$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json) Hash identifier: tJXguylXiNEUPP5vl/5a2dTIsl4sC/sJ0qZsrCDtAag= Subject key identifier: BF:FF:56:D7:99:1A:A4:B6:31:76:15:84:62:5A:D0:E5:37:73:E0:10 Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft Manifest number: 01B2 Signing time: Fri 19 Sep 2025 03:35:23 +0000 Manifest this update: Fri 19 Sep 2025 03:35:23 +0000 Manifest next update: Fri 26 Sep 2025 03:35:23 +0000 Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: Z4v75b83ZTrpgPUM5FTkENSr8Dr58dcphEQ+lIxnWWc=) 2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: JQglPoDIL3Eq1y2JiUK8F3q2nUek/I2P1c153lPMYTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Validity Not Before: Sep 19 03:35:23 2025 GMT Not After : Sep 26 03:35:23 2025 GMT Subject: CN=68cccf7b-e561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4d:ab:4a:df:ad:50:e7:0f:64:72:f4:61:c9: 38:b1:cc:79:75:20:b0:1f:3e:b3:ed:61:81:0a:4d: a3:d0:85:40:fc:96:b1:c7:05:c3:e0:79:dd:56:6b: e5:98:7f:a0:0b:e1:82:4b:05:7e:1c:18:9e:ac:fa: c6:39:6f:7e:6a:6b:34:b7:e9:87:80:ff:3a:7b:a6: dd:c2:c4:73:ff:c9:ea:1b:6a:c1:28:67:ff:dd:f6: c5:68:b5:ce:73:e6:21:75:09:67:24:6d:73:08:73: 1b:52:ca:ba:4d:63:b4:f2:db:e7:56:b4:48:a7:5c: 6d:c2:f3:e5:9d:4e:b1:dc:85:c4:53:1c:2e:6f:cd: 4c:bb:de:2e:87:62:a3:ba:21:d5:b4:aa:f4:0e:31: b8:28:ed:19:e4:2e:77:79:86:80:63:6a:e8:a5:b1: 61:b8:45:60:a8:b7:64:43:3b:a2:2c:38:10:d7:e5: 14:55:63:37:75:7e:6c:fb:05:3a:74:09:b2:be:32: 98:3b:5b:c1:25:c8:15:a8:07:98:1d:01:cd:9a:2d: 55:3f:95:44:2e:25:0e:9a:86:0b:a0:77:1a:84:45: 89:91:62:c2:f7:81:a9:a3:bd:4c:41:1c:a7:8a:4f: 9a:e6:ad:cd:83:1f:32:89:b3:4f:d8:6b:1e:78:ae: 20:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FF:56:D7:99:1A:A4:B6:31:76:15:84:62:5A:D0:E5:37:73:E0:10 X509v3 Authority Key Identifier: keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:62:46:de:a5:78:b2:08:fc:a6:1d:47:85:a4:ba:2e:58:f0: 77:55:64:94:7e:eb:2e:be:06:6f:4c:65:91:eb:fb:de:f6:8a: ad:bc:01:32:69:0f:0e:d8:67:fa:6c:e9:c0:35:16:e2:08:7f: 89:cb:84:7e:fa:46:6b:e1:5e:d8:0d:9f:be:71:54:bc:33:8b: 8a:e0:60:68:05:19:37:a0:b5:5e:5d:ad:06:2d:ed:be:a6:7b: c0:a0:84:98:ad:bc:45:b8:c6:9c:30:74:31:58:92:f1:5a:83: 9f:ff:78:5e:8d:4a:d0:81:d4:5f:f8:2e:5d:bc:79:da:e8:79: c2:f4:51:f6:9f:98:22:5a:38:34:cd:f5:2d:39:b8:ed:ef:90: fb:45:4f:97:4a:41:f6:aa:78:62:4b:92:1b:25:de:9c:9f:64: b9:fb:a8:84:ce:cd:5c:96:11:ec:d8:2d:6c:fe:3f:9e:7a:df: 80:63:1a:68:14:9e:de:89:0b:c6:5a:cc:c7:68:e5:7e:42:de: 00:7b:8a:d7:b7:03:59:dd:95:2d:40:4c:2f:d2:2f:e3:99:8c: b2:e5:86:61:c5:e6:32:f9:32:85:f9:e7:01:ec:cd:ea:6c:50: fe:b7:0e:c4:a8:3c:b5:ef:ef:1f:dd:ce:69:21:ff:81:eb:d5: 9b:58:8d:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDQjQxMTAvBgNVBAUTKEZCMTZCMTlERkJGN0NBNkFDNDBBNkI2QTM1M0Y3ODU3 ODkxN0UwRkQwHhcNMjUwOTE5MDMzNTIzWhcNMjUwOTI2MDMzNTIzWjAYMRYwFAYD VQQDEw02OGNjY2Y3Yi1lNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx02rSt+tUOcPZHL0Yck4scx5dSCwHz6z7WGBCk2j0IVA/JaxxwXD4HndVmvl mH+gC+GCSwV+HBierPrGOW9+ams0t+mHgP86e6bdwsRz/8nqG2rBKGf/3fbFaLXO c+YhdQlnJG1zCHMbUsq6TWO08tvnVrRIp1xtwvPlnU6x3IXEUxwub81Mu94uh2Kj uiHVtKr0DjG4KO0Z5C53eYaAY2ropbFhuEVgqLdkQzuiLDgQ1+UUVWM3dX5s+wU6 dAmyvjKYO1vBJcgVqAeYHQHNmi1VP5VELiUOmoYLoHcahEWJkWLC94Gpo71MQRyn ik+a5q3Ngx8yibNP2GseeK4gqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL//VteZ GqS2MXYVhGJa0OU3c+AQMB8GA1UdIwQYMBaAFPsWsZ3798pqxAprajU/eFeJF+D9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkNCNC8yQTg0RDFEOEZE QzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3ltckVDbXRxTlQ5NFY0a1g0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14YXhuZnYzeW1yRUNtdHFOVDk0VjRrWDRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkNCNC8yQTg0RDFEOEZEQzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3lt ckVDbXRxTlQ5NFY0a1g0UDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5YkbepXiyCPymHUeFpLouWPB3VWSUfusuvgZvTGWR6/ve9oqtvAEy aQ8O2Gf6bOnANRbiCH+Jy4R++kZr4V7YDZ++cVS8M4uK4GBoBRk3oLVeXa0GLe2+ pnvAoISYrbxFuMacMHQxWJLxWoOf/3hejUrQgdRf+C5dvHna6HnC9FH2n5giWjg0 zfUtObjt75D7RU+XSkH2qnhiS5IbJd6cn2S5+6iEzs1clhHs2C1s/j+eet+AYxpo FJ7eiQvGWszHaOV+Qt4Ae4rXtwNZ3ZUtQEwv0i/jmYyy5YZhxeYy+TKF+ecB7M3q bFD+tw7EqDy17+8f3c5pIf+B69WbWI34 -----END CERTIFICATE-----Generated at Fri Sep 19 16:10:52 2025 by rpki-client