$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft File: PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json) Hash identifier: xnwLcMEmiGt4zihGlqC6snd3aoZAAMTw8rNEJsCM9qI= Subject key identifier: 9A:37:E8:2F:57:B0:A1:BC:D1:8E:E5:77:02:C5:98:0B:B1:F3:86:D2 Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft Manifest number: D2 Signing time: Wed 17 Sep 2025 06:15:21 +0000 Manifest this update: Wed 17 Sep 2025 06:15:21 +0000 Manifest next update: Wed 24 Sep 2025 06:15:21 +0000 Files and hashes: 1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: hV3Of8DHobURR0Aqq63XC1mU316DBpeYHRJxqMXOXTU=) 2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: TlHlbn6q/SJJmLaIdFeAVpNRm4YQAAsTE8XrQ+CUo9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Validity Not Before: Sep 17 06:15:21 2025 GMT Not After : Sep 24 06:15:21 2025 GMT Subject: CN=68ca51f9-69a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:de:9c:ef:de:23:85:fe:8f:14:a5:eb:e3:87: 8b:24:59:5b:2d:5b:78:0c:0e:25:b3:72:96:05:ef: a9:ad:b2:b1:31:b4:35:be:2d:fa:ef:e0:16:29:77: bb:ff:28:fc:60:e8:61:97:11:0c:de:fd:39:9e:0c: 3b:ed:b3:44:a9:8d:89:68:08:db:00:d5:cd:9a:d3: 89:93:ec:bc:70:fb:c1:ca:5a:92:fa:cd:d7:d5:1b: 15:c5:d3:d5:c8:65:af:ad:94:33:6c:47:13:4d:a6: 46:6e:7b:15:d0:86:db:98:41:5b:99:7e:e9:1e:05: 6f:73:17:6a:56:34:c2:b7:35:87:4a:14:07:70:52: 91:d2:de:88:82:35:25:5e:04:29:c8:58:cc:96:ab: 81:bf:e5:9a:d4:0a:c0:96:97:ba:3c:f0:1f:e2:f4: 0b:95:58:4d:3c:69:3b:4f:4d:ab:1c:46:a7:9d:ea: 94:16:36:d6:1d:18:44:c1:01:17:29:27:8d:29:ba: b0:0a:ea:e4:98:8c:fd:35:61:fe:73:a4:12:57:0b: 0f:53:ea:ba:16:75:5a:1d:f0:0e:d0:c0:85:bd:6f: 6a:e9:76:e6:dc:c4:0e:48:4f:f0:f9:53:3b:cc:d0: f8:17:28:87:46:40:f2:4c:59:b6:64:99:75:4b:66: a8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:37:E8:2F:57:B0:A1:BC:D1:8E:E5:77:02:C5:98:0B:B1:F3:86:D2 X509v3 Authority Key Identifier: keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6b:36:7e:e5:77:6c:4c:f9:64:1c:80:d1:f3:1b:ca:80:cd: 7f:ca:34:86:c8:97:b2:fe:c5:6f:b4:48:77:27:6f:64:b3:b6: 4a:90:81:e4:9d:94:32:41:80:ed:6e:d9:82:f9:7a:6b:c3:30: ed:eb:c1:2f:df:2e:ee:cf:82:5a:47:48:9d:f6:37:90:0a:3e: f3:6f:95:db:bf:2f:c4:c3:cc:a2:29:c1:98:10:9a:2b:bf:f4: 15:bb:fc:bf:0f:14:55:07:c7:64:ad:ea:26:cd:45:6e:9b:83: 34:61:5f:53:4b:7e:3e:b3:d1:7b:51:19:3e:fd:62:5c:1a:38: 00:cf:71:c7:42:fb:93:31:2c:de:fb:e3:45:df:b4:07:15:a6: b8:db:f1:fa:42:05:f3:bf:bf:56:56:84:58:59:28:58:e2:81: 18:c8:3e:30:6d:67:79:f8:39:ab:c1:75:60:2c:11:5b:00:ea: 18:5a:da:2b:6a:92:3d:e1:c3:0f:85:81:9b:2a:5f:22:60:f8: b6:1f:a5:8e:35:71:45:21:3c:75:31:c0:57:d0:f6:34:d0:e7: 77:ec:24:9e:3f:fb:50:45:3c:66:02:ad:d8:20:94:f0:da:8c: f2:0f:39:8a:00:2c:2d:e3:44:a9:d7:49:f1:68:f9:06:b6:a8: b3:7b:c2:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKDNDQzc3OTBFMjAzNzY2NUVGNDk2MkI4MURBRDJGRDA3 RUQ0NkY4QjIwHhcNMjUwOTE3MDYxNTIxWhcNMjUwOTI0MDYxNTIxWjAYMRYwFAYD VQQDEw02OGNhNTFmOS02OWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzd6c794jhf6PFKXr44eLJFlbLVt4DA4ls3KWBe+prbKxMbQ1vi367+AWKXe7 /yj8YOhhlxEM3v05ngw77bNEqY2JaAjbANXNmtOJk+y8cPvBylqS+s3X1RsVxdPV yGWvrZQzbEcTTaZGbnsV0IbbmEFbmX7pHgVvcxdqVjTCtzWHShQHcFKR0t6IgjUl XgQpyFjMlquBv+Wa1ArAlpe6PPAf4vQLlVhNPGk7T02rHEanneqUFjbWHRhEwQEX KSeNKbqwCurkmIz9NWH+c6QSVwsPU+q6FnVaHfAO0MCFvW9q6Xbm3MQOSE/w+VM7 zND4FyiHRkDyTFm2ZJl1S2aouQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJo36C9X sKG80Y7ldwLFmAux84bSMB8GA1UdIwQYMBaAFDzHeQ4gN2Ze9JYrgdrS/QftRviy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS8wNTFDOUU2NDU0 QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1psNzBsaXVCMnRMOUItMUct TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNZDVEaUEzWmw3MGxpdUIydEw5Qi0xRy1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS8wNTFDOUU2NDU0QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1ps NzBsaXVCMnRMOUItMUctTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0azZ+5XdsTPlkHIDR8xvKgM1/yjSGyJey/sVvtEh3J29ks7ZKkIHk nZQyQYDtbtmC+XprwzDt68Ev3y7uz4JaR0id9jeQCj7zb5Xbvy/Ew8yiKcGYEJor v/QVu/y/DxRVB8dkreomzUVum4M0YV9TS34+s9F7URk+/WJcGjgAz3HHQvuTMSze ++NF37QHFaa42/H6QgXzv79WVoRYWShY4oEYyD4wbWd5+DmrwXVgLBFbAOoYWtor apI94cMPhYGbKl8iYPi2H6WONXFFITx1McBX0PY00Od37CSeP/tQRTxmAq3YIJTw 2ozyDzmKACwt40Sp10nxaPkGtqize8Lw -----END CERTIFICATE-----Generated at Thu Sep 18 20:52:14 2025 by rpki-client