$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json) Hash identifier: Aa4KjEA457Z386FOzmmYdNhB0E8Qq2Vcu26M/0pNGf4= Subject key identifier: B3:FA:DE:FC:0B:43:C1:B2:B4:AD:3E:15:25:E9:AD:81:CE:99:6D:39 Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft Manifest number: 96 Signing time: Fri 05 Sep 2025 07:14:32 +0000 Manifest this update: Fri 05 Sep 2025 07:14:32 +0000 Manifest next update: Fri 12 Sep 2025 07:14:32 +0000 Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: P7pEuM123p2EkRBguPwna8Qwy9wZJI3Xh43bQ8lKWZ4=) 2: D14C1FE06AB211F0976F001AC4F9AE02.roa (hash: CNFybG+1Rnqg1iljhEw8ck5HDJaCoHmMcCeBkIlBTRM=) 3: D0680FF86AB211F0976F001AC4F9AE02.roa (hash: u4I6OcMWHr68B44EOHhKNv/9O12ptdqG8vuabhMlWB0=) 4: D1D03D026AB211F0976F001AC4F9AE02.roa (hash: SlcZUPBC731CkDPBH5QtG+XBH8C8VdxLmEudErYJG5E=) 5: D0E4A1946AB211F0976F001AC4F9AE02.roa (hash: mZq4ESa3sYKUhMXlPEh614v/+7uhBeYVmsv4x4LdoBk=) 6: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: 64RDTBNuccDdoIvEJOJA8ogdzC5IFskACfXeFbwpVtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Validity Not Before: Sep 5 07:14:32 2025 GMT Not After : Sep 12 07:14:32 2025 GMT Subject: CN=68ba8dd8-9f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ea:6b:eb:78:42:ce:21:68:a4:d0:c0:da:67: 59:c4:ed:27:a9:20:84:b8:73:3b:3d:d4:c6:99:f3: 8e:0c:c7:f2:66:34:c6:4f:89:a8:8b:d4:f0:68:e9: 02:6b:f4:80:54:76:f7:96:75:b4:29:24:61:f8:4b: 69:86:0f:0b:f7:56:93:32:4a:bd:25:f7:5e:04:3a: 94:e6:71:bb:a5:2a:88:6f:8d:10:90:e5:83:c5:35: 7e:f1:2c:9c:55:5b:3e:5c:2c:23:72:92:11:83:a0: 1b:49:de:0c:7d:33:37:3f:27:4b:2a:31:84:1a:68: 19:e3:ea:aa:3f:33:b8:fa:3e:73:32:0f:94:67:52: 9d:e4:48:9a:54:26:16:25:03:a8:03:90:59:72:0e: 65:c4:57:23:2f:3c:bc:ce:01:2f:c4:59:22:62:40: 19:49:54:0b:7b:72:22:46:b4:01:de:20:5b:9b:cf: be:13:e0:12:03:3b:7a:dc:21:76:1a:8b:5e:dd:36: fb:6f:f3:6d:b6:b2:82:c1:c4:69:8c:9f:8b:16:d4: 4c:36:8d:0c:b3:29:c3:6a:df:1f:af:a9:72:c6:f9: e9:c1:61:7c:aa:7a:f0:3d:5a:65:f3:70:ae:5c:15: ec:0b:3d:b3:ba:d6:95:24:55:89:51:86:1f:d5:19: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FA:DE:FC:0B:43:C1:B2:B4:AD:3E:15:25:E9:AD:81:CE:99:6D:39 X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:5d:d5:cf:08:ba:66:1f:91:2e:45:f0:75:e8:89:2b:3c:66: b9:51:a0:14:6a:8c:a0:be:01:84:18:fc:32:f7:35:05:d4:bb: 3f:ae:fa:95:57:47:74:83:54:d2:bf:9b:ad:c0:4d:53:9d:54: 2d:e5:31:c3:f2:77:d8:56:ce:04:cb:26:29:5a:dd:1b:a1:b3: 3e:36:31:4b:bb:04:cb:cc:7b:72:fc:9e:fa:cb:64:23:63:dd: 9f:7a:23:b7:2f:17:19:69:f3:ab:3c:dd:8f:2f:e8:d0:57:40: 2f:c4:80:63:ef:7c:3d:5f:ad:18:cf:07:e8:60:46:2f:fe:b9: 50:93:6a:23:d7:4d:d9:91:fe:79:a5:d1:0f:4f:ca:2d:95:7c: e3:f0:92:43:08:f9:f8:24:3c:aa:34:57:9b:26:5e:56:87:88: dd:df:b2:59:fa:fb:72:ac:c2:03:44:ba:8c:36:38:7b:30:76: 36:66:58:6f:4f:37:9e:10:0d:c5:d5:65:36:57:b9:27:9f:89: 95:56:6f:fd:7c:8e:d0:4a:36:2b:b3:02:44:ae:93:cb:ef:1a: aa:ed:a2:b7:3e:64:37:66:c1:e8:60:33:19:53:74:3d:8c:58: cd:13:fe:62:64:d8:e6:07:dc:72:74:df:20:ff:4e:11:07:cc: 5f:c7:b4:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKEY2OThCNUI0N0EwNkQ1MzA3REVDNjA4OTY5MDYzMDc0 QjY4RkY1Q0EwHhcNMjUwOTA1MDcxNDMyWhcNMjUwOTEyMDcxNDMyWjAYMRYwFAYD VQQDEw02OGJhOGRkOC05ZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+pr63hCziFopNDA2mdZxO0nqSCEuHM7PdTGmfOODMfyZjTGT4moi9TwaOkC a/SAVHb3lnW0KSRh+Etphg8L91aTMkq9JfdeBDqU5nG7pSqIb40QkOWDxTV+8Syc VVs+XCwjcpIRg6AbSd4MfTM3PydLKjGEGmgZ4+qqPzO4+j5zMg+UZ1Kd5EiaVCYW JQOoA5BZcg5lxFcjLzy8zgEvxFkiYkAZSVQLe3IiRrQB3iBbm8++E+ASAzt63CF2 Gote3Tb7b/NttrKCwcRpjJ+LFtRMNo0MsynDat8fr6lyxvnpwWF8qnrwPVpl83Cu XBXsCz2zutaVJFWJUYYf1Rl6nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLP63vwL Q8GytK0+FSXprYHOmW05MB8GA1UdIwQYMBaAFPaYtbR6BtUwfexgiWkGMHS2j/XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DOTI4MDQzQUQx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFUQjk3R0NKYVFZd2RMYVA5 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDljby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DOTI4MDQzQUQxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFU Qjk3R0NKYVFZd2RMYVA5Y28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4XdXPCLpmH5EuRfB16IkrPGa5UaAUaoygvgGEGPwy9zUF1Ls/rvqV V0d0g1TSv5utwE1TnVQt5THD8nfYVs4EyyYpWt0bobM+NjFLuwTLzHty/J76y2Qj Y92feiO3LxcZafOrPN2PL+jQV0AvxIBj73w9X60YzwfoYEYv/rlQk2oj103Zkf55 pdEPT8otlXzj8JJDCPn4JDyqNFebJl5Wh4jd37JZ+vtyrMIDRLqMNjh7MHY2Zlhv TzeeEA3F1WU2V7knn4mVVm/9fI7QSjYrswJErpPL7xqq7aK3PmQ3ZsHoYDMZU3Q9 jFjNE/5iZNjmB9xydN8g/04RB8xfx7Rn -----END CERTIFICATE-----Generated at Sat Sep 6 06:26:50 2025 by rpki-client