$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft File: b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft (raw, json) Hash identifier: UhapUqjaQUNzV7rY9qEOJXYv6sll5vzVTOUg6gBWUU4= Subject key identifier: 92:0A:0D:F6:57:8C:CB:3C:91:31:78:B1:E2:1E:DC:84:EE:5F:03:ED Authority key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64 Certificate issuer: /CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft Manifest number: C4 Signing time: Tue 09 Sep 2025 05:57:32 +0000 Manifest this update: Tue 09 Sep 2025 05:57:31 +0000 Manifest next update: Tue 16 Sep 2025 05:57:31 +0000 Files and hashes: 1: b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl (hash: G6ZrknLrrEjkEYwf5olfQ5lKZ1WY9iKt0M2Lnrvkuc4=) 2: 3866993C6A6711EF929E6773C4F9AE02.roa (hash: blrLiUR2o+nqfH3V7oxiwVZEehZHbPAqakKDEvu+zf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CCA, serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764 Validity Not Before: Sep 9 05:57:31 2025 GMT Not After : Sep 16 05:57:31 2025 GMT Subject: CN=68bfc1cb-636b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:84:46:ce:20:6a:8d:8c:eb:4c:36:66:ba: 61:36:4c:9d:6b:41:c0:a8:30:f4:3c:5c:12:c8:1b: da:91:d4:f0:5c:2b:ac:10:7f:a9:d5:c2:17:da:02: 73:68:10:bf:3c:fd:2b:d4:a1:ca:89:69:04:ab:d0: 22:95:05:41:91:3c:db:04:51:72:c6:d6:59:09:59: 29:22:99:d4:89:3d:a5:6d:6c:8c:9f:ab:34:f2:3b: 55:c6:e8:39:ca:e6:0b:98:eb:24:b8:6c:5a:0e:36: a2:fd:52:73:ea:eb:ca:f9:09:d6:d8:c2:a3:c9:8e: 90:90:8d:46:57:99:4e:e8:b1:37:52:d3:c3:3b:ce: 4b:1c:81:e0:1d:77:35:3c:1a:1b:4e:e7:33:a2:44: c1:ce:74:a0:00:6a:a2:38:a6:48:e1:93:72:d8:35: c6:aa:ed:4b:58:2b:ea:3d:1d:b5:6e:56:e5:87:2f: b1:c9:3e:1b:92:1f:49:6f:fb:2c:1b:f6:9f:0d:b7: 72:65:a8:de:c9:eb:95:80:37:a4:d6:80:53:3b:11: 43:90:6b:a8:c2:0b:c3:c3:90:d5:8b:47:f3:fc:7a: 40:6b:13:6d:b6:86:2b:01:06:2f:87:19:7e:ec:1e: 12:fb:26:39:8c:3e:fc:b5:7a:e7:6b:63:de:17:ec: ef:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0A:0D:F6:57:8C:CB:3C:91:31:78:B1:E2:1E:DC:84:EE:5F:03:ED X509v3 Authority Key Identifier: keyid:6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8c:b4:12:ea:54:7e:7b:52:40:49:af:cb:f4:40:25:af:f3: 37:8c:c4:de:3a:8b:fa:41:69:ab:02:cd:f2:44:ad:02:79:65: 23:01:2d:48:c2:25:68:dc:af:92:a2:3e:56:75:55:21:18:67: a6:eb:c1:3e:28:4a:be:9d:23:59:64:b9:41:d7:53:07:7c:d1: 39:34:49:6c:5c:98:73:fd:ec:03:d1:bb:68:a9:61:c8:56:50: 98:f6:84:dc:ff:5d:07:5d:05:cd:68:78:10:a4:6b:6d:ee:ab: a5:ca:df:51:8f:3a:76:60:16:7d:40:dd:dd:61:90:7c:fc:40: 64:a4:f0:ea:6b:06:1e:65:06:7f:8c:78:53:4e:75:9b:64:fb: 4e:d8:27:d9:7d:0e:bc:0c:51:51:db:b8:9d:a0:4a:3c:d5:4b: f0:26:85:e8:66:e9:f1:fe:f3:37:5e:c9:f1:e4:04:ad:7e:6b: 36:9e:8d:bc:cb:d0:ae:b6:04:9a:70:60:43:0e:71:64:72:56: 13:76:88:fa:e6:62:a0:8f:71:59:e9:38:ff:61:23:39:7e:c6: 39:bd:3d:65:cc:b4:47:09:8b:87:67:d2:b0:d1:1c:ee:39:e9: 44:59:d6:59:c3:d6:35:5f:e7:81:dd:ce:bf:72:b6:6f:ce:fb: 57:cb:67:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDQ0ExMTAvBgNVBAUTKDZGRDVCNzQzMUU3MTUwRUQ2NTBGN0YyN0EzRENGOEM1 Q0VBQzc3NjQwHhcNMjUwOTA5MDU1NzMxWhcNMjUwOTE2MDU1NzMxWjAYMRYwFAYD VQQDEw02OGJmYzFjYi02MzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUGERs4gao2M60w2ZrphNkyda0HAqDD0PFwSyBvakdTwXCusEH+p1cIX2gJz aBC/PP0r1KHKiWkEq9AilQVBkTzbBFFyxtZZCVkpIpnUiT2lbWyMn6s08jtVxug5 yuYLmOskuGxaDjai/VJz6uvK+QnW2MKjyY6QkI1GV5lO6LE3UtPDO85LHIHgHXc1 PBobTuczokTBznSgAGqiOKZI4ZNy2DXGqu1LWCvqPR21blblhy+xyT4bkh9Jb/ss G/afDbdyZajeyeuVgDek1oBTOxFDkGuowgvDw5DVi0fz/HpAaxNttoYrAQYvhxl+ 7B4S+yY5jD78tXrna2PeF+zviwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIKDfZX jMs8kTF4seIe3ITuXwPtMB8GA1UdIwQYMBaAFG/Vt0MecVDtZQ9/J6Pc+MXOrHdk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NDQS8xQ0E5QjgyNDY1 NEQxMUVGQjQ0QjdCNThDNEY5QUUwMi9iOVczUXg1eFVPMWxEMzhubzl6NHhjNnNk MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5VzNReDV4VU8xbEQzOG5vOXo0eGM2c2QyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NDQS8xQ0E5QjgyNDY1NEQxMUVGQjQ0QjdCNThDNEY5QUUwMi9iOVczUXg1eFVP MWxEMzhubzl6NHhjNnNkMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtjLQS6lR+e1JASa/L9EAlr/M3jMTeOov6QWmrAs3yRK0CeWUjAS1I wiVo3K+Soj5WdVUhGGem68E+KEq+nSNZZLlB11MHfNE5NElsXJhz/ewD0btoqWHI VlCY9oTc/10HXQXNaHgQpGtt7qulyt9Rjzp2YBZ9QN3dYZB8/EBkpPDqawYeZQZ/ jHhTTnWbZPtO2CfZfQ68DFFR27idoEo81UvwJoXoZunx/vM3Xsnx5AStfms2no28 y9CutgSacGBDDnFkclYTdoj65mKgj3FZ6Tj/YSM5fsY5vT1lzLRHCYuHZ9Kw0Rzu OelEWdZZw9Y1X+eB3c6/crZvzvtXy2fh -----END CERTIFICATE-----Generated at Tue Sep 9 12:43:43 2025 by rpki-client