$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: ljrX2MQQybx8MDBwD03iHlPkWcVsxJJe6V7ERMMvJS0= Subject key identifier: E4:90:85:28:C1:F2:4D:AA:6C:2A:86:63:07:41:7A:EF:7D:21:3F:41 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 04B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 04AE Signing time: Mon 08 Sep 2025 23:59:05 +0000 Manifest this update: Mon 08 Sep 2025 23:59:05 +0000 Manifest next update: Mon 15 Sep 2025 23:59:05 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: 9LkTjE5qKln7d9g+Vo8ZJupJC2CM6V0KTQFoegOvt7Y=) 2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: oit1Hcurqov7MCqWlGsRBKXsNTM2JCAP78/GFOI7Xmc=) 3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: 4z+897eYmawfXH/tzTqewnh8oQ4d+YXJLaFQ5gY8Qbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1206 (0x4b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Sep 8 23:59:05 2025 GMT Not After : Sep 15 23:59:05 2025 GMT Subject: CN=68bf6dc9-b62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:89:23:01:46:28:33:fd:78:0a:b7:2b:ac: 0d:0a:19:0f:1a:ed:2c:08:5d:51:07:92:3d:33:f5: c9:72:34:ca:5f:b7:8a:2e:14:eb:47:60:10:b5:bb: 65:71:22:19:b2:b7:23:00:36:eb:34:a2:db:22:a5: e9:03:8c:89:7a:3e:da:2e:cc:76:d3:9a:db:02:ed: ec:07:6b:16:55:e5:cb:10:8f:d0:45:63:e5:85:9c: bf:f2:86:7b:fb:6e:23:18:e7:4e:c1:1b:48:63:35: da:b5:63:9b:c3:f7:1d:cf:19:85:31:25:32:bc:a3: 2e:9d:de:d2:22:2a:31:9e:a7:aa:5b:85:0b:6c:0e: 54:17:35:f3:67:69:23:21:57:34:ef:06:4e:42:b4: 75:5d:c4:8d:76:54:99:19:4d:b0:f9:ad:b6:47:7e: f0:c6:d3:53:15:3b:51:b2:87:d7:e4:50:a7:d1:d9: ea:08:4a:8e:1c:cf:5a:00:53:b4:8c:c4:bd:e7:92: a8:e9:ac:a7:fc:8d:e9:97:59:f1:66:32:2b:a0:e0: 9c:b3:0a:0c:4a:06:e0:4f:55:af:52:ed:50:f8:1d: 4f:9b:5c:ed:c5:d2:ea:90:a7:80:64:7a:7a:2e:60: e9:ab:7b:09:f0:19:88:2a:c5:ba:a6:64:e1:73:ce: b5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:90:85:28:C1:F2:4D:AA:6C:2A:86:63:07:41:7A:EF:7D:21:3F:41 X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:2c:9f:f4:6d:dc:fc:0c:a9:1d:be:3d:f2:97:28:14:c9:9c: fa:fa:f4:be:f3:7c:c4:19:49:b9:1f:12:05:79:1a:90:0b:7a: a9:87:81:31:81:22:10:20:3f:3d:79:4b:98:09:c6:80:83:e7: bb:49:b4:7d:e1:da:0f:a6:23:a2:29:97:2e:e6:73:35:80:66: 9f:75:5d:76:c8:f4:fc:35:26:dd:2a:2a:ff:b2:2c:b4:a3:09: 5b:01:90:54:41:be:6b:75:8f:99:c9:89:18:1d:7c:05:07:85: 30:e7:44:43:9a:65:b5:d7:6d:2c:51:ee:d3:c5:68:c1:4e:f1: aa:7e:a3:27:6e:e3:f5:96:e5:7a:f0:51:8b:d1:0d:20:df:7c: d3:63:40:4c:b0:09:22:36:86:1c:50:fd:5c:5a:8e:a7:fb:95: 3e:97:da:17:74:c8:9e:81:bd:aa:86:7b:c0:b2:3c:0b:c9:72: 44:40:d0:29:62:5a:b0:d6:8d:87:93:d8:55:10:e4:11:89:77: 27:23:ca:88:d7:b5:dc:0e:62:70:53:06:1a:f5:ad:60:58:a7: 9c:39:ab:0d:ec:59:c7:60:63:5b:cc:7e:d7:4b:b3:56:4f:03: a0:17:26:f5:77:4e:20:40:28:3e:8e:4c:cd:82:49:2d:34:53: b5:15:cd:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjUwOTA4MjM1OTA1WhcNMjUwOTE1MjM1OTA1WjAYMRYwFAYD VQQDEw02OGJmNmRjOS1iNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMqJIwFGKDP9eAq3K6wNChkPGu0sCF1RB5I9M/XJcjTKX7eKLhTrR2AQtbtl cSIZsrcjADbrNKLbIqXpA4yJej7aLsx205rbAu3sB2sWVeXLEI/QRWPlhZy/8oZ7 +24jGOdOwRtIYzXatWObw/cdzxmFMSUyvKMund7SIioxnqeqW4ULbA5UFzXzZ2kj IVc07wZOQrR1XcSNdlSZGU2w+a22R37wxtNTFTtRsofX5FCn0dnqCEqOHM9aAFO0 jMS955Ko6ayn/I3pl1nxZjIroOCcswoMSgbgT1WvUu1Q+B1Pm1ztxdLqkKeAZHp6 LmDpq3sJ8BmIKsW6pmThc861VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSQhSjB 8k2qbCqGYwdBeu99IT9BMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRLJ/0bdz8DKkdvj3ylygUyZz6+vS+83zEGUm5HxIFeRqQC3qph4Ex gSIQID89eUuYCcaAg+e7SbR94doPpiOiKZcu5nM1gGafdV12yPT8NSbdKir/siy0 owlbAZBUQb5rdY+ZyYkYHXwFB4Uw50RDmmW1120sUe7TxWjBTvGqfqMnbuP1luV6 8FGL0Q0g33zTY0BMsAkiNoYcUP1cWo6n+5U+l9oXdMiegb2qhnvAsjwLyXJEQNAp Ylqw1o2Hk9hVEOQRiXcnI8qI17XcDmJwUwYa9a1gWKecOasN7FnHYGNbzH7XS7NW TwOgFyb1d04gQCg+jkzNgkktNFO1Fc1F -----END CERTIFICATE-----Generated at Tue Sep 9 17:26:39 2025 by rpki-client