$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft File: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft (raw, json) Hash identifier: tcd69muJqY2msirJyWUjcm8QRXKQx7pLbz8D5li5Zm4= Subject key identifier: 03:57:CE:5B:22:1F:33:5C:B9:E0:F8:47:B4:9E:98:5F:62:85:55:48 Authority key identifier: 46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 Certificate issuer: /CN=A9188F45/serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft Manifest number: 0139 Signing time: Wed 17 Sep 2025 05:04:39 +0000 Manifest this update: Wed 17 Sep 2025 05:04:39 +0000 Manifest next update: Wed 24 Sep 2025 05:04:39 +0000 Files and hashes: 1: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl (hash: 7oR44t7OaY+BlDFe6Z9oid0+72Vk+twB4uKMnQOvHXo=) 2: 8A574D9AB8AB11EEA866EB27C4F9AE02.roa (hash: B74l8KAcZzTJjTG0Mnc+WUicHwzuFyRpUWB92X31DmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F45, serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Validity Not Before: Sep 17 05:04:39 2025 GMT Not After : Sep 24 05:04:39 2025 GMT Subject: CN=68ca4167-0e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0e:7b:26:95:24:52:b5:45:f7:45:89:c8:04: ba:68:33:36:55:0a:ac:2d:17:84:83:67:a9:9b:1c: b8:ce:41:8b:26:f2:69:3c:70:8c:b3:39:ee:3d:e4: fc:f1:1d:36:89:cb:55:50:db:ce:42:53:14:21:c5: 5c:c9:12:2c:99:6b:28:c7:a5:13:50:f2:3b:05:0d: d0:58:bb:77:b4:8c:83:de:fc:25:27:79:8f:73:8d: e9:0b:cd:72:69:2a:d1:d2:7d:16:14:1f:74:9d:ad: 36:66:27:43:ba:7c:bd:91:bc:d5:3d:db:67:24:0f: 84:79:06:cb:76:57:6e:74:45:d1:49:0b:be:b4:ee: a3:f7:4e:4c:5b:82:ff:55:65:89:5e:0f:a6:d5:8a: 55:c2:83:8a:11:93:f8:f8:25:6e:5b:3c:da:99:22: be:5a:0b:2d:7d:eb:e0:3d:d4:60:fb:bc:d6:52:c4: 19:f3:e1:22:32:ae:5f:f4:00:18:1e:34:64:06:d3: 65:93:97:fd:10:3c:2b:6f:e4:e1:42:03:60:4e:87: f8:b2:61:f6:f6:97:9e:79:a4:a3:8a:35:d4:d2:d5: e9:ff:41:79:88:38:bd:df:15:ed:9f:c5:a9:89:76: 4d:ab:59:44:e0:c5:1c:46:86:a3:b9:db:60:ca:72: 44:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:57:CE:5B:22:1F:33:5C:B9:E0:F8:47:B4:9E:98:5F:62:85:55:48 X509v3 Authority Key Identifier: keyid:46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:66:b0:d1:ef:a6:35:55:d9:04:55:7e:64:5d:d8:38:5a:fb: 22:fb:f1:93:68:35:d1:fa:d4:fa:96:29:a5:30:d6:ad:36:fe: 23:1e:33:0c:52:33:40:10:b7:5a:41:93:86:78:05:c8:ab:3d: 1c:d7:f5:86:0d:8d:d7:b9:8a:54:e1:ce:b6:a8:da:9c:7e:1b: ef:a9:79:09:c8:ee:ee:99:de:8b:7d:29:98:5a:d0:4b:bf:b6: 50:f3:2f:13:58:e6:fa:7c:e4:68:c7:7b:76:2d:e2:fa:92:97: c1:ce:ef:b7:09:2c:9a:54:66:b5:f7:5f:a9:93:c1:b4:86:ac: d7:90:39:5e:24:35:09:7d:42:8f:1d:b4:91:72:e8:ba:c8:30: 71:96:d6:1f:7f:b8:2c:68:54:7e:88:5a:76:b7:6b:a6:5b:c6: 95:09:7f:2b:a8:e0:d7:c3:54:93:66:c8:31:9c:a6:72:53:21: c7:16:11:36:f6:d1:7a:76:f0:f3:8a:ba:cf:35:0c:14:c8:b0: d7:07:31:d6:0a:a9:79:f9:41:3a:e8:30:00:2a:2b:c3:17:e7: d7:43:b6:be:0a:17:c0:c8:48:c0:10:e4:75:51:d0:21:aa:2f: fe:dc:8f:26:c2:fc:26:70:95:4e:b5:cf:31:bb:72:de:40:c1: c2:a7:2d:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNDUxMTAvBgNVBAUTKDQ2RUYwNEJGMTE5OEJFMEUyQTMxM0FBN0FEMEFCMEZD N0UwODFDNDUwHhcNMjUwOTE3MDUwNDM5WhcNMjUwOTI0MDUwNDM5WjAYMRYwFAYD VQQDEw02OGNhNDE2Ny0wZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3A57JpUkUrVF90WJyAS6aDM2VQqsLReEg2epmxy4zkGLJvJpPHCMsznuPeT8 8R02ictVUNvOQlMUIcVcyRIsmWsox6UTUPI7BQ3QWLt3tIyD3vwlJ3mPc43pC81y aSrR0n0WFB90na02ZidDuny9kbzVPdtnJA+EeQbLdldudEXRSQu+tO6j905MW4L/ VWWJXg+m1YpVwoOKEZP4+CVuWzzamSK+WgstfevgPdRg+7zWUsQZ8+EiMq5f9AAY HjRkBtNlk5f9EDwrb+ThQgNgTof4smH29peeeaSjijXU0tXp/0F5iDi93xXtn8Wp iXZNq1lE4MUcRoajudtgynJEmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANXzlsi HzNcueD4R7SemF9ihVVIMB8GA1UdIwQYMBaAFEbvBL8RmL4OKjE6p60KsPx+CBxF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY0NS9GRDk5NjUxNEI4 QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZnNHFNVHFuclFxd19INElI RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1OEV2eEdZdmc0cU1UcW5yUXF3X0g0SUhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY0NS9GRDk5NjUxNEI4QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZn NHFNVHFuclFxd19INElIRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADZrDR76Y1VdkEVX5kXdg4Wvsi+/GTaDXR+tT6limlMNatNv4jHjMM UjNAELdaQZOGeAXIqz0c1/WGDY3XuYpU4c62qNqcfhvvqXkJyO7umd6LfSmYWtBL v7ZQ8y8TWOb6fORox3t2LeL6kpfBzu+3CSyaVGa191+pk8G0hqzXkDleJDUJfUKP HbSRcui6yDBxltYff7gsaFR+iFp2t2umW8aVCX8rqODXw1STZsgxnKZyUyHHFhE2 9tF6dvDzirrPNQwUyLDXBzHWCql5+UE66DAAKivDF+fXQ7a+ChfAyEjAEOR1UdAh qi/+3I8mwvwmcJVOtc8xu3LeQMHCpy1+ -----END CERTIFICATE-----Generated at Thu Sep 18 21:42:27 2025 by rpki-client