$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json) Hash identifier: F6NbFUbkoUo/lC00YBIcEtgBwCTMpGVfTWTqCxSYJv8= Subject key identifier: 3E:D6:B7:4C:EC:0D:5E:7F:2F:5E:45:A2:EF:66:08:9D:E7:55:DB:6C Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Certificate serial: 09BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft Manifest number: 09B3 Signing time: Mon 08 Sep 2025 20:02:21 +0000 Manifest this update: Mon 08 Sep 2025 20:02:21 +0000 Manifest next update: Mon 15 Sep 2025 20:02:21 +0000 Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: zYB2Fjc0DyWkkTz+YbcEld4mBI9lkT/Snr9rUwISJ8Y=) 2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: onBNfM/Pn1GMIqfcUmL/COXE+dl4lbaBIGgghkrv3qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2490 (0x9ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Validity Not Before: Sep 8 20:02:21 2025 GMT Not After : Sep 15 20:02:21 2025 GMT Subject: CN=68bf364d-2be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:d4:2b:07:6c:a7:5d:93:6d:55:81:24:93: 48:dc:f1:5b:c0:08:90:42:f2:35:3b:de:8b:8e:a8: d0:ad:a4:3e:aa:5b:7d:cb:7c:34:ae:f3:d7:c7:33: 4f:6c:16:dd:25:39:ff:8b:d4:82:2d:cd:a1:41:9d: cc:56:2f:66:c3:3b:ca:b6:6f:1a:50:c2:2a:78:e6: ad:f2:2d:1e:81:23:d3:4b:6a:a3:72:61:86:4f:d3: 7a:94:64:e5:b6:cd:1b:64:b5:97:51:9a:a9:53:e4: c3:4c:5a:1e:54:27:38:5f:43:fb:10:11:13:47:2b: 12:76:1a:06:bb:a4:cd:b4:b6:03:df:62:cb:36:94: b1:e8:c1:a6:97:8b:b6:8b:fa:12:ad:b7:e1:cf:95: c4:5f:17:bf:e8:92:0f:51:e4:05:e2:d2:07:27:7d: 63:b4:20:a4:6f:78:59:79:24:aa:d9:74:b0:94:59: 6e:a3:3e:0e:07:b5:75:5f:96:68:df:3c:94:fe:2e: 46:20:e5:b8:01:76:d1:c6:37:d2:de:bc:38:f3:64: 99:a7:d2:f1:08:18:08:4e:ad:fc:36:c6:9e:73:7f: 02:7b:08:2c:6d:98:22:8e:61:c1:ff:6d:fa:8e:48: b7:69:ee:e4:f9:a2:43:2a:3b:27:9a:c2:a6:c6:c6: a9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D6:B7:4C:EC:0D:5E:7F:2F:5E:45:A2:EF:66:08:9D:E7:55:DB:6C X509v3 Authority Key Identifier: keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:50:92:3e:b4:fd:b7:1d:75:5c:59:79:64:3f:03:a9:37:52: 58:c3:27:25:34:c4:2c:85:d4:ea:44:b0:b0:e2:56:6a:63:b4: 3d:fb:bc:f6:77:ac:95:45:4c:ae:a2:43:92:99:74:e6:dc:5d: 8e:5c:f9:8f:be:2a:06:41:3d:a1:1c:c8:41:51:05:7a:24:6d: 17:fc:cf:64:ca:89:b9:dd:1a:47:11:18:5c:f3:37:17:49:56: b0:31:4a:7a:92:b0:21:cf:21:bf:f9:ee:40:fb:c1:08:26:09: 05:39:09:d1:ef:8e:e0:72:21:de:fb:63:1e:f4:89:76:9a:20: 03:24:87:f2:82:7a:1e:05:2d:6c:09:ca:0c:dc:f1:8e:fd:82: 2c:72:ff:43:21:cf:a2:3b:65:3e:58:b2:9d:9e:d6:c7:84:f1: 50:de:4b:80:12:eb:78:7a:79:39:a2:0d:e3:6d:ab:50:28:3e: b1:ac:0b:89:b3:e5:df:50:ec:8f:f5:61:9e:d9:85:d4:e2:db: 76:dd:cc:03:f1:00:25:85:47:c8:26:18:76:81:7c:55:1f:10: 60:35:9e:89:db:4d:f1:5c:64:62:27:d2:1e:70:c2:99:7c:da: e2:2b:9b:27:98:19:5b:88:a4:24:c4:99:0e:2f:e3:37:4f:a5: 8d:10:32:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERTAxMTAvBgNVBAUTKDdGQzI0NThDODZFMjVDOTM0NUEwODUyQ0IyN0VCMTcy NzdGQjgxQTMwHhcNMjUwOTA4MjAwMjIxWhcNMjUwOTE1MjAwMjIxWjAYMRYwFAYD VQQDEw02OGJmMzY0ZC0yYmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVnUKwdsp12TbVWBJJNI3PFbwAiQQvI1O96LjqjQraQ+qlt9y3w0rvPXxzNP bBbdJTn/i9SCLc2hQZ3MVi9mwzvKtm8aUMIqeOat8i0egSPTS2qjcmGGT9N6lGTl ts0bZLWXUZqpU+TDTFoeVCc4X0P7EBETRysSdhoGu6TNtLYD32LLNpSx6MGml4u2 i/oSrbfhz5XEXxe/6JIPUeQF4tIHJ31jtCCkb3hZeSSq2XSwlFluoz4OB7V1X5Zo 3zyU/i5GIOW4AXbRxjfS3rw482SZp9LxCBgITq38Nsaec38CewgsbZgijmHB/236 jki3ae7k+aJDKjsnmsKmxsapfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7Wt0zs DV5/L15Fou9mCJ3nVdtsMB8GA1UdIwQYMBaAFH/CRYyG4lyTRaCFLLJ+sXJ3+4Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC81OUNBNjY2RThG NjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhKTkZvSVVzc242eGNuZjdn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4SkZqSWJpWEpORm9JVXNzbjZ4Y25mN2dhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURFMC81OUNBNjY2RThGNjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhK TkZvSVVzc242eGNuZjdnYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJUJI+tP23HXVcWXlkPwOpN1JYwyclNMQshdTqRLCw4lZqY7Q9+7z2 d6yVRUyuokOSmXTm3F2OXPmPvioGQT2hHMhBUQV6JG0X/M9kyom53RpHERhc8zcX SVawMUp6krAhzyG/+e5A+8EIJgkFOQnR747gciHe+2Me9Il2miADJIfygnoeBS1s CcoM3PGO/YIscv9DIc+iO2U+WLKdntbHhPFQ3kuAEut4enk5og3jbatQKD6xrAuJ s+XfUOyP9WGe2YXU4tt23cwD8QAlhUfIJhh2gXxVHxBgNZ6J203xXGRiJ9IecMKZ fNriK5snmBlbiKQkxJkOL+M3T6WNEDKs -----END CERTIFICATE-----Generated at Tue Sep 9 09:01:31 2025 by rpki-client