$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: JROoSvGhMx++p7J+MHlgHPPQhNYiRr35baiUGA/pcnw= Subject key identifier: 7F:E1:00:F6:B4:89:F6:B2:DC:96:71:DA:37:DB:96:6E:CC:5C:65:74 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 26F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 2673 Signing time: Thu 18 Sep 2025 15:48:16 +0000 Manifest this update: Thu 18 Sep 2025 15:48:15 +0000 Manifest next update: Thu 25 Sep 2025 15:48:15 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: A1n5fRI56hILlO4Ewx9KrWCgFESP4W3emmTe9ku6euQ=) 2: 1818C91A5C1611F0AEC3F02BC4F9AE02.roa (hash: inYPm2/qoWyhJvYPwsRqidJ8km0pHeal/3nb7zNYQCU=) 3: 694FA6C678B511F0B9F98C80C4F9AE02.roa (hash: 01wLk9RHRk483aM+7518CMU3cV26N05+ze+yCvqPXlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9977 (0x26f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Sep 18 15:48:15 2025 GMT Not After : Sep 25 15:48:15 2025 GMT Subject: CN=68cc29bf-8226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:e8:b8:4c:b5:b9:14:1b:b8:68:b4:1a:32: bd:b3:04:e0:c0:f0:a5:51:2b:cb:c6:2b:3e:85:7a: 44:41:02:3f:fa:9e:79:b6:23:b0:4f:fd:46:a4:6c: 49:f8:6e:00:25:1d:3e:2e:6e:09:90:08:17:2e:99: df:46:f1:e6:86:04:59:8b:4e:d1:02:f1:3f:4a:41: 1e:20:b4:f8:6e:bc:c2:63:e7:1c:a7:37:d3:41:a5: 37:e0:c4:f2:3f:62:e7:9e:cc:06:d0:87:dc:87:b4: a3:56:54:fc:51:ac:c2:e6:06:d4:4b:64:e4:15:58: 09:54:56:87:f2:4f:8d:64:38:a2:e6:77:fb:b7:02: 36:25:c5:2d:c0:d0:3f:37:0d:af:a7:f7:7f:2a:4b: b0:6f:1b:c2:9c:89:49:e8:a4:c1:ee:51:8f:2d:e3: 91:ed:3d:17:00:bd:e9:5c:11:01:82:5f:65:48:5c: d5:aa:b2:19:3f:f7:20:97:60:73:c1:04:89:23:0b: ab:6c:4c:b3:e3:a3:96:d6:d6:83:fb:59:aa:49:fc: bb:0b:6a:14:bc:ae:ec:08:9a:00:d0:b2:94:35:fe: 45:a4:2a:1f:ee:28:6b:62:1b:68:48:5d:48:7b:0a: ef:99:4c:87:62:b9:60:10:9b:6d:46:51:df:47:07: e2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E1:00:F6:B4:89:F6:B2:DC:96:71:DA:37:DB:96:6E:CC:5C:65:74 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f7:2d:f2:0c:f8:1a:78:76:8f:26:5e:ba:15:4f:8f:90:35: 73:6e:ca:90:5f:3f:31:e3:71:69:2d:77:30:ef:56:b8:16:42: 3e:aa:f4:bd:98:b2:b6:83:9b:b2:88:6b:a8:c3:96:18:e6:75: d4:47:63:50:a4:09:47:be:d8:5c:64:ca:a8:34:22:19:0a:79: ae:47:c1:ba:fe:90:ad:bc:68:a6:c3:69:e5:e0:72:a1:e2:de: 0c:ad:1c:9d:88:bc:d5:2d:9f:a5:29:51:96:4b:c4:f1:8a:21: ed:aa:4e:98:01:3f:47:e8:30:99:00:90:7c:a9:de:35:32:1d: 4d:f7:98:93:3c:71:bc:46:7b:3b:d3:68:c4:9c:42:3d:9a:2f: a6:7e:ab:f5:f1:d8:9d:19:e1:16:c6:7d:5c:0e:48:f3:10:08: bb:1d:f9:60:f3:71:fa:9a:79:2c:f8:6f:e8:f1:7a:bf:df:5e: 44:39:e7:75:10:7c:df:97:fd:ad:cf:1a:f3:6c:b2:1c:7c:51: 2e:f8:1a:80:ac:34:ca:9a:74:f1:8a:15:01:cd:7d:08:f0:ea: 5e:97:4d:ad:42:c6:6f:63:e5:c5:8e:c9:db:b1:52:61:2d:75: 0d:fc:67:43:13:ac:67:ae:fe:b5:f4:78:54:9c:21:a2:80:0b: cb:d9:62:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjUwOTE4MTU0ODE1WhcNMjUwOTI1MTU0ODE1WjAYMRYwFAYD VQQDEw02OGNjMjliZi04MjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzfouEy1uRQbuGi0GjK9swTgwPClUSvLxis+hXpEQQI/+p55tiOwT/1GpGxJ +G4AJR0+Lm4JkAgXLpnfRvHmhgRZi07RAvE/SkEeILT4brzCY+ccpzfTQaU34MTy P2LnnswG0Ifch7SjVlT8UazC5gbUS2TkFVgJVFaH8k+NZDii5nf7twI2JcUtwNA/ Nw2vp/d/KkuwbxvCnIlJ6KTB7lGPLeOR7T0XAL3pXBEBgl9lSFzVqrIZP/cgl2Bz wQSJIwurbEyz46OW1taD+1mqSfy7C2oUvK7sCJoA0LKUNf5FpCof7ihrYhtoSF1I ewrvmUyHYrlgEJttRlHfRwfiuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/hAPa0 ifay3JZx2jfblm7MXGV0MB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK9y3yDPgaeHaPJl66FU+PkDVzbsqQXz8x43FpLXcw71a4FkI+qvS9 mLK2g5uyiGuow5YY5nXUR2NQpAlHvthcZMqoNCIZCnmuR8G6/pCtvGimw2nl4HKh 4t4MrRydiLzVLZ+lKVGWS8TxiiHtqk6YAT9H6DCZAJB8qd41Mh1N95iTPHG8Rns7 02jEnEI9mi+mfqv18didGeEWxn1cDkjzEAi7Hflg83H6mnks+G/o8Xq/315EOed1 EHzfl/2tzxrzbLIcfFEu+BqArDTKmnTxihUBzX0I8Opel02tQsZvY+XFjsnbsVJh LXUN/GdDE6xnrv619HhUnCGigAvL2WJ1 -----END CERTIFICATE-----Generated at Fri Sep 19 01:27:28 2025 by rpki-client