$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json) Hash identifier: FrImDv/B+37QgFOyVVMEVZ81D6BPfF+uIcaNjSK2msw= Subject key identifier: 8D:29:26:BA:8B:CD:78:B8:D4:DA:DC:03:B2:2F:C0:A8:31:43:73:24 Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft Manifest number: 0196 Signing time: Tue 09 Sep 2025 03:29:14 +0000 Manifest this update: Tue 09 Sep 2025 03:29:14 +0000 Manifest next update: Tue 16 Sep 2025 03:29:14 +0000 Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: rZbi5lcOCuM+Yc3jSum1rEQxWji90Cib06lRJepDyPo=) 2: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: 0v/buppkF/DfpCpfVlA0Y6wo8IqosGS/hcXir1bpF1E=) 3: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: 4HA85tehk5/AiNaVc0PdrtNvf1FpOWqjUJ6QboHlbHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Validity Not Before: Sep 9 03:29:14 2025 GMT Not After : Sep 16 03:29:14 2025 GMT Subject: CN=68bf9f0a-895e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2a:28:0f:44:1a:09:2e:06:b6:ce:bf:63:67: b4:b8:0f:31:a6:ac:b5:93:bd:e1:e0:a5:cd:0e:8b: 81:10:de:60:bc:2b:60:65:fe:9b:40:b2:8b:ca:76: 2a:85:43:48:d2:5f:40:30:48:4a:f8:34:ab:94:b9: d9:00:42:28:16:ba:c1:0b:5f:ed:0e:2b:a5:67:d7: 8e:14:8d:b9:81:89:d9:86:bd:48:0d:49:7d:5c:59: 5f:a9:ca:58:4a:de:68:92:17:63:90:1d:35:b4:e1: a1:02:ca:66:e1:cf:11:41:71:2f:53:2c:e2:80:29: aa:3b:b3:8c:d9:07:8f:ac:09:7a:1a:bd:b0:21:17: c5:06:e1:a1:1c:47:65:76:be:2d:2c:9d:b3:b9:58: 59:c6:9a:0a:18:6d:a5:52:89:56:01:c8:16:e1:2f: de:83:89:1a:68:95:1c:9f:da:3b:fb:7b:be:bb:a2: 8d:18:02:95:24:94:e1:47:ca:e1:10:f2:8b:ee:fc: cb:0e:41:53:7d:04:30:73:16:06:a2:98:4d:1d:74: 35:9b:5e:22:36:9f:f6:00:7a:9d:7c:9a:92:2a:a7: 09:ef:99:05:b6:55:12:94:b4:ee:69:cf:d1:ed:9d: f1:70:c6:80:2d:b6:9c:c0:5c:b0:71:6d:67:3b:b4: 36:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:29:26:BA:8B:CD:78:B8:D4:DA:DC:03:B2:2F:C0:A8:31:43:73:24 X509v3 Authority Key Identifier: keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:92:d8:a2:87:7d:6d:02:38:70:a0:a0:a7:17:9c:83:d9:a7: 10:c7:5a:74:53:4b:0d:8d:5d:e7:07:85:ed:b8:53:91:50:bf: aa:c9:9f:2a:1b:77:16:98:87:b5:96:f0:87:b3:3f:b9:ae:8a: e2:78:99:75:b6:a4:98:06:7d:18:30:06:6c:65:30:ad:0d:ab: 9e:29:ad:1e:75:0c:df:b7:fd:de:07:e0:fd:a0:7b:cf:19:2b: b7:38:71:e8:e9:2b:59:5a:81:a0:e7:09:d8:73:09:f8:10:7a: 90:f9:d2:0b:d2:ec:d0:bb:fb:fa:5e:bd:b4:ca:d0:70:6c:ac: 8c:ae:e3:3f:51:ef:3f:df:28:eb:24:5f:da:90:bc:30:f6:64: c2:a9:d0:ef:69:11:97:bf:fb:61:30:72:96:cb:7e:68:81:f5: b3:64:6c:e8:79:be:d3:64:fe:0e:fa:82:7a:fa:c8:58:97:c8: 72:39:7c:b1:23:38:e0:a5:94:53:84:e6:e8:45:0f:0f:e1:59: 10:70:b5:4f:36:7c:dc:94:73:70:c9:76:c9:8b:01:4b:8e:57: 63:c2:e0:02:bc:2a:cd:f5:da:32:8d:4a:e6:ee:37:2b:b6:83: ab:b1:2f:c8:11:ad:8f:90:82:4c:bc:a1:e8:8d:c1:b2:86:b4: 77:b3:53:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZERkMxMTAvBgNVBAUTKEIwMzUyQUJCNDNGMEE4NTU2NDlCOUQ3NjFBNjU1QzNG QzYwRjZFNjMwHhcNMjUwOTA5MDMyOTE0WhcNMjUwOTE2MDMyOTE0WjAYMRYwFAYD VQQDEw02OGJmOWYwYS04OTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5iooD0QaCS4Gts6/Y2e0uA8xpqy1k73h4KXNDouBEN5gvCtgZf6bQLKLynYq hUNI0l9AMEhK+DSrlLnZAEIoFrrBC1/tDiulZ9eOFI25gYnZhr1IDUl9XFlfqcpY St5okhdjkB01tOGhAspm4c8RQXEvUyzigCmqO7OM2QePrAl6Gr2wIRfFBuGhHEdl dr4tLJ2zuVhZxpoKGG2lUolWAcgW4S/eg4kaaJUcn9o7+3u+u6KNGAKVJJThR8rh EPKL7vzLDkFTfQQwcxYGophNHXQ1m14iNp/2AHqdfJqSKqcJ75kFtlUSlLTuac/R 7Z3xcMaALbacwFywcW1nO7Q2dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0pJrqL zXi41NrcA7IvwKgxQ3MkMB8GA1UdIwQYMBaAFLA1KrtD8KhVZJuddhplXD/GD25j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkRGQy9CRTQwQzEzNjI0 OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FGVmttNTEyR21WY1A4WVBi bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NEVXF1MFB3cUZWa201MTJHbVZjUDhZUGJtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkRGQy9CRTQwQzEzNjI0OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FG VmttNTEyR21WY1A4WVBibU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmktiih31tAjhwoKCnF5yD2acQx1p0U0sNjV3nB4XtuFORUL+qyZ8q G3cWmIe1lvCHsz+5rorieJl1tqSYBn0YMAZsZTCtDaueKa0edQzft/3eB+D9oHvP GSu3OHHo6StZWoGg5wnYcwn4EHqQ+dIL0uzQu/v6Xr20ytBwbKyMruM/Ue8/3yjr JF/akLww9mTCqdDvaRGXv/thMHKWy35ogfWzZGzoeb7TZP4O+oJ6+shYl8hyOXyx IzjgpZRThOboRQ8P4VkQcLVPNnzclHNwyXbJiwFLjldjwuACvCrN9doyjUrm7jcr toOrsS/IEa2PkIJMvKHojcGyhrR3s1Os -----END CERTIFICATE-----Generated at Wed Sep 10 13:35:11 2025 by rpki-client