0e:13:c4:ab:a1:bc:92:d8:0b:c9:fa:8b:36:66:9c: 82:06:b6:2f:86:e3:97:b6:a9:e1:49:39:dc:fb:c2: 8f:34:68:68:bf:45:8e:8a:6e:a4:81:f1:a9:d2:4d: 37:f1:50:dc:20:94:12:25:57:0c:59:01:a1:6c:f9: 20:2d:c1:ff:5b:9a:d0:41:be:38:40:f3:0d:9a:60: df:c0:5a:b8:b5:9c:a8:48:1b:64:87:1d:64:48:6f: 2a:33:78:59:ff:22:8f:16:82:4f:e7:15:ac:04:4d: fd:26:eb:51:6c:42:d0:82:f4:05:8f:95:cb:23:6a: 33:d2:7d:68:02:a9:9c:a5:7a:53:a4:46:45:17:6d: f8:fb:19:30:e0:01:e3:a7:98:6e:ac:45:05:19:5c: 47:ec:3f:01:d2:85:f5:69:a7:a5:57:fd:f8:e9:cb: 42:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6C:AC:D9:E8:6D:AA:BD:4B:4D:A3:CA:7A:F1:EE:C5:91:2D:E8:4F X509v3 Authority Key Identifier: keyid:1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fe:77:94:04:73:5d:5d:d0:2b:de:31:1d:9e:3b:cf:13:bf: 74:9f:c9:de:31:f2:97:8d:8b:2d:61:41:dc:e3:83:5e:65:75: b0:41:11:3d:d6:1e:5e:88:00:96:c4:05:62:33:18:c4:62:d6: a4:7c:a6:90:ad:ab:6e:2c:b0:c1:ca:65:89:0e:d4:b9:ad:4c: d1:6a:31:34:09:78:2d:27:81:f4:68:de:fa:35:f6:e3:fb:53: 90:d6:5d:a2:de:54:c8:ab:4e:07:23:87:59:93:f6:a7:00:17: 59:05:f2:5d:31:76:4f:03:8e:28:fa:f9:ff:10:db:3f:d4:64: 04:63:5c:d1:cc:62:4b:11:09:5f:3c:1e:2d:60:4c:23:55:f9: b7:27:1b:e0:61:c7:d0:06:bd:97:f4:3d:73:81:a0:b3:94:62: 80:0d:ce:69:68:81:56:3e:92:1d:93:84:03:14:52:02:1f:4b: 50:83:a6:a9:86:60:ac:9f:58:45:44:d5:b9:d1:6f:be:3f:de: e2:ba:80:9e:95:29:45:31:80:18:dc:3f:15:8b:22:2f:1c:b8: 25:f5:e3:a5:78:7e:1e:0d:61:60:2a:62:0e:ec:b6:4a:4f:f3: e9:26:6f:3e:df:f9:c8:b7:c0:4a:46:36:00:9d:e3:1c:62:73: e9:e2:ab:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFMUUxMTAvBgNVBAUTKDFCREVCMEMyNzVDOTBFODFCRkEzQUFGRTIxM0U0RTcx MjFFQjczNEEwHhcNMjUwOTAzMDY0MzI3WhcNMjUwOTEwMDY0MzI3WjAYMRYwFAYD VQQDEw02OGI3ZTM4Zi0xZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+QEQ+FN2uiidncA3BVPNUjdM7ItH/A9dm8nP46K/sNbc4kOWKuKmNp0X9VE kfviiU8TCJH4UhoeMK/K3zApAQaYX5amWS5dOfKpHQtb2O4FaEG0u7uygKMOE8Sr obyS2AvJ+os2ZpyCBrYvhuOXtqnhSTnc+8KPNGhov0WOim6kgfGp0k038VDcIJQS JVcMWQGhbPkgLcH/W5rQQb44QPMNmmDfwFq4tZyoSBtkhx1kSG8qM3hZ/yKPFoJP 5xWsBE39JutRbELQgvQFj5XLI2oz0n1oAqmcpXpTpEZFF234+xkw4AHjp5hurEUF GVxH7D8B0oX1aaelV/346ctCeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZsrNno baq9S02jynrx7sWRLehPMB8GA1UdIwQYMBaAFBvesMJ1yQ6Bv6Oq/iE+TnEh63NK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkUxRS8xM0Q4MDYwODgy NDIxMUVGQUQzRDgxODFDNEY5QUUwMi9HOTZ3d25YSkRvR19vNnItSVQ1T2NTSHJj MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c5Nnd3blhKRG9HX282ci1JVDVPY1NIcmMwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkUxRS8xM0Q4MDYwODgyNDIxMUVGQUQzRDgxODFDNEY5QUUwMi9HOTZ3d25YSkRv R19vNnItSVQ1T2NTSHJjMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM/neUBHNdXdAr3jEdnjvPE790n8neMfKXjYstYUHc44NeZXWwQRE9 1h5eiACWxAViMxjEYtakfKaQratuLLDBymWJDtS5rUzRajE0CXgtJ4H0aN76Nfbj +1OQ1l2i3lTIq04HI4dZk/anABdZBfJdMXZPA44o+vn/ENs/1GQEY1zRzGJLEQlf PB4tYEwjVfm3JxvgYcfQBr2X9D1zgaCzlGKADc5paIFWPpIdk4QDFFICH0tQg6ap hmCsn1hFRNW50W++P97iuoCelSlFMYAY3D8ViyIvHLgl9eOleH4eDWFgKmIO7LZK T/PpJm8+3/nIt8BKRjYAneMcYnPp4qsA -----END CERTIFICATE-----Generated at Thu Sep 4 14:03:38 2025 by rpki-client