$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft File: UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json) Hash identifier: BJ++hI8o70WSsdDBcyCmInYSf++BnFk5W9uOcnwwXcM= Subject key identifier: F3:02:D4:B1:F6:75:EA:9C:10:84:8F:6E:39:41:CC:C4:58:0D:F6:E0 Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 0907 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft Manifest number: 198E Signing time: Thu 18 Sep 2025 17:29:18 +0000 Manifest this update: Thu 18 Sep 2025 17:29:17 +0000 Manifest next update: Thu 25 Sep 2025 17:29:17 +0000 Files and hashes: 1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: hZmgpzHDTh3OyQJqBTvgihUAtpA1k9jX4Qnk9cEYhFU=) 2: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: mtUL6kpWcJ0s0WYAq9l26D9HLDGvLgZ5GCmZqFRcyjs=) 3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: F8NUI5IF7FjRVcKD/tqhJ5Q4QNzh0QGai7XMrRHjkus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2311 (0x907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: Sep 18 17:29:17 2025 GMT Not After : Sep 25 17:29:17 2025 GMT Subject: CN=68cc416e-8629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:34:2d:00:d0:c7:4c:32:b4:e6:3d:83:82: 64:84:fd:f8:c7:2f:de:c9:87:82:6b:ce:d9:5a:9d: 46:1e:99:e8:4e:aa:44:85:0a:66:08:9f:76:4f:0a: 9b:0e:30:1a:76:03:29:41:08:96:6d:83:64:c1:be: e9:e0:31:91:4e:c6:8e:a2:4b:75:97:79:da:25:f9: b1:36:e4:24:da:71:19:8c:11:df:28:a8:59:17:ca: d3:b0:96:8d:f7:0c:45:6a:bc:1d:0a:f4:41:b2:b1: b5:8b:55:05:d1:26:81:23:84:4d:2b:6f:06:5c:cb: f1:05:07:34:25:9c:88:6e:c6:e6:db:b7:dd:f4:ed: 8c:8a:d3:10:80:7a:6e:1e:27:c7:0b:d2:ee:e4:23: 74:08:0e:8a:2e:d2:2c:02:0e:75:7b:a8:57:28:35: 83:93:c9:a5:3f:bb:8a:2e:e6:9f:a8:1e:23:de:d1: c8:57:45:50:70:ec:62:32:11:8c:8e:72:63:f2:af: 71:40:5f:76:72:8a:ec:ad:a5:aa:ae:5c:c8:a4:56: 51:35:bf:63:33:f6:da:c2:0a:a9:63:b8:d9:93:fa: a7:1a:c2:86:ea:4c:f7:86:a3:e7:12:e3:2e:b1:ef: 7a:76:b8:82:d2:82:b6:dc:50:a0:d8:72:be:3a:6d: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:02:D4:B1:F6:75:EA:9C:10:84:8F:6E:39:41:CC:C4:58:0D:F6:E0 X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:dc:ba:98:c2:46:2f:69:a5:bc:f4:f4:b2:58:5e:e9:00:0c: f8:5a:d6:6a:20:c0:c1:48:88:46:46:d5:b1:8d:b1:4b:1f:29: b2:c5:f2:a6:ac:17:8c:26:59:18:6e:0a:46:61:b6:8e:71:c9: a6:cd:ed:68:19:60:28:58:aa:67:1f:f6:e8:c6:63:98:20:55: 81:b9:15:b6:bd:c7:cb:70:a9:01:8d:e8:1e:a0:74:da:7c:ff: 1d:bc:5d:b7:0b:42:86:c9:62:db:45:2c:8a:fb:5f:a9:3c:d2: 2b:49:35:3e:b7:cb:40:bc:55:af:43:c6:e0:06:5d:0b:02:85: 1c:b3:15:c7:26:da:77:26:19:2d:41:36:35:d5:3c:dd:ef:20: 33:d2:31:62:59:db:2b:c0:c8:7a:5a:ee:32:1f:18:06:de:50: dc:f1:b7:b6:13:00:be:a4:a4:57:1d:ff:b0:64:5b:cf:67:ab: 4f:41:14:07:78:54:c7:20:0b:de:b0:93:cd:2a:9d:1b:3d:f3: 0e:db:05:0c:55:e7:53:fd:6b:34:eb:e6:d4:cf:6b:92:d8:00: 89:8f:1a:06:47:07:f3:11:0b:1b:3f:5f:4e:ba:b4:0a:3d:ff: 2c:bb:2e:f5:f7:bf:2a:fd:93:d0:e8:e9:38:62:28:a6:31:1b: 32:6d:6e:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjUwOTE4MTcyOTE3WhcNMjUwOTI1MTcyOTE3WjAYMRYwFAYD VQQDEw02OGNjNDE2ZS04NjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQc0LQDQx0wytOY9g4JkhP34xy/eyYeCa87ZWp1GHpnoTqpEhQpmCJ92Twqb DjAadgMpQQiWbYNkwb7p4DGRTsaOokt1l3naJfmxNuQk2nEZjBHfKKhZF8rTsJaN 9wxFarwdCvRBsrG1i1UF0SaBI4RNK28GXMvxBQc0JZyIbsbm27fd9O2MitMQgHpu HifHC9Lu5CN0CA6KLtIsAg51e6hXKDWDk8mlP7uKLuafqB4j3tHIV0VQcOxiMhGM jnJj8q9xQF92corsraWqrlzIpFZRNb9jM/bawgqpY7jZk/qnGsKG6kz3hqPnEuMu se96driC0oK23FCg2HK+Om0hAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMC1LH2 deqcEISPbjlBzMRYDfbgMB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJa NF96Y01uUDAwWTAtTUVYY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA33LqYwkYvaaW89PSyWF7pAAz4WtZqIMDBSIhGRtWxjbFLHymyxfKm rBeMJlkYbgpGYbaOccmmze1oGWAoWKpnH/boxmOYIFWBuRW2vcfLcKkBjegeoHTa fP8dvF23C0KGyWLbRSyK+1+pPNIrSTU+t8tAvFWvQ8bgBl0LAoUcsxXHJtp3Jhkt QTY11Tzd7yAz0jFiWdsrwMh6Wu4yHxgG3lDc8be2EwC+pKRXHf+wZFvPZ6tPQRQH eFTHIAvesJPNKp0bPfMO2wUMVedT/Ws06+bUz2uS2ACJjxoGRwfzEQsbP19OurQK Pf8suy71978q/ZPQ6Ok4YiimMRsybW5H -----END CERTIFICATE-----Generated at Thu Sep 18 20:35:35 2025 by rpki-client