$ rpki-client -vvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft File: 065iZEnDqd0Od5i86Ly7OWYqJ_8.mft (raw, json) Hash identifier: w3y/sfNa18MYrL2bezlGGa+eJ+ngkZ59910FiEEjOnY= Subject key identifier: 5F:0E:AD:71:51:C3:61:95:3C:E1:39:01:FB:8F:73:63:DF:07:4F:FC Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF Certificate issuer: /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft Manifest number: 01B9 Signing time: Fri 19 Sep 2025 03:35:08 +0000 Manifest this update: Fri 19 Sep 2025 03:35:07 +0000 Manifest next update: Fri 26 Sep 2025 03:35:07 +0000 Files and hashes: 1: 065iZEnDqd0Od5i86Ly7OWYqJ_8.crl (hash: oMh8EOmYPi43Me0UBbwvfYDou527FopvTrn6Hc/WiY4=) 2: 52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa (hash: hdoIBFcsKBcfu2ieIGwj6SsbqU4NXl1pTKHhFjI1OAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163B62, serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Validity Not Before: Sep 19 03:35:07 2025 GMT Not After : Sep 26 03:35:07 2025 GMT Subject: CN=68cccf6c-2ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:57:7e:6b:20:0a:68:8f:81:af:47:5b:2e: 0b:e8:40:44:d2:cc:2e:f1:a0:fe:34:04:be:41:39: a0:55:6a:c9:b2:8a:d0:22:c2:9b:93:4b:33:6d:28: bc:90:ab:b3:fc:4a:c8:97:f1:48:1b:01:1c:e5:9a: 44:e3:e9:0b:86:6e:2f:86:e2:36:c5:4d:ec:37:04: bb:5f:19:1a:90:81:3d:94:b3:96:61:89:0b:00:1b: 97:a3:aa:da:61:14:2c:3c:df:d9:24:a7:1f:1e:5f: ca:51:b5:97:09:bb:b1:72:67:45:60:c4:88:1e:e7: 9e:03:a0:71:69:ce:2f:d3:55:8f:fb:c3:cd:2a:a1: 61:99:b3:56:52:7d:0d:b0:22:f4:c1:f6:98:69:5b: 8d:ec:0f:70:46:dd:bf:86:e2:26:b5:cc:f7:23:98: e1:2e:3e:0d:9c:91:0e:5d:ef:f7:2a:3f:a6:06:dd: 4c:5a:2e:a6:9e:5b:b2:33:08:8c:d2:01:de:99:72: e5:af:9f:5a:c0:0f:53:38:d5:66:dd:c9:35:3c:d3: 29:0d:6d:0b:a6:90:60:c4:75:8d:c1:ae:0d:ef:23: 4d:02:d7:ea:96:0c:2c:c2:d2:79:06:a0:d9:e0:e5: 3a:af:b6:33:28:7b:57:f9:ef:e0:ad:ad:b1:c2:fb: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0E:AD:71:51:C3:61:95:3C:E1:39:01:FB:8F:73:63:DF:07:4F:FC X509v3 Authority Key Identifier: keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c3:60:c0:d9:dc:1e:f3:3d:5e:ce:94:11:68:a2:9b:af:67: 93:69:79:21:31:43:3a:2a:4f:ca:a1:5e:d0:42:85:42:0e:20: b4:36:c7:73:1f:1d:2c:62:22:e3:97:24:bb:a6:66:8c:df:8f: d6:27:b9:3e:83:13:80:ee:6b:5c:5e:5b:5d:77:85:91:f7:13: 0e:5d:92:15:19:84:bb:db:24:4f:04:3c:ea:3c:a5:e4:4a:bc: 45:2d:b9:4b:6b:4c:ba:18:00:3c:7f:26:b3:a3:08:d2:5a:d1: f3:5e:e1:92:83:45:c2:96:9e:74:f8:33:ab:c4:bd:ca:da:8e: cd:e9:0c:bb:14:bf:4b:cf:c4:79:6c:21:ad:04:d0:a4:77:51: 26:3a:5d:1c:d7:74:4f:96:a4:f2:fb:2d:f2:d1:13:91:b0:3f: 8a:3a:f7:fd:f8:1c:af:a2:d5:6a:65:22:6e:8f:3e:af:77:e7: db:3f:dc:79:61:b2:18:16:26:ff:fd:2b:12:17:e7:92:20:a6: c8:e6:85:9c:3c:bb:ba:48:66:52:19:a3:fb:33:1e:df:ad:bd: e1:99:85:a9:c8:13:24:6c:36:9e:8f:c7:87:2e:3c:0c:59:9d: 31:4f:91:17:54:6c:87:a8:5a:52:1b:ad:b1:1a:b6:27:fd:84: 3d:da:19:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCNjIxMTAvBgNVBAUTKEQzQUU2MjY0NDlDM0E5REQwRTc3OThCQ0U4QkNCQjM5 NjYyQTI3RkYwHhcNMjUwOTE5MDMzNTA3WhcNMjUwOTI2MDMzNTA3WjAYMRYwFAYD VQQDEw02OGNjY2Y2Yy0yZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9ZXfmsgCmiPga9HWy4L6EBE0swu8aD+NAS+QTmgVWrJsorQIsKbk0szbSi8 kKuz/ErIl/FIGwEc5ZpE4+kLhm4vhuI2xU3sNwS7XxkakIE9lLOWYYkLABuXo6ra YRQsPN/ZJKcfHl/KUbWXCbuxcmdFYMSIHueeA6Bxac4v01WP+8PNKqFhmbNWUn0N sCL0wfaYaVuN7A9wRt2/huImtcz3I5jhLj4NnJEOXe/3Kj+mBt1MWi6mnluyMwiM 0gHemXLlr59awA9TONVm3ck1PNMpDW0LppBgxHWNwa4N7yNNAtfqlgwswtJ5BqDZ 4OU6r7YzKHtX+e/gra2xwvvdvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8OrXFR w2GVPOE5AfuPc2PfB0/8MB8GA1UdIwQYMBaAFNOuYmRJw6ndDneYvOi8uzlmKif/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0I2Mi80RTlCNzZEMkZC RDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFkME9kNWk4Nkx5N09XWXFK XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA2NWlaRW5EcWQwT2Q1aTg2THk3T1dZcUpfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0I2Mi80RTlCNzZEMkZCRDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFk ME9kNWk4Nkx5N09XWXFKXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAew2DA2dwe8z1ezpQRaKKbr2eTaXkhMUM6Kk/KoV7QQoVCDiC0Nsdz Hx0sYiLjlyS7pmaM34/WJ7k+gxOA7mtcXltdd4WR9xMOXZIVGYS72yRPBDzqPKXk SrxFLblLa0y6GAA8fyazowjSWtHzXuGSg0XClp50+DOrxL3K2o7N6Qy7FL9Lz8R5 bCGtBNCkd1EmOl0c13RPlqTy+y3y0RORsD+KOvf9+ByvotVqZSJujz6vd+fbP9x5 YbIYFib//SsSF+eSIKbI5oWcPLu6SGZSGaP7Mx7frb3hmYWpyBMkbDaej8eHLjwM WZ0xT5EXVGyHqFpSG62xGrYn/YQ92hlf -----END CERTIFICATE-----Generated at Fri Sep 19 06:52:34 2025 by rpki-client