$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json) Hash identifier: Xq0WpcqjBi4TZLF5KgCepCxM6u9pBQvdvH9J6c+XWx8= Subject key identifier: 4E:CB:72:FB:14:C0:97:B0:5D:67:58:6A:A5:93:53:B2:50:E0:CC:F6 Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft Manifest number: 9A Signing time: Sun 07 Sep 2025 06:49:18 +0000 Manifest this update: Sun 07 Sep 2025 06:49:17 +0000 Manifest next update: Sun 14 Sep 2025 06:49:17 +0000 Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: 164MGyV3X1Sp20D0L5QksduidPjaJd2/LcPgeTwarps=) 2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: oshENdblJra/vyPm3h+L7O2yi470pUSFRiQdE49uRfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 06:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Validity Not Before: Sep 7 06:49:17 2025 GMT Not After : Sep 14 06:49:17 2025 GMT Subject: CN=68bd2aed-f984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c3:12:2e:c9:e9:44:16:2e:84:19:aa:73:f0: 32:35:53:99:3d:a7:86:63:d7:cb:f9:47:e9:61:46: 48:81:60:b0:47:3b:f2:98:88:e3:5c:e2:e8:53:a0: df:7b:1f:84:5b:68:a4:34:db:99:86:0e:59:12:35: d2:76:b9:38:64:24:4a:51:76:92:14:52:7b:ab:ba: 49:3f:f6:ba:b4:d3:42:08:3a:df:fe:83:a1:03:1b: 64:a6:23:e1:0c:3e:e2:51:5e:d9:5d:73:06:07:98: ff:b8:5b:0a:a3:06:6e:bb:6e:58:00:a2:d6:b0:ed: a9:8f:ea:d2:e4:6e:3f:af:46:74:0d:7b:57:93:03: 3f:2a:3d:39:60:c6:78:de:cb:91:61:05:58:b5:8f: 71:a9:28:41:94:7a:5f:0f:ff:7d:a1:c6:3c:5b:94: ed:d8:cc:2e:4b:6b:d0:50:63:0f:56:c1:26:1f:a3: fa:0f:b8:6a:73:be:9d:4d:27:0b:36:8b:42:ed:b5: 94:7b:14:70:4a:78:19:a9:ef:52:21:e3:ea:10:d2: bc:ad:9b:80:92:40:de:41:dc:09:51:72:f9:da:b4: 28:20:08:77:4b:52:64:f4:1b:04:93:83:e5:34:4d: 81:fe:25:c1:ec:76:75:a4:45:b9:ab:7d:cf:1e:bc: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CB:72:FB:14:C0:97:B0:5D:67:58:6A:A5:93:53:B2:50:E0:CC:F6 X509v3 Authority Key Identifier: keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:0f:cf:ea:f6:63:8f:1d:ae:b8:4d:c8:f3:a5:21:4d:e5:d3: c5:61:25:e0:29:35:67:5b:45:32:93:1b:db:59:75:1c:8b:98: f3:10:cc:39:ea:7c:a9:fc:24:f5:88:1b:98:11:d2:16:0c:c9: df:47:75:da:ec:51:0e:31:e8:53:f9:a0:e9:1d:78:4d:cd:e3: 7a:68:fa:31:a6:fd:a9:8e:6e:97:76:9a:4a:4e:2a:11:f3:d5: 64:7c:30:f6:f9:4b:bf:a8:d3:bf:a2:43:85:d2:54:14:5c:90: f2:4f:46:20:1d:50:71:e0:1e:c0:25:c2:b8:77:bc:e3:c6:de: dc:8c:08:e1:31:1d:b8:30:1f:86:b6:1c:2a:8c:4c:ae:0f:c2: ac:9a:d0:45:af:f0:dd:3f:0e:62:ce:ed:ba:11:9f:41:52:fd: 86:0e:da:93:2a:3a:4a:27:c9:3a:be:4f:f7:6a:49:06:ee:92: c9:17:7a:d5:11:af:9d:05:57:e2:84:7e:b5:01:3e:f7:ef:a2: 5b:8c:a0:fa:23:c0:d6:43:93:71:12:9f:1e:0b:25:24:f6:88: f0:b5:68:74:15:ce:4b:61:f3:56:7a:25:e4:f9:5b:9a:f1:6a: 53:70:c0:94:4e:c7:8f:1c:1f:cb:ea:aa:08:91:e9:8a:cf:eb: cc:b7:86:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBEM0UxMTAvBgNVBAUTKDA3RjMxQjQ3NDcxM0IzQTE1MkM2QTVGOEY0OERFRDIw OTdEQzI0MUYwHhcNMjUwOTA3MDY0OTE3WhcNMjUwOTE0MDY0OTE3WjAYMRYwFAYD VQQDEw02OGJkMmFlZC1mOTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8MSLsnpRBYuhBmqc/AyNVOZPaeGY9fL+UfpYUZIgWCwRzvymIjjXOLoU6Df ex+EW2ikNNuZhg5ZEjXSdrk4ZCRKUXaSFFJ7q7pJP/a6tNNCCDrf/oOhAxtkpiPh DD7iUV7ZXXMGB5j/uFsKowZuu25YAKLWsO2pj+rS5G4/r0Z0DXtXkwM/Kj05YMZ4 3suRYQVYtY9xqShBlHpfD/99ocY8W5Tt2MwuS2vQUGMPVsEmH6P6D7hqc76dTScL NotC7bWUexRwSngZqe9SIePqENK8rZuAkkDeQdwJUXL52rQoIAh3S1Jk9BsEk4Pl NE2B/iXB7HZ1pEW5q33PHryh9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7LcvsU wJewXWdYaqWTU7JQ4Mz2MB8GA1UdIwQYMBaAFAfzG0dHE7OhUsal+PSN7SCX3CQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CREVFOUUyNDlG RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2RlN4cVg0OUkzdElKZmNK QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEQzRS9CREVFOUUyNDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2 RlN4cVg0OUkzdElKZmNKQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBD8/q9mOPHa64TcjzpSFN5dPFYSXgKTVnW0UykxvbWXUci5jzEMw5 6nyp/CT1iBuYEdIWDMnfR3Xa7FEOMehT+aDpHXhNzeN6aPoxpv2pjm6XdppKTioR 89VkfDD2+Uu/qNO/okOF0lQUXJDyT0YgHVBx4B7AJcK4d7zjxt7cjAjhMR24MB+G thwqjEyuD8KsmtBFr/DdPw5izu26EZ9BUv2GDtqTKjpKJ8k6vk/3akkG7pLJF3rV Ea+dBVfihH61AT7376JbjKD6I8DWQ5NxEp8eCyUk9ojwtWh0Fc5LYfNWeiXk+Vua 8WpTcMCUTsePHB/L6qoIkemKz+vMt4bG -----END CERTIFICATE-----Generated at Mon Sep 8 17:35:27 2025 by rpki-client