$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft File: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft (raw, json) Hash identifier: viQDO1h7t1AG+N+jP2dpunFWQzO5rQ3Src8nd+HLZe4= Subject key identifier: 2B:B5:9D:D9:9A:89:59:7C:76:32:0D:B1:46:51:69:D2:2E:C0:FD:43 Authority key identifier: 7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 Certificate issuer: /CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft Manifest number: 01D4 Signing time: Fri 19 Sep 2025 03:17:21 +0000 Manifest this update: Fri 19 Sep 2025 03:17:20 +0000 Manifest next update: Fri 26 Sep 2025 03:17:20 +0000 Files and hashes: 1: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl (hash: evncnPUXGucNiLhfk1WiqSEi3s5++sQaaCxYmi3Xk+4=) 2: EB732812CC8211ED9420A757C4F9AE02.roa (hash: 3Eo9M+6uF1PrL4pGQbaO7H9tA5QUvhxpxJznY/pRFpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AD0, serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Validity Not Before: Sep 19 03:17:20 2025 GMT Not After : Sep 26 03:17:20 2025 GMT Subject: CN=68cccb40-5142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:30:9d:fe:28:46:03:63:f8:ae:2e:de:18: 36:aa:93:14:0b:af:39:17:a2:c7:8f:e1:c3:b1:df: ec:9c:1a:72:bf:b3:f7:d4:53:ba:4b:c1:59:f2:da: 8a:2d:02:cf:83:65:ab:9a:fc:62:d4:fc:ff:78:aa: 88:b6:8f:ce:0c:9f:4f:5a:9a:29:7d:bd:28:68:ec: 6d:6c:62:b4:8a:27:aa:55:bf:db:35:30:34:c4:57: ef:51:39:aa:28:07:e3:4c:68:b2:fc:c0:d8:a7:d5: 61:8b:4d:5e:8a:7b:e1:1d:92:2f:e2:85:c3:e7:29: c2:f3:bd:b7:87:f1:7c:59:11:95:eb:22:d1:08:e2: bd:8f:26:94:71:77:c7:b2:0b:22:51:92:5b:86:2d: 6a:dc:9a:f7:89:63:74:c5:ab:e6:6f:05:60:00:90: 6c:df:88:37:76:ca:08:21:6d:1c:a5:c5:1a:9e:d5: c3:82:4d:25:a9:7a:ec:17:d1:a6:cb:ab:a3:45:63: c0:83:cd:34:f6:77:48:28:12:0d:55:11:94:91:a1: fc:92:1a:7d:53:0e:5c:32:6f:d5:1d:02:df:14:d7: 46:1c:6e:af:f0:ac:65:44:06:d5:03:06:cf:0b:bf: 37:d1:e5:5e:6d:d6:c7:e9:e6:3b:3e:25:ab:60:0c: f4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B5:9D:D9:9A:89:59:7C:76:32:0D:B1:46:51:69:D2:2E:C0:FD:43 X509v3 Authority Key Identifier: keyid:7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b8:20:10:b2:df:b3:2b:8b:8e:85:7b:73:14:5e:0e:11:b0: 89:b2:21:50:e9:20:0d:ec:06:00:75:c3:22:72:20:c8:1a:57: 55:f2:fa:68:48:ef:23:ed:dd:44:73:a6:66:43:d4:11:c8:1b: 43:b9:50:d3:ed:ea:46:14:0c:d1:88:b5:79:73:14:71:b4:c6: c2:ff:30:f6:16:1b:bf:46:f3:85:83:f0:7b:4b:38:27:9f:33: 3c:b5:1c:63:d3:98:72:ee:5b:8e:78:25:2d:1d:a9:97:61:45: 93:dc:2f:3c:7b:f0:d6:08:48:93:39:de:ab:4e:bc:ad:2a:0e: 45:e9:34:aa:e7:9e:67:e6:e6:b3:b5:02:ef:e9:ad:b2:28:b4: 85:5b:b6:ef:6f:29:f2:a1:8f:8c:d8:80:8c:4b:b3:29:bd:d7: fd:6b:f8:95:fb:df:9e:d2:64:ee:7c:0a:d8:6a:54:4e:ff:fd: 1f:6c:62:00:03:c8:c2:f1:de:13:ec:0c:c4:9e:b8:61:5c:c7: dd:0b:b8:e7:da:5b:e8:3d:2f:63:89:fd:bd:8a:1a:bd:5c:fe: 38:dd:e6:32:1b:97:73:06:40:36:05:87:2f:c8:0c:6d:8b:9d: ba:da:53:d7:cc:3a:91:d0:4a:8a:4a:8d:2d:12:33:d9:b5:b4: d7:d3:79:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRDAxMTAvBgNVBAUTKDdCRDM2OTU0QzREMEMzMDVBQjRGQTFDMjI1QzBGM0Q3 MzJENjc3MTQwHhcNMjUwOTE5MDMxNzIwWhcNMjUwOTI2MDMxNzIwWjAYMRYwFAYD VQQDEw02OGNjY2I0MC01MTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNgwnf4oRgNj+K4u3hg2qpMUC685F6LHj+HDsd/snBpyv7P31FO6S8FZ8tqK LQLPg2Wrmvxi1Pz/eKqIto/ODJ9PWpopfb0oaOxtbGK0iieqVb/bNTA0xFfvUTmq KAfjTGiy/MDYp9Vhi01einvhHZIv4oXD5ynC8723h/F8WRGV6yLRCOK9jyaUcXfH sgsiUZJbhi1q3Jr3iWN0xavmbwVgAJBs34g3dsoIIW0cpcUantXDgk0lqXrsF9Gm y6ujRWPAg8009ndIKBINVRGUkaH8khp9Uw5cMm/VHQLfFNdGHG6v8KxlRAbVAwbP C7830eVebdbH6eY7PiWrYAz07wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCu1ndma iVl8djINsUZRadIuwP1DMB8GA1UdIwQYMBaAFHvTaVTE0MMFq0+hwiXA89cy1ncU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFEMC8wOTlBQTdERUND N0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3V3JUNkhDSmNEejF6TFdk eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5TnBWTVRRd3dXclQ2SENKY0R6MXpMV2R4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFEMC8wOTlBQTdERUNDN0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3 V3JUNkhDSmNEejF6TFdkeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKuCAQst+zK4uOhXtzFF4OEbCJsiFQ6SAN7AYAdcMiciDIGldV8vpo SO8j7d1Ec6ZmQ9QRyBtDuVDT7epGFAzRiLV5cxRxtMbC/zD2Fhu/RvOFg/B7Szgn nzM8tRxj05hy7luOeCUtHamXYUWT3C88e/DWCEiTOd6rTrytKg5F6TSq555n5uaz tQLv6a2yKLSFW7bvbynyoY+M2ICMS7Mpvdf9a/iV+9+e0mTufArYalRO//0fbGIA A8jC8d4T7AzEnrhhXMfdC7jn2lvoPS9jif29ihq9XP443eYyG5dzBkA2BYcvyAxt i5262lPXzDqR0EqKSo0tEjPZtbTX03lq -----END CERTIFICATE-----Generated at Fri Sep 19 07:46:10 2025 by rpki-client