$ rpki-client -vvf rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft File: Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft (raw, json) Hash identifier: cckcHElbH3G9bqoGBrf4B1SbVkgEiPi7mZNXZi1Ii0g= Subject key identifier: 17:03:4B:1E:4A:04:96:40:5C:0C:72:EF:51:9A:12:B6:FD:2F:48:CB Authority key identifier: 45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6 Certificate issuer: /CN=A9178580/serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6 Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft Manifest number: 0669 Signing time: Thu 18 Sep 2025 22:49:12 +0000 Manifest this update: Thu 18 Sep 2025 22:49:12 +0000 Manifest next update: Thu 25 Sep 2025 22:49:12 +0000 Files and hashes: 1: Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl (hash: UH+ArB//VSSMoj/uLIIZI34QO8aKfKv3AaWAroHNG8I=) 2: EA266BB0965911EB9A717E21C4F9AE02.roa (hash: unXzVSB7rlCBOdPMYdpaMnBlAZNAT9x8+AUdN+A92PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178580, serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6 Validity Not Before: Sep 18 22:49:12 2025 GMT Not After : Sep 25 22:49:12 2025 GMT Subject: CN=68cc8c68-39a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:97:33:f8:38:8f:fa:c1:ba:83:7e:0a:1d:5e: f5:01:c7:12:4a:bd:4c:e6:f5:a4:5c:55:a6:f6:0d: d9:3b:7c:76:7d:c6:f3:d2:23:72:1b:9f:e6:cc:ac: 88:54:be:dc:6a:35:e9:1d:d0:a3:33:68:9a:37:a5: a4:37:95:e5:6e:2d:8e:a0:c8:91:85:43:48:0d:1b: 3b:d1:b9:2f:60:fc:55:29:66:9b:cd:b4:b3:7a:76: 2c:69:8d:5e:d6:98:df:82:9b:8c:d5:ef:8b:ae:cc: 86:03:db:ea:45:dc:d3:8c:21:95:50:cd:15:3d:d6: a3:5c:c7:bb:57:1a:87:f0:a9:9c:ca:91:9d:f3:35: 10:72:79:bf:f1:be:dc:d0:c7:22:dd:4b:1d:1a:25: 51:36:53:e9:ac:68:b2:51:3a:d3:bc:87:90:93:b0: 19:d5:c0:e2:cb:5c:3d:80:b8:93:6f:33:c4:a0:49: 1d:e2:b9:4e:87:9d:90:0c:5a:a8:c8:80:71:ac:01: 32:17:ce:83:3d:a5:80:a9:8a:dc:31:c5:19:8b:30: cd:dc:f6:8f:91:e9:b2:1c:0d:91:9f:65:df:25:3a: 00:9a:36:c7:09:d4:f3:b5:99:26:0d:3c:a5:44:d8: ce:af:8e:b4:d7:95:d8:c9:ce:47:8e:38:01:6e:58: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:03:4B:1E:4A:04:96:40:5C:0C:72:EF:51:9A:12:B6:FD:2F:48:CB X509v3 Authority Key Identifier: keyid:45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c3:18:1f:5b:3f:e2:e0:04:a3:30:7f:f0:61:f8:56:a3:60: 11:16:ca:c0:0f:f6:1a:0c:6b:66:40:4f:57:d3:a0:04:aa:4b: 36:d8:1c:51:8b:d7:db:c7:29:b8:12:c8:f2:fe:48:c5:4b:7e: 1a:53:cd:c5:91:9a:c3:a5:a2:9c:8e:18:5a:9b:1a:e7:1e:b5: d4:15:5e:c9:a9:68:47:0d:55:be:6d:6f:96:bd:75:8b:51:88: c9:20:b6:cf:64:13:7a:4d:cb:5c:43:f5:52:a6:7a:63:53:ac: 94:8f:cb:89:76:99:54:3c:80:da:9e:10:42:d3:df:98:c9:61: fd:14:20:9c:6e:70:bf:69:54:55:68:95:fa:ed:c7:d6:7c:be: 45:28:f6:47:1a:8a:8b:71:49:87:44:fa:e5:52:6c:01:a7:81: a0:19:81:cc:f2:1a:80:fc:01:00:4f:97:cb:a2:15:67:2b:cc: 35:49:c6:e3:17:ac:7a:d8:f6:72:9a:42:e3:46:25:92:f5:c4: 85:34:84:34:05:a2:11:39:81:ba:a5:60:2d:77:76:55:d6:6c: 1a:b9:99:ff:d7:2e:d7:b6:fb:91:19:51:16:a9:e7:47:08:5b: 34:68:d3:7e:34:0f:27:4d:0b:83:96:3b:70:55:39:04:4b:2c: 54:8b:0f:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg1ODAxMTAvBgNVBAUTKDQ1QzlCOUJENDdEODIxODQ4NTk5QTY3RDdGMjI5NTZF MDkxM0M3RjYwHhcNMjUwOTE4MjI0OTEyWhcNMjUwOTI1MjI0OTEyWjAYMRYwFAYD VQQDEw02OGNjOGM2OC0zOWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pcz+DiP+sG6g34KHV71AccSSr1M5vWkXFWm9g3ZO3x2fcbz0iNyG5/mzKyI VL7cajXpHdCjM2iaN6WkN5Xlbi2OoMiRhUNIDRs70bkvYPxVKWabzbSzenYsaY1e 1pjfgpuM1e+LrsyGA9vqRdzTjCGVUM0VPdajXMe7VxqH8KmcypGd8zUQcnm/8b7c 0Mci3UsdGiVRNlPprGiyUTrTvIeQk7AZ1cDiy1w9gLiTbzPEoEkd4rlOh52QDFqo yIBxrAEyF86DPaWAqYrcMcUZizDN3PaPkemyHA2Rn2XfJToAmjbHCdTztZkmDTyl RNjOr46015XYyc5HjjgBblhjnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcDSx5K BJZAXAxy71GaErb9L0jLMB8GA1UdIwQYMBaAFEXJub1H2CGEhZmmfX8ilW4JE8f2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODU4MC8zOUY5NjZGODk2 NTgxMUVCQURGNDY0MUZDNEY5QUUwMi9SY201dlVmWUlZU0ZtYVo5ZnlLVmJna1R4 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjbTV2VWZZSVlTRm1hWjlmeUtWYmdrVHhfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODU4MC8zOUY5NjZGODk2NTgxMUVCQURGNDY0MUZDNEY5QUUwMi9SY201dlVmWUlZ U0ZtYVo5ZnlLVmJna1R4X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYwxgfWz/i4ASjMH/wYfhWo2ARFsrAD/YaDGtmQE9X06AEqks22BxR i9fbxym4Esjy/kjFS34aU83FkZrDpaKcjhhamxrnHrXUFV7JqWhHDVW+bW+WvXWL UYjJILbPZBN6TctcQ/VSpnpjU6yUj8uJdplUPIDanhBC09+YyWH9FCCcbnC/aVRV aJX67cfWfL5FKPZHGoqLcUmHRPrlUmwBp4GgGYHM8hqA/AEAT5fLohVnK8w1Scbj F6x62PZymkLjRiWS9cSFNIQ0BaIROYG6pWAtd3ZV1mwauZn/1y7XtvuRGVEWqedH CFs0aNN+NA8nTQuDljtwVTkESyxUiw8K -----END CERTIFICATE-----Generated at Fri Sep 19 10:56:50 2025 by rpki-client