$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft File: mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json) Hash identifier: cafsvk05VWO9BTicjZc21vv2JdYXqzOWUvZ76LxXq7M= Subject key identifier: EE:3B:6D:79:C4:B7:12:5A:31:77:91:92:9E:D0:91:88:81:60:C9:18 Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft Manifest number: 0157 Signing time: Fri 19 Sep 2025 04:40:58 +0000 Manifest this update: Fri 19 Sep 2025 04:40:57 +0000 Manifest next update: Fri 26 Sep 2025 04:40:57 +0000 Files and hashes: 1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: o8eAGj9NZS5vRAtygPTumBpnutDj+a0kqUYqkEKBOpE=) 2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: WCeA5fOBWFOKkLb8P073mp5LsBAsFbEzZHlJDI60+6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Validity Not Before: Sep 19 04:40:57 2025 GMT Not After : Sep 26 04:40:57 2025 GMT Subject: CN=68ccded9-6351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:f2:49:88:7b:27:2d:64:4e:37:84:5b:4b: b7:96:54:b4:11:49:b3:c1:d7:10:c5:09:fb:48:b0: fb:e7:10:8f:d9:9d:d1:5f:0e:fa:e8:69:73:fa:35: 8a:5f:ce:bc:ce:58:c9:4e:e0:4e:d9:74:93:54:e0: 01:38:1b:b1:11:cd:d5:bf:e6:8a:08:7e:a1:cf:96: f8:0b:2e:09:09:09:be:70:4f:95:06:36:4d:5f:39: b6:c0:69:10:3d:b6:f3:67:37:85:e1:cf:f3:2c:cd: ee:a1:c0:11:fb:f6:c3:8b:39:66:d2:b3:56:fc:15: fc:0e:75:66:4a:b5:f8:82:a7:12:f5:a6:5d:f9:18: da:e6:d4:51:ec:53:8b:98:89:91:40:61:3a:e0:05: 19:eb:5b:71:4b:9d:e2:61:15:cf:c8:08:a6:4b:45: a3:e7:6e:af:c1:a5:d4:38:d5:6c:94:49:5e:f7:ce: 8d:ce:69:a6:63:6d:ab:25:66:e4:ef:ff:70:9b:e1: aa:44:bb:48:3f:4c:4c:aa:89:e1:a1:c0:57:ee:7b: 47:12:82:66:8e:f7:9c:a6:65:1e:bf:91:80:6e:f3: 61:a2:5e:b8:3d:d9:f0:df:71:ca:3b:68:b1:55:43: 1d:5b:3f:61:23:44:69:a0:4b:e2:ed:80:56:c3:fa: 1f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3B:6D:79:C4:B7:12:5A:31:77:91:92:9E:D0:91:88:81:60:C9:18 X509v3 Authority Key Identifier: keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:22:5c:86:fe:7d:4d:0b:57:1f:ec:fa:9e:4f:d6:e1:b4:ae: 52:a5:be:d6:d3:f1:0f:96:8b:8e:1a:c9:5f:5d:9e:7b:57:cc: ae:b5:c3:b0:9d:1c:48:c4:86:72:64:66:04:57:b0:fe:39:fe: 44:ad:bd:f2:18:40:04:dd:02:bf:2c:2b:6d:98:59:0e:3f:39: 54:d0:e0:ec:40:53:47:e6:f8:5b:37:9c:30:73:9e:f4:83:47: 52:f9:69:83:27:ee:a5:14:a0:14:7b:97:9a:65:f6:14:b3:4f: 6d:c5:e2:9a:b5:45:a7:27:68:c9:1b:2a:2f:74:34:17:4f:10: 96:90:ff:3e:90:e0:59:12:db:c0:cf:a1:c7:39:23:d6:9b:e3: df:4a:d8:f1:94:22:c2:3a:cb:92:28:f7:4b:cd:e0:68:73:d7: 04:a1:31:e0:06:b9:21:be:47:15:8f:1d:8a:1e:99:47:39:3d: a4:c4:2b:19:54:36:48:3b:b5:e3:29:6d:b6:1b:a3:19:b6:bb: 99:5e:fa:e8:be:5f:a1:44:07:b0:e8:b8:00:49:0c:1f:9b:36: 7f:bf:35:19:16:5c:d0:9e:f2:d8:ee:31:09:6a:d0:16:13:72: 8a:53:b4:13:83:2e:46:ff:97:8d:44:19:ec:a3:49:aa:d5:99: 79:0e:3f:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk1OTExMTAvBgNVBAUTKDlBRDM0OUY0NTQ4NTNCQjE4OTJBRkVGNjA0OEMxODcy NTgwNTc3NjEwHhcNMjUwOTE5MDQ0MDU3WhcNMjUwOTI2MDQ0MDU3WjAYMRYwFAYD VQQDEw02OGNjZGVkOS02MzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQDySYh7Jy1kTjeEW0u3llS0EUmzwdcQxQn7SLD75xCP2Z3RXw766Glz+jWK X868zljJTuBO2XSTVOABOBuxEc3Vv+aKCH6hz5b4Cy4JCQm+cE+VBjZNXzm2wGkQ PbbzZzeF4c/zLM3uocAR+/bDizlm0rNW/BX8DnVmSrX4gqcS9aZd+Rja5tRR7FOL mImRQGE64AUZ61txS53iYRXPyAimS0Wj526vwaXUONVslEle986NzmmmY22rJWbk 7/9wm+GqRLtIP0xMqonhocBX7ntHEoJmjvecpmUev5GAbvNhol64Pdnw33HKO2ix VUMdWz9hI0RpoEvi7YBWw/ofAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO47bXnE txJaMXeRkp7QkYiBYMkYMB8GA1UdIwQYMBaAFJrTSfRUhTuxiSr+9gSMGHJYBXdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTU5MS9ERUQ4MzU2ODg5 MkMxMUVFOTQ3NzgxNkRDNEY5QUUwMi9tdE5KOUZTRk83R0pLdjcyQkl3WWNsZ0Zk MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL210Tko5RlNGTzdHSkt2NzJCSXdZY2xnRmQyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTU5MS9ERUQ4MzU2ODg5MkMxMUVFOTQ3NzgxNkRDNEY5QUUwMi9tdE5KOUZTRk83 R0pLdjcyQkl3WWNsZ0ZkMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzIlyG/n1NC1cf7PqeT9bhtK5Spb7W0/EPlouOGslfXZ57V8yutcOw nRxIxIZyZGYEV7D+Of5Erb3yGEAE3QK/LCttmFkOPzlU0ODsQFNH5vhbN5wwc570 g0dS+WmDJ+6lFKAUe5eaZfYUs09txeKatUWnJ2jJGyovdDQXTxCWkP8+kOBZEtvA z6HHOSPWm+PfStjxlCLCOsuSKPdLzeBoc9cEoTHgBrkhvkcVjx2KHplHOT2kxCsZ VDZIO7XjKW22G6MZtruZXvrovl+hRAew6LgASQwfmzZ/vzUZFlzQnvLY7jEJatAW E3KKU7QTgy5G/5eNRBnso0mq1Zl5Dj8Y -----END CERTIFICATE-----Generated at Fri Sep 19 08:34:40 2025 by rpki-client