$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft File: b0XbXSi7uaZT-C0c94J6WYN2RfM.mft (raw, json) Hash identifier: VvXn55Ocx1xcK62OO7+EMzOJjWsj1cwPDJgJE1vJYdk= Subject key identifier: 4E:4A:5B:82:68:93:3B:05:D9:D8:8B:A8:EC:A1:49:F9:10:BA:E2:F7 Authority key identifier: 6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3 Certificate issuer: /CN=A9159309/serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft Manifest number: 23 Signing time: Wed 17 Sep 2025 08:36:10 +0000 Manifest this update: Wed 17 Sep 2025 08:36:09 +0000 Manifest next update: Wed 24 Sep 2025 08:36:09 +0000 Files and hashes: 1: b0XbXSi7uaZT-C0c94J6WYN2RfM.crl (hash: kMbb0V6xObUfzwdp1jNUmmLr7EN10dUcWw3mvzraXpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3 Validity Not Before: Sep 17 08:36:09 2025 GMT Not After : Sep 24 08:36:09 2025 GMT Subject: CN=68ca72f9-3846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:40:4f:b0:16:6b:b3:1a:21:43:cd:71:17: 5f:bd:78:b7:30:f1:4b:9b:de:b5:70:6c:87:ce:eb: c2:08:69:c4:1a:03:3c:d8:32:a0:b6:93:81:79:e6: 97:4f:b4:e2:be:6a:f0:b0:ba:1c:7e:fc:b6:22:e5: 83:d3:43:f6:5e:02:44:5e:b4:5c:42:19:3a:8b:61: 20:4c:a1:b4:58:8e:06:20:38:22:35:68:5e:43:cf: a1:73:28:76:5a:1f:34:e9:0c:cb:d0:57:24:6d:c9: 2f:62:f4:1a:bf:49:05:11:89:e9:34:8a:27:4e:04: a7:ac:55:df:44:15:94:1f:3b:00:1c:0e:3b:25:60: 9d:2d:45:c2:5e:5d:2f:bb:8c:35:e5:57:b1:a3:96: 5b:c3:8a:a8:83:8e:e9:0e:c6:80:2f:ba:a0:59:73: f2:88:2c:6b:c2:16:ee:66:fc:66:cb:a8:7e:f6:28: 6b:1d:68:b6:a6:8c:68:cb:da:f9:b8:fd:59:bc:d9: 1a:23:68:33:6b:aa:ca:2a:15:fd:72:55:46:1c:d3: b9:27:1d:dd:48:d5:9e:2d:ba:7f:2c:61:3d:1c:8b: 0f:04:b2:3e:08:4d:ae:7f:70:31:39:d7:c9:bc:06: 21:91:4f:bc:ca:b3:da:76:6e:df:bc:b3:d4:9d:d5: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4A:5B:82:68:93:3B:05:D9:D8:8B:A8:EC:A1:49:F9:10:BA:E2:F7 X509v3 Authority Key Identifier: keyid:6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:0d:8e:87:df:4d:88:b0:8a:ce:ab:be:83:5a:a5:99:d5:8a: 0f:2f:56:4f:ed:de:ba:f1:e8:6d:81:be:6f:f7:63:dc:af:d9: 3a:41:70:ed:97:50:5e:6e:05:9a:84:21:de:96:8c:ac:50:ef: b7:7e:28:4a:08:c7:9a:5d:5d:39:f5:ac:f1:59:8b:91:5a:21: 63:76:6b:c4:6b:8a:f2:8b:d8:cf:2e:e8:04:94:fe:8d:26:1d: da:e7:d6:60:23:c2:db:7e:66:5e:7c:d2:ce:42:67:fe:0a:71: 4c:87:1d:30:2f:8b:7c:ad:f3:dd:e0:10:cd:20:c8:02:49:7a: 4a:bc:f8:6b:8a:73:a4:f6:70:93:96:79:7e:6f:ef:67:7a:db: 5b:33:b3:2d:74:18:5f:52:8f:16:0e:61:ee:78:8b:1a:7f:a1: 9c:21:e0:5d:32:3b:6b:a7:1d:12:43:17:c9:17:5a:e7:55:e9: d1:30:8b:4d:2b:5b:ed:37:66:23:9b:e1:5f:36:7c:dd:a9:3d: 20:f5:64:f9:30:9d:59:cf:b8:9a:0d:f9:62:39:af:e4:82:3c: 33:65:4a:38:3a:d0:0a:19:5c:bb:ed:d1:c6:14:11:61:e7:57: 2a:94:df:d4:3a:3f:14:46:59:01:f9:5a:07:12:ed:f3:55:06: 48:a3:87:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTMwOTExMC8GA1UEBRMoNkY0NURCNUQyOEJCQjlBNjUzRjgyRDFDRjc4MjdBNTk4 Mzc2NDVGMzAeFw0yNTA5MTcwODM2MDlaFw0yNTA5MjQwODM2MDlaMBgxFjAUBgNV BAMTDTY4Y2E3MmY5LTM4NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL5UBPsBZrsxohQ81xF1+9eLcw8Uub3rVwbIfO68IIacQaAzzYMqC2k4F55pdP tOK+avCwuhx+/LYi5YPTQ/ZeAkRetFxCGTqLYSBMobRYjgYgOCI1aF5Dz6FzKHZa HzTpDMvQVyRtyS9i9Bq/SQURiek0iidOBKesVd9EFZQfOwAcDjslYJ0tRcJeXS+7 jDXlV7GjllvDiqiDjukOxoAvuqBZc/KILGvCFu5m/GbLqH72KGsdaLamjGjL2vm4 /Vm82RojaDNrqsoqFf1yVUYc07knHd1I1Z4tun8sYT0ciw8Esj4ITa5/cDE518m8 BiGRT7zKs9p2bt+8s9Sd1eOvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTkpbgmiT OwXZ2Iuo7KFJ+RC64vcwHwYDVR0jBBgwFoAUb0XbXSi7uaZT+C0c94J6WYN2RfMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5MzA5L0EyN0I4QkZDNjEz RDExRjBCMDM2QjgzNkM0RjlBRTAyL2IwWGJYU2k3dWFaVC1DMGM5NEo2V1lOMlJm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjBYYlhTaTd1YVpULUMwYzk0SjZXWU4yUmZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 MzA5L0EyN0I4QkZDNjEzRDExRjBCMDM2QjgzNkM0RjlBRTAyL2IwWGJYU2k3dWFa VC1DMGM5NEo2V1lOMlJmTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMQNjoffTYiwis6rvoNapZnVig8vVk/t3rrx6G2Bvm/3Y9yv2TpBcO2X UF5uBZqEId6WjKxQ77d+KEoIx5pdXTn1rPFZi5FaIWN2a8RrivKL2M8u6ASU/o0m Hdrn1mAjwtt+Zl580s5CZ/4KcUyHHTAvi3yt893gEM0gyAJJekq8+GuKc6T2cJOW eX5v72d621szsy10GF9SjxYOYe54ixp/oZwh4F0yO2unHRJDF8kXWudV6dEwi00r W+03ZiOb4V82fN2pPSD1ZPkwnVnPuJoN+WI5r+SCPDNlSjg60AoZXLvt0cYUEWHn VyqU39Q6PxRGWQH5WgcS7fNVBkijh2U= -----END CERTIFICATE-----Generated at Fri Sep 19 02:49:08 2025 by rpki-client