$ rpki-client -vvf rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft File: I3R4bofEoOw9b6TAt4TkL-4AOm0.mft (raw, json) Hash identifier: epH3lJ0KXXm4uv7aPrgFbtic+PExozmFI5R9scm3TjA= Subject key identifier: E2:83:71:0C:60:27:F2:75:48:D9:05:69:CA:71:42:0E:8E:9A:5F:EB Authority key identifier: 23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D Certificate issuer: /CN=A9157615/serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft Manifest number: 09 Signing time: Wed 17 Sep 2025 08:56:32 +0000 Manifest this update: Wed 17 Sep 2025 08:56:31 +0000 Manifest next update: Wed 24 Sep 2025 08:56:31 +0000 Files and hashes: 1: I3R4bofEoOw9b6TAt4TkL-4AOm0.crl (hash: V0jUE7wSouXmhXP7iIeORckKISX+HrAIT2JuQlnvrCE=) 2: 9F56DCE491F611F099771D3FC4F9AE02.roa (hash: MYr0RnnESBBRDJ22pf9EsF5pYGHY7f5iA1+28nEzneQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157615, serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Validity Not Before: Sep 17 08:56:31 2025 GMT Not After : Sep 24 08:56:31 2025 GMT Subject: CN=68ca77bf-ce0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:ec:f7:cb:d2:d2:51:25:0b:0a:5a:91:ef: ca:76:8f:e1:cc:1a:36:88:7a:47:b8:af:84:ce:0c: 68:b5:42:bc:df:c4:d3:cb:c2:d5:f2:56:59:07:15: a7:96:d0:89:77:c6:69:7a:9c:e4:2b:76:de:45:47: 83:ba:ca:3c:6c:6f:2e:b5:b4:b4:a1:68:61:48:e7: 38:ee:d0:90:44:54:5e:be:aa:8c:e1:85:3f:8d:f9: 67:d6:4f:72:d3:81:7f:80:76:76:ee:3b:ed:4a:ed: 2b:4f:b7:c3:b3:76:39:fd:f1:96:f4:f6:51:e4:33: 4e:87:82:ab:bb:25:8a:02:2b:f1:59:24:ee:a7:fe: 92:f5:da:ec:08:af:60:b5:c0:e9:da:21:25:f6:00: 69:4e:36:88:a1:4f:03:13:de:a5:c9:00:2f:7e:cc: f6:b0:d2:c5:0b:6a:04:b3:7a:66:f5:1e:db:9a:6c: 6d:ab:1b:41:59:a9:40:95:6d:bb:28:a5:d8:f0:7c: 06:d8:96:c1:1d:70:32:4e:02:d7:9a:ad:c0:fe:09: 9a:17:5c:9b:d7:57:ef:d9:20:fc:37:31:d6:44:9e: c9:55:da:81:cd:59:e2:97:95:4c:d9:13:a0:f4:a3: da:52:42:f0:8d:c8:7e:63:ed:cc:b8:dd:c0:87:63: cb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:83:71:0C:60:27:F2:75:48:D9:05:69:CA:71:42:0E:8E:9A:5F:EB X509v3 Authority Key Identifier: keyid:23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:4b:52:0f:a6:b2:1d:cb:ee:70:00:e9:81:7b:69:85:78:5b: 2a:37:0c:21:4b:0b:6c:e6:37:5b:e5:2a:18:d0:f5:85:81:92: e9:a6:d9:e8:bf:b0:d1:e7:34:0e:6e:d0:5d:16:51:c1:19:7e: 29:cb:bd:df:01:7d:af:79:4f:5c:4d:25:2e:f8:bc:f7:b8:e8: b5:e4:f7:ad:22:65:9b:23:9a:ba:40:35:3b:33:28:ef:21:30: 30:2c:64:62:34:38:12:a8:c7:9b:51:dd:cf:f6:ba:cb:df:9a: 4a:71:b1:78:9c:c0:bf:38:f3:55:9d:ed:e6:ed:65:13:b2:7d: b7:d0:aa:e7:a3:92:91:42:f8:49:91:7d:db:b6:7f:ba:b9:36: 76:58:8e:0a:a9:7e:02:68:39:40:12:a3:6e:c8:21:e4:af:ee: 94:6b:79:af:a4:99:67:58:99:d6:0d:e2:7b:22:9d:92:9c:08: d3:26:52:92:f9:89:3a:99:2f:17:e0:b3:e9:c0:d4:47:99:cb: 5d:15:f2:01:a6:fc:1b:4e:ae:48:3a:cf:93:74:8a:e5:00:85: a5:b8:d8:ba:bb:05:c0:2e:0e:db:b1:b1:70:53:62:da:e2:89: 65:f9:5e:84:44:0b:57:e1:98:f9:98:4c:08:e7:f9:d3:c9:9e: b1:3d:8a:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzYxNTExMC8GA1UEBRMoMjM3NDc4NkU4N0M0QTBFQzNENkZBNEMwQjc4NEU0MkZF RTAwM0E2RDAeFw0yNTA5MTcwODU2MzFaFw0yNTA5MjQwODU2MzFaMBgxFjAUBgNV BAMTDTY4Y2E3N2JmLWNlMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqpOz3y9LSUSULClqR78p2j+HMGjaIeke4r4TODGi1QrzfxNPLwtXyVlkHFaeW 0Il3xml6nOQrdt5FR4O6yjxsby61tLShaGFI5zju0JBEVF6+qozhhT+N+WfWT3LT gX+AdnbuO+1K7StPt8Ozdjn98Zb09lHkM06Hgqu7JYoCK/FZJO6n/pL12uwIr2C1 wOnaISX2AGlONoihTwMT3qXJAC9+zPaw0sULagSzemb1HtuabG2rG0FZqUCVbbso pdjwfAbYlsEdcDJOAtearcD+CZoXXJvXV+/ZIPw3MdZEnslV2oHNWeKXlUzZE6D0 o9pSQvCNyH5j7cy43cCHY8sRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4oNxDGAn 8nVI2QVpynFCDo6aX+swHwYDVR0jBBgwFoAUI3R4bofEoOw9b6TAt4TkL+4AOm0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3NjE1L0JBRjM4RThBOTFG NTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093OWI2VEF0NFRrTC00QU9t MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTNSNGJvZkVvT3c5YjZUQXQ0VGtMLTRBT20wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 NjE1L0JBRjM4RThBOTFGNTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093 OWI2VEF0NFRrTC00QU9tMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJJLUg+msh3L7nAA6YF7aYV4Wyo3DCFLC2zmN1vlKhjQ9YWBkumm2ei/ sNHnNA5u0F0WUcEZfinLvd8Bfa95T1xNJS74vPe46LXk960iZZsjmrpANTszKO8h MDAsZGI0OBKox5tR3c/2usvfmkpxsXicwL8481Wd7ebtZROyfbfQquejkpFC+EmR fdu2f7q5NnZYjgqpfgJoOUASo27IIeSv7pRrea+kmWdYmdYN4nsinZKcCNMmUpL5 iTqZLxfgs+nA1EeZy10V8gGm/BtOrkg6z5N0iuUAhaW42Lq7BcAuDtuxsXBTYtri iWX5XoREC1fhmPmYTAjn+dPJnrE9ivs= -----END CERTIFICATE-----Generated at Fri Sep 19 00:44:08 2025 by rpki-client