$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json) Hash identifier: K2hlm/RMecwTXpYBKuJhgq/MBtvaJVYoQZBXdHhGRiU= Subject key identifier: 8B:A3:0E:56:95:A4:07:F7:88:CC:95:AA:7E:67:9D:32:24:33:B4:74 Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0CF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft Manifest number: 0CD9 Signing time: Wed 10 Sep 2025 18:16:03 +0000 Manifest this update: Wed 10 Sep 2025 18:16:01 +0000 Manifest next update: Wed 17 Sep 2025 18:16:01 +0000 Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: D7sumEuDeqMv6BAgzlBZ37s/dTFcCb4CYaWyukxD14U=) 2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: HUKn8TCAiBNnvKqCcCok66Nsu0wRIivvDnUfIyEmyBw=) 3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: +UszTokGWITuaKodHVqtXowS/kPpAyLOoDwxxniGhh8=) 4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: va4jKyvaWBHSOXW9lhNLFk3dXPhiBg3Z1DqKqXpZves=) 5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: PI+4io6zs54SvjfIWW1YmDzNzGjU5q2yfd6LaVWJgGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 18:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: Sep 10 18:16:01 2025 GMT Not After : Sep 17 18:16:01 2025 GMT Subject: CN=68c1c062-53dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:87:32:57:6a:10:de:9a:35:77:b1:f3:51: ac:53:db:b0:84:56:69:9a:b3:a4:5b:f9:d4:7b:a4: b1:cf:20:d3:e2:3c:74:5b:ec:da:12:d3:23:6d:fb: ec:28:32:cb:f7:ca:5d:c6:14:9c:ad:76:49:26:ed: b1:66:eb:1b:a9:bb:5e:03:22:4f:87:7f:54:1a:39: 13:e7:c5:7e:7b:e8:22:0c:83:fc:3e:84:0a:6b:74: b1:5f:8c:1d:f0:6d:9e:e6:f4:39:ad:4c:fa:4f:63: c6:13:93:5e:8f:ca:92:79:40:cc:4b:21:08:76:e1: 78:23:17:33:32:eb:72:ae:2d:95:94:32:d4:36:42: 9d:f2:c0:56:12:33:8b:39:f8:e5:0c:56:59:98:7e: 6b:d3:4c:06:73:0e:d0:b6:8f:62:e6:f4:2c:73:73: 69:59:20:23:bb:2e:a4:30:6d:be:6b:e5:15:be:4b: 87:cd:fe:b0:53:7f:2e:75:b3:89:71:9f:b2:ab:b3: fc:d9:34:db:ca:9f:7f:2e:9b:e0:f7:48:31:4d:5c: 38:79:84:87:fa:9b:0f:f1:bb:24:89:71:c9:16:92: ab:b3:e5:42:5d:38:4a:30:a5:2c:05:ad:1f:b5:bb: 49:b0:54:7d:c4:f2:2a:52:03:e3:00:f1:37:20:e0: e0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A3:0E:56:95:A4:07:F7:88:CC:95:AA:7E:67:9D:32:24:33:B4:74 X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0d:f3:2d:4d:70:67:fb:38:19:c9:fe:10:6f:ec:81:0e:34: cd:82:f2:a4:3d:76:1b:fe:e9:3f:ad:2d:d2:a5:69:6a:26:6e: 80:ce:53:60:69:82:ba:ad:6f:18:2f:9e:ba:11:29:d4:4c:f7: a5:99:d2:9d:98:d0:73:76:cd:de:b4:89:64:12:a6:34:b6:30: 83:29:57:3c:83:13:54:ba:56:89:f9:96:bc:66:0f:77:17:b2: e9:9c:0c:4f:29:e0:1a:60:15:a4:38:14:1a:a5:60:98:13:ce: 3a:96:d8:24:25:e2:97:4b:8f:18:f3:17:5f:27:31:e2:d8:1d: cd:35:bf:0e:b1:47:1c:fa:0f:d8:71:ee:f5:32:59:cb:d7:68: 17:a3:62:47:66:b1:2b:31:9d:2a:51:d8:ef:a5:d0:9a:af:8a: e3:0c:24:3f:e0:e6:67:84:4a:90:93:3e:d0:f4:51:72:d6:57: ea:57:67:90:75:9f:46:4e:b9:8f:16:4b:7a:8e:ff:cc:75:30: 8d:f4:40:1d:e7:5c:e0:59:9d:03:3e:b4:33:9a:ee:f2:b6:23: cb:8f:06:6c:d1:49:8d:35:7a:0f:d0:cc:32:48:14:e8:d4:9a: 86:67:1f:cc:12:03:ca:f4:c7:f7:7e:3e:13:97:5d:6c:e5:f0: 73:f6:ea:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjUwOTEwMTgxNjAxWhcNMjUwOTE3MTgxNjAxWjAYMRYwFAYD VQQDEw02OGMxYzA2Mi01M2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1y2HMldqEN6aNXex81GsU9uwhFZpmrOkW/nUe6SxzyDT4jx0W+zaEtMjbfvs KDLL98pdxhScrXZJJu2xZusbqbteAyJPh39UGjkT58V+e+giDIP8PoQKa3SxX4wd 8G2e5vQ5rUz6T2PGE5Nej8qSeUDMSyEIduF4IxczMutyri2VlDLUNkKd8sBWEjOL OfjlDFZZmH5r00wGcw7Qto9i5vQsc3NpWSAjuy6kMG2+a+UVvkuHzf6wU38udbOJ cZ+yq7P82TTbyp9/Lpvg90gxTVw4eYSH+psP8bskiXHJFpKrs+VCXThKMKUsBa0f tbtJsFR9xPIqUgPjAPE3IODggwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIujDlaV pAf3iMyVqn5nnTIkM7R0MB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0 NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKDfMtTXBn+zgZyf4Qb+yBDjTNgvKkPXYb/uk/rS3SpWlqJm6AzlNg aYK6rW8YL566ESnUTPelmdKdmNBzds3etIlkEqY0tjCDKVc8gxNUulaJ+Za8Zg93 F7LpnAxPKeAaYBWkOBQapWCYE846ltgkJeKXS48Y8xdfJzHi2B3NNb8OsUcc+g/Y ce71MlnL12gXo2JHZrErMZ0qUdjvpdCar4rjDCQ/4OZnhEqQkz7Q9FFy1lfqV2eQ dZ9GTrmPFkt6jv/MdTCN9EAd51zgWZ0DPrQzmu7ytiPLjwZs0UmNNXoP0MwySBTo 1JqGZx/MEgPK9Mf3fj4Tl11s5fBz9upN -----END CERTIFICATE-----Generated at Thu Sep 11 10:58:05 2025 by rpki-client