$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: otxDgF9tsKLKYc7IN+7fKrvhhomclMVrjVb/rg39Dnc= Subject key identifier: 62:F3:CE:58:D3:74:46:2B:AE:C8:BE:65:BA:C8:88:98:EB:7F:FE:FB Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0CEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0CD0 Signing time: Mon 08 Sep 2025 18:12:09 +0000 Manifest this update: Mon 08 Sep 2025 18:12:08 +0000 Manifest next update: Mon 15 Sep 2025 18:12:08 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: V9GFFPIekdjxQCam50uqGG2GWXeaMpHG5znolShDmx8=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: bcWV9If/HkIEw6hnBH3pLaQkTOmCSNPL+NkOOV2t9w0=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: Kha4B3O3qamR+l9aTTTF0PytPbYw8JUKGu9zz6Pcn9M=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3310 (0xcee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Sep 8 18:12:08 2025 GMT Not After : Sep 15 18:12:08 2025 GMT Subject: CN=68bf1c78-9253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9d:d9:9b:6f:37:ab:f8:59:2e:b7:90:51:36: 45:6f:57:02:ac:f9:4f:da:7b:7e:37:12:b2:8e:d5: 97:73:5f:d9:e7:05:86:eb:65:59:ee:da:65:0f:11: a8:14:61:95:d2:ca:90:ab:c8:01:0e:0d:b1:ce:55: 59:68:17:cb:8e:ec:98:94:dc:9e:c4:80:c4:27:87: 9a:8e:b5:9d:12:c0:7b:40:f7:f1:8b:a4:7d:6d:bf: 2f:5d:1f:05:55:3f:44:54:3d:47:ed:fb:4d:33:d8: c5:36:b4:c4:41:57:a5:1e:c1:08:d0:d4:0f:48:56: 4e:e7:b9:dd:8f:ff:39:b0:99:6e:5d:80:b4:35:14: cf:28:2c:ec:b6:3a:b6:2f:e4:5e:13:aa:5f:0b:47: 65:e4:ed:ac:d4:52:ff:c1:16:4f:1c:15:00:a7:89: 83:b6:f3:a1:ef:d8:ee:3f:a1:4b:dc:6a:ee:1a:92: 2b:2e:bc:a9:5d:4f:db:cc:10:b2:b7:fb:86:6b:6f: f2:7f:a5:35:b9:da:cf:8c:59:af:2e:07:03:7c:6a: f2:26:b6:69:c6:30:2e:5b:50:31:58:cf:d5:e2:f3: ed:a7:be:84:d5:79:be:9b:1c:54:35:17:0b:ac:e5: 34:81:77:17:bd:3e:2e:64:4e:50:24:e0:e8:b1:b2: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F3:CE:58:D3:74:46:2B:AE:C8:BE:65:BA:C8:88:98:EB:7F:FE:FB X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:af:a0:e5:9e:1f:b2:bc:34:77:af:b6:d4:84:b4:59:50:13: 9b:8a:97:03:76:2c:f8:e9:49:37:03:0b:69:10:7a:7b:cc:63: 03:9d:96:ce:c2:4b:00:ad:1f:a7:95:a8:8f:b2:7e:1c:bf:12: c0:f7:c7:02:5a:e0:8c:31:1c:36:dd:7a:c6:42:89:11:84:25: 59:cf:df:c0:c1:d9:82:4a:e2:64:35:bd:c2:b8:6f:9b:12:6a: bf:cd:de:7b:10:09:d4:f3:a0:79:09:53:cf:28:79:ce:fc:94: 0c:f2:fd:24:f2:fb:78:14:4e:dc:d4:1b:34:60:81:d1:e5:40: 4f:cd:71:60:99:13:6f:ad:48:3d:90:9f:13:c5:54:ba:63:93: 49:9a:e0:80:d3:ff:5a:8b:50:ec:dc:b3:d1:c4:f5:09:91:98: 6b:59:ab:61:6d:49:18:c5:5e:52:55:be:bc:32:03:51:d7:15: 40:31:e0:f8:ff:37:57:97:37:e5:37:b5:33:38:52:4b:cd:0e: be:f4:2a:18:cd:28:47:cc:3b:c2:7a:f0:39:ef:8a:3e:0e:70: 6e:24:7f:2b:37:2f:6c:23:dc:d6:d9:63:5c:f6:a8:e2:7a:8e: 91:5c:77:2c:b3:e1:ff:85:91:a6:88:b5:7e:39:7a:f7:b3:cd: 6e:fa:cd:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUwOTA4MTgxMjA4WhcNMjUwOTE1MTgxMjA4WjAYMRYwFAYD VQQDEw02OGJmMWM3OC05MjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6J3Zm283q/hZLreQUTZFb1cCrPlP2nt+NxKyjtWXc1/Z5wWG62VZ7tplDxGo FGGV0sqQq8gBDg2xzlVZaBfLjuyYlNyexIDEJ4eajrWdEsB7QPfxi6R9bb8vXR8F VT9EVD1H7ftNM9jFNrTEQVelHsEI0NQPSFZO57ndj/85sJluXYC0NRTPKCzstjq2 L+ReE6pfC0dl5O2s1FL/wRZPHBUAp4mDtvOh79juP6FL3GruGpIrLrypXU/bzBCy t/uGa2/yf6U1udrPjFmvLgcDfGryJrZpxjAuW1AxWM/V4vPtp76E1Xm+mxxUNRcL rOU0gXcXvT4uZE5QJODosbK7BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLzzljT dEYrrsi+ZbrIiJjrf/77MB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPr6Dlnh+yvDR3r7bUhLRZUBObipcDdiz46Uk3AwtpEHp7zGMDnZbO wksArR+nlaiPsn4cvxLA98cCWuCMMRw23XrGQokRhCVZz9/AwdmCSuJkNb3CuG+b Emq/zd57EAnU86B5CVPPKHnO/JQM8v0k8vt4FE7c1Bs0YIHR5UBPzXFgmRNvrUg9 kJ8TxVS6Y5NJmuCA0/9ai1Ds3LPRxPUJkZhrWathbUkYxV5SVb68MgNR1xVAMeD4 /zdXlzflN7UzOFJLzQ6+9CoYzShHzDvCevA574o+DnBuJH8rNy9sI9zW2WNc9qji eo6RXHcss+H/hZGmiLV+OXr3s81u+s3k -----END CERTIFICATE-----Generated at Wed Sep 10 13:33:55 2025 by rpki-client