$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft File: vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json) Hash identifier: /QP2GBh5JmXdPlcGJjTKNeupJJBhlXUpIYg8TH6DpqY= Subject key identifier: 9B:30:AA:E0:07:09:78:E7:FA:8B:31:FB:E0:63:27:0A:FF:43:C6:87 Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 Certificate issuer: /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Certificate serial: 1B37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft Manifest number: 1B2C Signing time: Thu 18 Sep 2025 16:24:20 +0000 Manifest this update: Thu 18 Sep 2025 16:24:19 +0000 Manifest next update: Thu 25 Sep 2025 16:24:19 +0000 Files and hashes: 1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: W/KUqx3m84vsVspAgX4rBBLAjWS9Tx1o+qKzBmBeces=) 2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: XfYeKxfatX6id5bBv2XHc88RkA9A8XtPbM07HmC0bY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6967 (0x1b37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Validity Not Before: Sep 18 16:24:19 2025 GMT Not After : Sep 25 16:24:19 2025 GMT Subject: CN=68cc3233-3e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:da:21:8b:d5:2b:16:5d:57:79:b4:92:19:18: 5a:bf:ec:81:30:f7:f3:77:f6:c0:88:b4:09:3d:27: 21:7e:fd:eb:a1:e0:80:56:5f:3d:2e:8a:0a:ab:8b: 8a:e1:9d:67:7c:4b:d4:39:8b:88:6b:25:44:2e:f8: 5c:87:b8:65:b3:7f:df:38:81:0e:ff:fd:df:8c:67: b1:3e:90:04:52:38:6d:65:d5:83:e7:e0:b5:51:4b: 47:1b:2d:af:68:46:6a:0b:50:0c:1d:f1:91:15:90: 78:26:f3:98:57:be:40:d1:3b:fc:0f:c2:05:2c:16: c9:ad:bc:5b:a5:0e:4d:87:a2:aa:8a:16:43:f6:09: f7:d3:ea:e9:b6:e4:b1:2e:db:91:70:11:14:f9:35: 23:86:75:3c:c6:36:5d:3b:49:57:32:32:4a:fb:b8: c6:02:49:a9:97:28:23:22:a9:b1:0a:b4:90:28:fa: 49:fa:7d:61:4f:4f:88:df:a4:bf:ae:50:bc:5a:60: be:1f:b2:02:c3:ed:c0:48:f3:8d:71:24:85:1f:a2: 5b:8d:df:40:d7:87:d3:cc:4d:45:1c:61:bf:6a:da: 65:2f:e3:ea:86:d0:d7:e5:3d:97:4d:d6:22:b6:47: f3:17:6a:71:34:f0:37:ef:57:78:dc:a7:ed:01:46: 46:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:30:AA:E0:07:09:78:E7:FA:8B:31:FB:E0:63:27:0A:FF:43:C6:87 X509v3 Authority Key Identifier: keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:b4:a9:8c:50:72:e8:0d:3a:41:b5:e5:fe:31:7c:68:52:b2: 2f:20:85:c5:ca:2c:c3:3b:32:df:48:b4:8c:03:f3:99:15:cc: a3:9e:1c:4f:5e:d7:5d:c1:ab:eb:e4:a5:56:d3:ec:c4:90:99: b3:28:0c:1f:5f:5d:6a:f4:41:ff:67:31:59:1d:72:27:e7:b6: 0c:02:84:87:48:84:80:d4:96:83:ae:23:e7:09:9b:2d:9a:44: 6a:6f:8a:32:7a:7c:ad:04:85:8d:74:19:f5:60:0b:fb:90:d8: f8:19:c5:a8:d0:fb:b2:23:74:9d:4a:41:b7:b7:01:c8:a2:4e: 86:4c:50:a0:a3:8c:7e:c2:96:0d:c0:28:8c:58:9e:58:98:23: 35:19:7c:f9:40:fd:e5:36:2e:e9:ca:53:93:95:b6:84:5b:30: d6:76:d1:95:97:a1:77:d1:7c:19:03:28:97:9b:42:fd:10:90: ea:af:0c:4f:a7:0a:10:30:e6:3e:a0:89:f9:16:9e:cf:21:fb: 5b:c1:36:22:8a:26:a6:a5:6c:6b:49:64:17:f9:8c:ea:96:16: f2:f6:80:b8:0a:44:75:48:81:f9:b0:71:b3:b9:46:f6:6f:35: e1:e2:9b:2d:83:56:9c:84:a0:3d:82:7e:f6:fa:b7:51:29:83: c9:20:61:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NkQxMTAvBgNVBAUTKEJEOEY1MzgxRTE4OEU0NTgwRkIyNDcyQzI3MUEwNTQy OUUyRDVDMjIwHhcNMjUwOTE4MTYyNDE5WhcNMjUwOTI1MTYyNDE5WjAYMRYwFAYD VQQDEw02OGNjMzIzMy0zZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Nohi9UrFl1XebSSGRhav+yBMPfzd/bAiLQJPSchfv3roeCAVl89LooKq4uK 4Z1nfEvUOYuIayVELvhch7hls3/fOIEO//3fjGexPpAEUjhtZdWD5+C1UUtHGy2v aEZqC1AMHfGRFZB4JvOYV75A0Tv8D8IFLBbJrbxbpQ5Nh6KqihZD9gn30+rptuSx LtuRcBEU+TUjhnU8xjZdO0lXMjJK+7jGAkmplygjIqmxCrSQKPpJ+n1hT0+I36S/ rlC8WmC+H7ICw+3ASPONcSSFH6Jbjd9A14fTzE1FHGG/atplL+PqhtDX5T2XTdYi tkfzF2pxNPA371d43KftAUZGbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJswquAH CXjn+osx++BjJwr/Q8aHMB8GA1UdIwQYMBaAFL2PU4HhiORYD7JHLCcaBUKeLVwi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY2RC8xRUIwOTI1NDIz MzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVGZ1Bza2NzSnhvRlFwNHRY Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZOVRnZUdJNUZnUHNrY3NKeG9GUXA0dFhDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY2RC8xRUIwOTI1NDIzMzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVG Z1Bza2NzSnhvRlFwNHRYQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVtKmMUHLoDTpBteX+MXxoUrIvIIXFyizDOzLfSLSMA/OZFcyjnhxP Xtddwavr5KVW0+zEkJmzKAwfX11q9EH/ZzFZHXIn57YMAoSHSISA1JaDriPnCZst mkRqb4oyenytBIWNdBn1YAv7kNj4GcWo0PuyI3SdSkG3twHIok6GTFCgo4x+wpYN wCiMWJ5YmCM1GXz5QP3lNi7pylOTlbaEWzDWdtGVl6F30XwZAyiXm0L9EJDqrwxP pwoQMOY+oIn5Fp7PIftbwTYiiiampWxrSWQX+Yzqlhby9oC4CkR1SIH5sHGzuUb2 bzXh4pstg1achKA9gn72+rdRKYPJIGHj -----END CERTIFICATE-----Generated at Fri Sep 19 02:28:37 2025 by rpki-client