$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: Q9Qz5uXvBzqWdBU2DWjdGYJ1xRlYQsig+HXO58088Vc= Subject key identifier: C9:04:12:D0:35:2A:70:3C:4E:4E:A4:BC:84:8D:0A:10:A0:48:CD:0B Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 2922 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 2848 Signing time: Thu 04 Sep 2025 15:44:09 +0000 Manifest this update: Thu 04 Sep 2025 15:44:09 +0000 Manifest next update: Thu 11 Sep 2025 15:44:09 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: qnH56c+//U9UcMxZnmlnU2s8yNkZTQVbZFUlBkSmMQg=) 2: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: oWJMpDIMTFAfw38plnHhHvz3GPHifE5GFKfNlopflac=) 3: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: iWBtuBIjalbSdr/S7ybJJU+iQh4n8A16nqoXCibL9XI=) 4: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: b2Yq5jV0ZpUmJZqaRWPtD89nJkoGKuS1X5rO9Hm2iOA=) 5: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: 3rfvelTpkGIVSx6swNlRbMEKIqAJwLp3a6nGC9gVNp0=) 6: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: LvSvruXeAK+qWh2mflmo7dSyP3cfHl4l3q7IiFptoA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 15:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10530 (0x2922) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Sep 4 15:44:09 2025 GMT Not After : Sep 11 15:44:09 2025 GMT Subject: CN=68b9b3c9-3280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3c:b0:f6:38:d6:8a:44:7a:ce:6b:36:24:7d: dd:35:22:0d:4f:a9:eb:48:5b:81:01:c4:9f:64:51: 79:fa:16:42:c5:cd:c4:c2:db:ca:4b:c2:37:52:c1: 13:bb:9c:2b:af:06:0b:11:d3:3a:5e:5b:94:27:94: 60:b7:b2:f4:79:63:de:f2:51:28:78:ba:2e:ba:e3: 89:ba:a9:bd:3e:bc:11:49:b5:a4:80:3c:9c:8a:db: b2:21:ba:98:d6:e9:da:3e:f7:2c:ec:c7:20:7d:7d: 14:70:1e:59:68:eb:1d:3e:24:a6:30:89:05:8d:2b: 15:c9:6a:61:56:7c:3c:bf:4d:e5:0d:dc:6b:33:3b: ed:10:10:b0:1c:d0:82:25:b5:a8:84:d7:69:46:d2: 72:4a:e9:97:33:4b:19:de:c9:a4:95:60:40:eb:1a: 18:0d:bb:e1:b1:ea:8c:8d:d8:44:bb:8f:4c:bd:a0: 51:0e:74:80:73:3c:eb:58:f2:23:89:77:66:26:cc: 63:a5:26:f7:09:b0:84:ca:fa:77:02:d4:b0:82:6f: 20:d7:25:1a:4a:3c:01:ed:3a:95:d1:6b:27:5a:60: de:a7:ec:d1:81:ff:72:e2:54:cd:a7:a3:26:de:99: 08:22:72:c8:55:92:ca:26:6a:7b:eb:79:00:89:8c: c7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:04:12:D0:35:2A:70:3C:4E:4E:A4:BC:84:8D:0A:10:A0:48:CD:0B X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:30:1a:61:b4:3c:06:92:94:f5:cd:5f:64:de:08:79:f3:1a: 4e:0f:be:c2:bd:b3:cf:ce:a0:1d:a7:f8:35:f7:04:8f:87:92: a8:02:1d:00:30:58:38:92:10:3b:8e:21:7c:2d:bd:87:b7:87: 4f:af:c8:a0:57:53:fa:18:4c:27:37:61:78:f2:2c:6d:13:e1: af:ff:52:6b:81:23:ca:97:bf:f2:1d:15:57:59:f3:30:4a:22: 72:ac:86:51:4e:96:c3:e5:13:87:87:8a:71:e6:d6:f2:66:34: 0e:38:ae:fa:d2:7b:12:f3:50:bf:f2:7f:a6:1f:73:20:31:4e: d6:03:84:3b:5a:ff:32:a8:6c:44:73:fb:12:ce:90:8b:6c:4e: eb:93:52:5a:90:31:86:f5:66:93:99:19:ee:44:74:98:5a:86: 97:f9:a9:a9:b6:91:e0:9b:c9:ae:3c:ad:66:96:ac:cd:a4:d8: 67:df:20:ff:d9:5c:85:0f:29:e2:41:c6:f8:1a:a4:84:26:38: 43:a7:57:b2:bc:a2:2a:bd:1a:e3:4a:3e:98:7b:af:0f:31:24: cf:f8:d5:24:ce:57:eb:f0:d7:40:44:3e:98:32:ac:bf:66:3f: 3e:73:a1:7f:7f:53:44:18:d5:a6:a9:53:a8:ad:26:cc:52:fb: 96:6d:46:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjUwOTA0MTU0NDA5WhcNMjUwOTExMTU0NDA5WjAYMRYwFAYD VQQDEw02OGI5YjNjOS0zMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7jyw9jjWikR6zms2JH3dNSINT6nrSFuBAcSfZFF5+hZCxc3EwtvKS8I3UsET u5wrrwYLEdM6XluUJ5Rgt7L0eWPe8lEoeLouuuOJuqm9PrwRSbWkgDycituyIbqY 1unaPvcs7McgfX0UcB5ZaOsdPiSmMIkFjSsVyWphVnw8v03lDdxrMzvtEBCwHNCC JbWohNdpRtJySumXM0sZ3smklWBA6xoYDbvhseqMjdhEu49MvaBRDnSAczzrWPIj iXdmJsxjpSb3CbCEyvp3AtSwgm8g1yUaSjwB7TqV0WsnWmDep+zRgf9y4lTNp6Mm 3pkIInLIVZLKJmp763kAiYzHwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkEEtA1 KnA8Tk6kvISNChCgSM0LMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWMBphtDwGkpT1zV9k3gh58xpOD77CvbPPzqAdp/g19wSPh5KoAh0A MFg4khA7jiF8Lb2Ht4dPr8igV1P6GEwnN2F48ixtE+Gv/1JrgSPKl7/yHRVXWfMw SiJyrIZRTpbD5ROHh4px5tbyZjQOOK760nsS81C/8n+mH3MgMU7WA4Q7Wv8yqGxE c/sSzpCLbE7rk1JakDGG9WaTmRnuRHSYWoaX+amptpHgm8muPK1mlqzNpNhn3yD/ 2VyFDyniQcb4GqSEJjhDp1eyvKIqvRrjSj6Ye68PMSTP+NUkzlfr8NdARD6YMqy/ Zj8+c6F/f1NEGNWmqVOorSbMUvuWbUay -----END CERTIFICATE-----Generated at Sat Sep 6 16:03:32 2025 by rpki-client