$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft File: q30L1dKrXe4vHNaWuCm675d_eM4.mft (raw, json) Hash identifier: yD9auTUIpoS/IzWLK7KsWHTSufAbGMo2TWa37XK8L98= Subject key identifier: 5F:EB:49:0D:52:F2:2E:05:14:9C:BC:5A:B3:84:76:2A:2C:79:07:2B Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE Certificate issuer: /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE Certificate serial: 1905 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft Manifest number: 18EC Signing time: Thu 18 Sep 2025 16:36:07 +0000 Manifest this update: Thu 18 Sep 2025 16:36:07 +0000 Manifest next update: Thu 25 Sep 2025 16:36:07 +0000 Files and hashes: 1: q30L1dKrXe4vHNaWuCm675d_eM4.crl (hash: CzjEF5PnIKwr4CKkkQxh6Qf0YzWznsYGqE57XTNokt4=) 2: EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa (hash: YcDZtKeRh1UHltnHTYosXa988+fvsMaT0V4n1NKi1tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6405 (0x1905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A5B, serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE Validity Not Before: Sep 18 16:36:07 2025 GMT Not After : Sep 25 16:36:07 2025 GMT Subject: CN=68cc34f7-7d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:92:ce:4e:90:e2:a0:d7:ce:10:00:44:f5: 2f:3d:64:20:87:bc:d8:1d:6a:a9:19:9a:df:96:8f: 92:72:4b:22:27:6a:22:a3:4b:5a:b4:1e:95:93:5e: e4:b3:fe:3f:26:2c:3c:ed:39:7d:bd:54:d7:9a:c1: 4f:1a:df:e0:de:eb:9a:1d:c6:e4:dd:20:18:8b:10: 6e:b7:3d:8f:10:4a:2d:b7:aa:5c:4b:08:86:47:4e: 03:a8:27:8c:f4:f9:7f:fc:77:0f:a8:3f:e3:0d:4a: 9c:c8:2e:96:37:09:75:a7:41:c9:b9:55:cb:c4:c1: bc:64:f2:db:fe:e1:79:d4:d6:e6:9e:a7:f0:99:02: 5f:e4:ab:93:69:00:07:95:cb:99:9c:46:97:de:7a: 0e:86:e5:4e:23:1a:7b:03:e7:4f:63:ab:a2:04:fc: 2b:9c:84:05:ac:52:bc:f3:bc:af:f7:2c:c0:12:7c: 12:af:bc:6b:48:25:e2:05:f6:3f:af:02:f2:c0:af: 10:49:c9:ae:a9:7a:ab:d8:ea:79:75:e5:fe:d6:cd: cb:94:5c:e1:a3:d1:5f:2b:29:bf:48:69:de:25:5f: d1:9b:4f:73:8b:cd:d5:19:cb:66:e4:4a:0d:75:05: 4d:d8:53:66:13:be:cd:b9:27:7d:01:9d:0d:6c:67: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EB:49:0D:52:F2:2E:05:14:9C:BC:5A:B3:84:76:2A:2C:79:07:2B X509v3 Authority Key Identifier: keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:09:f6:36:80:6c:13:8e:ff:34:60:f1:a7:df:d6:1d:bc:ee: 3d:06:c1:03:b5:e5:d6:4e:8c:12:c8:61:2f:ec:58:84:2a:d4: 7e:2a:eb:ed:1c:3e:93:46:9a:68:bd:d2:cf:1b:b6:ff:07:83: ad:c5:69:ee:60:db:46:dc:8e:96:77:b3:80:b0:01:a9:5d:6b: 08:4a:80:a4:0b:67:4a:79:b1:47:bc:cb:9b:d4:e7:6a:dc:01: d1:34:b6:56:35:73:02:77:ca:85:11:58:63:50:7f:1c:c2:d5: 09:0d:e1:90:7c:14:5a:23:78:93:c4:5c:56:73:bd:b4:4c:7a: 69:16:d0:5f:50:be:e2:07:ac:2b:c1:7b:1a:fe:0b:50:2c:bb: 9d:43:15:25:63:f7:18:99:48:64:5b:06:1b:b1:ae:70:ce:d4: 61:ec:14:b0:af:3e:63:48:ea:fd:1a:d0:14:12:5f:8f:e7:95: 68:d0:43:7b:ea:ef:51:8e:39:08:32:7f:5a:4d:66:1b:83:99: 82:c4:da:37:08:7c:01:bd:9a:a4:80:36:57:18:35:5e:a3:63: 6f:57:8d:dc:22:50:78:37:23:94:43:af:a2:23:4e:2c:fc:cf: 7a:fa:3c:4d:cb:97:b9:59:9e:2d:88:9d:d7:76:b4:cf:a2:38: d7:4c:2a:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBNUIxMTAvBgNVBAUTKEFCN0QwQkQ1RDJBQjVERUUyRjFDRDY5NkI4MjlCQUVG OTc3Rjc4Q0UwHhcNMjUwOTE4MTYzNjA3WhcNMjUwOTI1MTYzNjA3WjAYMRYwFAYD VQQDEw02OGNjMzRmNy03ZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJaSzk6Q4qDXzhAARPUvPWQgh7zYHWqpGZrflo+ScksiJ2oio0tatB6Vk17k s/4/Jiw87Tl9vVTXmsFPGt/g3uuaHcbk3SAYixButz2PEEott6pcSwiGR04DqCeM 9Pl//HcPqD/jDUqcyC6WNwl1p0HJuVXLxMG8ZPLb/uF51NbmnqfwmQJf5KuTaQAH lcuZnEaX3noOhuVOIxp7A+dPY6uiBPwrnIQFrFK887yv9yzAEnwSr7xrSCXiBfY/ rwLywK8QScmuqXqr2Op5deX+1s3LlFzho9FfKym/SGneJV/Rm09zi83VGctm5EoN dQVN2FNmE77NuSd9AZ0NbGf1CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/rSQ1S 8i4FFJy8WrOEdioseQcrMB8GA1UdIwQYMBaAFKt9C9XSq13uLxzWlrgpuu+Xf3jO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1Qi8xN0UxMDEwMjk5 M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhlNHZITmFXdUNtNjc1ZF9l TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EzMEwxZEtyWGU0dkhOYVd1Q202NzVkX2VNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUE1Qi8xN0UxMDEwMjk5M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhl NHZITmFXdUNtNjc1ZF9lTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGCfY2gGwTjv80YPGn39YdvO49BsEDteXWTowSyGEv7FiEKtR+Kuvt HD6TRppovdLPG7b/B4OtxWnuYNtG3I6Wd7OAsAGpXWsISoCkC2dKebFHvMub1Odq 3AHRNLZWNXMCd8qFEVhjUH8cwtUJDeGQfBRaI3iTxFxWc720THppFtBfUL7iB6wr wXsa/gtQLLudQxUlY/cYmUhkWwYbsa5wztRh7BSwrz5jSOr9GtAUEl+P55Vo0EN7 6u9RjjkIMn9aTWYbg5mCxNo3CHwBvZqkgDZXGDVeo2NvV43cIlB4NyOUQ6+iI04s /M96+jxNy5e5WZ4tiJ3XdrTPojjXTCqw -----END CERTIFICATE-----Generated at Fri Sep 19 08:35:05 2025 by rpki-client