$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft File: 9BP1HYe7_0sKQQchh0duvgfTYb8.mft (raw, json) Hash identifier: im7q5MHOMRdPY3ztjFZhC4Vayly+pWBZEi5IJO2i8NM= Subject key identifier: 07:E9:75:4A:32:12:99:6A:11:52:11:30:0E:BE:28:AF:7D:A9:AF:30 Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF Certificate issuer: /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft Manifest number: 0112 Signing time: Wed 17 Sep 2025 05:30:02 +0000 Manifest this update: Wed 17 Sep 2025 05:30:01 +0000 Manifest next update: Wed 24 Sep 2025 05:30:01 +0000 Files and hashes: 1: 9BP1HYe7_0sKQQchh0duvgfTYb8.crl (hash: JptTLUuMs2RtXTlmd9x6PwghEZSnGTlnT1nbzCuT6bg=) 2: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (hash: zOrZe+jWeFBIsL39iLL8vvCILEMIHLBZ3vsTVrAh2HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC3, serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Validity Not Before: Sep 17 05:30:01 2025 GMT Not After : Sep 24 05:30:01 2025 GMT Subject: CN=68ca4759-6574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:1e:a3:f9:87:c8:08:97:dc:ac:8b:c2:ff: 41:9f:bc:1b:44:94:1a:fb:64:b7:85:7b:82:d3:a7: fe:cc:ee:3d:06:22:2c:e8:04:21:38:cc:b6:ee:11: 7d:b5:7d:5c:98:20:cd:22:49:96:86:72:38:dc:26: 27:25:a0:ac:9d:0e:7b:12:5d:a8:f8:c0:9d:72:3a: 7a:59:c5:a0:01:25:27:8a:da:44:cd:c5:62:fb:16: 17:1c:37:7f:e5:ff:13:4c:47:86:f3:96:c2:b8:2e: bf:d7:38:a3:cb:75:3f:f0:ec:8e:a5:c4:92:1a:81: dc:64:69:b5:49:4a:67:cb:7e:0d:5c:5f:91:9f:2a: 21:4c:6d:ed:91:8d:a0:36:75:8f:12:9d:50:ca:45: c8:a3:b6:14:86:35:13:c5:cb:ed:69:bb:0f:b1:ee: dc:6b:a9:74:3b:31:a1:dd:13:c7:93:0b:97:f7:1f: b8:dc:c6:71:60:ac:35:83:f9:d7:98:e0:9a:83:26: 40:27:3c:dc:6c:7d:9e:4e:55:87:dd:f7:01:f2:e3: b1:d7:2f:77:3b:91:97:54:99:ab:f8:1b:c6:14:0c: d6:58:fb:02:1a:7b:d5:d8:d8:78:04:ba:0e:d5:b7: 43:88:d1:a8:b2:46:d4:c3:20:0d:cf:dd:c9:e3:cb: 90:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E9:75:4A:32:12:99:6A:11:52:11:30:0E:BE:28:AF:7D:A9:AF:30 X509v3 Authority Key Identifier: keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:32:8e:84:36:58:aa:a0:93:d7:b3:c3:31:fd:15:32:88:ef: de:2e:3e:44:cd:84:9b:04:6e:6a:4f:b3:80:d6:a1:91:c9:7e: 5f:90:c4:c2:58:f0:7b:b3:2d:38:3b:47:2f:bb:fc:d0:a9:ea: ed:86:d2:58:9a:1a:a0:69:dd:6a:87:15:df:f2:3b:79:fc:cc: 5b:fe:dc:2c:22:01:a0:09:74:69:17:9c:17:7a:fd:22:e9:12: 92:2c:55:38:a7:10:ae:e9:f6:12:2e:68:50:20:44:6c:f1:54: ed:9a:90:f6:ac:10:56:90:11:15:d2:dc:3b:f1:e7:ca:45:71: 38:48:73:40:75:1d:6c:bb:55:3b:7d:ce:eb:8d:aa:ca:fe:8f: 9f:22:bc:2c:13:d8:f8:bc:b4:47:8a:e0:17:ac:28:63:fa:5a: 61:fe:a7:c3:bc:d7:40:39:17:da:1a:3d:70:af:e3:9a:78:b8: b6:27:9f:12:05:ab:86:6a:9a:4b:dc:45:fb:5a:93:70:d1:3d: d4:fe:7a:ec:b8:ab:f0:65:f0:b8:ba:46:ee:72:64:56:24:a0: 6d:23:a9:72:61:d2:21:52:c5:0a:4e:70:f4:17:61:2c:81:6e: c2:a4:e6:75:79:a6:4d:0a:84:9d:b2:f3:25:f8:ee:4d:f5:e0: 71:17:d2:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzMxMTAvBgNVBAUTKEY0MTNGNTFEODdCQkZGNEIwQTQxMDcyMTg3NDc2RUJF MDdEMzYxQkYwHhcNMjUwOTE3MDUzMDAxWhcNMjUwOTI0MDUzMDAxWjAYMRYwFAYD VQQDEw02OGNhNDc1OS02NTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPweo/mHyAiX3KyLwv9Bn7wbRJQa+2S3hXuC06f+zO49BiIs6AQhOMy27hF9 tX1cmCDNIkmWhnI43CYnJaCsnQ57El2o+MCdcjp6WcWgASUnitpEzcVi+xYXHDd/ 5f8TTEeG85bCuC6/1zijy3U/8OyOpcSSGoHcZGm1SUpny34NXF+RnyohTG3tkY2g NnWPEp1QykXIo7YUhjUTxcvtabsPse7ca6l0OzGh3RPHkwuX9x+43MZxYKw1g/nX mOCagyZAJzzcbH2eTlWH3fcB8uOx1y93O5GXVJmr+BvGFAzWWPsCGnvV2Nh4BLoO 1bdDiNGoskbUwyANz93J48uQuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfpdUoy EplqEVIRMA6+KK99qa8wMB8GA1UdIwQYMBaAFPQT9R2Hu/9LCkEHIYdHbr4H02G/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDMy8yNEI4RTI1OEVF N0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18wc0tRUWNoaDBkdXZnZlRZ YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCUDFIWWU3XzBzS1FRY2hoMGR1dmdmVFliOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDMy8yNEI4RTI1OEVFN0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18w c0tRUWNoaDBkdXZnZlRZYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFMo6ENliqoJPXs8Mx/RUyiO/eLj5EzYSbBG5qT7OA1qGRyX5fkMTC WPB7sy04O0cvu/zQqerthtJYmhqgad1qhxXf8jt5/Mxb/twsIgGgCXRpF5wXev0i 6RKSLFU4pxCu6fYSLmhQIERs8VTtmpD2rBBWkBEV0tw78efKRXE4SHNAdR1su1U7 fc7rjarK/o+fIrwsE9j4vLRHiuAXrChj+lph/qfDvNdAORfaGj1wr+OaeLi2J58S BauGappL3EX7WpNw0T3U/nrsuKvwZfC4ukbucmRWJKBtI6lyYdIhUsUKTnD0F2Es gW7CpOZ1eaZNCoSdsvMl+O5N9eBxF9Iw -----END CERTIFICATE-----Generated at Fri Sep 19 05:38:57 2025 by rpki-client