$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft File: Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft (raw, json) Hash identifier: Otl+frpE8D4KG70sh5EVy+GSdvB1KBPzsJFWx2t8uzM= Subject key identifier: A1:05:E4:50:98:4D:E2:25:E9:BB:94:4B:6C:43:85:65:26:A5:BD:46 Authority key identifier: 53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A Certificate issuer: /CN=A9149ACD/serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft Manifest number: 08 Signing time: Tue 09 Sep 2025 08:16:04 +0000 Manifest this update: Tue 09 Sep 2025 08:16:03 +0000 Manifest next update: Tue 16 Sep 2025 08:16:03 +0000 Files and hashes: 1: Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl (hash: DEQE3qejQIm7XJ3CrhY0Z4/GYvZ2m4bkYRqLgsCzYdA=) 2: 286C872684B011F08D2ED42CC4F9AE02.roa (hash: zLa9BDHDG7v+U27ctD90rRBbm+JhYqq8GC5uRJX34CA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ACD, serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Validity Not Before: Sep 9 08:16:03 2025 GMT Not After : Sep 16 08:16:03 2025 GMT Subject: CN=68bfe243-a82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f8:18:bd:31:01:e6:f3:49:cf:ad:3a:38:29: 79:c0:61:3f:3c:fd:44:90:d6:f5:b5:1e:5a:98:56: 8f:fd:42:ad:54:34:0d:e4:49:bc:72:44:fa:02:06: 15:27:17:45:fd:a8:d0:5d:05:e7:37:49:a1:a7:cb: ea:42:c2:fe:80:fb:55:6f:fe:15:e0:be:d1:ea:3b: 2a:1e:8f:05:31:c6:d8:5d:e4:32:3d:ef:53:b6:78: d4:db:63:a5:65:9b:c1:79:07:92:4e:d2:54:8f:f7: 5e:8f:74:ff:47:1c:6c:69:f5:1f:31:68:f2:df:84: a5:7d:52:b3:d5:61:14:2c:25:90:c5:35:71:65:e0: 89:04:60:47:31:76:f9:be:ef:62:10:7e:1f:de:75: f4:81:7d:03:7a:10:97:82:20:94:4e:62:83:f1:33: 2c:9f:7f:3e:9e:ad:95:b0:7f:11:20:a7:9e:d9:7d: 32:58:c8:4d:8e:02:33:57:d9:46:80:32:55:99:b4: 27:e7:79:7e:be:38:00:7c:dd:83:df:0c:c4:fa:55: 29:86:63:d8:ef:3e:24:fa:53:5b:34:da:f1:e2:af: 7c:df:ad:12:b6:ab:c8:2e:7e:53:66:4b:11:99:ef: ea:37:5e:09:f1:e6:87:7b:90:61:4e:c6:b6:ba:e6: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:05:E4:50:98:4D:E2:25:E9:BB:94:4B:6C:43:85:65:26:A5:BD:46 X509v3 Authority Key Identifier: keyid:53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:fa:ef:ba:c7:49:83:de:c3:75:7e:85:d9:90:ce:bc:01:e8: ad:1e:84:b4:2a:83:d3:4f:0d:7b:16:3b:90:25:15:42:ee:31: 98:ee:a7:a9:f3:af:6c:cd:c1:fc:10:bc:78:f7:7c:61:81:0e: 2f:83:50:f6:08:78:1f:b0:b6:30:f8:68:20:6b:53:3e:4b:f1: 68:80:39:5b:47:17:72:94:02:92:0d:a3:1b:67:cc:76:50:70: 5e:bb:7f:26:e9:f3:93:89:2c:84:45:f0:32:42:fd:70:3a:5e: 79:a8:cf:b0:79:f3:72:15:2d:05:52:91:1d:71:9b:a8:a7:8b: 57:39:12:57:68:b4:e3:3c:0a:47:23:21:47:60:68:9e:15:6b: f0:14:a0:8f:1f:94:87:f7:84:c5:f4:16:a0:f0:5e:18:8f:2d: e2:96:66:69:c9:f3:dc:fa:1a:46:0b:6c:7d:a0:e6:93:f1:88: 8f:c4:02:e8:a4:ba:3e:ff:14:77:fc:a3:40:4d:39:8b:d8:75: d8:e9:b8:10:d5:5a:3d:c0:66:79:1b:51:e3:25:c7:5e:df:8f: 57:15:cb:c6:c4:47:b0:2d:81:2b:f3:ea:75:0a:d5:da:61:28: 2c:62:58:e7:e0:80:18:55:e4:11:8f:aa:77:05:68:c6:d5:f2: 9e:5c:67:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUFDRDExMC8GA1UEBRMoNTMyRTcwNTRDNDcxQkZGMkVEN0E2QTE4OEVEMzczNjM2 NUU0NjA4QTAeFw0yNTA5MDkwODE2MDNaFw0yNTA5MTYwODE2MDNaMBgxFjAUBgNV BAMTDTY4YmZlMjQzLWE4MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe+Bi9MQHm80nPrTo4KXnAYT88/USQ1vW1HlqYVo/9Qq1UNA3kSbxyRPoCBhUn F0X9qNBdBec3SaGny+pCwv6A+1Vv/hXgvtHqOyoejwUxxthd5DI971O2eNTbY6Vl m8F5B5JO0lSP916PdP9HHGxp9R8xaPLfhKV9UrPVYRQsJZDFNXFl4IkEYEcxdvm+ 72IQfh/edfSBfQN6EJeCIJROYoPxMyyffz6erZWwfxEgp57ZfTJYyE2OAjNX2UaA MlWZtCfneX6+OAB83YPfDMT6VSmGY9jvPiT6U1s02vHir3zfrRK2q8guflNmSxGZ 7+o3Xgnx5od7kGFOxra65iP7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoQXkUJhN 4iXpu5RLbEOFZSalvUYwHwYDVR0jBBgwFoAUUy5wVMRxv/LtemoYjtNzY2XkYIow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QUNEL0Q4MzVBOTBFODRB RjExRjBBRDdDREUyQkM0RjlBRTAyL1V5NXdWTVJ4dl9MdGVtb1lqdE56WTJYa1lJ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXk1d1ZNUnh2X0x0ZW1vWWp0TnpZMlhrWUlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QUNEL0Q4MzVBOTBFODRBRjExRjBBRDdDREUyQkM0RjlBRTAyL1V5NXdWTVJ4dl9M dGVtb1lqdE56WTJYa1lJby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABD677rHSYPew3V+hdmQzrwB6K0ehLQqg9NPDXsWO5AlFULuMZjup6nz r2zNwfwQvHj3fGGBDi+DUPYIeB+wtjD4aCBrUz5L8WiAOVtHF3KUApINoxtnzHZQ cF67fybp85OJLIRF8DJC/XA6Xnmoz7B583IVLQVSkR1xm6ini1c5EldotOM8Ckcj IUdgaJ4Va/AUoI8flIf3hMX0FqDwXhiPLeKWZmnJ89z6GkYLbH2g5pPxiI/EAuik uj7/FHf8o0BNOYvYddjpuBDVWj3AZnkbUeMlx17fj1cVy8bER7AtgSvz6nUK1dph KCxiWOfggBhV5BGPqncFaMbV8p5cZ2c= -----END CERTIFICATE-----Generated at Tue Sep 9 13:22:32 2025 by rpki-client