$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json) Hash identifier: VqfXac4RmJzmZL2kAJMTLfM0wcuYLocBduZK12vTOIQ= Subject key identifier: E5:E2:4C:50:9C:32:CB:E6:F0:04:4A:AA:B7:3F:DF:05:E1:68:7B:39 Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 0566 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft Manifest number: 055E Signing time: Tue 16 Sep 2025 23:46:47 +0000 Manifest this update: Tue 16 Sep 2025 23:46:47 +0000 Manifest next update: Tue 23 Sep 2025 23:46:47 +0000 Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: 0TcUkyYNWqyY2WTfa772Dk7g1S6nC4qeBQObtGHAuY8=) 2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: aXSQnMlRqYHjlA+sWyHQ/h8SKDapqi9yLmH+QCm7j5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 23:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1382 (0x566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: Sep 16 23:46:47 2025 GMT Not After : Sep 23 23:46:47 2025 GMT Subject: CN=68c9f6e7-628b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:54:35:d0:dd:ad:10:80:0b:64:39:27:27: a9:69:03:c1:06:d0:78:c0:3e:c3:15:77:1f:81:0a: 17:01:61:f0:e6:cf:10:4e:a6:98:ef:13:5c:93:54: 7c:0a:ed:2c:7d:9e:ce:50:0e:aa:db:7c:7f:30:1b: 3d:c8:6e:ef:67:c0:76:27:39:94:36:23:68:62:c8: 59:d3:59:47:8c:ad:93:8b:8e:58:83:86:dd:af:6b: 45:1f:87:28:75:8b:7c:29:fd:06:79:32:cd:9a:78: c8:f9:9d:75:c1:60:1d:2e:38:1d:3c:25:03:d5:21: 73:23:6a:9a:57:ce:df:32:ce:72:66:f9:40:ef:1d: f5:a6:b6:01:47:7f:5d:78:d4:5e:d5:9a:39:0d:a8: c3:5e:21:07:10:10:0a:72:dc:94:c4:40:3e:89:0a: 64:a6:b7:21:6b:6f:c6:50:6c:e7:71:32:66:a7:56: 6c:f9:5e:f2:21:8c:f7:aa:e9:46:f0:71:8a:4d:16: d3:9d:a1:ad:a8:69:c0:41:44:3c:3d:76:0c:d1:40: 31:df:a8:e3:d0:f9:dd:71:a1:da:33:07:64:e5:6a: c1:4a:ee:5c:89:9e:2e:f1:fa:43:ab:f9:b1:ce:cb: d9:0e:ec:0b:92:01:1d:d3:0c:11:c6:a3:ba:b2:5d: ac:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E2:4C:50:9C:32:CB:E6:F0:04:4A:AA:B7:3F:DF:05:E1:68:7B:39 X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e9:df:7f:0d:3d:0f:57:4e:03:63:b8:e0:92:57:73:15:a6: 86:c9:50:83:1f:47:77:4e:58:d7:fc:50:70:2b:34:29:5e:ab: 6b:be:93:2b:e5:6d:79:be:9b:92:e3:ce:38:bf:db:da:cf:37: 44:15:5c:20:df:64:f0:0d:c2:f3:2f:7b:cf:07:83:2a:4e:e7: b7:a9:87:2d:a8:23:86:51:52:90:ac:7c:a4:32:ee:aa:06:bb: 0c:d2:a1:48:93:9b:6a:f1:35:ed:16:23:1a:7a:d0:f8:20:05: 13:5d:6d:02:6d:2a:54:1c:9f:7e:cc:1d:95:22:91:cd:ee:fd: fc:d6:c7:28:8a:23:5a:fa:f6:c8:71:47:cb:c9:2c:a7:fe:5e: 62:b5:14:2a:77:0d:c7:01:c6:a6:bb:d1:59:5f:aa:e5:25:7a: e6:f8:bf:6d:bb:21:cc:f6:04:38:63:21:ac:eb:03:2a:73:b1: 84:4c:2c:09:66:11:c2:87:ed:60:c7:2a:72:3f:e1:9f:98:e4: 16:ce:61:fb:35:d9:4d:a9:09:0c:5d:00:28:34:00:01:2a:76: 55:df:cf:7d:8f:7a:b0:b5:bf:e8:7c:ec:59:42:48:f9:a6:d8: ba:ff:09:55:41:ee:4a:fd:94:e6:22:84:ec:05:5c:3d:9d:46: e9:61:e3:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjUwOTE2MjM0NjQ3WhcNMjUwOTIzMjM0NjQ3WjAYMRYwFAYD VQQDEw02OGM5ZjZlNy02MjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytBUNdDdrRCAC2Q5JyepaQPBBtB4wD7DFXcfgQoXAWHw5s8QTqaY7xNck1R8 Cu0sfZ7OUA6q23x/MBs9yG7vZ8B2JzmUNiNoYshZ01lHjK2Ti45Yg4bdr2tFH4co dYt8Kf0GeTLNmnjI+Z11wWAdLjgdPCUD1SFzI2qaV87fMs5yZvlA7x31prYBR39d eNRe1Zo5DajDXiEHEBAKctyUxEA+iQpkprcha2/GUGzncTJmp1Zs+V7yIYz3qulG 8HGKTRbTnaGtqGnAQUQ8PXYM0UAx36jj0PndcaHaMwdk5WrBSu5ciZ4u8fpDq/mx zsvZDuwLkgEd0wwRxqO6sl2snwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXiTFCc Msvm8ARKqrc/3wXhaHs5MB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw dEVwMWx3cEUyU2tGYUpxUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf6d9/DT0PV04DY7jgkldzFaaGyVCDH0d3TljX/FBwKzQpXqtrvpMr 5W15vpuS4844v9vazzdEFVwg32TwDcLzL3vPB4MqTue3qYctqCOGUVKQrHykMu6q BrsM0qFIk5tq8TXtFiMaetD4IAUTXW0CbSpUHJ9+zB2VIpHN7v381scoiiNa+vbI cUfLySyn/l5itRQqdw3HAcamu9FZX6rlJXrm+L9tuyHM9gQ4YyGs6wMqc7GETCwJ ZhHCh+1gxypyP+GfmOQWzmH7NdlNqQkMXQAoNAABKnZV3899j3qwtb/ofOxZQkj5 pti6/wlVQe5K/ZTmIoTsBVw9nUbpYeNp -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:10 2025 by rpki-client