$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft File: Ed9s5Nq5aE7fbPXgPf3shvFc174.mft (raw, json) Hash identifier: oMeHk1nKnwMpl7folVk5clcp+LckHpKNthnVE6Bj1sw= Subject key identifier: 4A:E5:0E:00:98:A9:A3:39:54:5B:BF:7B:56:1F:B3:5F:52:AC:52:2B Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE Certificate issuer: /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Certificate serial: 0B1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft Manifest number: 0B11 Signing time: Thu 18 Sep 2025 19:32:15 +0000 Manifest this update: Thu 18 Sep 2025 19:32:15 +0000 Manifest next update: Thu 25 Sep 2025 19:32:15 +0000 Files and hashes: 1: Ed9s5Nq5aE7fbPXgPf3shvFc174.crl (hash: Kj8zXRn6dmRGYl6/26A81HMjHfdB7wyv4POaSdVfBRs=) 2: C66770F24B9111EA9A72503CC4F9AE02.roa (hash: 8QV3Z7HQrXKgQcgsCkmTuSXwKLorUwTjpR6lcWwX/xQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2842 (0xb1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Validity Not Before: Sep 18 19:32:15 2025 GMT Not After : Sep 25 19:32:15 2025 GMT Subject: CN=68cc5e3f-4ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:71:5c:94:9d:ec:52:57:e2:43:5d:3e:de: 69:da:4b:71:b6:78:ef:d0:6e:8a:93:07:6c:48:36: 0f:9d:fb:56:b0:d7:03:67:d3:29:59:2c:4c:16:03: 03:c8:b0:e3:d8:5d:5e:08:0a:87:89:b9:62:81:b8: cc:85:54:6b:03:5a:df:e6:b8:a1:41:db:3d:dc:db: 49:53:14:64:25:26:19:3d:c5:a7:df:86:8d:07:c1: 4b:d2:63:90:8f:5b:37:f9:cf:a2:f8:eb:3f:08:3c: 02:0f:94:da:6c:89:3e:81:70:8a:5e:ad:25:2d:ff: e3:8e:c8:16:f2:58:44:16:6c:51:44:49:d6:c5:97: ba:a5:16:1d:15:c1:ee:79:c5:4a:47:d8:dc:6b:88: 72:75:b6:19:67:f0:bb:db:f8:4b:be:a3:60:d5:78: 36:ab:58:0c:fd:ab:0a:9d:7a:ea:0b:4a:76:2d:c7: ae:35:bc:7b:7a:d5:ea:57:b9:51:8c:16:58:33:28: 3c:43:9a:09:3d:2b:05:f1:79:41:b2:f4:d8:60:a2: b7:41:26:72:f5:4b:41:83:cb:b9:1e:c4:57:35:78: d3:41:1e:e9:89:05:f2:07:d2:a2:80:89:04:d8:15: fd:13:c7:a1:1d:7e:39:4e:53:fe:14:12:56:69:70: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E5:0E:00:98:A9:A3:39:54:5B:BF:7B:56:1F:B3:5F:52:AC:52:2B X509v3 Authority Key Identifier: keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:db:c2:42:ad:b3:3a:e6:23:74:cd:65:c5:99:ad:98:8a:d7: d9:79:e1:9a:10:df:69:04:4b:14:f0:8b:44:5c:cd:aa:8f:0e: 78:b6:32:c6:e8:a7:8d:6d:79:46:85:43:49:19:88:14:ce:b8: 85:6e:66:89:c2:c5:37:30:a5:f6:1d:11:a0:0f:b4:fc:db:75: b2:a9:94:67:83:ea:aa:23:91:89:9c:ff:4d:79:ba:72:b4:a3: 4e:78:1a:a2:55:2a:65:7c:1e:6e:37:64:4d:b4:f4:b4:df:2f: a5:e7:01:6a:b2:80:e7:ee:47:e5:bb:48:f2:43:ac:df:da:07: 59:39:b0:a7:ac:c2:6f:ec:ff:b6:63:ed:70:ab:77:76:8b:2f: d4:fa:89:f2:02:02:89:0a:b1:62:4a:9b:d8:42:52:3e:06:63: d6:c1:48:66:59:9d:9a:52:ba:a0:95:cf:23:59:49:8e:59:9e: ea:72:f5:81:bd:d9:cb:d4:e0:86:e6:71:02:16:e7:0e:be:f1: 57:29:46:c9:5a:07:7d:da:98:5c:27:75:d9:a7:38:cf:4e:69: e0:35:3e:8f:72:68:2b:39:57:6a:c7:60:66:fc:d8:c1:fd:9e: b9:2a:bb:76:28:9b:9c:5a:21:7c:8e:b7:82:93:00:d8:51:9e: 6d:06:d9:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVERUUxMTAvBgNVBAUTKDExREY2Q0U0REFCOTY4NEVERjZDRjVFMDNERkRFQzg2 RjE1Q0Q3QkUwHhcNMjUwOTE4MTkzMjE1WhcNMjUwOTI1MTkzMjE1WjAYMRYwFAYD VQQDEw02OGNjNWUzZi00YWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT5xXJSd7FJX4kNdPt5p2ktxtnjv0G6KkwdsSDYPnftWsNcDZ9MpWSxMFgMD yLDj2F1eCAqHibligbjMhVRrA1rf5rihQds93NtJUxRkJSYZPcWn34aNB8FL0mOQ j1s3+c+i+Os/CDwCD5TabIk+gXCKXq0lLf/jjsgW8lhEFmxRREnWxZe6pRYdFcHu ecVKR9jca4hydbYZZ/C72/hLvqNg1Xg2q1gM/asKnXrqC0p2LceuNbx7etXqV7lR jBZYMyg8Q5oJPSsF8XlBsvTYYKK3QSZy9UtBg8u5HsRXNXjTQR7piQXyB9KigIkE 2BX9E8ehHX45TlP+FBJWaXDlzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErlDgCY qaM5VFu/e1Yfs19SrFIrMB8GA1UdIwQYMBaAFBHfbOTauWhO32z14D397IbxXNe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURFRS9BREQ2NUUyODRC OTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFFN2ZiUFhnUGYzc2h2RmMx NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkOXM1TnE1YUU3ZmJQWGdQZjNzaHZGYzE3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURFRS9BREQ2NUUyODRCOTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFF N2ZiUFhnUGYzc2h2RmMxNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM28JCrbM65iN0zWXFma2YitfZeeGaEN9pBEsU8ItEXM2qjw54tjLG 6KeNbXlGhUNJGYgUzriFbmaJwsU3MKX2HRGgD7T823WyqZRng+qqI5GJnP9Nebpy tKNOeBqiVSplfB5uN2RNtPS03y+l5wFqsoDn7kflu0jyQ6zf2gdZObCnrMJv7P+2 Y+1wq3d2iy/U+onyAgKJCrFiSpvYQlI+BmPWwUhmWZ2aUrqglc8jWUmOWZ7qcvWB vdnL1OCG5nECFucOvvFXKUbJWgd92phcJ3XZpzjPTmngNT6PcmgrOVdqx2Bm/NjB /Z65Krt2KJucWiF8jreCkwDYUZ5tBtm+ -----END CERTIFICATE-----Generated at Fri Sep 19 02:31:30 2025 by rpki-client