$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft File: 9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json) Hash identifier: NIpG7p8B8veJzYPLQPVt+TpSpm5mOSzVsFnPLtZ1StM= Subject key identifier: 4F:E1:EE:D8:9D:62:10:30:33:84:98:B3:6A:D1:1E:48:FE:E5:26:C2 Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9 Certificate issuer: /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft Manifest number: 71 Signing time: Wed 17 Sep 2025 07:34:26 +0000 Manifest this update: Wed 17 Sep 2025 07:34:26 +0000 Manifest next update: Wed 24 Sep 2025 07:34:26 +0000 Files and hashes: 1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: U5NgsaTEvyQOKP/guC0XAKObPlTT22xxjuGbrZWB7AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9 Validity Not Before: Sep 17 07:34:26 2025 GMT Not After : Sep 24 07:34:26 2025 GMT Subject: CN=68ca6482-0aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:09:82:fd:96:57:33:2d:2a:7d:73:06:2b:04: 0e:7d:47:57:43:9a:3d:90:e1:52:ef:cf:86:5d:26: 80:ad:32:b0:72:54:a1:75:20:c0:c1:63:e0:f5:57: f9:e4:37:96:b0:dd:75:e8:9c:e6:0d:83:7e:21:0f: 9c:6d:e4:29:33:8e:98:8c:7f:e4:0a:34:d6:6c:19: eb:93:3e:fe:30:13:f5:3e:c9:95:eb:bc:91:f9:d5: 6e:4d:78:1a:3e:ef:1b:ef:22:67:98:57:60:90:f2: cd:af:0a:c1:2c:01:3c:b0:70:7c:6c:73:d8:b9:09: 3d:d8:9a:8c:ce:bf:4e:0e:01:52:b0:7d:7d:92:96: 3c:29:d4:82:1a:2e:18:1e:af:51:8b:cc:23:77:05: dd:0e:51:ae:15:1c:7b:86:7c:dd:a5:f2:c4:1b:5d: d3:e9:24:98:84:32:8e:01:6a:97:b5:89:16:ab:2f: 39:99:7c:b7:18:cb:08:b4:27:24:23:82:3a:6b:fa: 33:c3:93:73:fa:52:c6:54:2a:62:3f:3c:ae:b5:74: 54:b4:c1:be:13:a3:71:b1:1b:31:ec:13:31:e3:db: 92:ef:4f:6e:79:83:3a:a9:2e:7b:73:01:b1:fa:19: 02:8f:df:00:6f:b0:07:29:e2:e7:9d:27:03:ec:32: 1b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E1:EE:D8:9D:62:10:30:33:84:98:B3:6A:D1:1E:48:FE:E5:26:C2 X509v3 Authority Key Identifier: keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:16:d7:c5:88:f6:c7:b6:44:f7:2c:79:23:f0:2a:80:5f:ed: 29:2c:90:89:2a:5f:e1:14:95:63:e3:07:f4:1d:fd:1d:8e:1e: 70:31:6b:6a:4e:a1:6a:cd:df:a5:45:72:dd:2c:8f:79:d5:55: 42:72:48:5e:91:c8:1b:b7:bf:3d:a5:8c:77:4f:71:a3:b1:4f: 59:45:be:48:9f:a1:41:ba:6d:5e:bb:9d:99:2a:25:b3:1c:03: 57:31:9b:fb:2a:fc:9a:cb:f4:91:40:47:dd:10:41:35:52:40: b9:ce:6c:da:98:12:9e:c7:13:0f:1c:50:07:a2:62:6c:62:26: 45:e8:90:74:5d:a2:f9:14:75:fb:8a:7c:8b:b8:f8:4c:4e:db: 95:43:d1:08:54:f9:91:74:e5:34:78:0f:4b:53:30:67:47:70: 6a:d8:59:c9:f3:3c:87:fa:ed:ab:00:43:67:a2:b4:f0:9d:e2: 47:e2:8a:4d:4e:07:e8:d8:9a:b6:f8:16:54:31:ce:18:9b:44: 95:ab:f7:b9:ae:d0:bb:19:c4:92:9d:4d:ae:19:c6:36:cb:ea: 65:19:db:54:91:1b:95:2a:4d:12:3f:31:dc:28:58:7d:4c:97: 7b:eb:1d:67:3b:bf:3d:55:49:d6:10:1e:cc:6e:21:74:92:cf: e4:60:7e:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjFFRTExMC8GA1UEBRMoRjY3NzE2QTdEMzdEREIwM0RDNTZEMDNBQjkwMkE3MjAz N0VBMTlEOTAeFw0yNTA5MTcwNzM0MjZaFw0yNTA5MjQwNzM0MjZaMBgxFjAUBgNV BAMTDTY4Y2E2NDgyLTBhZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwCYL9llczLSp9cwYrBA59R1dDmj2Q4VLvz4ZdJoCtMrByVKF1IMDBY+D1V/nk N5aw3XXonOYNg34hD5xt5CkzjpiMf+QKNNZsGeuTPv4wE/U+yZXrvJH51W5NeBo+ 7xvvImeYV2CQ8s2vCsEsATywcHxsc9i5CT3YmozOv04OAVKwfX2Sljwp1IIaLhge r1GLzCN3Bd0OUa4VHHuGfN2l8sQbXdPpJJiEMo4Bape1iRarLzmZfLcYywi0JyQj gjpr+jPDk3P6UsZUKmI/PK61dFS0wb4To3GxGzHsEzHj25LvT255gzqpLntzAbH6 GQKP3wBvsAcp4uedJwPsMhu9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT+Hu2J1i EDAzhJizatEeSP7lJsIwHwYDVR0jBBgwFoAU9ncWp9N92wPcVtA6uQKnIDfqGdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMUVFL0YzMkNGNEU4RTc1 MTExRUZCRUQ4MUIwRUM0RjlBRTAyLzluY1dwOU45MndQY1Z0QTZ1UUtuSURmcUdk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOW5jV3A5Tjkyd1BjVnRBNnVRS25JRGZxR2RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MUVFL0YzMkNGNEU4RTc1MTExRUZCRUQ4MUIwRUM0RjlBRTAyLzluY1dwOU45MndQ Y1Z0QTZ1UUtuSURmcUdkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK8W18WI9se2RPcseSPwKoBf7SkskIkqX+EUlWPjB/Qd/R2OHnAxa2pO oWrN36VFct0sj3nVVUJySF6RyBu3vz2ljHdPcaOxT1lFvkifoUG6bV67nZkqJbMc A1cxm/sq/JrL9JFAR90QQTVSQLnObNqYEp7HEw8cUAeiYmxiJkXokHRdovkUdfuK fIu4+ExO25VD0QhU+ZF05TR4D0tTMGdHcGrYWcnzPIf67asAQ2eitPCd4kfiik1O B+jYmrb4FlQxzhibRJWr97mu0LsZxJKdTa4ZxjbL6mUZ21SRG5UqTRI/MdwoWH1M l3vrHWc7vz1VSdYQHsxuIXSSz+Rgfpk= -----END CERTIFICATE-----Generated at Thu Sep 18 20:52:11 2025 by rpki-client