$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft File: 79iPiiibFMeUQxKLu7eRtS2lEa0.mft (raw, json) Hash identifier: +zokaRx9b3Lq/1kqo7fRYz+KItmLtrAC6LhdvF4xAG4= Subject key identifier: 87:5C:0D:EC:1F:05:9D:34:7F:0A:14:93:F8:FA:D9:0B:4B:D0:D0:CB Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD Certificate issuer: /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft Manifest number: 01E4 Signing time: Fri 19 Sep 2025 03:04:36 +0000 Manifest this update: Fri 19 Sep 2025 03:04:35 +0000 Manifest next update: Fri 26 Sep 2025 03:04:35 +0000 Files and hashes: 1: 79iPiiibFMeUQxKLu7eRtS2lEa0.crl (hash: Bp4fIYNkm/apY627vjFwz79ZiYL1gkdCGMsim8dt2a8=) 2: 9344B512B1BA11ED8DC4D42EC4F9AE02.roa (hash: 05FYul9tCmnEluZqc+GxuuNUpvwFpQ5F6tjIORKsJIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Validity Not Before: Sep 19 03:04:35 2025 GMT Not After : Sep 26 03:04:35 2025 GMT Subject: CN=68ccc843-160d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:49:04:cf:45:10:d1:d6:a8:0e:d3:84:a6:99: e0:c4:56:4e:fa:85:7e:64:0d:dc:4e:84:85:b0:6d: 87:98:f7:05:9c:f3:05:ee:f9:72:3c:63:5b:b9:e1: 8a:a0:e5:1d:84:37:1e:9d:b0:ff:26:86:95:a2:d7: 79:9b:31:bf:63:31:71:89:6d:97:b2:bb:85:42:5e: 9b:6e:85:fc:5f:dc:6b:31:72:c4:cb:db:d3:98:0f: 60:69:c5:5b:02:76:18:c3:c9:25:db:0e:d6:ca:7e: 6a:e1:25:d0:21:26:97:d7:9a:9c:37:e1:86:14:03: af:74:56:81:23:15:ff:d2:9a:8f:ce:2d:88:f4:f6: 32:9f:43:2d:d2:3f:fd:82:62:42:00:6a:71:f4:c9: 38:58:53:41:d0:e2:de:3a:21:b6:3c:12:12:d0:df: 63:72:5c:ec:9b:8f:31:11:a4:57:aa:c7:f4:22:a5: ac:45:75:b8:17:cf:38:87:2f:74:50:92:a5:41:02: f9:13:24:5f:b7:e3:c5:ab:8f:44:22:ab:f0:6a:4e: 7d:bd:36:e2:32:0b:97:1e:1a:7d:da:af:32:dd:3d: 8d:25:84:89:fc:f1:49:a2:af:9b:9a:41:1b:16:8d: 31:e5:db:16:35:df:a0:d2:db:bf:3c:7c:f7:6d:90: e7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5C:0D:EC:1F:05:9D:34:7F:0A:14:93:F8:FA:D9:0B:4B:D0:D0:CB X509v3 Authority Key Identifier: keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:af:4f:44:fa:4c:35:9c:0c:39:f5:45:50:6e:01:48:03:b5: af:79:db:f2:97:a4:b1:ed:23:61:a2:23:90:c2:47:58:db:8a: e2:66:51:7f:d6:7c:da:5c:de:1f:42:76:9c:cf:91:0e:ee:ed: 61:8b:da:b4:b4:6d:fd:80:b1:5b:95:95:60:32:d7:e4:0d:6f: 30:41:84:d8:94:a5:0e:af:52:ca:5d:26:17:2a:82:b3:9f:f2: 9d:fd:9f:b7:62:50:02:e2:77:6b:b3:16:4d:13:75:27:7b:2f: ec:97:93:3e:b8:f0:e1:1a:42:e5:56:32:f6:b1:b7:27:28:fb: ec:7f:9a:c8:1c:37:7f:fb:b5:16:4c:bd:c4:35:6a:eb:de:da: d6:07:55:da:17:e8:2f:c5:76:f0:63:44:1b:48:9b:32:4b:22: af:74:26:11:74:43:f1:a6:79:b4:53:6a:57:d2:1b:b0:d5:51: 75:e9:7a:2f:43:1a:0e:e6:cf:b3:76:6f:28:85:51:a9:bc:15: bf:a6:8d:5f:ea:b9:bf:1f:a8:bd:0b:92:f3:26:da:30:45:63: 48:1b:1d:85:6e:ed:86:40:dd:d8:e3:bd:70:bf:af:f0:be:a0: 07:1d:e4:f9:a8:25:9a:c9:8b:23:91:9a:e9:59:52:f9:76:ad: f1:f4:64:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0YxMTAvBgNVBAUTKEVGRDg4RjhBMjg5QjE0Qzc5NDQzMTI4QkJCQjc5MUI1 MkRBNTExQUQwHhcNMjUwOTE5MDMwNDM1WhcNMjUwOTI2MDMwNDM1WjAYMRYwFAYD VQQDEw02OGNjYzg0My0xNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUkEz0UQ0daoDtOEppngxFZO+oV+ZA3cToSFsG2HmPcFnPMF7vlyPGNbueGK oOUdhDcenbD/JoaVotd5mzG/YzFxiW2XsruFQl6bboX8X9xrMXLEy9vTmA9gacVb AnYYw8kl2w7Wyn5q4SXQISaX15qcN+GGFAOvdFaBIxX/0pqPzi2I9PYyn0Mt0j/9 gmJCAGpx9Mk4WFNB0OLeOiG2PBIS0N9jclzsm48xEaRXqsf0IqWsRXW4F884hy90 UJKlQQL5EyRft+PFq49EIqvwak59vTbiMguXHhp92q8y3T2NJYSJ/PFJoq+bmkEb Fo0x5dsWNd+g0tu/PHz3bZDnAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdcDewf BZ00fwoUk/j62QtL0NDLMB8GA1UdIwQYMBaAFO/Yj4oomxTHlEMSi7u3kbUtpRGt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzRi85QjlDOEU2QUIx QjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZNZVVReEtMdTdlUnRTMmxF YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc5aVBpaWliRk1lVVF4S0x1N2VSdFMybEVhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzRi85QjlDOEU2QUIxQjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZN ZVVReEtMdTdlUnRTMmxFYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvr09E+kw1nAw59UVQbgFIA7Wvedvyl6Sx7SNhoiOQwkdY24riZlF/ 1nzaXN4fQnacz5EO7u1hi9q0tG39gLFblZVgMtfkDW8wQYTYlKUOr1LKXSYXKoKz n/Kd/Z+3YlAC4ndrsxZNE3Uney/sl5M+uPDhGkLlVjL2sbcnKPvsf5rIHDd/+7UW TL3ENWrr3trWB1XaF+gvxXbwY0QbSJsySyKvdCYRdEPxpnm0U2pX0huw1VF16Xov QxoO5s+zdm8ohVGpvBW/po1f6rm/H6i9C5LzJtowRWNIGx2Fbu2GQN3Y471wv6/w vqAHHeT5qCWayYsjkZrpWVL5dq3x9GR9 -----END CERTIFICATE-----Generated at Fri Sep 19 10:20:48 2025 by rpki-client