$ rpki-client -vvf rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft File: mTXGObPDUdvtWyk5lPcvgUzPm6k.mft (raw, json) Hash identifier: XIM2oMkyA2+hsb/7xRJI4aizHkNPCpfXRvvVPGLM6xM= Subject key identifier: FB:83:C8:4A:F1:6C:68:75:32:0C:37:E2:0F:75:D4:05:E0:B2:92:52 Authority key identifier: 99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 Certificate issuer: /CN=A9195D93/serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Certificate serial: 21D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft Manifest number: 21BC Signing time: Mon 08 Sep 2025 15:53:32 +0000 Manifest this update: Mon 08 Sep 2025 15:53:32 +0000 Manifest next update: Mon 15 Sep 2025 15:53:32 +0000 Files and hashes: 1: mTXGObPDUdvtWyk5lPcvgUzPm6k.crl (hash: /A/ADC0cPBIqEZEau0m9PI2+OaJiL0uRpidPddTt38M=) 2: 5D2D29A2966D11EA96C50E81C4F9AE02.roa (hash: xq1A/DwEya72JUauXcCDXoZyXlE8M2olRWGCrYUUkIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 15:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8661 (0x21d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195D93, serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Validity Not Before: Sep 8 15:53:32 2025 GMT Not After : Sep 15 15:53:32 2025 GMT Subject: CN=68befbfc-ca97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:fb:a7:82:97:d4:36:06:49:38:85:92:91: 5b:6c:46:a9:b0:53:50:8b:f7:b2:8c:cb:19:f4:31: 3d:e5:58:a9:9f:0e:e8:cf:d3:d4:ee:ea:c1:d3:f5: 64:4d:c5:1f:ba:8c:c5:83:b9:19:90:1d:6e:64:55: 02:c7:b2:20:80:5d:41:90:2f:ae:17:77:df:2b:a8: 74:b4:87:1b:a9:e4:06:46:05:fd:04:fc:20:39:f4: fa:a3:28:1c:e2:95:ce:13:2d:67:7b:ab:10:f8:c6: a5:a5:1d:25:8e:49:60:f5:34:da:31:59:04:d5:59: 50:66:c1:82:d2:2e:50:ea:d0:50:7c:ef:86:30:1f: 2e:35:d9:77:4a:62:dd:f7:21:03:00:d5:80:9d:64: ed:13:f1:5b:3d:00:09:e6:1f:88:88:60:db:34:b8: a3:d3:f2:d3:6f:c6:56:58:ab:3f:51:c0:ac:b0:0b: ec:7b:a3:22:e1:55:95:c4:fd:8c:dd:bd:a1:4e:2c: 0d:2e:03:a0:e9:84:bf:3d:11:c2:15:22:11:5a:b5: 02:44:76:68:04:40:4e:e2:2e:6c:60:93:d3:7f:56: 39:c0:23:ac:a0:5f:82:83:d9:78:9b:cb:ad:ef:56: 8a:a7:bd:b9:3c:8a:02:ff:de:05:19:03:a7:cd:7a: d3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:83:C8:4A:F1:6C:68:75:32:0C:37:E2:0F:75:D4:05:E0:B2:92:52 X509v3 Authority Key Identifier: keyid:99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:10:0d:e9:c7:59:07:f3:70:4c:41:28:bb:e7:de:58:07:69: f7:0a:b5:96:d8:d9:fc:a2:bc:89:fb:53:86:c5:87:95:4b:b4: 8a:59:49:a3:e9:1d:d3:59:74:13:78:d2:ae:d9:78:70:33:f7: cd:b9:e4:7a:c7:8b:07:cf:d7:2c:4c:8a:44:3d:8e:d4:af:bc: dd:5f:be:25:50:ee:23:99:79:e1:8f:93:a3:4b:0e:51:bd:e4: 32:9d:88:b3:6c:3c:63:4c:fa:6f:e4:42:9c:cd:81:4c:f5:76: f4:de:5b:ed:77:4e:d5:91:d7:cb:ba:1b:6c:53:c2:62:e4:93: 85:21:b4:73:a9:5f:db:4c:57:b5:18:7b:65:e9:c5:f9:6e:a9: 4d:d3:4c:cb:8f:2a:bb:18:ee:f6:fe:7c:75:60:8b:1e:b1:3f: 19:0f:09:16:b5:ba:84:b8:89:a8:0a:38:54:10:63:77:16:7e: c0:42:2f:e6:21:94:a8:ee:f0:86:a0:4e:a2:cb:29:98:86:8c: ab:ea:26:da:28:6d:85:db:de:74:ea:c9:9f:52:50:cd:25:1e: 92:3c:59:9d:e4:0e:14:c7:59:c9:28:15:79:03:28:39:a1:1a: a5:39:ac:81:3a:dd:94:73:d2:86:d4:8c:79:50:81:20:59:f7: 1c:8f:92:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVEOTMxMTAvBgNVBAUTKDk5MzVDNjM5QjNDMzUxREJFRDVCMjkzOTk0RjcyRjgx NENDRjlCQTkwHhcNMjUwOTA4MTU1MzMyWhcNMjUwOTE1MTU1MzMyWjAYMRYwFAYD VQQDEw02OGJlZmJmYy1jYTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoET7p4KX1DYGSTiFkpFbbEapsFNQi/eyjMsZ9DE95Vipnw7oz9PU7urB0/Vk TcUfuozFg7kZkB1uZFUCx7IggF1BkC+uF3ffK6h0tIcbqeQGRgX9BPwgOfT6oygc 4pXOEy1ne6sQ+MalpR0ljklg9TTaMVkE1VlQZsGC0i5Q6tBQfO+GMB8uNdl3SmLd 9yEDANWAnWTtE/FbPQAJ5h+IiGDbNLij0/LTb8ZWWKs/UcCssAvse6Mi4VWVxP2M 3b2hTiwNLgOg6YS/PRHCFSIRWrUCRHZoBEBO4i5sYJPTf1Y5wCOsoF+Cg9l4m8ut 71aKp725PIoC/94FGQOnzXrT9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuDyErx bGh1Mgw34g911AXgspJSMB8GA1UdIwQYMBaAFJk1xjmzw1Hb7VspOZT3L4FMz5up MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUQ5My81QzEwQTgxMERD NUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVkdnRXeWs1bFBjdmdVelBt NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21UWEdPYlBEVWR2dFd5azVsUGN2Z1V6UG02ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUQ5My81QzEwQTgxMERDNUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVk dnRXeWs1bFBjdmdVelBtNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkEA3px1kH83BMQSi7595YB2n3CrWW2Nn8oryJ+1OGxYeVS7SKWUmj 6R3TWXQTeNKu2XhwM/fNueR6x4sHz9csTIpEPY7Ur7zdX74lUO4jmXnhj5OjSw5R veQynYizbDxjTPpv5EKczYFM9Xb03lvtd07VkdfLuhtsU8Ji5JOFIbRzqV/bTFe1 GHtl6cX5bqlN00zLjyq7GO72/nx1YIsesT8ZDwkWtbqEuImoCjhUEGN3Fn7AQi/m IZSo7vCGoE6iyymYhoyr6ibaKG2F29506smfUlDNJR6SPFmd5A4Ux1nJKBV5Ayg5 oRqlOayBOt2Uc9KG1Ix5UIEgWfccj5IA -----END CERTIFICATE-----Generated at Tue Sep 9 13:34:59 2025 by rpki-client