$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft File: rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json) Hash identifier: rD47Kw0DTN7RLMGD+qI/NXr8c5nNnduNgylvdAJGzNM= Subject key identifier: C0:79:56:E8:82:99:9E:42:F7:5E:FB:BF:CC:F6:10:62:AF:E9:49:F0 Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A Certificate issuer: /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft Manifest number: 0126 Signing time: Sun 07 Sep 2025 05:06:39 +0000 Manifest this update: Sun 07 Sep 2025 05:06:39 +0000 Manifest next update: Sun 14 Sep 2025 05:06:39 +0000 Files and hashes: 1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: g5OArLRI4sbsJElcogzY+E0eJFFS2ezxRzAehsx0nlA=) 2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: 5gSCSjFQUqd+Yem2lvK3YYMNulDLaRkf2ZFE+aQiiYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191885, serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Validity Not Before: Sep 7 05:06:39 2025 GMT Not After : Sep 14 05:06:39 2025 GMT Subject: CN=68bd12df-cb4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:80:55:3a:57:22:a1:cd:f2:2b:39:59:43: 30:f8:c5:da:ea:b8:ea:dc:fb:29:52:65:9f:2f:30: 75:4b:0c:1e:aa:5b:12:06:5a:22:96:a0:d5:42:e4: 91:37:67:ed:81:39:2f:eb:31:b0:09:61:07:96:da: 80:f9:3c:65:53:07:1c:e9:4d:b0:cd:78:3d:89:f5: 34:3e:c5:30:41:ba:69:18:8d:31:1a:9b:80:1b:6b: c2:66:1e:b1:91:b4:74:56:42:dd:61:e4:c0:b7:ab: e8:59:cd:82:af:85:5c:42:60:85:b9:76:21:fb:aa: 8f:0a:55:a3:92:38:ba:98:77:d6:4c:7d:b9:e0:e2: 5a:61:b4:6f:f4:6a:2e:fc:e3:84:c2:60:6e:40:4e: 45:0b:b0:42:36:ef:5a:14:95:ea:9b:59:ef:0c:42: 66:fc:f9:b7:ab:4b:6a:85:ac:89:8e:01:c2:b0:89: 11:8d:9f:3d:65:db:75:9d:2f:2e:e5:65:ea:fc:ae: 5a:10:8e:48:9f:a1:24:ed:d3:3b:eb:82:d8:96:c3: d8:64:5c:a0:a9:69:91:8d:d8:d5:93:f5:3b:b2:c6: 00:a6:46:bc:82:3a:f0:62:9c:f6:e7:bc:08:d2:db: 09:3e:b0:76:99:17:e0:5b:b7:a4:9f:6c:01:eb:9d: db:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:79:56:E8:82:99:9E:42:F7:5E:FB:BF:CC:F6:10:62:AF:E9:49:F0 X509v3 Authority Key Identifier: keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c2:32:3d:df:b3:2d:0b:d8:52:e8:87:3b:27:f9:86:8d:7a: 29:52:ab:0a:84:44:60:a9:01:0b:48:04:88:60:07:f9:66:66: 16:df:79:ab:ff:f3:74:d9:f1:36:55:33:1b:fd:cb:20:85:93: 2d:5b:d0:d8:c2:b6:02:44:f7:63:bd:32:e2:c0:21:70:d4:5c: 80:af:6e:c8:eb:d6:8e:f8:86:35:2b:0d:28:40:59:c1:cc:ff: 99:dd:c8:00:d3:47:d3:71:92:2d:dd:dc:6c:b1:89:80:34:2d: 9b:29:a8:44:48:e8:6c:33:9e:f6:6e:fc:65:bb:30:ea:53:ab: 84:a5:f5:fd:76:3e:d4:ca:2f:41:cb:5a:2d:94:29:6c:6f:a4: 80:de:4a:85:fa:2d:dd:69:c0:28:73:29:f8:6a:e4:c2:e1:14: 1b:b2:dc:24:cc:69:37:26:df:fe:e5:91:2f:64:6c:1b:43:3e: 69:a6:d5:11:2c:66:be:d2:ee:02:c3:55:b8:3b:f7:66:25:57: 53:56:f5:50:a0:41:ab:2e:ee:00:18:a0:d9:79:ad:0b:d5:bd: 8c:64:d2:73:21:5b:58:0a:13:01:03:3c:bc:5e:58:1c:5a:85: ca:86:b2:f1:29:85:fb:38:9e:7c:ff:c3:9d:87:be:c0:6a:b3: a9:8b:d3:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4ODUxMTAvBgNVBAUTKEFFNThFM0YzMjREOTQ2QzY4M0Y0QTM4RjhENEUxQ0Q3 MjU3NDgzMEEwHhcNMjUwOTA3MDUwNjM5WhcNMjUwOTE0MDUwNjM5WjAYMRYwFAYD VQQDEw02OGJkMTJkZi1jYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsSAVTpXIqHN8is5WUMw+MXa6rjq3PspUmWfLzB1SwweqlsSBloilqDVQuSR N2ftgTkv6zGwCWEHltqA+TxlUwcc6U2wzXg9ifU0PsUwQbppGI0xGpuAG2vCZh6x kbR0VkLdYeTAt6voWc2Cr4VcQmCFuXYh+6qPClWjkji6mHfWTH254OJaYbRv9Gou /OOEwmBuQE5FC7BCNu9aFJXqm1nvDEJm/Pm3q0tqhayJjgHCsIkRjZ89Zdt1nS8u 5WXq/K5aEI5In6Ek7dM764LYlsPYZFygqWmRjdjVk/U7ssYApka8gjrwYpz257wI 0tsJPrB2mRfgW7ekn2wB653bUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB5VuiC mZ5C9177v8z2EGKv6UnwMB8GA1UdIwQYMBaAFK5Y4/Mk2UbGg/Sjj41OHNcldIMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4NS9ERkEwNDA3OEM5 RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJzYUQ5S09QalU0YzF5VjBn d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jsamo4eVRaUnNhRDlLT1BqVTRjMXlWMGd3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4NS9ERkEwNDA3OEM5RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJz YUQ5S09QalU0YzF5VjBnd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYwjI937MtC9hS6Ic7J/mGjXopUqsKhERgqQELSASIYAf5ZmYW33mr //N02fE2VTMb/csghZMtW9DYwrYCRPdjvTLiwCFw1FyAr27I69aO+IY1Kw0oQFnB zP+Z3cgA00fTcZIt3dxssYmANC2bKahESOhsM572bvxluzDqU6uEpfX9dj7Uyi9B y1otlClsb6SA3kqF+i3dacAocyn4auTC4RQbstwkzGk3Jt/+5ZEvZGwbQz5pptUR LGa+0u4Cw1W4O/dmJVdTVvVQoEGrLu4AGKDZea0L1b2MZNJzIVtYChMBAzy8Xlgc WoXKhrLxKYX7OJ58/8Odh77AarOpi9OH -----END CERTIFICATE-----Generated at Mon Sep 8 17:42:28 2025 by rpki-client