$ rpki-client -vvf rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft File: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft (raw, json) Hash identifier: ZwdR4RkEP5TqyxqnTfCrK/XDrRv0dzGY6h8doS/2Tjw= Subject key identifier: 40:BF:AC:9A:62:A9:7A:91:B1:AF:F8:53:0D:31:14:E3:27:7F:CB:89 Authority key identifier: 9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4 Certificate issuer: /CN=A9164DAC/serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft Manifest number: 04 Signing time: Wed 17 Sep 2025 08:56:04 +0000 Manifest this update: Wed 17 Sep 2025 08:56:03 +0000 Manifest next update: Wed 24 Sep 2025 08:56:03 +0000 Files and hashes: 1: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl (hash: fIqf6AIRrvtrmyHCG/wzzwV34l91fkKXTvv4oB/vaCU=) 2: A8AFC432909711F0BDFBAA86C4F9AE02.roa (hash: ResLExXl8yuMXGOR84bDKNTRnpa/Fbrh1BqAV2RUGhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164DAC, serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4 Validity Not Before: Sep 17 08:56:03 2025 GMT Not After : Sep 24 08:56:03 2025 GMT Subject: CN=68ca77a4-ec67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:bf:77:36:bd:29:af:cb:b4:35:fe:52:ec: 0c:44:1b:bc:3f:be:e5:da:64:9e:e9:bc:54:5a:6a: 1d:5d:8a:5e:b5:79:ab:65:87:60:72:0b:f2:98:0a: 39:01:16:d4:43:2d:1c:7c:67:99:c1:81:6e:c6:51: 55:e3:8d:48:fd:28:8a:5c:05:5f:8a:26:aa:fb:df: bc:7c:68:9b:16:3a:0c:61:1a:41:20:6d:a6:12:8b: 7f:02:ed:7e:ee:f6:82:f9:04:a8:a4:90:1c:1f:32: b3:cc:b1:d4:e7:9a:7a:ee:49:53:1d:83:e3:26:a0: 3f:ba:17:76:f6:8b:3a:f9:22:44:ba:3f:f4:91:57: 4e:c5:a8:51:e7:64:1a:01:0b:9f:58:46:99:45:5a: 98:96:44:6c:a0:f6:ad:ef:4d:1a:4f:8c:32:cd:c3: 1b:c3:91:ac:b0:4a:2c:3f:db:ce:c6:11:91:02:69: 12:e9:68:b8:3e:3b:9d:1e:dd:ab:5e:ea:91:69:13: 70:34:2e:cb:2a:e0:a3:09:c1:c4:e9:99:22:89:96: 45:f3:21:b2:b0:9c:60:79:b1:78:f1:94:11:a0:ff: c3:19:6e:2b:9b:0a:8b:76:be:57:64:0b:3d:84:88: 2b:e2:3a:2c:18:fd:08:09:e5:a7:e0:37:98:78:72: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BF:AC:9A:62:A9:7A:91:B1:AF:F8:53:0D:31:14:E3:27:7F:CB:89 X509v3 Authority Key Identifier: keyid:9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:8a:f6:64:3f:7f:d4:92:50:b2:4e:df:b5:1d:13:71:d3:61: 42:c8:c9:c1:54:84:d0:a6:21:c4:ab:8a:df:a6:7d:ce:d7:85: f2:c7:b9:3e:48:ea:0e:fc:f2:d4:41:19:4f:2c:cf:4e:fb:fb: 80:63:0a:d3:a0:7a:d0:d1:f9:df:1c:60:9d:01:fa:fe:f3:52: 8e:21:3e:05:f2:c0:f9:a4:3e:2b:19:b6:7a:28:01:73:66:2b: a2:40:bb:cc:5d:aa:03:2c:4f:1a:10:4f:2d:a0:e5:97:21:27: 80:16:d1:d9:bf:9c:23:aa:89:30:dc:24:a2:b3:81:af:7c:0f: fc:4a:5b:71:d8:9f:82:93:07:18:c1:b8:c2:69:9b:fa:35:c1: 68:ce:75:ac:37:42:96:7e:7d:6d:21:87:4c:ed:c4:0e:8d:39: e1:0b:d0:a4:4a:c1:81:d2:fc:ba:0f:f7:d6:63:6c:30:48:2a: 95:9a:20:84:5d:34:56:0e:82:b2:a9:b6:95:3e:bf:1e:52:07: dd:3e:91:6f:7c:26:2d:06:6a:a3:38:68:80:60:45:0a:a0:98: 78:dc:c2:3f:8b:b6:89:a8:1c:da:41:c1:56:1a:87:74:a6:ff: e1:26:f5:86:3c:32:04:ce:4a:d4:5f:2a:6d:f5:ce:75:96:30: 58:31:1a:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NERBQzExMC8GA1UEBRMoOUJCNkIxNEVGQjUyMjQ4RTg0QkJGQjZDODM3OUZEQUVE QjA5OUNGNDAeFw0yNTA5MTcwODU2MDNaFw0yNTA5MjQwODU2MDNaMBgxFjAUBgNV BAMTDTY4Y2E3N2E0LWVjNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4ib93Nr0pr8u0Nf5S7AxEG7w/vuXaZJ7pvFRaah1dil61eatlh2ByC/KYCjkB FtRDLRx8Z5nBgW7GUVXjjUj9KIpcBV+KJqr737x8aJsWOgxhGkEgbaYSi38C7X7u 9oL5BKikkBwfMrPMsdTnmnruSVMdg+MmoD+6F3b2izr5IkS6P/SRV07FqFHnZBoB C59YRplFWpiWRGyg9q3vTRpPjDLNwxvDkaywSiw/287GEZECaRLpaLg+O50e3ate 6pFpE3A0Lssq4KMJwcTpmSKJlkXzIbKwnGB5sXjxlBGg/8MZbiubCot2vldkCz2E iCviOiwY/QgJ5afgN5h4cjxpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQL+smmKp epGxr/hTDTEU4yd/y4kwHwYDVR0jBBgwFoAUm7axTvtSJI6Eu/tsg3n9rtsJnPQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0REFDL0RCNDgwRkI4OTA5 NjExRjA5Q0I0NjM4NUM0RjlBRTAyL203YXhUdnRTSkk2RXVfdHNnM245cnRzSm5Q US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTdheFR2dFNKSTZFdV90c2czbjlydHNKblBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 REFDL0RCNDgwRkI4OTA5NjExRjA5Q0I0NjM4NUM0RjlBRTAyL203YXhUdnRTSkk2 RXVfdHNnM245cnRzSm5QUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADeK9mQ/f9SSULJO37UdE3HTYULIycFUhNCmIcSrit+mfc7XhfLHuT5I 6g788tRBGU8sz077+4BjCtOgetDR+d8cYJ0B+v7zUo4hPgXywPmkPisZtnooAXNm K6JAu8xdqgMsTxoQTy2g5ZchJ4AW0dm/nCOqiTDcJKKzga98D/xKW3HYn4KTBxjB uMJpm/o1wWjOdaw3QpZ+fW0hh0ztxA6NOeEL0KRKwYHS/LoP99ZjbDBIKpWaIIRd NFYOgrKptpU+vx5SB90+kW98Ji0GaqM4aIBgRQqgmHjcwj+LtomoHNpBwVYah3Sm /+Em9YY8MgTOStRfKm31znWWMFgxGrI= -----END CERTIFICATE-----Generated at Fri Sep 19 02:52:27 2025 by rpki-client