$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft File: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json) Hash identifier: 38bvrY1bf/XgTgtIzdH59eoI8g/Fqo0C42cgP6Ad7KY= Subject key identifier: A5:A7:B6:65:55:90:3E:52:BB:CE:51:41:D3:79:F5:43:05:CA:1D:09 Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E Certificate issuer: /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft Manifest number: 0C3D Signing time: Thu 18 Sep 2025 18:48:46 +0000 Manifest this update: Thu 18 Sep 2025 18:48:45 +0000 Manifest next update: Thu 25 Sep 2025 18:48:45 +0000 Files and hashes: 1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: Ujd1EODdob5OF2Zn+ZyU/p2bOEaAMVDlEGHTSDleUjc=) 2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: 3f3zqC4M9r+CBjBgJL/J6zSN/PgrTrc+js52IEKhV5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Validity Not Before: Sep 18 18:48:45 2025 GMT Not After : Sep 25 18:48:45 2025 GMT Subject: CN=68cc540e-8d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:00:59:62:cc:93:ef:56:da:6d:cb:9d:0f: df:8b:d5:d2:bf:75:e4:bf:98:27:6a:10:cb:8c:79: 8f:1f:d3:cd:f3:1b:78:9e:40:1c:c0:c8:7a:dc:7d: 83:c3:81:57:f5:58:a3:65:08:2e:f3:a1:ca:48:80: c2:a0:2f:9e:18:83:0f:7a:37:cf:e8:22:a9:fd:63: 40:08:51:e0:45:2a:ce:8e:a6:28:44:24:22:4e:2a: 92:8a:6b:e1:07:5d:cd:99:9a:d9:f4:09:94:7d:be: c0:1f:53:69:74:72:5f:be:13:bf:05:ef:03:19:28: 00:c1:41:10:36:3f:0c:3a:9e:80:21:72:90:53:24: 29:00:cd:27:3b:7d:0d:49:26:d9:65:39:7b:7d:e0: a0:fc:28:47:66:14:32:3c:ed:74:cb:47:f0:1a:3b: ab:84:90:e6:68:fd:5c:2b:73:fe:8a:21:97:47:bf: 9b:88:65:07:24:47:7b:b6:b3:aa:79:0d:28:8c:2c: 6b:5a:0d:c4:6c:6d:40:9c:3d:d6:d8:10:85:fc:63: fa:2b:68:43:f9:de:39:f9:ce:ec:d7:e2:ac:36:02: 99:6e:92:e5:05:74:7c:23:b2:34:98:79:d5:92:e5: 3e:16:3d:f9:5a:af:be:38:3c:1a:0e:80:5e:7e:82: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A7:B6:65:55:90:3E:52:BB:CE:51:41:D3:79:F5:43:05:CA:1D:09 X509v3 Authority Key Identifier: keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:42:72:78:2f:f1:88:00:06:d7:81:00:dc:87:c3:62:15:a1: 48:b8:51:05:a7:b8:a4:6f:d6:6c:66:92:24:b0:94:39:9a:66: ce:23:c8:4d:66:ab:ba:8e:c5:a6:23:0b:d8:86:20:fb:81:f0: fb:af:8e:68:7f:04:fc:0d:cd:74:87:35:e2:32:49:cf:a6:ec: 48:8a:11:6a:85:d1:66:ee:e3:2e:f7:90:0d:51:48:c7:40:a0: 0d:94:39:72:2d:d6:fa:8d:ae:71:11:b8:07:5c:0e:a8:d5:9f: 85:6c:ab:3f:42:4b:48:95:43:a5:e9:fc:e6:ca:0e:56:3a:5b: 3e:a5:71:3d:c1:ad:5f:44:e9:4b:be:e4:08:3c:c4:6d:00:28: c5:0b:ff:05:ae:59:65:1f:b8:34:5d:ae:8e:7e:b3:52:91:75: 1d:36:a2:6a:6b:05:9a:56:43:14:07:39:16:05:1b:ec:f8:15: 8a:3f:a3:a2:45:11:a8:17:06:8c:af:d1:28:8e:8a:e5:3b:9e: 92:ac:43:2c:e6:b4:c7:a3:a5:d4:ca:35:86:1f:48:f8:59:ec: b7:84:a3:b4:78:0c:23:ee:93:4a:18:05:7b:68:e6:9d:03:45: 7b:17:db:66:90:f2:81:be:3a:43:1f:b4:4d:95:5f:f5:52:28: 62:9d:ee:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQkIxMTAvBgNVBAUTKEY2NTRFMjQxQzE0NDYxOEFCQTMxOURBQkFDQkRFQTQ4 QzRGM0M3NEUwHhcNMjUwOTE4MTg0ODQ1WhcNMjUwOTI1MTg0ODQ1WjAYMRYwFAYD VQQDEw02OGNjNTQwZS04ZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iAAWWLMk+9W2m3LnQ/fi9XSv3Xkv5gnahDLjHmPH9PN8xt4nkAcwMh63H2D w4FX9VijZQgu86HKSIDCoC+eGIMPejfP6CKp/WNACFHgRSrOjqYoRCQiTiqSimvh B13NmZrZ9AmUfb7AH1NpdHJfvhO/Be8DGSgAwUEQNj8MOp6AIXKQUyQpAM0nO30N SSbZZTl7feCg/ChHZhQyPO10y0fwGjurhJDmaP1cK3P+iiGXR7+biGUHJEd7trOq eQ0ojCxrWg3EbG1AnD3W2BCF/GP6K2hD+d45+c7s1+KsNgKZbpLlBXR8I7I0mHnV kuU+Fj35Wq++ODwaDoBefoJpHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWntmVV kD5Su85RQdN59UMFyh0JMB8GA1UdIwQYMBaAFPZU4kHBRGGKujGdq6y96kjE88dO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJCQi85MzQ4MjcxRTEx NDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZcTZNWjJyckwzcVNNVHp4 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlsVGlRY0ZFWVlxNk1aMnJyTDNxU01UengwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJCQi85MzQ4MjcxRTExNDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZ cTZNWjJyckwzcVNNVHp4MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnQnJ4L/GIAAbXgQDch8NiFaFIuFEFp7ikb9ZsZpIksJQ5mmbOI8hN Zqu6jsWmIwvYhiD7gfD7r45ofwT8Dc10hzXiMknPpuxIihFqhdFm7uMu95ANUUjH QKANlDlyLdb6ja5xEbgHXA6o1Z+FbKs/QktIlUOl6fzmyg5WOls+pXE9wa1fROlL vuQIPMRtACjFC/8FrlllH7g0Xa6OfrNSkXUdNqJqawWaVkMUBzkWBRvs+BWKP6Oi RRGoFwaMr9EojorlO56SrEMs5rTHo6XUyjWGH0j4Wey3hKO0eAwj7pNKGAV7aOad A0V7F9tmkPKBvjpDH7RNlV/1Uihine5l -----END CERTIFICATE-----Generated at Thu Sep 18 20:36:21 2025 by rpki-client