$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft File: -T76pqbQVK6ZfIo8_yXxacNvigw.mft (raw, json) Hash identifier: qKL2p/qvjacBeLX/r7IX1h+Wn/Waq33AzyJPbxX0Paw= Subject key identifier: A0:8A:5A:AF:DC:87:8C:69:46:E9:08:2B:F0:53:78:D0:45:57:92:C7 Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C Certificate issuer: /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft Manifest number: 0129 Signing time: Fri 05 Sep 2025 05:02:44 +0000 Manifest this update: Fri 05 Sep 2025 05:02:43 +0000 Manifest next update: Fri 12 Sep 2025 05:02:43 +0000 Files and hashes: 1: -T76pqbQVK6ZfIo8_yXxacNvigw.crl (hash: lekCH4P480xIvdlLH1vMKLX6+R6B+GTofIH7BAH9ipg=) 2: 395803C8CDD011EEB4E50681C4F9AE02.roa (hash: U+mu9E/7fBnjCJrDiP1cAMTZViiPy5KDtk1hEO7aXYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Validity Not Before: Sep 5 05:02:43 2025 GMT Not After : Sep 12 05:02:43 2025 GMT Subject: CN=68ba6ef3-d966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:60:2b:a5:5a:5f:4e:36:e0:af:22:12:f2: fc:42:75:d1:e7:42:be:c7:23:6e:ba:ac:45:64:9a: 4e:8c:31:cc:23:d1:6b:ea:64:94:7c:90:d4:bf:fe: 8f:59:22:dd:5d:d6:bb:db:bc:af:e6:aa:2a:4e:7b: 57:b2:19:a3:27:32:64:d4:b7:32:d2:a2:85:1e:67: 01:b5:c5:cc:a2:7d:8a:14:8f:0f:69:76:aa:98:ac: a7:92:dd:09:11:14:da:49:3e:28:cc:c2:ef:9d:f0: 3d:d6:e8:de:ec:94:6a:55:67:b5:c4:a8:95:85:c2: d6:2a:f5:36:60:26:27:f3:73:89:ea:d7:38:39:34: b5:88:4c:3e:10:e9:bd:c0:ff:d9:38:f1:9c:e3:40: 58:e0:f6:9e:77:06:7b:23:e8:d0:02:bb:9c:32:ea: 7d:62:04:45:69:51:cb:93:8a:a1:99:eb:ea:62:0d: 17:f6:a4:3f:4e:b2:78:e7:4e:70:a7:66:e5:3d:73: a2:03:97:64:26:e5:77:4a:07:87:61:42:e7:32:11: f8:31:89:e5:a1:f2:94:96:b9:13:1f:35:8a:85:30: 97:93:27:3a:70:e5:cb:4b:a8:e5:d4:93:a8:ed:7b: 6b:c4:03:5b:82:3a:05:3d:9c:1b:89:8f:b8:40:84: 82:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8A:5A:AF:DC:87:8C:69:46:E9:08:2B:F0:53:78:D0:45:57:92:C7 X509v3 Authority Key Identifier: keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c2:f8:f9:58:fc:b7:68:6a:43:15:14:79:f5:6d:65:e4:57: da:e2:3e:bf:8a:9c:a9:a8:28:c9:5f:ed:11:b4:98:02:3f:5c: 89:30:59:d1:60:b7:66:06:fc:0e:2d:60:6a:17:8c:5a:88:75: 0a:b8:73:8d:f5:9f:1f:cd:27:5c:6d:d5:74:70:cd:c4:e9:2c: da:c0:94:ef:7c:96:41:7d:c3:f7:a0:cb:14:a9:e5:80:af:59: ab:46:bc:4c:c8:0e:d9:51:c6:9a:c8:2d:a8:c8:fe:1f:6b:a7: a2:8c:40:4e:8a:90:bb:9b:aa:2d:c6:d7:8f:17:99:4c:aa:8a: 5d:1b:c1:21:28:ba:56:24:5b:ae:cb:dd:e9:a3:74:56:97:65: 64:ff:ef:6c:2a:f0:bf:9a:cf:67:16:f2:f6:e5:0f:18:46:24: d0:a8:44:1e:4a:a4:9d:37:f2:a1:59:e6:7f:fe:c1:5f:0b:7f: 28:55:b5:54:83:5c:a7:e8:e6:cb:a3:2c:6e:ff:2d:ab:17:31: f9:48:03:8a:cb:9d:ef:67:8f:b7:c2:d1:01:31:b7:7e:5c:f6: 40:13:3c:df:9d:41:55:b0:74:61:42:6f:e7:9e:cb:13:48:01: 93:63:72:72:ff:5b:25:20:33:71:2e:9a:a6:65:0b:d4:74:91: 1c:01:09:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKEY5M0VGQUE2QTZEMDU0QUU5OTdDOEEzQ0ZGMjVGMTY5 QzM2RjhBMEMwHhcNMjUwOTA1MDUwMjQzWhcNMjUwOTEyMDUwMjQzWjAYMRYwFAYD VQQDEw02OGJhNmVmMy1kOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjhgK6VaX0424K8iEvL8QnXR50K+xyNuuqxFZJpOjDHMI9Fr6mSUfJDUv/6P WSLdXda727yv5qoqTntXshmjJzJk1Lcy0qKFHmcBtcXMon2KFI8PaXaqmKynkt0J ERTaST4ozMLvnfA91uje7JRqVWe1xKiVhcLWKvU2YCYn83OJ6tc4OTS1iEw+EOm9 wP/ZOPGc40BY4PaedwZ7I+jQArucMup9YgRFaVHLk4qhmevqYg0X9qQ/TrJ4505w p2blPXOiA5dkJuV3SgeHYULnMhH4MYnlofKUlrkTHzWKhTCXkyc6cOXLS6jl1JOo 7XtrxANbgjoFPZwbiY+4QISCbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCKWq/c h4xpRukIK/BTeNBFV5LHMB8GA1UdIwQYMBaAFPk++qam0FSumXyKPP8l8WnDb4oM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9COTg5RjhBMkM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZLNlpmSW84X3lYeGFjTnZp Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1UNzZwcWJRVks2WmZJbzhfeVh4YWNOdmlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9COTg5RjhBMkM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZL NlpmSW84X3lYeGFjTnZpZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMwvj5WPy3aGpDFRR59W1l5Ffa4j6/ipypqCjJX+0RtJgCP1yJMFnR YLdmBvwOLWBqF4xaiHUKuHON9Z8fzSdcbdV0cM3E6SzawJTvfJZBfcP3oMsUqeWA r1mrRrxMyA7ZUcaayC2oyP4fa6eijEBOipC7m6otxtePF5lMqopdG8EhKLpWJFuu y93po3RWl2Vk/+9sKvC/ms9nFvL25Q8YRiTQqEQeSqSdN/KhWeZ//sFfC38oVbVU g1yn6ObLoyxu/y2rFzH5SAOKy53vZ4+3wtEBMbd+XPZAEzzfnUFVsHRhQm/nnssT SAGTY3Jy/1slIDNxLpqmZQvUdJEcAQmm -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:17 2025 by rpki-client