$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft File: DprNgHEUtY9xipwrhZUmJebbK9E.mft (raw, json) Hash identifier: gQpxsP5z8zbrQmNJZYJbV6SHpVfquyrvUqe0YtNR/R8= Subject key identifier: 2F:E9:ED:EA:12:6C:B5:32:17:31:FB:8C:80:6E:CE:E7:98:4A:0A:A6 Authority key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 Certificate issuer: /CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft Manifest number: 0137 Signing time: Sun 07 Sep 2025 04:56:20 +0000 Manifest this update: Sun 07 Sep 2025 04:56:20 +0000 Manifest next update: Sun 14 Sep 2025 04:56:20 +0000 Files and hashes: 1: DprNgHEUtY9xipwrhZUmJebbK9E.crl (hash: KFxv8m2UYhXQKBloKifmY03y4CUGXuSVZlGRvdbPHUk=) 2: E3AB124AB5C811EE8795EB6FC4F9AE02.roa (hash: aM0ebxOeAp/0tw2kKItKBwN7ixtJh2EMTHdvNuXJzzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146D7A, serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1 Validity Not Before: Sep 7 04:56:20 2025 GMT Not After : Sep 14 04:56:20 2025 GMT Subject: CN=68bd1074-85de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b8:ab:27:4d:77:d5:99:1d:1b:70:4a:84:d8: 94:0e:74:cd:ba:01:02:b8:b1:8c:26:bc:90:31:f0: 02:4f:02:a7:3f:f5:d0:15:8f:16:56:a7:b1:4e:f1: ba:84:c3:13:dd:49:4c:e5:86:0d:c3:b3:02:e1:a3: 91:d6:2e:dc:21:4f:e5:49:dc:d0:f5:d6:e6:dd:f3: 73:29:98:a8:75:55:e5:df:96:27:f1:53:11:f5:62: c4:f6:3c:10:15:09:ca:38:b5:b0:b5:14:8c:c8:d4: 68:06:ed:44:8d:34:c7:44:51:38:e1:32:4c:7a:ad: 68:32:79:d5:2b:89:9d:2e:ee:69:b6:f9:61:05:95: c1:27:e7:64:47:f2:90:72:7c:42:7f:b0:18:62:1d: 9f:ea:79:98:96:9d:52:13:ca:83:96:bb:d4:a3:28: 1d:90:07:7e:cc:03:23:f2:cf:23:45:7d:e6:39:db: 69:22:e9:39:67:be:5b:fa:5c:e2:9d:db:b5:05:e1: d7:bd:06:9e:c7:cf:56:33:5a:ba:74:f5:45:28:3a: 96:92:c5:5c:60:82:0f:74:11:6c:20:67:63:b5:8e: df:e2:de:16:e4:4a:39:01:22:4a:ce:9a:7b:eb:53: 5c:84:ea:bd:1e:96:e6:d0:a3:ef:c2:37:aa:3e:fb: 96:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E9:ED:EA:12:6C:B5:32:17:31:FB:8C:80:6E:CE:E7:98:4A:0A:A6 X509v3 Authority Key Identifier: keyid:0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:64:32:82:eb:e9:69:b8:3d:a5:89:19:13:f5:d5:00:ea:93: 3d:a7:fb:d9:7a:db:45:9d:4d:8f:8c:5d:35:11:44:51:a6:9e: 72:6a:d0:64:ae:77:92:6a:3b:3e:dc:d0:88:a5:fd:ba:0a:da: 0c:e8:1d:df:6f:16:15:8a:5a:95:9f:0c:65:55:fb:eb:48:d0: 9e:70:ad:b1:bd:ea:bf:e6:cd:71:70:38:73:0f:7f:a2:0a:db: 64:b0:8e:a1:46:2c:4c:08:ed:02:34:bb:1a:da:0a:4e:57:66: f4:1b:ca:f9:45:f2:38:a5:34:63:e7:24:39:24:b2:3b:63:56: 2b:57:d4:48:af:10:d4:dd:c8:c4:73:8b:86:16:f0:a7:fc:9c: c8:71:91:8c:0a:30:2c:43:5a:75:59:40:7e:ee:8d:96:7c:d8: 77:2c:99:62:33:d8:90:96:e8:62:b6:dc:00:57:ab:25:03:c2: 0a:18:cd:07:df:03:d2:49:df:c4:43:5e:23:0d:85:94:f3:b1: 02:7f:67:bf:47:78:14:b1:d6:5f:52:a5:81:a5:4f:f8:7b:fb: ec:f9:81:2a:ce:0a:e3:5f:05:70:71:5f:cf:46:9b:20:3a:3d: 6d:59:5d:8e:e4:51:e7:c4:ff:ec:5b:76:ca:71:bc:53:94:62: 25:3f:83:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEN0ExMTAvBgNVBAUTKDBFOUFDRDgwNzExNEI1OEY3MThBOUMyQjg1OTUyNjI1 RTZEQjJCRDEwHhcNMjUwOTA3MDQ1NjIwWhcNMjUwOTE0MDQ1NjIwWjAYMRYwFAYD VQQDEw02OGJkMTA3NC04NWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLirJ0131ZkdG3BKhNiUDnTNugECuLGMJryQMfACTwKnP/XQFY8WVqexTvG6 hMMT3UlM5YYNw7MC4aOR1i7cIU/lSdzQ9dbm3fNzKZiodVXl35Yn8VMR9WLE9jwQ FQnKOLWwtRSMyNRoBu1EjTTHRFE44TJMeq1oMnnVK4mdLu5ptvlhBZXBJ+dkR/KQ cnxCf7AYYh2f6nmYlp1SE8qDlrvUoygdkAd+zAMj8s8jRX3mOdtpIuk5Z75b+lzi ndu1BeHXvQaex89WM1q6dPVFKDqWksVcYIIPdBFsIGdjtY7f4t4W5Eo5ASJKzpp7 61NchOq9Hpbm0KPvwjeqPvuWRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/p7eoS bLUyFzH7jIBuzueYSgqmMB8GA1UdIwQYMBaAFA6azYBxFLWPcYqcK4WVJiXm2yvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkQ3QS85M0QyNEY0QUI1 QzgxMUVFQjRBMjRBNkZDNEY5QUUwMi9EcHJOZ0hFVXRZOXhpcHdyaFpVbUplYmJL OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rwck5nSEVVdFk5eGlwd3JoWlVtSmViYks5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkQ3QS85M0QyNEY0QUI1QzgxMUVFQjRBMjRBNkZDNEY5QUUwMi9EcHJOZ0hFVXRZ OXhpcHdyaFpVbUplYmJLOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcZDKC6+lpuD2liRkT9dUA6pM9p/vZettFnU2PjF01EURRpp5yatBk rneSajs+3NCIpf26CtoM6B3fbxYVilqVnwxlVfvrSNCecK2xveq/5s1xcDhzD3+i CttksI6hRixMCO0CNLsa2gpOV2b0G8r5RfI4pTRj5yQ5JLI7Y1YrV9RIrxDU3cjE c4uGFvCn/JzIcZGMCjAsQ1p1WUB+7o2WfNh3LJliM9iQluhittwAV6slA8IKGM0H 3wPSSd/EQ14jDYWU87ECf2e/R3gUsdZfUqWBpU/4e/vs+YEqzgrjXwVwcV/PRpsg Oj1tWV2O5FHnxP/sW3bKcbxTlGIlP4NN -----END CERTIFICATE-----Generated at Tue Sep 9 04:03:50 2025 by rpki-client