$ rpki-client -vvf rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft File: p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft (raw, json) Hash identifier: d5V3/9JJXBNGHIkusO8O6LY+AeuLybm5Jsy5qdaPgaI= Subject key identifier: E5:40:AC:3C:57:2C:30:44:45:CF:E1:C0:6E:FE:F7:80:C3:DD:B5:06 Authority key identifier: A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 Certificate issuer: /CN=A9165297/serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Certificate serial: 0E3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft Manifest number: 0E30 Signing time: Thu 18 Sep 2025 17:59:16 +0000 Manifest this update: Thu 18 Sep 2025 17:59:16 +0000 Manifest next update: Thu 25 Sep 2025 17:59:16 +0000 Files and hashes: 1: p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl (hash: Hf+oPd5U7Qg2beEFnEjrt+IKkdoN+DHYaGObqp1fCdg=) 2: 457A00A8AF7A11E9AFF10782C4F9AE02.roa (hash: cTGuGnG9rqC1kt6QlqPGiDTyt8yC7pqJIZqMZttM2hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3642 (0xe3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165297, serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Validity Not Before: Sep 18 17:59:16 2025 GMT Not After : Sep 25 17:59:16 2025 GMT Subject: CN=68cc4874-0160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:90:95:a5:23:96:5d:85:20:95:2e:e5:1e: 04:21:72:9c:3b:48:f2:ec:bd:0f:b0:3c:86:41:4b: c6:f0:38:da:52:04:d5:50:ee:3a:12:94:b3:62:f5: 33:43:f9:ec:f6:02:5a:6d:e2:d3:be:20:9c:a3:fc: 64:38:b8:1e:65:5d:e3:94:d2:2f:d4:c9:ab:82:a0: 3c:96:00:b5:2c:96:01:47:ff:8a:36:36:10:b3:f2: 06:83:9b:dc:59:35:86:fa:17:5f:fd:5f:a0:a9:c2: 56:b5:b6:21:ae:cd:75:97:9f:01:6f:53:06:63:a2: 78:8e:11:dd:52:bd:90:e3:7e:20:03:b1:13:75:83: c8:c3:85:8b:48:5e:9c:d3:d2:b1:ea:7f:28:8a:7b: b6:25:0e:10:1f:11:c0:58:be:41:d2:1d:08:9d:03: 34:36:f8:0c:3a:39:4e:4e:08:08:41:15:ff:a7:7a: d1:bf:e9:3f:89:4d:58:a1:c5:8f:25:5b:d9:38:3a: d2:49:79:0e:e8:28:8d:ce:49:9c:a5:28:42:00:38: f2:0b:9c:ec:54:79:18:de:49:65:2f:7b:6b:a6:e3: 0e:39:0f:d2:97:bd:27:69:a2:7c:1e:b5:b5:0e:d6: a6:d9:65:2b:63:3d:3c:a1:95:36:03:d6:3a:71:8e: 0e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:40:AC:3C:57:2C:30:44:45:CF:E1:C0:6E:FE:F7:80:C3:DD:B5:06 X509v3 Authority Key Identifier: keyid:A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ee:96:1b:60:f1:b6:a9:66:77:2d:27:36:c7:44:9b:09:6b: f2:c8:95:e8:15:d3:80:29:6b:48:79:e8:86:ee:a3:b3:77:fc: 6f:fd:83:9b:fb:ea:0d:cb:fb:36:61:d5:b9:d8:12:d2:1c:49: 54:0b:06:98:b0:7f:d1:8c:e6:36:1b:51:d8:79:ab:c9:2c:b4: 53:9a:60:5f:bb:f6:8e:dd:96:1c:51:70:e1:15:7c:17:00:a8: e8:78:63:61:e2:e8:3d:7d:37:e0:01:8c:72:3f:b3:79:9f:a7: 87:92:90:79:b8:7e:14:86:1f:0a:b9:03:bb:c1:fd:47:61:99: ee:b3:9c:b1:9e:92:a6:15:68:1a:cb:37:f3:aa:ba:bb:21:da: 6e:bd:cb:da:7d:fc:90:7d:b6:7f:74:1d:b6:e6:89:79:23:7c: a5:c3:fa:bd:98:17:5e:21:83:0f:60:33:a0:3a:57:04:b8:34: 44:d5:72:14:f3:aa:e0:0c:5f:d4:ea:a7:aa:34:c4:db:bc:67: dd:4b:66:1a:86:0d:10:5b:ee:1b:23:3b:ae:52:d1:b4:f5:63: 66:0d:7c:90:c0:f6:2a:98:af:97:26:71:b9:1d:a2:1a:12:58: 6e:6c:d8:f6:68:77:97:7e:a3:9a:98:6b:bb:6a:08:03:7b:e9: b3:c3:6a:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyOTcxMTAvBgNVBAUTKEE3Rjg4MkMwQUNDOEYwRDhGMURCMzYxQ0Q0MEIxMjYw NkIwQzY4QzYwHhcNMjUwOTE4MTc1OTE2WhcNMjUwOTI1MTc1OTE2WjAYMRYwFAYD VQQDEw02OGNjNDg3NC0wMTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVyQlaUjll2FIJUu5R4EIXKcO0jy7L0PsDyGQUvG8DjaUgTVUO46EpSzYvUz Q/ns9gJabeLTviCco/xkOLgeZV3jlNIv1MmrgqA8lgC1LJYBR/+KNjYQs/IGg5vc WTWG+hdf/V+gqcJWtbYhrs11l58Bb1MGY6J4jhHdUr2Q434gA7ETdYPIw4WLSF6c 09Kx6n8oinu2JQ4QHxHAWL5B0h0InQM0NvgMOjlOTggIQRX/p3rRv+k/iU1YocWP JVvZODrSSXkO6CiNzkmcpShCADjyC5zsVHkY3kllL3trpuMOOQ/Sl70naaJ8HrW1 Dtam2WUrYz08oZU2A9Y6cY4OCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVArDxX LDBERc/hwG7+94DD3bUGMB8GA1UdIwQYMBaAFKf4gsCsyPDY8ds2HNQLEmBrDGjG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTI5Ny80MzAxRkRCRUFG NkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThOangyelljMUFzU1lHc01h TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfaUN3S3pJOE5qeDJ6WWMxQXNTWUdzTWFNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTI5Ny80MzAxRkRCRUFGNkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThO angyelljMUFzU1lHc01hTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM7pYbYPG2qWZ3LSc2x0SbCWvyyJXoFdOAKWtIeeiG7qOzd/xv/YOb ++oNy/s2YdW52BLSHElUCwaYsH/RjOY2G1HYeavJLLRTmmBfu/aO3ZYcUXDhFXwX AKjoeGNh4ug9fTfgAYxyP7N5n6eHkpB5uH4Uhh8KuQO7wf1HYZnus5yxnpKmFWga yzfzqrq7IdpuvcvaffyQfbZ/dB225ol5I3ylw/q9mBdeIYMPYDOgOlcEuDRE1XIU 86rgDF/U6qeqNMTbvGfdS2Yahg0QW+4bIzuuUtG09WNmDXyQwPYqmK+XJnG5HaIa ElhubNj2aHeXfqOamGu7aggDe+mzw2ru -----END CERTIFICATE-----Generated at Fri Sep 19 06:55:47 2025 by rpki-client