$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: rJjSs+6eEUSWrwUv2syaB/FvSGho2/3sJzMKV3AsCqs= Subject key identifier: 86:55:10:DF:E5:EA:0B:F9:AE:C1:DC:54:12:11:3B:12:27:F7:1D:6A Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 3525 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 34F4 Signing time: Sat 06 Sep 2025 14:22:06 +0000 Manifest this update: Sat 06 Sep 2025 14:22:06 +0000 Manifest next update: Sat 13 Sep 2025 14:22:06 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: TqviJ74lguSdWcaIY7xK3rQ3HX2kaZTLCPlndH69cmY=) 2: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: yQ9Zz2wr8tjKdfaxVczUpLIfv3iNt/pg9a1JKFuCtos=) 3: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: z0+u6Iw9nBsWkBxEBsOze7XPIpbGqUrpaAbGEfXztn0=) 4: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: C0b11kHxUkGRgJNkSLgXVrGvFc4MAtKBux3nfA6wsg8=) 5: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: SUsUIXE/tKa73O2xJJTZ5W41hRd+PFlpRhUTlZjlrnU=) 6: A82F26B0466911F0ACD64867C4F9AE02.roa (hash: 2ZVWAkjDpndv3LhT9XdZy2paoKqw+nEDo6qJplPnRnM=) 7: 30941278EF2011EF9264077FC4F9AE02.roa (hash: dH1BFoeKKcX/dB6MDpyS3SQGnjUCambU+BCLw/wlqFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13605 (0x3525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Sep 6 14:22:06 2025 GMT Not After : Sep 13 14:22:06 2025 GMT Subject: CN=68bc438e-30c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:c6:51:68:5e:48:d5:d8:4a:e1:73:ea:ae: 32:8d:68:4f:4b:93:cb:26:e9:db:43:2a:67:f7:d1: 0c:15:e5:e1:89:ea:58:b1:e3:08:cf:96:10:d6:ca: 4e:11:0c:a4:8d:af:ce:4d:92:73:f7:bc:78:20:3d: 58:fa:3f:e7:a6:2f:06:54:44:bb:6a:23:40:ef:9a: a9:f9:f8:8c:b2:81:fb:ea:60:91:f6:1b:7b:55:03: 3c:a1:10:85:0d:9c:d5:16:da:bc:94:20:3a:13:b3: f1:7c:37:55:b2:eb:90:d0:48:d7:13:f2:dc:48:44: fb:d8:2b:e5:6b:82:c3:97:69:8e:5d:af:90:b0:32: 07:48:c3:e3:1e:8d:b7:da:68:71:b8:e8:c8:20:b6: 73:4e:2d:14:5c:5f:32:e1:e4:01:4c:69:ab:81:fa: 42:33:59:0d:26:5e:4e:be:8a:31:1f:c6:ea:15:0c: 49:b4:a4:d7:09:ba:21:7d:f5:00:8e:36:99:e2:63: b3:33:50:4c:86:ed:8a:cf:4e:cb:08:fd:7d:eb:72: 74:02:25:e1:fb:51:e9:a8:d3:60:51:30:84:79:0b: 20:12:ed:77:1d:52:f6:1a:1b:7f:13:7d:a3:74:f1: 8e:d5:4c:a8:d2:ed:62:70:7b:67:ef:d4:3d:ac:fe: 36:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:55:10:DF:E5:EA:0B:F9:AE:C1:DC:54:12:11:3B:12:27:F7:1D:6A X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:5e:58:b4:1a:ff:ee:99:ec:d0:94:94:0c:84:d7:5f:b7:fb: af:89:17:7f:fd:f1:31:8c:71:65:33:37:38:33:54:67:b0:d9: 3d:99:a2:7d:bf:de:35:84:95:89:2d:b1:6d:85:bf:f6:01:cb: db:fa:e9:35:a7:62:ac:2e:4a:a1:cb:da:f8:59:41:87:33:47: c9:0c:99:f2:c6:5a:3f:c8:96:d3:25:4a:7e:2a:d5:4d:6a:34: 4a:95:1c:82:a4:eb:92:c4:04:5e:74:cb:b1:64:70:9a:b5:8e: 2f:8b:d5:58:6f:31:31:23:77:ef:9f:28:65:b5:56:32:91:c9: 5b:0b:9f:a0:cb:19:be:de:b1:46:93:13:94:d2:54:9a:12:5b: 76:86:66:26:ad:0f:c9:a8:c2:b9:7a:b0:d0:86:43:dd:fc:a2: 21:b3:b4:fe:44:c1:7f:49:2a:6d:c5:42:fc:64:87:b8:b3:5a: 15:3f:0a:03:2e:84:69:9c:12:af:95:8c:e3:cf:a2:a4:92:26: 69:0f:40:06:f5:d6:bb:cf:e9:ac:cd:22:cc:08:e1:da:6f:e5: 21:f3:52:d1:af:26:a6:17:10:8c:0d:79:30:77:e1:ca:9a:8c: 45:14:da:08:65:54:78:18:19:04:72:c8:d4:c7:a2:9c:81:af: f5:4b:f0:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjUwOTA2MTQyMjA2WhcNMjUwOTEzMTQyMjA2WjAYMRYwFAYD VQQDEw02OGJjNDM4ZS0zMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwO7GUWheSNXYSuFz6q4yjWhPS5PLJunbQypn99EMFeXhiepYseMIz5YQ1spO EQykja/OTZJz97x4ID1Y+j/npi8GVES7aiNA75qp+fiMsoH76mCR9ht7VQM8oRCF DZzVFtq8lCA6E7PxfDdVsuuQ0EjXE/LcSET72Cvla4LDl2mOXa+QsDIHSMPjHo23 2mhxuOjIILZzTi0UXF8y4eQBTGmrgfpCM1kNJl5OvooxH8bqFQxJtKTXCbohffUA jjaZ4mOzM1BMhu2Kz07LCP1963J0AiXh+1HpqNNgUTCEeQsgEu13HVL2Ght/E32j dPGO1Uyo0u1icHtn79Q9rP42DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZVEN/l 6gv5rsHcVBIROxIn9x1qMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDoXli0Gv/umezQlJQMhNdft/uviRd//fExjHFlMzc4M1RnsNk9maJ9 v941hJWJLbFthb/2Acvb+uk1p2KsLkqhy9r4WUGHM0fJDJnyxlo/yJbTJUp+KtVN ajRKlRyCpOuSxARedMuxZHCatY4vi9VYbzExI3fvnyhltVYykclbC5+gyxm+3rFG kxOU0lSaElt2hmYmrQ/JqMK5erDQhkPd/KIhs7T+RMF/SSptxUL8ZIe4s1oVPwoD LoRpnBKvlYzjz6KkkiZpD0AG9da7z+mszSLMCOHab+Uh81LRryamFxCMDXkwd+HK moxFFNoIZVR4GBkEcsjUx6Kcga/1S/B+ -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:29 2025 by rpki-client