$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json) Hash identifier: n3Cd0Vhm+URPcHONYvI2g67kSVs++OzhmKtv3JXPTVA= Subject key identifier: DE:4D:AF:21:70:3F:E5:61:5A:73:65:5C:0D:53:A1:9A:B0:E4:25:A7 Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft Manifest number: 9E Signing time: Tue 09 Sep 2025 06:24:47 +0000 Manifest this update: Tue 09 Sep 2025 06:24:46 +0000 Manifest next update: Tue 16 Sep 2025 06:24:46 +0000 Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: AwSONQdvJ9/Fqituij48XewMBsP+fq9hil2Sm3v0cMs=) 2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: 3ye2avJW3DGdXLpGllemApGuBs5Hg/Dy3+TFvLk8rE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Validity Not Before: Sep 9 06:24:46 2025 GMT Not After : Sep 16 06:24:46 2025 GMT Subject: CN=68bfc82f-3014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:f0:8c:01:f8:c6:cc:29:c8:c2:ae:8a:3d: 6b:e6:7b:01:07:15:17:3f:34:2c:08:2e:a1:49:73: 9d:b0:01:19:a2:84:4a:1b:bc:89:11:72:29:9b:8f: ae:b4:5d:4e:76:5f:7e:dd:f3:c1:7b:17:12:3a:87: 52:03:17:ff:46:dd:fd:be:f1:95:ba:e3:10:73:f9: 24:81:0c:44:e5:b6:47:e9:06:20:0b:f9:9e:ba:c0: f6:28:34:ba:fa:74:71:d0:83:12:c9:34:61:0f:62: 97:2d:1c:03:3a:6d:91:12:d0:80:bc:94:53:3a:87: 32:33:0f:61:51:77:d0:59:4d:22:7b:83:cb:da:d3: bb:ca:aa:03:e4:9a:60:e8:89:8b:a5:a8:67:ea:f2: c8:73:73:65:c7:23:6c:8c:fa:9b:6a:f5:9d:2b:ab: df:18:00:08:50:ea:3e:e8:e7:e3:b6:12:2a:a8:82: d9:00:54:69:98:29:ca:80:f4:8c:9a:2a:31:80:94: 23:19:a2:57:c9:e4:e0:e2:4b:c2:66:cf:62:3e:c9: 3f:03:e6:ec:76:05:c9:28:76:e2:5e:5b:22:98:1a: 35:e1:b9:21:b2:61:0f:0f:1a:ea:df:8d:03:0d:dd: f4:27:f2:09:99:49:f1:fd:f1:2c:1d:5e:48:10:54: 2d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4D:AF:21:70:3F:E5:61:5A:73:65:5C:0D:53:A1:9A:B0:E4:25:A7 X509v3 Authority Key Identifier: keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:d7:88:6e:08:58:2f:7a:2b:d8:26:d3:74:c4:97:0f:ad:39: 1a:34:28:9c:4e:4e:6b:17:f3:f4:77:a0:35:2e:ea:a6:44:4c: 6a:f1:c4:6a:8d:a0:30:7f:13:99:ce:79:51:83:82:b9:0d:ec: db:d5:37:50:17:1c:15:44:06:5f:10:ad:89:de:25:f0:70:82: 43:07:f8:86:b6:29:7c:e9:b8:a7:a2:02:0f:0c:da:57:fa:a0: 98:6e:84:59:00:9a:cd:8d:89:eb:ff:22:4f:94:3c:4b:c6:b2: 74:46:4e:04:ea:f6:bc:60:07:5c:bb:68:eb:78:c5:a1:0d:fc: 9f:62:8c:81:54:17:16:0d:75:88:d9:48:fb:cc:79:5a:08:b6: 0f:04:36:fe:26:f5:b6:fc:39:30:82:1d:1e:b0:ee:a8:01:9b: 8c:40:da:42:f6:ac:f8:82:ae:a1:b6:8b:8f:20:8b:ac:e5:f8: 84:c8:46:8d:95:6a:ec:cf:a2:2d:e6:4f:bb:bf:46:66:fb:7b: 25:d4:f3:2c:c8:4b:da:f4:9d:6d:b2:3f:f9:1a:b8:a1:19:b7: 3c:46:b3:72:7c:86:fe:75:1e:88:a1:0f:85:7e:79:a2:bf:23: e3:25:27:bd:f6:99:79:b1:f2:86:f0:45:a0:1d:2e:43:25:a5: b4:62:08:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBNDYxMTAvBgNVBAUTKEFDMjhEQzJBNTU0QjRFMzM5QTM5OUM5NjQyQjRDRTAy NjhBOERGQjAwHhcNMjUwOTA5MDYyNDQ2WhcNMjUwOTE2MDYyNDQ2WjAYMRYwFAYD VQQDEw02OGJmYzgyZi0zMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh/wjAH4xswpyMKuij1r5nsBBxUXPzQsCC6hSXOdsAEZooRKG7yJEXIpm4+u tF1Odl9+3fPBexcSOodSAxf/Rt39vvGVuuMQc/kkgQxE5bZH6QYgC/meusD2KDS6 +nRx0IMSyTRhD2KXLRwDOm2REtCAvJRTOocyMw9hUXfQWU0ie4PL2tO7yqoD5Jpg 6ImLpahn6vLIc3NlxyNsjPqbavWdK6vfGAAIUOo+6OfjthIqqILZAFRpmCnKgPSM mioxgJQjGaJXyeTg4kvCZs9iPsk/A+bsdgXJKHbiXlsimBo14bkhsmEPDxrq340D Dd30J/IJmUnx/fEsHV5IEFQtxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5NryFw P+VhWnNlXA1ToZqw5CWnMB8GA1UdIwQYMBaAFKwo3CpVS04zmjmclkK0zgJoqN+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9EQkRBMkNDNDlD MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRqT2FPWnlXUXJUT0FtaW8z N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE0Ni9EQkRBMkNDNDlDMTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRq T2FPWnlXUXJUT0FtaW8zN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ14huCFgveivYJtN0xJcPrTkaNCicTk5rF/P0d6A1LuqmRExq8cRq jaAwfxOZznlRg4K5Dezb1TdQFxwVRAZfEK2J3iXwcIJDB/iGtil86binogIPDNpX +qCYboRZAJrNjYnr/yJPlDxLxrJ0Rk4E6va8YAdcu2jreMWhDfyfYoyBVBcWDXWI 2Uj7zHlaCLYPBDb+JvW2/Dkwgh0esO6oAZuMQNpC9qz4gq6htouPIIus5fiEyEaN lWrsz6It5k+7v0Zm+3sl1PMsyEva9J1tsj/5GrihGbc8RrNyfIb+dR6IoQ+Ffnmi vyPjJSe99pl5sfKG8EWgHS5DJaW0YggL -----END CERTIFICATE-----Generated at Tue Sep 9 13:19:50 2025 by rpki-client