$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft File: z7B65d0AqScU2zWnIQRdnS644xc.mft (raw, json) Hash identifier: Mwykb/JhgYBI/ALy+rMxYhcpMnSut0EcqAtqFjkALUY= Subject key identifier: 2B:64:C4:C6:F0:99:AC:D0:3E:2A:F5:52:36:A9:62:F3:89:05:27:50 Authority key identifier: CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17 Certificate issuer: /CN=A9189A9F/serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft Manifest number: 043B Signing time: Wed 17 Sep 2025 00:54:46 +0000 Manifest this update: Wed 17 Sep 2025 00:54:46 +0000 Manifest next update: Wed 24 Sep 2025 00:54:46 +0000 Files and hashes: 1: z7B65d0AqScU2zWnIQRdnS644xc.crl (hash: k3gm5W+rF2VK2DF4IhIOwAprP0dgTMuJPWhOgnR+BRQ=) 2: 42A92B3C3BAC11F0882B5B62C4F9AE02.roa (hash: 3kUfpfWFsRQio/I2rlN7rqdOffzKtu9waWZ7PwEcB0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189A9F, serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317 Validity Not Before: Sep 17 00:54:46 2025 GMT Not After : Sep 24 00:54:46 2025 GMT Subject: CN=68ca06d6-b3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:03:b7:ab:b9:59:c6:09:84:8a:9b:2d:0a: 28:46:fd:00:67:77:e9:a4:09:f6:85:40:4d:9b:e0: 76:20:86:47:d2:ee:07:de:57:24:89:81:13:eb:68: 86:c8:4f:70:02:53:0c:92:cc:a5:d5:ed:3e:0e:6b: b2:e0:e3:4a:f8:a7:73:78:4e:e3:c4:dd:c1:e7:7c: f2:6a:16:39:a1:d8:f0:f6:b5:66:b6:80:61:0e:20: 47:85:f7:70:1b:e0:b1:1d:cd:11:06:de:83:d6:8d: ef:cb:a3:97:93:6c:a5:11:29:37:e8:40:0d:f4:80: e1:04:60:b5:b3:c9:ee:00:6c:3f:bf:03:08:9a:91: 5c:c2:0f:b6:79:8d:88:e3:ea:9c:e4:57:1a:27:fb: 8c:e8:72:a0:27:45:a8:9c:cd:9d:4b:35:26:df:10: b2:de:a3:26:9b:d8:29:69:ad:0a:c4:fc:71:8c:3a: 67:f3:5d:41:86:48:53:c3:70:c3:ee:a6:a5:36:e4: d7:df:23:46:4a:c7:ec:c2:52:a2:96:35:2f:91:ac: e2:b1:cc:a9:0b:65:63:4c:3e:f7:e8:90:ed:2c:b9: b5:56:4a:c4:83:1e:05:d0:18:c8:f6:f0:94:c6:3b: 5c:d0:72:96:f7:bf:39:b5:de:4b:7c:e8:e5:ef:9d: 8c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:64:C4:C6:F0:99:AC:D0:3E:2A:F5:52:36:A9:62:F3:89:05:27:50 X509v3 Authority Key Identifier: keyid:CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:71:05:2c:b7:70:eb:46:3c:4e:95:95:2f:3e:5b:61:43:e4: 9c:f5:9c:1c:13:d1:22:3e:fc:05:97:52:37:ed:76:e0:b9:a7: da:cc:4e:c6:38:a1:f6:a2:ef:4c:7b:8b:c7:bf:a8:68:21:04: 7f:5e:a2:be:e9:4b:41:50:8a:32:fe:18:6a:e4:a1:6f:a4:6e: ba:a8:4e:d4:50:25:ca:c9:09:de:a6:f4:84:49:3c:c0:5b:dd: 15:e9:d0:ad:44:b9:5b:02:55:ad:f0:8e:9f:09:d6:bf:b0:48: 5f:fa:a7:14:cc:69:55:93:cc:4a:67:fb:3d:f0:2d:20:01:15: f7:17:2b:11:ac:a0:9d:1a:93:48:f7:49:4c:f8:74:3c:59:b8: d0:49:08:95:27:6c:1e:a6:c3:57:f9:7a:08:93:cd:97:f4:3f: 12:54:48:ff:64:32:97:50:0e:c0:d3:f0:7a:81:20:07:e6:2b: 60:4d:b8:18:4f:5c:41:00:a9:17:73:93:01:f8:59:63:30:fa: 73:9b:55:c6:66:14:db:1e:ed:91:b5:6a:b4:9f:91:6a:5d:ca: 8a:2e:3e:3c:c6:02:c4:60:72:dc:61:10:ea:d7:32:ae:1d:08: 0d:1d:26:ac:1e:3e:e2:8f:f0:34:9f:bc:9a:b4:3d:e3:7b:0e: b7:f2:d6:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUE5RjExMC8GA1UEBRMoQ0ZCMDdBRTVERDAwQTkyNzE0REIzNUE3MjEwNDVEOUQy RUI4RTMxNzAeFw0yNTA5MTcwMDU0NDZaFw0yNTA5MjQwMDU0NDZaMBgxFjAUBgNV BAMTDTY4Y2EwNmQ2LWIzYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpzQO3q7lZxgmEipstCihG/QBnd+mkCfaFQE2b4HYghkfS7gfeVySJgRPraIbI T3ACUwySzKXV7T4Oa7Lg40r4p3N4TuPE3cHnfPJqFjmh2PD2tWa2gGEOIEeF93Ab 4LEdzREG3oPWje/Lo5eTbKURKTfoQA30gOEEYLWzye4AbD+/AwiakVzCD7Z5jYjj 6pzkVxon+4zocqAnRaiczZ1LNSbfELLeoyab2ClprQrE/HGMOmfzXUGGSFPDcMPu pqU25NffI0ZKx+zCUqKWNS+RrOKxzKkLZWNMPvfokO0subVWSsSDHgXQGMj28JTG O1zQcpb3vzm13kt86OXvnYz1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK2TExvCZ rNA+KvVSNqli84kFJ1AwHwYDVR0jBBgwFoAUz7B65d0AqScU2zWnIQRdnS644xcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5QTlGLzgwNTZCQTU2OEE5 MDExRUM4QzFCMEQyMkM0RjlBRTAyL3o3QjY1ZDBBcVNjVTJ6V25JUVJkblM2NDR4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejdCNjVkMEFxU2NVMnpXbklRUmRuUzY0NHhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 QTlGLzgwNTZCQTU2OEE5MDExRUM4QzFCMEQyMkM0RjlBRTAyL3o3QjY1ZDBBcVNj VTJ6V25JUVJkblM2NDR4Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGZxBSy3cOtGPE6VlS8+W2FD5Jz1nBwT0SI+/AWXUjftduC5p9rMTsY4 ofai70x7i8e/qGghBH9eor7pS0FQijL+GGrkoW+kbrqoTtRQJcrJCd6m9IRJPMBb 3RXp0K1EuVsCVa3wjp8J1r+wSF/6pxTMaVWTzEpn+z3wLSABFfcXKxGsoJ0ak0j3 SUz4dDxZuNBJCJUnbB6mw1f5egiTzZf0PxJUSP9kMpdQDsDT8HqBIAfmK2BNuBhP XEEAqRdzkwH4WWMw+nObVcZmFNse7ZG1arSfkWpdyoouPjzGAsRgctxhEOrXMq4d CA0dJqwePuKP8DSfvJq0PeN7Drfy1gY= -----END CERTIFICATE-----Generated at Thu Sep 18 23:12:00 2025 by rpki-client