$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json) Hash identifier: tugQJw78Aox+xzzU2kcr9NKfY3Z13sU9HzC5dyt2DUk= Subject key identifier: C8:DC:3E:44:76:9D:04:4F:CD:08:8D:2C:33:6C:EE:DF:2E:09:B5:C4 Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft Manifest number: B6 Signing time: Fri 19 Sep 2025 06:38:09 +0000 Manifest this update: Fri 19 Sep 2025 06:38:09 +0000 Manifest next update: Fri 26 Sep 2025 06:38:09 +0000 Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: Ka0ICvTVIyUFqkOF4qhihsCciDh3mhDpZal0+3EM7z8=) 2: 75B289249B4311EFA6D2403DC4F9AE02.roa (hash: C1wubfWXdpG304JONiKw+mbOc+sIyxib62Hzqan2NP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 06:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Validity Not Before: Sep 19 06:38:09 2025 GMT Not After : Sep 26 06:38:09 2025 GMT Subject: CN=68ccfa51-0b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:2b:e0:cc:3b:1b:4b:41:89:8f:21:ab:97: da:d9:48:80:1a:99:88:2e:c5:23:ca:13:23:a0:61: d2:9b:2e:3e:5e:92:d2:b0:07:48:f2:ab:5d:1c:21: 4b:2d:64:20:b8:b2:1f:68:ee:e9:75:68:d7:24:62: 71:f5:97:27:ec:62:b4:d8:69:c7:60:1c:5d:14:f7: ff:4d:9e:bc:cc:86:6a:1e:47:13:44:c3:79:46:b9: 9c:c2:20:57:21:6f:7f:df:03:3b:e9:98:8d:7d:32: bc:42:06:da:8e:42:74:15:74:64:23:a9:13:a7:59: 5c:d1:cb:0c:b4:58:0a:e2:21:f5:cd:40:21:47:b4: b2:fb:cd:c8:c2:a1:d9:93:35:5f:ac:2f:f8:53:11: 00:5b:3c:86:4b:0d:9d:7a:9e:74:79:8a:14:89:19: b7:6b:70:60:f8:05:10:61:6f:8d:bd:91:d9:29:a6: e0:18:0b:8d:37:9e:7d:94:50:b9:08:6a:78:70:c3: 63:fb:b2:09:5b:8b:26:59:16:9c:f9:09:d8:47:b7: 59:18:06:d4:cd:ea:dd:30:9d:e2:98:b7:27:c9:ab: 1e:6f:db:e9:55:51:71:37:3c:76:7b:f5:95:c8:f4: 2f:fa:07:b6:1c:4c:66:9a:79:26:d8:8f:52:25:fe: c0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DC:3E:44:76:9D:04:4F:CD:08:8D:2C:33:6C:EE:DF:2E:09:B5:C4 X509v3 Authority Key Identifier: keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:70:a1:5b:e4:f7:f8:3b:cb:28:d3:4c:f4:cb:eb:95:53:52: de:e9:68:c5:33:a8:12:76:dd:10:0f:35:16:20:60:9d:b5:0e: 38:40:cf:21:d6:60:09:a9:f0:04:a9:7d:b7:68:7e:31:66:99: 7e:73:44:fb:2c:ea:c7:fa:6d:32:92:ec:01:4e:73:49:6a:ed: 80:fc:07:9e:bf:f7:08:0b:15:77:84:60:7d:90:d0:96:d2:53: fb:be:f4:a2:c8:e6:85:6d:4a:74:05:c8:74:e5:09:06:52:22: cb:7b:e9:45:67:50:dc:68:85:b7:66:c5:93:e3:11:14:6b:1f: 46:e8:56:12:0a:56:83:db:3d:e2:09:d4:ef:31:9e:db:0b:b4: c7:bf:65:87:5d:ae:8e:0f:d3:01:f5:2c:7b:6e:46:4d:76:b6: a6:e0:ab:64:6c:5f:9a:0a:fc:30:17:6c:69:3f:2a:5c:96:c5: 1b:e6:f7:ac:60:0b:bb:ba:57:ab:53:19:97:75:a8:d0:dc:1d: c1:9b:4a:ce:b8:5d:0e:71:14:51:ff:0a:bc:b0:b3:a5:47:b1: f7:85:ce:7a:94:cb:a7:bf:64:14:46:52:58:7c:35:f9:a5:1d: a1:82:66:75:c3:af:aa:12:e6:ce:8f:2e:81:ba:34:96:9c:13: 1e:fd:5e:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKERDNkEyMzc0QzUxNEU4Q0Y0QUM3NjRBMEYzQzg0NkYw OUIzM0QyODIwHhcNMjUwOTE5MDYzODA5WhcNMjUwOTI2MDYzODA5WjAYMRYwFAYD VQQDEw02OGNjZmE1MS0wYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvAr4Mw7G0tBiY8hq5fa2UiAGpmILsUjyhMjoGHSmy4+XpLSsAdI8qtdHCFL LWQguLIfaO7pdWjXJGJx9Zcn7GK02GnHYBxdFPf/TZ68zIZqHkcTRMN5RrmcwiBX IW9/3wM76ZiNfTK8QgbajkJ0FXRkI6kTp1lc0csMtFgK4iH1zUAhR7Sy+83IwqHZ kzVfrC/4UxEAWzyGSw2dep50eYoUiRm3a3Bg+AUQYW+NvZHZKabgGAuNN559lFC5 CGp4cMNj+7IJW4smWRac+QnYR7dZGAbUzerdMJ3imLcnyaseb9vpVVFxNzx2e/WV yPQv+ge2HExmmnkm2I9SJf7AuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjcPkR2 nQRPzQiNLDNs7t8uCbXEMB8GA1UdIwQYMBaAFNxqI3TFFOjPSsdkoPPIRvCbM9KC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS82NDIzQkUwNjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi8zR29qZE1VVTZNOUt4MlNnODhoRzhKc3ow b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHb2pkTVVVNk05S3gyU2c4OGhHOEpzejBvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS82NDIzQkUwNjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi8zR29qZE1VVTZN OUt4MlNnODhoRzhKc3owb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+cKFb5Pf4O8so00z0y+uVU1Le6WjFM6gSdt0QDzUWIGCdtQ44QM8h 1mAJqfAEqX23aH4xZpl+c0T7LOrH+m0ykuwBTnNJau2A/Aeev/cICxV3hGB9kNCW 0lP7vvSiyOaFbUp0Bch05QkGUiLLe+lFZ1DcaIW3ZsWT4xEUax9G6FYSClaD2z3i CdTvMZ7bC7THv2WHXa6OD9MB9Sx7bkZNdram4KtkbF+aCvwwF2xpPypclsUb5ves YAu7ulerUxmXdajQ3B3Bm0rOuF0OcRRR/wq8sLOlR7H3hc56lMunv2QURlJYfDX5 pR2hgmZ1w6+qEubOjy6BujSWnBMe/V7M -----END CERTIFICATE-----Generated at Fri Sep 19 16:45:19 2025 by rpki-client