$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json) Hash identifier: LS+kSRVmBJ5QpC2BSNHS5+cUZ7bwmZW62ccRfQW3fvs= Subject key identifier: 7A:36:94:18:DC:BA:64:97:F0:86:A8:A3:55:0B:25:FB:CF:E8:C9:41 Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft Manifest number: 0107 Signing time: Tue 09 Sep 2025 05:07:52 +0000 Manifest this update: Tue 09 Sep 2025 05:07:52 +0000 Manifest next update: Tue 16 Sep 2025 05:07:52 +0000 Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: PcwqW+9yO2hy9jY0G3Bn15I/SXdLnIm/yXE5XtuTNp8=) 2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: /piRZvXAAsh1mpg66Okc/aC7aZTe1kUD5ojc4AIc6UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Validity Not Before: Sep 9 05:07:52 2025 GMT Not After : Sep 16 05:07:52 2025 GMT Subject: CN=68bfb628-722c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:57:66:28:a8:31:44:bf:66:8a:10:47:1f: 6c:b0:06:f1:65:96:26:c3:16:e2:a3:c8:80:11:d1: 71:0b:ba:92:40:78:86:01:91:b7:f6:d4:1f:66:98: 41:1a:c2:3e:c4:6b:53:2d:1b:35:23:62:04:cc:d9: ef:da:61:80:22:db:8d:06:97:15:f5:3f:66:b6:21: 7c:19:9a:5d:16:67:73:b9:25:41:e0:26:22:83:9e: 52:60:e7:81:0e:26:cc:b3:f9:ed:2f:50:99:7e:c7: e7:98:2b:d1:1d:e8:47:8a:90:25:fb:60:f1:50:a9: 7c:47:64:9f:b0:fa:a8:8e:a7:d4:b3:c4:21:aa:26: af:8b:e0:cd:92:a0:be:fe:6e:93:7e:f1:03:ee:b1: 7b:b3:ba:17:c7:e6:28:66:10:1a:1a:ff:1d:db:b2: f5:e3:10:cb:c1:2a:96:22:ea:1a:4c:ce:d1:17:b8: e7:af:96:e9:78:26:96:4a:82:d1:91:b6:d2:a9:b0: d2:94:ff:2d:0c:19:33:38:48:c3:40:9e:65:17:70: 19:0b:29:94:03:a8:d5:2c:e2:68:81:3c:fa:88:ea: 5d:1f:42:1e:97:c4:a1:22:fc:7e:4a:c3:c6:eb:ca: 0f:38:17:c1:70:d1:31:f1:dd:68:ec:0b:59:2a:31: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:36:94:18:DC:BA:64:97:F0:86:A8:A3:55:0B:25:FB:CF:E8:C9:41 X509v3 Authority Key Identifier: keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:cc:61:a5:c4:74:cd:d3:0e:b1:3a:85:31:d3:07:e1:16:b3: af:6d:77:45:d0:a0:1d:a3:7c:34:8d:5c:c5:41:e4:43:35:54: 9c:99:e5:ee:ca:9c:98:b7:e6:cb:9d:29:5f:c8:20:8f:16:77: c2:fa:dc:d3:6c:5a:ce:5d:1a:0a:ba:0a:7a:22:84:e7:d1:d3: de:81:8a:67:d3:1e:6b:8b:54:8f:2d:20:a9:a9:db:b6:f0:cd: 36:70:8b:ed:28:f9:e1:58:03:5f:9e:eb:3a:10:65:16:63:9c: 2d:13:59:8b:bc:4c:f7:10:3a:bf:2c:32:f6:85:8c:eb:14:56: d0:22:d8:b5:50:f1:38:b0:9c:ff:82:28:f9:b8:cd:85:ee:cd: f4:76:f2:47:3f:18:4e:af:5f:13:17:1f:f7:99:71:d8:e0:6a: f5:85:58:3d:1c:ea:cd:cb:3d:0e:94:42:8f:85:f4:1b:8a:4f: 78:9b:1b:03:25:73:74:02:82:78:2b:6a:9e:08:b4:c2:e4:35: 4b:79:97:a6:02:69:85:db:03:03:71:ef:cd:80:e8:e3:f7:a7: ae:e4:36:e4:73:80:08:89:e1:9a:fe:33:d6:0f:53:f0:91:fa: f0:a9:cd:29:7a:a7:97:92:56:6f:78:cc:01:c6:15:b4:e1:4f: 5f:88:31:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDBCREJBQzE1MjI1RjFCRjlCNjE0QjJBMzQ3QTFCOTZD NEEwRjk2OUMwHhcNMjUwOTA5MDUwNzUyWhcNMjUwOTE2MDUwNzUyWjAYMRYwFAYD VQQDEw02OGJmYjYyOC03MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRNXZiioMUS/ZooQRx9ssAbxZZYmwxbio8iAEdFxC7qSQHiGAZG39tQfZphB GsI+xGtTLRs1I2IEzNnv2mGAItuNBpcV9T9mtiF8GZpdFmdzuSVB4CYig55SYOeB DibMs/ntL1CZfsfnmCvRHehHipAl+2DxUKl8R2SfsPqojqfUs8Qhqiavi+DNkqC+ /m6TfvED7rF7s7oXx+YoZhAaGv8d27L14xDLwSqWIuoaTM7RF7jnr5bpeCaWSoLR kbbSqbDSlP8tDBkzOEjDQJ5lF3AZCymUA6jVLOJogTz6iOpdH0Iel8ShIvx+SsPG 68oPOBfBcNEx8d1o7AtZKjHW9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHo2lBjc umSX8Iaoo1ULJfvP6MlBMB8GA1UdIwQYMBaAFAvbrBUiXxv5thSyo0ehuWxKD5ac MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80RjQ4MUFDOEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdfbTJGTEtqUjZHNWJFb1Bs cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5dXNGU0pmR19tMkZMS2pSNkc1YkVvUGxwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80RjQ4MUFDOEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdf bTJGTEtqUjZHNWJFb1BscHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1zGGlxHTN0w6xOoUx0wfhFrOvbXdF0KAdo3w0jVzFQeRDNVScmeXu ypyYt+bLnSlfyCCPFnfC+tzTbFrOXRoKugp6IoTn0dPegYpn0x5ri1SPLSCpqdu2 8M02cIvtKPnhWANfnus6EGUWY5wtE1mLvEz3EDq/LDL2hYzrFFbQIti1UPE4sJz/ gij5uM2F7s30dvJHPxhOr18TFx/3mXHY4Gr1hVg9HOrNyz0OlEKPhfQbik94mxsD JXN0AoJ4K2qeCLTC5DVLeZemAmmF2wMDce/NgOjj96eu5Dbkc4AIieGa/jPWD1Pw kfrwqc0peqeXklZveMwBxhW04U9fiDFV -----END CERTIFICATE-----Generated at Tue Sep 9 13:17:29 2025 by rpki-client