$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft File: ShUjM8QF9WZCwv0DscDx5R97ZNY.mft (raw, json) Hash identifier: t6zs0WAjUBgN+74oDTdOzbxV7ciPNZ8EGzKs/losew4= Subject key identifier: C0:43:FA:0C:72:E4:92:8B:B9:47:2E:42:C6:7F:5F:09:68:79:CE:68 Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Certificate serial: 0C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft Manifest number: 0C42 Signing time: Thu 18 Sep 2025 18:50:54 +0000 Manifest this update: Thu 18 Sep 2025 18:50:54 +0000 Manifest next update: Thu 25 Sep 2025 18:50:53 +0000 Files and hashes: 1: ShUjM8QF9WZCwv0DscDx5R97ZNY.crl (hash: WND3xH0teyciZlqTTFBKDBqMqWRVLZAJLo0sXIH2MUE=) 2: EF14DD34B6E211EAB3BA9536C4F9AE02.roa (hash: JvXhjoE9cUV4jCMwgWZkjIHHf+CaNT0a6L5+glk4qjE=) 3: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (hash: B9PgWoUF+TKonGl7pCL92WHmVPwhmrPhSj6ll1DGQwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173BC9, serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Validity Not Before: Sep 18 18:50:54 2025 GMT Not After : Sep 25 18:50:53 2025 GMT Subject: CN=68cc548e-794d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:be:f8:17:e6:4e:28:e1:7e:c3:5b:e3:11: 09:9e:6d:db:b6:0b:19:92:97:77:70:0c:4f:10:70: 92:c8:b8:46:75:62:3d:39:e5:4d:5f:90:b8:85:f6: 61:e1:22:12:2d:7f:0a:e6:2f:3b:69:56:fd:bd:17: b8:c0:32:ab:a2:a4:5f:17:53:9a:24:a9:3d:30:d6: a2:f3:bb:ba:35:4f:c2:e2:14:87:9a:38:f8:e9:3f: db:c6:c0:01:99:55:ee:ef:28:5c:ff:a5:0f:62:f7: b1:e4:ae:a5:87:8c:f6:3e:94:aa:6b:bc:6f:08:4b: 61:11:a1:65:2d:64:87:f4:5a:12:90:a1:c0:dc:19: ee:4f:36:65:5f:a6:a2:2c:83:02:c5:ce:19:06:9b: 44:5e:1f:8a:9e:8c:d0:d9:26:6a:0e:b9:2a:c3:6d: 53:ef:b9:92:a6:20:da:74:1e:cb:05:bc:b2:98:ba: 70:e4:88:8e:1c:c2:b1:24:0a:ef:76:d5:57:1e:23: a1:ff:3b:d3:60:d8:b5:71:a0:cc:ba:fa:3b:9f:90: 34:4a:d4:2d:49:fd:95:75:a9:ba:44:ad:b3:bc:06: 4b:14:f3:66:6b:1d:f0:3f:f5:1c:f1:11:de:1b:17: 15:36:14:d5:f6:2c:a8:a0:9f:4c:4b:58:b6:b3:42: bb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:43:FA:0C:72:E4:92:8B:B9:47:2E:42:C6:7F:5F:09:68:79:CE:68 X509v3 Authority Key Identifier: keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b8:54:53:34:60:3d:a6:7b:d9:ec:64:99:8f:93:2e:2b:da: c5:66:af:78:4e:9a:22:be:5a:ec:62:31:69:3b:b8:9d:70:88: 97:8e:22:ad:eb:a1:41:a7:be:57:b8:64:0b:10:f8:43:b1:ae: 7a:03:6a:be:8a:47:a0:bf:e6:f6:b9:ee:40:fd:be:2e:70:0c: 9d:1d:c4:31:6a:89:35:31:96:7b:0e:71:5b:16:21:d3:a8:61: 05:e9:8b:51:9b:f5:80:b0:74:eb:9e:3f:2d:61:71:b9:dc:05: d1:e7:3b:ba:7c:cf:c9:89:0c:ef:1a:2e:14:7d:52:5b:14:b5: 55:1a:6a:f8:76:38:f8:ac:f0:58:63:a2:5b:98:15:55:4c:96: dc:53:13:a6:28:67:ff:53:11:da:e2:ea:c6:9e:a4:50:7d:36: e1:7f:5d:23:30:54:bc:03:6f:61:61:42:49:24:1e:54:4d:29: e1:2a:b1:2e:fc:31:db:e4:8e:4e:48:83:42:7e:83:db:97:c7: 1c:78:39:80:4c:21:6a:07:49:bc:b7:39:fb:c1:ca:91:2a:60: 01:3a:f2:25:db:d3:99:00:15:7f:15:a3:8e:19:c8:5c:f6:e2: c8:b1:7b:c0:d7:3d:1d:5b:dd:35:d1:59:1b:b4:fc:4c:9f:b2: 8a:67:4c:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCQzkxMTAvBgNVBAUTKDRBMTUyMzMzQzQwNUY1NjY0MkMyRkQwM0IxQzBGMUU1 MUY3QjY0RDYwHhcNMjUwOTE4MTg1MDU0WhcNMjUwOTI1MTg1MDUzWjAYMRYwFAYD VQQDEw02OGNjNTQ4ZS03OTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcK++BfmTijhfsNb4xEJnm3btgsZkpd3cAxPEHCSyLhGdWI9OeVNX5C4hfZh 4SISLX8K5i87aVb9vRe4wDKroqRfF1OaJKk9MNai87u6NU/C4hSHmjj46T/bxsAB mVXu7yhc/6UPYvex5K6lh4z2PpSqa7xvCEthEaFlLWSH9FoSkKHA3BnuTzZlX6ai LIMCxc4ZBptEXh+KnozQ2SZqDrkqw21T77mSpiDadB7LBbyymLpw5IiOHMKxJArv dtVXHiOh/zvTYNi1caDMuvo7n5A0StQtSf2Vdam6RK2zvAZLFPNmax3wP/Uc8RHe GxcVNhTV9iyooJ9MS1i2s0K7LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBD+gxy 5JKLuUcuQsZ/Xwloec5oMB8GA1UdIwQYMBaAFEoVIzPEBfVmQsL9A7HA8eUfe2TW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0JDOS9DNUM4M0NBRTEz QTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlXWkN3djBEc2NEeDVSOTda TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoVWpNOFFGOVdaQ3d2MERzY0R4NVI5N1pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0JDOS9DNUM4M0NBRTEzQTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlX WkN3djBEc2NEeDVSOTdaTlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVuFRTNGA9pnvZ7GSZj5MuK9rFZq94TpoivlrsYjFpO7idcIiXjiKt 66FBp75XuGQLEPhDsa56A2q+ikegv+b2ue5A/b4ucAydHcQxaok1MZZ7DnFbFiHT qGEF6YtRm/WAsHTrnj8tYXG53AXR5zu6fM/JiQzvGi4UfVJbFLVVGmr4djj4rPBY Y6JbmBVVTJbcUxOmKGf/UxHa4urGnqRQfTbhf10jMFS8A29hYUJJJB5UTSnhKrEu /DHb5I5OSINCfoPbl8cceDmATCFqB0m8tzn7wcqRKmABOvIl29OZABV/FaOOGchc 9uLIsXvA1z0dW9010VkbtPxMn7KKZ0yW -----END CERTIFICATE-----Generated at Fri Sep 19 07:12:59 2025 by rpki-client