$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft File: a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft (raw, json) Hash identifier: 7oZRgkCE7oWpi6OicCixDnjI/47YWjLJNuVJW0728Gg= Subject key identifier: 9B:27:D0:3B:BF:46:0A:57:FC:0E:EA:5F:EB:87:16:F7:9F:1E:5A:7B Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E Certificate issuer: /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft Manifest number: 01D5 Signing time: Fri 19 Sep 2025 03:14:57 +0000 Manifest this update: Fri 19 Sep 2025 03:14:57 +0000 Manifest next update: Fri 26 Sep 2025 03:14:57 +0000 Files and hashes: 1: a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl (hash: y/BNGt6zvd8FgWhLqJAniHnYTDhq4SW6/UdZOeagrPE=) 2: A92EC53AC95B11ED9ABE6935C4F9AE02.roa (hash: gnoiGXKkrmhYTwfXU41IB03BpkGU00B0FHz74SrCkdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165BD7, serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E Validity Not Before: Sep 19 03:14:57 2025 GMT Not After : Sep 26 03:14:57 2025 GMT Subject: CN=68cccab1-bc20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a6:2e:8b:99:79:4a:eb:a2:d6:be:c2:a5:b9: 28:bd:f5:8d:20:7f:b1:a1:64:d5:e3:ba:b7:6f:7f: dc:ee:9b:72:e1:db:53:81:43:8b:b6:93:84:d4:7e: ea:4c:5a:49:1e:3a:26:57:b3:4c:43:8a:4c:84:3f: ab:0d:4f:50:60:af:5a:0f:e7:31:d9:59:27:80:1d: c0:a5:9d:36:e8:21:c2:d2:09:31:69:4a:63:f3:65: 45:e3:46:b7:17:66:d5:7c:85:61:31:c8:40:02:0c: c0:00:c2:ae:3e:12:c2:ca:8b:70:8d:e6:90:2d:40: e1:8c:78:62:d8:68:b8:8b:02:25:42:7a:b7:6e:d3: 79:f0:21:d1:25:43:b2:e5:4a:98:de:ca:4f:da:cf: 10:f8:6a:2e:de:be:b6:c8:69:a5:d8:dd:66:41:8d: 61:15:db:b6:4c:a4:8b:70:5f:d6:4e:78:c0:60:29: bd:14:50:24:c2:41:0b:46:f1:9a:2f:05:cf:bf:5b: 77:97:a9:d3:38:7e:b7:b4:62:aa:4a:66:30:35:0f: 48:4b:57:b6:18:33:dd:0d:57:6c:9a:f5:9c:3c:45: d4:3d:78:a8:b4:87:d3:63:8e:b5:82:a3:31:48:a8: b0:ef:c3:2e:7a:a2:af:01:06:8c:36:ed:87:f7:70: 73:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:27:D0:3B:BF:46:0A:57:FC:0E:EA:5F:EB:87:16:F7:9F:1E:5A:7B X509v3 Authority Key Identifier: keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:8b:b9:46:ab:7f:4f:8d:81:b0:b4:7e:b5:9a:3e:20:26:90: cf:7b:1d:ce:05:fd:06:ef:69:89:5b:51:e8:21:4b:f6:f0:25: 91:27:0d:33:71:41:48:4f:57:0b:2c:51:dc:5b:ae:24:2f:f1: 08:23:1b:52:28:82:8d:77:f5:8e:30:8c:61:b9:de:66:9b:9e: f3:ab:fc:63:81:d1:bb:79:c0:f3:eb:fb:eb:45:7b:07:a9:c7: 66:29:03:5c:37:ef:0f:d4:b6:ff:eb:f5:84:35:18:e4:6b:3d: 7f:60:1f:79:97:b6:bf:fb:da:15:ff:50:a1:4e:10:00:b8:73: 65:fd:14:8e:88:d2:8a:a7:d1:63:0c:8a:b4:8d:27:98:24:d0: 5e:09:28:cf:63:c8:19:0e:c7:82:50:44:d5:01:b9:0c:d3:ae: 9f:dc:a4:79:08:29:c3:26:df:6a:7b:c1:30:f5:3f:61:7a:a3: 12:7d:da:e6:0a:1f:bc:2e:97:21:d6:ee:8c:d6:71:47:1f:cd: e1:c0:ce:36:e0:a9:89:78:f4:ef:30:1a:93:14:c7:45:c5:0e: b0:72:75:d9:95:2c:3e:dd:3a:ac:20:63:a5:3a:db:de:8e:ba: 19:3b:1e:43:91:31:e9:ec:98:70:51:0d:f6:54:cd:59:d7:81: 16:a6:d2:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCRDcxMTAvBgNVBAUTKDZCNDk1NzY2MkFENEMyMUJENDIyQTg3REI0MUI4QkNG QzlENkREOEUwHhcNMjUwOTE5MDMxNDU3WhcNMjUwOTI2MDMxNDU3WjAYMRYwFAYD VQQDEw02OGNjY2FiMS1iYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaYui5l5Suui1r7CpbkovfWNIH+xoWTV47q3b3/c7pty4dtTgUOLtpOE1H7q TFpJHjomV7NMQ4pMhD+rDU9QYK9aD+cx2VkngB3ApZ026CHC0gkxaUpj82VF40a3 F2bVfIVhMchAAgzAAMKuPhLCyotwjeaQLUDhjHhi2Gi4iwIlQnq3btN58CHRJUOy 5UqY3spP2s8Q+Gou3r62yGml2N1mQY1hFdu2TKSLcF/WTnjAYCm9FFAkwkELRvGa LwXPv1t3l6nTOH63tGKqSmYwNQ9IS1e2GDPdDVdsmvWcPEXUPXiotIfTY461gqMx SKiw78MueqKvAQaMNu2H93BzXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsn0Du/ RgpX/A7qX+uHFvefHlp7MB8GA1UdIwQYMBaAFGtJV2Yq1MIb1CKofbQbi8/J1t2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUJENy84QTYyQzgyQUM5 NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdodlVJcWg5dEJ1THo4blcz WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EwbFhaaXJVd2h2VUlxaDl0QnVMejhuVzNZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUJENy84QTYyQzgyQUM5NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdo dlVJcWg5dEJ1THo4blczWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCui7lGq39PjYGwtH61mj4gJpDPex3OBf0G72mJW1HoIUv28CWRJw0z cUFIT1cLLFHcW64kL/EIIxtSKIKNd/WOMIxhud5mm57zq/xjgdG7ecDz6/vrRXsH qcdmKQNcN+8P1Lb/6/WENRjkaz1/YB95l7a/+9oV/1ChThAAuHNl/RSOiNKKp9Fj DIq0jSeYJNBeCSjPY8gZDseCUETVAbkM066f3KR5CCnDJt9qe8Ew9T9heqMSfdrm Ch+8Lpch1u6M1nFHH83hwM424KmJePTvMBqTFMdFxQ6wcnXZlSw+3TqsIGOlOtve jroZOx5DkTHp7JhwUQ32VM1Z14EWptIV -----END CERTIFICATE-----Generated at Fri Sep 19 08:34:39 2025 by rpki-client