$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft File: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json) Hash identifier: IaC04XbMrpvXQoYc/2UT67VKA5JXAJ33ga6IoMDqabA= Subject key identifier: 54:15:DB:0C:43:4B:60:7F:BE:12:37:D5:AF:3E:E7:CD:53:1A:6F:84 Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 Certificate issuer: /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft Manifest number: 7C Signing time: Wed 17 Sep 2025 07:27:48 +0000 Manifest this update: Wed 17 Sep 2025 07:27:48 +0000 Manifest next update: Wed 24 Sep 2025 07:27:48 +0000 Files and hashes: 1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: z+31RDQxZ8BWBu1sJWj/WG37guHTMCsY+fGBG/Ro3MU=) 2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: +D4BVGFKWyg9Pr75Q40/ty5hMk4DuavCG4i3TGDDyg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Validity Not Before: Sep 17 07:27:48 2025 GMT Not After : Sep 24 07:27:48 2025 GMT Subject: CN=68ca62f4-520a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:fd:2c:0c:4c:0d:a2:f3:ee:b3:52:7a:a4: f6:60:1b:b7:53:49:e7:be:fe:60:a0:9a:b4:b5:70: c1:28:8a:e5:d6:75:26:cd:93:61:22:bf:75:77:c1: 15:2a:6b:bd:f2:ec:c4:c5:aa:54:17:b7:c5:b4:e4: b2:91:60:df:4b:b8:ac:8c:b9:d5:46:b0:2a:49:a8: b4:85:55:7b:a2:d1:34:dc:0d:05:6f:f1:49:fe:4f: 7d:eb:de:a3:84:c7:9c:8a:23:0c:ef:cc:c6:70:d5: 27:39:db:98:43:e1:18:f2:81:35:81:f0:63:7f:e8: bc:0a:01:0a:11:57:d9:9f:66:d2:bf:3a:1e:2c:a9: bb:56:2a:7b:f7:3b:5d:2c:80:4e:ba:25:d9:d4:5e: 86:75:d0:4f:4c:38:85:85:ab:85:6e:72:e8:f4:9b: 55:16:e9:54:9b:8e:4b:a8:25:35:df:18:66:cc:1c: a1:bd:7d:42:8b:c4:5b:d4:32:04:0d:f3:0f:50:e1: 61:28:e4:5b:37:60:cc:c2:fd:92:65:0b:10:4a:eb: 82:74:b3:77:47:3d:72:b2:87:61:01:eb:f2:8d:d7: 95:a5:9d:fa:31:52:31:9e:b8:1d:6a:7e:74:2f:21: 1d:37:a9:a7:16:05:b8:02:16:ba:82:b5:69:2c:e3: f2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:15:DB:0C:43:4B:60:7F:BE:12:37:D5:AF:3E:E7:CD:53:1A:6F:84 X509v3 Authority Key Identifier: keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:3e:36:f1:1d:23:a2:c8:6c:a3:df:59:c0:7d:d1:73:00:45: 35:07:95:5c:6a:89:03:ea:36:dd:b6:7d:23:75:88:3f:96:22: 34:30:d2:8a:b3:51:a4:56:26:fc:a5:dd:eb:d4:ac:5d:4b:74: 76:de:44:c9:6a:cd:96:eb:90:52:0f:a7:7a:58:50:83:3c:53: 09:16:d1:26:55:85:45:4f:3a:66:1d:9f:b3:a1:0d:e1:6e:2c: 06:5c:b4:06:15:0e:74:0c:e0:49:1f:d8:eb:74:af:b8:9a:8f: a8:15:04:33:a5:1e:ff:03:77:34:88:6e:c7:be:0a:83:e1:ba: 06:8f:83:18:26:8f:71:37:5c:b9:d2:f7:6f:7c:f0:bb:d4:9d: ae:e0:1d:94:6c:52:3f:57:b7:e0:67:c2:78:f1:c6:f8:b2:2a: 65:a6:88:b3:06:bb:41:4c:2f:03:4e:c8:f7:da:8e:2f:32:d7: ea:82:8d:0e:57:98:e0:08:08:d9:3e:dd:53:d6:f1:a8:c5:63: 22:9e:42:b2:00:3b:1b:81:2a:57:ea:d4:e8:fc:93:73:f8:bd: e7:74:62:5a:4e:d6:ea:05:8c:a5:4c:03:dd:5a:26:ca:cd:0f: d8:07:db:ed:c4:a1:3c:70:c5:d0:f9:a5:8f:51:83:4a:78:10: d0:db:9f:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NCRTExMC8GA1UEBRMoOUExNjI0RjQ2MDgyRjU0QUM1Nzc4ODU5RTIyNkJEM0JB NjkwMjNGNDAeFw0yNTA5MTcwNzI3NDhaFw0yNTA5MjQwNzI3NDhaMBgxFjAUBgNV BAMTDTY4Y2E2MmY0LTUyMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDImf0sDEwNovPus1J6pPZgG7dTSee+/mCgmrS1cMEoiuXWdSbNk2Eiv3V3wRUq a73y7MTFqlQXt8W05LKRYN9LuKyMudVGsCpJqLSFVXui0TTcDQVv8Un+T33r3qOE x5yKIwzvzMZw1Sc525hD4RjygTWB8GN/6LwKAQoRV9mfZtK/Oh4sqbtWKnv3O10s gE66JdnUXoZ10E9MOIWFq4Vucuj0m1UW6VSbjkuoJTXfGGbMHKG9fUKLxFvUMgQN 8w9Q4WEo5Fs3YMzC/ZJlCxBK64J0s3dHPXKyh2EB6/KN15WlnfoxUjGeuB1qfnQv IR03qacWBbgCFrqCtWks4/LpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVBXbDENL YH++EjfVrz7nzVMab4QwHwYDVR0jBBgwFoAUmhYk9GCC9UrFd4hZ4ia9O6aQI/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0JFLzgzQkE4N0FFRDdD MjExRUY4MTkwREE1Q0M0RjlBRTAyL21oWWs5R0NDOVVyRmQ0aFo0aWE5TzZhUUlf US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWhZazlHQ0M5VXJGZDRoWjRpYTlPNmFRSV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 Q0JFLzgzQkE4N0FFRDdDMjExRUY4MTkwREE1Q0M0RjlBRTAyL21oWWs5R0NDOVVy RmQ0aFo0aWE5TzZhUUlfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFI+NvEdI6LIbKPfWcB90XMARTUHlVxqiQPqNt22fSN1iD+WIjQw0oqz UaRWJvyl3evUrF1LdHbeRMlqzZbrkFIPp3pYUIM8UwkW0SZVhUVPOmYdn7OhDeFu LAZctAYVDnQM4Ekf2Ot0r7iaj6gVBDOlHv8DdzSIbse+CoPhugaPgxgmj3E3XLnS 92988LvUna7gHZRsUj9Xt+BnwnjxxviyKmWmiLMGu0FMLwNOyPfaji8y1+qCjQ5X mOAICNk+3VPW8ajFYyKeQrIAOxuBKlfq1Oj8k3P4ved0YlpO1uoFjKVMA91aJsrN D9gH2+3EoTxwxdD5pY9Rg0p4ENDbn8Q= -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:12 2025 by rpki-client