$ rpki-client -vvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft File: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft (raw, json) Hash identifier: tHb/CFo4kV4GNnWS81odIgXQVkbN7LyXQpMVinm93Dc= Subject key identifier: 41:BF:7E:FE:C6:64:55:91:34:F8:66:59:CE:4C:A7:A6:EF:FC:4A:CC Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 Certificate issuer: /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Certificate serial: 0E0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft Manifest number: 0E05 Signing time: Thu 18 Sep 2025 18:01:11 +0000 Manifest this update: Thu 18 Sep 2025 18:01:11 +0000 Manifest next update: Thu 25 Sep 2025 18:01:11 +0000 Files and hashes: 1: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl (hash: sngSWmxKw+7iSj0qsnkQu1bVEtAuAv1mSf+aYWkBRXw=) 2: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (hash: NGmhercCoJ9hcEnfypdSk09ukBq8+ACpPHXM0iho7j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3596 (0xe0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165226, serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Validity Not Before: Sep 18 18:01:11 2025 GMT Not After : Sep 25 18:01:11 2025 GMT Subject: CN=68cc48e7-7f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:b5:08:c9:21:77:53:6a:70:cf:d2:98:22: e9:31:90:78:21:31:fc:d5:67:29:83:01:c6:4c:e0: 9b:2b:ed:d5:c8:a5:82:3f:87:d1:00:a9:8a:21:92: 36:1c:db:c2:30:b5:60:ab:23:b6:b8:f7:c0:51:9b: f5:db:a5:a7:a2:e3:5c:e3:72:13:57:e0:f0:0a:d6: c8:c5:c3:6b:79:e6:3a:c6:ff:c2:88:3e:cc:a0:13: 76:c4:f5:a3:0e:9f:50:f0:19:09:f3:40:65:ed:17: c2:49:a3:e2:0e:e0:0a:13:b7:a8:8b:e0:cf:e8:12: 2a:e2:43:85:55:9f:bc:67:b2:3a:58:b9:78:1f:8c: c2:a1:42:f0:90:10:44:c9:9b:e9:12:e1:e7:e8:73: 5f:81:a0:4c:6c:10:29:a7:72:82:78:56:1d:4b:aa: 82:d5:ac:dd:73:c3:e8:5b:db:04:ce:7b:ef:a2:54: f0:6b:dd:9b:ef:13:29:22:84:1c:66:90:b2:58:57: e7:15:ae:9f:2a:25:ab:21:8f:d9:74:59:cf:61:9e: bc:57:a4:97:dc:ac:24:62:67:5c:78:17:9e:43:06: 58:a8:b4:63:ed:60:79:61:4c:ad:ed:bd:63:38:4c: da:41:74:42:c3:ed:a3:5d:da:91:87:dd:28:51:39: 3c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BF:7E:FE:C6:64:55:91:34:F8:66:59:CE:4C:A7:A6:EF:FC:4A:CC X509v3 Authority Key Identifier: keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d8:0b:e2:2a:c0:73:19:d2:b0:9f:a6:61:39:ce:dd:dc:14: c5:ae:41:ef:48:33:6c:2f:d0:31:f5:2c:3e:f3:b7:6a:f9:0c: 08:01:98:bc:28:a6:ca:87:09:6f:9c:be:0d:e1:16:56:cd:2f: 9c:0d:8b:ea:ff:b6:de:e4:e5:da:8d:0c:30:80:7a:a5:e8:ca: b9:2d:16:7b:72:e7:9f:a5:10:5c:00:0f:62:a1:ca:35:6f:4e: 3b:24:9a:53:41:9c:a2:60:26:bf:8f:e4:e9:3b:74:e8:18:ba: e1:88:c6:91:79:e1:da:ae:8f:67:c2:c7:95:4b:fc:21:ae:30: 6d:31:4d:50:b9:1a:b0:83:67:30:02:89:b8:33:68:aa:93:da: c3:3e:b9:ec:c2:4f:b6:6f:2c:12:be:3c:a9:e9:62:cc:1a:c6: 64:94:56:34:51:b9:c3:05:ac:00:b4:de:bf:73:db:d1:68:9a: 44:e7:ed:7a:0a:25:0f:28:6a:66:a5:87:a3:96:55:f9:73:e1: b8:25:01:5c:52:46:2b:ef:fa:5b:9d:47:d5:3a:08:30:37:b8: ce:59:16:c3:23:5a:51:70:29:39:dc:71:01:a1:d3:04:fc:36: dc:61:92:4a:91:d5:ef:14:24:dd:d7:eb:83:f4:7e:e6:7f:41: 23:f5:91:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyMjYxMTAvBgNVBAUTKEY1MzZBREQ2RTE3RDFDRTIyQ0JCODkzQTdGQTBDRjA4 QkQ4RTNGQzAwHhcNMjUwOTE4MTgwMTExWhcNMjUwOTI1MTgwMTExWjAYMRYwFAYD VQQDEw02OGNjNDhlNy03ZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzm1CMkhd1NqcM/SmCLpMZB4ITH81WcpgwHGTOCbK+3VyKWCP4fRAKmKIZI2 HNvCMLVgqyO2uPfAUZv126WnouNc43ITV+DwCtbIxcNreeY6xv/CiD7MoBN2xPWj Dp9Q8BkJ80Bl7RfCSaPiDuAKE7eoi+DP6BIq4kOFVZ+8Z7I6WLl4H4zCoULwkBBE yZvpEuHn6HNfgaBMbBApp3KCeFYdS6qC1azdc8PoW9sEznvvolTwa92b7xMpIoQc ZpCyWFfnFa6fKiWrIY/ZdFnPYZ68V6SX3KwkYmdceBeeQwZYqLRj7WB5YUyt7b1j OEzaQXRCw+2jXdqRh90oUTk8XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEG/fv7G ZFWRNPhmWc5Mp6bv/ErMMB8GA1UdIwQYMBaAFPU2rdbhfRziLLuJOn+gzwi9jj/A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTIyNi8zQzlDRjA0Q0I3 M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhPSXN1NGs2ZjZEUENMMk9Q OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUYXQxdUY5SE9Jc3U0azZmNkRQQ0wyT1A4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTIyNi8zQzlDRjA0Q0I3M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhP SXN1NGs2ZjZEUENMMk9QOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd2AviKsBzGdKwn6ZhOc7d3BTFrkHvSDNsL9Ax9Sw+87dq+QwIAZi8 KKbKhwlvnL4N4RZWzS+cDYvq/7be5OXajQwwgHql6Mq5LRZ7cuefpRBcAA9ioco1 b047JJpTQZyiYCa/j+TpO3ToGLrhiMaReeHaro9nwseVS/whrjBtMU1QuRqwg2cw Aom4M2iqk9rDPrnswk+2bywSvjyp6WLMGsZklFY0UbnDBawAtN6/c9vRaJpE5+16 CiUPKGpmpYejllX5c+G4JQFcUkYr7/pbnUfVOggwN7jOWRbDI1pRcCk53HEBodME /DbcYZJKkdXvFCTd1+uD9H7mf0Ej9ZEk -----END CERTIFICATE-----Generated at Thu Sep 18 21:43:23 2025 by rpki-client