$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft File: MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json) Hash identifier: 0OrxoQSoDQhxjquZDu8iJIzoVkAppznHYgy5GPs+ghg= Subject key identifier: 2C:AE:A3:1E:67:02:28:90:46:28:C2:86:58:99:44:2E:32:04:04:9C Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft Manifest number: 84 Signing time: Mon 08 Sep 2025 10:42:55 +0000 Manifest this update: Mon 08 Sep 2025 10:42:54 +0000 Manifest next update: Mon 15 Sep 2025 10:42:54 +0000 Files and hashes: 1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: noym6BQbPLARvMR4x+p112leCwm4XGDoHvyxDVPYcSs=) 2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: n1G7k97SCi1E0F5L2qwSgFjYO87zsHvS8iNN7lEZeuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 10:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Validity Not Before: Sep 8 10:42:54 2025 GMT Not After : Sep 15 10:42:54 2025 GMT Subject: CN=68beb32f-9199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7a:a7:9f:79:7c:3a:e7:8a:e8:f0:cf:39:5e: 8d:ef:b0:e3:50:ee:a3:8d:43:9f:d9:36:60:b0:a0: 7b:6c:9e:10:60:00:9d:80:3a:10:01:4c:e8:a3:69: df:7e:d4:61:76:2b:74:94:14:dd:15:23:b5:88:a2: 2c:2e:26:51:dd:3d:13:b9:72:d4:5e:18:3b:94:62: 07:5a:c7:ad:71:8c:22:21:45:6a:b4:65:0f:a1:f4: 7a:ff:c4:04:0f:76:3f:24:a5:0b:bc:30:86:41:59: 96:e9:df:8f:14:51:9e:77:cf:77:b2:28:e0:02:c6: e2:82:23:20:cf:bd:f6:53:4c:d5:4e:d1:a8:99:89: f3:19:6b:88:51:2d:12:3e:45:ec:07:04:00:19:c1: 60:7f:b9:11:43:2c:54:1c:07:88:20:f2:da:ef:f3: 52:ef:39:fd:32:42:e8:9e:f1:25:23:5b:c1:ef:fe: e2:40:38:79:76:41:4d:5c:b0:a3:6c:1e:8a:6e:80: c3:b6:a2:d6:d2:9e:51:08:4e:09:2b:61:fa:3b:ad: 68:1b:df:be:8b:3a:a7:a5:9b:41:cf:f8:ad:11:3d: 41:52:e6:ee:de:97:d8:df:0e:88:fa:28:89:9c:ac: a7:19:4a:98:3b:db:e2:23:93:e6:b1:4a:f4:8d:66: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AE:A3:1E:67:02:28:90:46:28:C2:86:58:99:44:2E:32:04:04:9C X509v3 Authority Key Identifier: keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d5:f4:f0:75:ff:06:28:95:76:22:60:1e:94:82:42:bc:f3: 78:a5:ed:6d:5b:76:f8:24:09:f0:0a:99:3d:8b:8f:c3:f8:40: 61:04:98:0b:6c:52:9f:26:72:20:4a:c5:d7:74:53:6d:1c:1d: 39:c8:04:67:a2:c6:57:9a:48:27:29:5d:37:f0:ac:9c:42:95: c1:05:5b:9e:92:e5:31:51:be:65:dc:c6:6b:49:6c:d3:a4:eb: cd:7d:cf:74:1e:ef:4e:1b:cb:53:ef:2f:23:ee:45:2c:21:34: f6:08:eb:d3:8a:3e:99:3a:44:42:4a:13:fa:76:16:68:7f:d4: de:d2:9d:24:f1:1f:02:73:db:2a:20:f7:31:eb:b6:82:0a:4c: 6a:64:85:8b:6d:39:63:05:a0:44:b2:19:ec:e1:75:bd:ed:cd: 8d:d3:5a:78:ed:5b:5d:e4:30:38:86:7f:c9:53:5e:72:c2:d1: a7:79:03:b9:18:ef:ad:60:fc:47:cb:9f:e1:73:4a:e1:ea:df: 4c:96:c8:7f:21:fc:08:e6:46:97:f7:f4:e6:69:59:87:fc:fa: ab:38:12:78:14:e3:3a:44:7a:a8:42:3f:d9:96:c0:93:2d:a7: 06:f3:10:15:c8:98:3b:31:f3:2e:81:ea:d8:3d:10:ca:6f:8d: b6:ba:73:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBQjgxMTAvBgNVBAUTKDMxODhGOUI5RjVFOTBBRkIwREIwREU2NTY1RjAyQzkw QkVFQTQ4RDAwHhcNMjUwOTA4MTA0MjU0WhcNMjUwOTE1MTA0MjU0WjAYMRYwFAYD VQQDEw02OGJlYjMyZi05MTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Xqnn3l8OueK6PDPOV6N77DjUO6jjUOf2TZgsKB7bJ4QYACdgDoQAUzoo2nf ftRhdit0lBTdFSO1iKIsLiZR3T0TuXLUXhg7lGIHWsetcYwiIUVqtGUPofR6/8QE D3Y/JKULvDCGQVmW6d+PFFGed893sijgAsbigiMgz732U0zVTtGomYnzGWuIUS0S PkXsBwQAGcFgf7kRQyxUHAeIIPLa7/NS7zn9MkLonvElI1vB7/7iQDh5dkFNXLCj bB6KboDDtqLW0p5RCE4JK2H6O61oG9++izqnpZtBz/itET1BUubu3pfY3w6I+iiJ nKynGUqYO9viI5PmsUr0jWatawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyuox5n AiiQRijChliZRC4yBAScMB8GA1UdIwQYMBaAFDGI+bn16Qr7DbDeZWXwLJC+6kjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zQjBBOUM2NEQx QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2c05zTjVsWmZBc2tMN3FT TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01ZajV1ZlhwQ3ZzTnNONWxaZkFza0w3cVNOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEFCOC8zQjBBOUM2NEQxQjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2 c05zTjVsWmZBc2tMN3FTTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA01fTwdf8GKJV2ImAelIJCvPN4pe1tW3b4JAnwCpk9i4/D+EBhBJgL bFKfJnIgSsXXdFNtHB05yARnosZXmkgnKV038KycQpXBBVuekuUxUb5l3MZrSWzT pOvNfc90Hu9OG8tT7y8j7kUsITT2COvTij6ZOkRCShP6dhZof9Te0p0k8R8Cc9sq IPcx67aCCkxqZIWLbTljBaBEshns4XW97c2N01p47Vtd5DA4hn/JU15ywtGneQO5 GO+tYPxHy5/hc0rh6t9Mlsh/IfwI5kaX9/TmaVmH/PqrOBJ4FOM6RHqoQj/ZlsCT LacG8xAVyJg7MfMugerYPRDKb422unMI -----END CERTIFICATE-----Generated at Tue Sep 9 06:39:23 2025 by rpki-client