$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft File: x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json) Hash identifier: PSkTqY1YVKcdUUG7j49T87oQ0MK2zz9r46DriTqJDJg= Subject key identifier: A5:EA:7C:3D:1F:69:CB:E3:BB:A0:3B:40:F0:13:1B:83:D1:5F:52:0A Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Certificate serial: 171B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft Manifest number: 16F3 Signing time: Thu 18 Sep 2025 16:47:29 +0000 Manifest this update: Thu 18 Sep 2025 16:47:28 +0000 Manifest next update: Thu 25 Sep 2025 16:47:28 +0000 Files and hashes: 1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: 87iOzdAL876ktTdLf2vi3M4cAPCwHNoGqW0mgaewEtM=) 2: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: mHHD4iG0u+Xkwk4pjbL/x0UUJaJ5cYa7RlAiU7ksSOM=) 3: 0897E314434811EF8E76757AC4F9AE02.roa (hash: VmGRRamI92gsFHH67DOcSNfpbQCDWa56npBMPnLQFzI=) 4: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: bqFmiv55QKtXboSAyhppicmxMvI2sf59cazaYPcU9EY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5915 (0x171b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Validity Not Before: Sep 18 16:47:28 2025 GMT Not After : Sep 25 16:47:28 2025 GMT Subject: CN=68cc37a0-b26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:82:69:cf:b8:61:f8:8e:78:7e:a6:85:ef: 8a:1c:1c:ca:47:eb:eb:9f:f8:fe:71:ed:71:5e:17: 26:68:d9:73:32:a0:91:26:0d:c9:63:57:66:76:41: 39:95:83:05:50:4d:87:cc:67:6f:1f:fe:29:4d:12: 5b:7e:08:25:b7:a1:2c:f3:c0:88:07:a8:62:6c:61: 4d:14:f4:2f:75:59:aa:27:a8:d7:48:ab:d4:c3:e9: 27:93:c6:5d:e4:82:f8:86:c5:b0:08:dd:b4:66:e8: 74:81:59:8f:c0:c2:bd:68:54:c6:2f:8d:53:a6:12: 0e:83:5e:19:86:e4:67:4c:fb:15:15:8a:c9:7e:7d: 83:59:0c:e0:cd:e3:30:4d:08:d1:a5:68:3b:73:0d: a5:3a:c3:34:2f:d4:66:28:92:f6:70:dc:17:02:eb: f6:3c:17:40:23:43:62:08:5a:c2:83:4c:33:08:8a: 03:78:58:10:bb:e2:25:72:f8:71:dd:57:28:c2:fc: 14:9c:63:6b:22:36:77:d5:c6:8d:ef:df:5a:84:d7: 97:20:45:a8:ba:e7:0b:99:10:90:ed:88:52:54:19: 73:f5:17:93:16:da:fa:cf:6e:0d:34:e1:68:be:3e: 40:55:9e:2e:4d:c5:68:60:84:ad:b2:be:36:ef:cd: 8c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EA:7C:3D:1F:69:CB:E3:BB:A0:3B:40:F0:13:1B:83:D1:5F:52:0A X509v3 Authority Key Identifier: keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:15:be:82:ce:62:1f:93:bf:97:b2:7b:a6:66:60:49:8b:35: b6:77:83:f5:1c:94:fc:ca:71:a2:d1:36:68:54:61:af:98:b6: d2:a7:b0:1e:71:ed:4b:52:47:c5:2e:e6:ac:21:f8:2a:51:0d: c3:2f:44:fa:d5:67:32:8f:6d:75:c9:98:ca:8f:bb:d8:a3:04: 99:5d:0d:3d:f5:7f:61:0e:65:63:e4:bd:c3:54:a1:c2:95:b9: ea:4d:cc:c7:2b:87:a1:50:cc:76:2a:fa:09:24:c6:24:78:ab: bf:72:75:8b:34:fa:08:cd:ca:af:79:7d:2c:dd:46:4d:46:00: 35:67:78:ee:c9:78:b7:c6:11:de:b4:69:e2:a5:48:5c:08:14: 7d:a9:9c:31:db:4f:ce:18:90:9c:6d:dd:52:cd:34:7c:5d:a4: f8:d1:dd:cb:3d:2b:e9:15:23:84:0c:b7:5c:56:55:02:52:d8: 0f:7c:05:27:0d:77:03:d6:65:5e:83:2f:c1:52:54:ac:40:0d: 40:15:3b:04:eb:90:2d:d4:bf:d3:06:0e:4d:26:45:79:3e:c1: 08:b8:9a:07:58:4a:c1:11:b4:f7:5e:0a:89:26:ed:54:6a:05: fd:23:81:4f:45:4f:87:06:3b:c4:ae:ec:8f:c4:54:6b:42:ae: e9:43:ad:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKEM3QjI2NDczNTAzODBBNkEzNEUzNEUzMkNFRkUzNTE5 OTM3RTk3QzgwHhcNMjUwOTE4MTY0NzI4WhcNMjUwOTI1MTY0NzI4WjAYMRYwFAYD VQQDEw02OGNjMzdhMC1iMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMKCac+4YfiOeH6mhe+KHBzKR+vrn/j+ce1xXhcmaNlzMqCRJg3JY1dmdkE5 lYMFUE2HzGdvH/4pTRJbfgglt6Es88CIB6hibGFNFPQvdVmqJ6jXSKvUw+knk8Zd 5IL4hsWwCN20Zuh0gVmPwMK9aFTGL41TphIOg14ZhuRnTPsVFYrJfn2DWQzgzeMw TQjRpWg7cw2lOsM0L9RmKJL2cNwXAuv2PBdAI0NiCFrCg0wzCIoDeFgQu+Ilcvhx 3VcowvwUnGNrIjZ31caN799ahNeXIEWouucLmRCQ7YhSVBlz9ReTFtr6z24NNOFo vj5AVZ4uTcVoYIStsr42782M7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXqfD0f acvju6A7QPATG4PRX1IKMB8GA1UdIwQYMBaAFMeyZHNQOApqNONOMs7+NRmTfpfI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80Qjk1OEJDRTAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENtbzA0MDR5enY0MUdaTi1s OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3SmtjMUE0Q21vMDQwNHl6djQxR1pOLWw4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80Qjk1OEJDRTAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENt bzA0MDR5enY0MUdaTi1sOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASFb6CzmIfk7+XsnumZmBJizW2d4P1HJT8ynGi0TZoVGGvmLbSp7Ae ce1LUkfFLuasIfgqUQ3DL0T61Wcyj211yZjKj7vYowSZXQ099X9hDmVj5L3DVKHC lbnqTczHK4ehUMx2KvoJJMYkeKu/cnWLNPoIzcqveX0s3UZNRgA1Z3juyXi3xhHe tGnipUhcCBR9qZwx20/OGJCcbd1SzTR8XaT40d3LPSvpFSOEDLdcVlUCUtgPfAUn DXcD1mVegy/BUlSsQA1AFTsE65At1L/TBg5NJkV5PsEIuJoHWErBEbT3XgqJJu1U agX9I4FPRU+HBjvEruyPxFRrQq7pQ60T -----END CERTIFICATE-----Generated at Fri Sep 19 05:57:15 2025 by rpki-client