$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft File: J7kXbXUBrEb9oBkmur5-vwlfko4.mft (raw, json) Hash identifier: EME/jaZBC6+C2zbqKMsFqj1oPaJf5tUnygARTCEq6Ro= Subject key identifier: 07:DC:84:21:E3:16:3A:13:3B:D3:98:E4:7A:5D:49:B7:FC:6F:02:3B Authority key identifier: 27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E Certificate issuer: /CN=A9171D35/serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E Certificate serial: 0F04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft Manifest number: 0EEE Signing time: Thu 18 Sep 2025 17:48:53 +0000 Manifest this update: Thu 18 Sep 2025 17:48:52 +0000 Manifest next update: Thu 25 Sep 2025 17:48:52 +0000 Files and hashes: 1: J7kXbXUBrEb9oBkmur5-vwlfko4.crl (hash: yVEVggI3yjFwoRieO+aNrfuHvk9ZykO2rWJRLPIZDnM=) 2: C74924EE159F11EEBCFC135CC4F9AE02.roa (hash: A7sH5kT/nJtv/IMtWiRgvA6A10KdIHaRx/+kfjus0Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3844 (0xf04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D35, serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E Validity Not Before: Sep 18 17:48:52 2025 GMT Not After : Sep 25 17:48:52 2025 GMT Subject: CN=68cc4604-205a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:c7:cd:3a:6d:35:17:d2:b9:e8:64:03:bf: cc:e6:c2:95:98:ca:32:1e:51:dd:0d:b1:c2:2a:c3: ee:f5:0e:1a:e1:60:ca:e2:cc:04:ad:b0:ce:f7:d9: fc:83:4b:ac:09:f2:de:6f:57:2f:82:df:c8:e5:5d: e4:0e:35:e8:4e:fe:77:5d:7e:67:3f:78:68:e9:3f: e1:5b:53:fa:83:42:6a:6b:a2:f6:43:8a:64:e1:c5: a3:3e:4c:06:7f:6c:90:4b:33:e4:df:bb:54:0e:a9: de:78:2e:28:2a:d1:8b:bf:00:44:6c:ea:79:97:28: bb:75:e6:e0:b0:7b:f6:a6:c9:3d:dd:3e:96:ad:5d: d7:e2:2d:db:6f:5e:6a:60:59:c7:b1:bc:83:21:93: 8e:7f:f7:33:8e:78:6a:c0:a3:e7:97:4d:71:f5:1b: 0b:3a:14:d6:50:f5:fb:87:77:eb:5b:7c:f1:51:dd: 9b:1a:97:98:e4:34:eb:2a:a8:64:f0:79:a2:e4:91: d6:4c:0e:d6:e6:dc:a0:79:e4:a9:33:85:3c:5e:59: 5c:26:31:47:ee:3f:31:34:14:73:1b:5a:8c:22:84: ae:1f:97:29:71:c3:11:a8:91:db:3f:19:5e:b1:0f: 04:80:3a:ce:ad:91:3c:57:66:7c:80:ac:54:2b:50: 51:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DC:84:21:E3:16:3A:13:3B:D3:98:E4:7A:5D:49:B7:FC:6F:02:3B X509v3 Authority Key Identifier: keyid:27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:58:88:00:40:6a:36:84:9b:25:89:48:75:57:71:36:4c:c7: e7:e6:d9:3b:f4:4f:ec:3f:b9:84:82:c9:22:0e:76:f2:66:84: 55:e7:3d:37:c8:53:1e:6b:62:e9:a7:8f:c5:32:0e:fe:13:2a: 93:2c:39:11:e6:ac:16:30:30:86:2b:ad:0d:c0:e0:6d:b2:63: 9a:26:fe:80:c0:3c:62:0e:e9:69:d0:fd:a9:98:95:25:02:37: c2:06:18:4c:ea:63:48:c5:85:5f:22:b1:1a:c4:df:2e:27:42: 8a:dd:b6:f8:52:0f:aa:2b:cc:92:50:73:82:46:28:ba:63:4f: 18:24:d5:1a:b8:c2:d9:04:f4:9b:b1:f1:d0:99:7d:2a:db:9b: 9f:0a:c3:5d:b0:4a:8b:2d:0b:63:84:3c:f5:7f:9d:40:3e:87: 31:08:39:c8:11:cd:dc:41:43:fb:f0:f3:d2:59:64:8a:73:25: 09:43:42:35:de:f7:92:7d:74:0d:f6:6c:af:27:d2:ee:23:da: 05:d8:b0:09:72:da:fd:b9:25:f1:22:ec:b0:17:bf:9c:24:59: b2:f6:1e:d9:16:3a:89:45:48:4f:27:e0:d6:fa:8e:69:49:28: 94:08:81:e6:53:cc:53:68:9f:6c:7d:74:11:d4:4f:54:ec:33: f1:5b:a0:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMzUxMTAvBgNVBAUTKDI3QjkxNzZENzUwMUFDNDZGREEwMTkyNkJBQkU3RUJG MDk1RjkyOEUwHhcNMjUwOTE4MTc0ODUyWhcNMjUwOTI1MTc0ODUyWjAYMRYwFAYD VQQDEw02OGNjNDYwNC0yMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucnHzTptNRfSuehkA7/M5sKVmMoyHlHdDbHCKsPu9Q4a4WDK4swErbDO99n8 g0usCfLeb1cvgt/I5V3kDjXoTv53XX5nP3ho6T/hW1P6g0Jqa6L2Q4pk4cWjPkwG f2yQSzPk37tUDqneeC4oKtGLvwBEbOp5lyi7debgsHv2psk93T6WrV3X4i3bb15q YFnHsbyDIZOOf/czjnhqwKPnl01x9RsLOhTWUPX7h3frW3zxUd2bGpeY5DTrKqhk 8Hmi5JHWTA7W5tygeeSpM4U8XllcJjFH7j8xNBRzG1qMIoSuH5cpccMRqJHbPxle sQ8EgDrOrZE8V2Z8gKxUK1BRjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfchCHj FjoTO9OY5HpdSbf8bwI7MB8GA1UdIwQYMBaAFCe5F211AaxG/aAZJrq+fr8JX5KO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzNS9FQTREQ0ExQzhF REExMUU5OEQyMDYxNDFDNEY5QUUwMi9KN2tYYlhVQnJFYjlvQmttdXI1LXZ3bGZr bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3a1hiWFVCckViOW9Ca211cjUtdndsZmtvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzNS9FQTREQ0ExQzhFREExMUU5OEQyMDYxNDFDNEY5QUUwMi9KN2tYYlhVQnJF YjlvQmttdXI1LXZ3bGZrbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqWIgAQGo2hJsliUh1V3E2TMfn5tk79E/sP7mEgskiDnbyZoRV5z03 yFMea2Lpp4/FMg7+EyqTLDkR5qwWMDCGK60NwOBtsmOaJv6AwDxiDulp0P2pmJUl AjfCBhhM6mNIxYVfIrEaxN8uJ0KK3bb4Ug+qK8ySUHOCRii6Y08YJNUauMLZBPSb sfHQmX0q25ufCsNdsEqLLQtjhDz1f51APocxCDnIEc3cQUP78PPSWWSKcyUJQ0I1 3veSfXQN9myvJ9LuI9oF2LAJctr9uSXxIuywF7+cJFmy9h7ZFjqJRUhPJ+DW+o5p SSiUCIHmU8xTaJ9sfXQR1E9U7DPxW6Dk -----END CERTIFICATE-----Generated at Thu Sep 18 23:11:00 2025 by rpki-client