$ rpki-client -vvf rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft File: n5SsB4YdiAvjQDGyhnkD51wyPEg.mft (raw, json) Hash identifier: B3eqhHdIidOsfPtGSj09uI/37G2zFIKCDGWNU27u62g= Subject key identifier: 29:B9:5A:51:30:D8:47:90:E7:99:F6:B2:26:BA:5C:52:E3:05:D2:B4 Authority key identifier: 9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48 Certificate issuer: /CN=A9193A9E/serialNumber=9F94AC07861D880BE34031B2867903E75C323C48 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft Manifest number: 12 Signing time: Wed 17 Sep 2025 08:50:24 +0000 Manifest this update: Wed 17 Sep 2025 08:50:23 +0000 Manifest next update: Wed 24 Sep 2025 08:50:23 +0000 Files and hashes: 1: n5SsB4YdiAvjQDGyhnkD51wyPEg.crl (hash: Bfov5+O6dxLi9hUbztqOEJSinpLfhJ2RMlIBU3D2CwY=) 2: F5E70A7083CD11F09D837187C4F9AE02.roa (hash: W7JUxDMH42jtJaJ07/erekB5mTVAnJ/Qka1pQNTUmm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193A9E, serialNumber=9F94AC07861D880BE34031B2867903E75C323C48 Validity Not Before: Sep 17 08:50:23 2025 GMT Not After : Sep 24 08:50:23 2025 GMT Subject: CN=68ca764f-7eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:51:15:4b:22:53:61:41:79:d3:94:1b:f4: 12:d8:c1:12:a9:65:22:4a:51:04:53:60:fe:42:8c: 5b:6a:78:6b:85:d5:ab:1e:6f:a1:1a:a9:1f:72:ab: 01:18:ff:2b:0a:26:7a:06:3b:22:b7:dc:7d:c0:a8: b9:16:29:01:52:05:f3:f6:2b:f7:db:ad:13:a8:60: b0:15:d9:8b:05:34:ca:82:75:f9:ee:c5:41:5d:6f: b6:e8:9e:9d:5b:75:d0:25:47:c1:db:37:f1:c5:d1: b2:ed:c7:78:f6:9d:a3:1e:a0:e6:bc:69:7f:78:e1: 08:68:a8:98:f2:d7:7d:f2:fc:83:b4:c5:fa:ff:59: 7e:97:d3:99:a1:61:59:24:b8:ff:9a:e7:e7:d0:16: 8f:8b:45:aa:4b:65:3a:d4:ff:bb:df:93:f7:9b:5e: 94:2f:1e:61:1e:ea:a5:39:b0:fc:d6:15:58:fb:b6: 62:2e:e0:7d:2d:3a:f1:f4:d3:4b:20:54:58:9b:8a: 4d:c0:60:64:20:0e:9e:af:63:a0:3b:4d:d1:c5:45: 43:c2:39:98:84:95:42:99:46:a7:44:8d:9f:a2:9b: ef:79:8f:e4:45:fe:cd:b6:6c:7c:88:f0:0a:d2:32: f1:10:c1:a5:e3:62:17:1e:6e:f0:b2:b8:f3:1b:84: c6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B9:5A:51:30:D8:47:90:E7:99:F6:B2:26:BA:5C:52:E3:05:D2:B4 X509v3 Authority Key Identifier: keyid:9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:91:d0:47:20:79:db:a4:12:53:64:a0:d3:e7:2f:59:8e:2e: 7d:0f:7f:ee:f1:33:ea:d4:87:9b:c1:a7:5c:4d:21:1b:e4:0b: f1:9f:3e:0f:b7:1f:0b:11:83:48:33:04:19:2f:92:df:97:e7: 0d:af:dc:a1:e6:ef:e4:24:48:45:1a:d1:13:f2:5c:8b:41:b4: 2b:1e:df:7f:5b:e0:e9:b7:06:49:a8:7c:ab:b3:e3:e2:14:c6: 75:80:65:a0:a0:7b:9b:26:c2:14:c8:98:67:e2:57:e7:b2:f5: 98:34:03:f9:a9:c8:da:0a:75:55:3b:14:d6:cb:e6:8f:7d:72: 32:fc:03:27:1e:6c:10:11:1b:13:1a:ee:fa:41:7a:e1:d5:b5: bb:65:43:71:08:f6:21:11:6b:7e:fd:46:c8:ce:06:87:43:84: 42:70:9f:af:c2:73:b1:5b:ab:ac:b8:b7:7c:ce:f2:04:9f:4d: b9:b1:c4:a7:70:b9:78:10:e6:24:0b:32:c0:00:62:a2:05:13: 62:7d:ef:fb:e1:65:17:b0:a2:65:b0:6a:29:6c:4b:d7:b7:e5: 6a:91:7e:86:33:4e:dc:45:a3:22:66:55:30:5f:b8:d8:96:5b: 5b:4f:c0:08:c3:7d:f5:b3:65:8d:8b:8d:7e:57:3b:04:ca:2d: 58:de:aa:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0E5RTExMC8GA1UEBRMoOUY5NEFDMDc4NjFEODgwQkUzNDAzMUIyODY3OTAzRTc1 QzMyM0M0ODAeFw0yNTA5MTcwODUwMjNaFw0yNTA5MjQwODUwMjNaMBgxFjAUBgNV BAMTDTY4Y2E3NjRmLTdlZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLi1EVSyJTYUF505Qb9BLYwRKpZSJKUQRTYP5CjFtqeGuF1aseb6EaqR9yqwEY /ysKJnoGOyK33H3AqLkWKQFSBfP2K/fbrROoYLAV2YsFNMqCdfnuxUFdb7bonp1b ddAlR8HbN/HF0bLtx3j2naMeoOa8aX944QhoqJjy133y/IO0xfr/WX6X05mhYVkk uP+a5+fQFo+LRapLZTrU/7vfk/ebXpQvHmEe6qU5sPzWFVj7tmIu4H0tOvH000sg VFibik3AYGQgDp6vY6A7TdHFRUPCOZiElUKZRqdEjZ+im+95j+RF/s22bHyI8ArS MvEQwaXjYhcebvCyuPMbhMYtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKblaUTDY R5DnmfayJrpcUuMF0rQwHwYDVR0jBBgwFoAUn5SsB4YdiAvjQDGyhnkD51wyPEgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQTlFLzdCNkZGM0U0ODNC NzExRjA5MDA3N0I1RUM0RjlBRTAyL241U3NCNFlkaUF2alFER3lobmtENTF3eVBF Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbjVTc0I0WWRpQXZqUURHeWhua0Q1MXd5UEVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz QTlFLzdCNkZGM0U0ODNCNzExRjA5MDA3N0I1RUM0RjlBRTAyL241U3NCNFlkaUF2 alFER3lobmtENTF3eVBFZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIKR0EcgedukElNkoNPnL1mOLn0Pf+7xM+rUh5vBp1xNIRvkC/GfPg+3 HwsRg0gzBBkvkt+X5w2v3KHm7+QkSEUa0RPyXItBtCse339b4Om3BkmofKuz4+IU xnWAZaCge5smwhTImGfiV+ey9Zg0A/mpyNoKdVU7FNbL5o99cjL8AycebBARGxMa 7vpBeuHVtbtlQ3EI9iERa379RsjOBodDhEJwn6/Cc7Fbq6y4t3zO8gSfTbmxxKdw uXgQ5iQLMsAAYqIFE2J97/vhZRewomWwailsS9e35WqRfoYzTtxFoyJmVTBfuNiW W1tPwAjDffWzZY2LjX5XOwTKLVjeqvA= -----END CERTIFICATE-----Generated at Fri Sep 19 01:30:15 2025 by rpki-client