$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft File: _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json) Hash identifier: pvfiydjGSxRPuL3258NQIpsIAn/i+flYrIqGg1rxouc= Subject key identifier: C2:33:DB:60:66:19:81:54:90:87:7F:9A:17:18:4F:A3:81:7E:5E:1C Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA Certificate issuer: /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Certificate serial: 088D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft Manifest number: 088D Signing time: Thu 18 Sep 2025 20:49:08 +0000 Manifest this update: Thu 18 Sep 2025 20:49:08 +0000 Manifest next update: Thu 25 Sep 2025 20:49:08 +0000 Files and hashes: 1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: gZY8ALsKC6TcyzhhHoAeLCoHet7OkcX5UPS5PK+nWcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189 (0x88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Validity Not Before: Sep 18 20:49:08 2025 GMT Not After : Sep 25 20:49:08 2025 GMT Subject: CN=68cc7044-ec83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:44:86:75:8e:e3:10:41:31:6d:55:dd:bf: 36:d0:d9:e5:96:f1:ee:af:86:71:b1:c7:ff:42:8a: 0d:77:81:fc:b0:a1:cc:3f:06:bf:1e:07:63:86:95: c4:be:5d:72:5b:91:a8:ed:24:45:e9:e8:bb:8a:cf: a0:5d:7b:78:6a:50:b5:e3:96:b2:e0:67:8f:8a:1d: c0:16:36:0c:ba:dc:f4:a1:a7:0a:7c:d0:78:6d:38: 36:5a:a2:7e:94:82:a7:43:d3:a5:8c:13:c9:b3:1e: 94:57:e0:e4:57:c0:70:7d:65:96:6b:3d:30:6a:99: 54:ba:90:7d:08:7b:96:ab:a1:ca:77:8b:16:75:03: 19:1f:34:c9:ba:8d:59:44:eb:c3:b5:6f:62:12:60: 6a:04:a8:f2:d9:53:ca:a7:9f:ab:27:29:68:42:50: 95:58:17:e4:f6:b7:0b:18:81:5a:ee:56:82:47:90: da:b9:6c:29:44:8c:2e:60:8f:bd:a3:58:60:39:bf: 90:5f:91:5c:5b:91:03:a0:c8:ae:8e:5d:30:71:d0: 8c:43:ad:d6:f3:72:4c:a4:18:0b:43:f1:62:71:b9: 1a:ef:6d:d7:43:e2:17:f3:e0:69:03:2d:ee:fd:80: 21:68:5f:4b:a4:b7:a0:c4:a4:ab:65:81:c3:23:04: 97:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:33:DB:60:66:19:81:54:90:87:7F:9A:17:18:4F:A3:81:7E:5E:1C X509v3 Authority Key Identifier: keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:9a:14:68:0e:4d:61:df:5d:82:bd:23:e9:d2:8c:d3:a8:35: ef:68:60:bd:fb:c5:be:13:20:88:10:f4:65:6c:0f:9b:ea:30: 88:fc:56:47:72:2a:9e:cb:c8:1e:c3:51:bb:b9:4d:ba:8d:6d: 80:ba:10:2e:85:69:31:65:c3:94:c4:9a:ad:1a:a4:71:6c:f5: dd:34:2d:99:96:61:58:2a:b3:ed:c0:c3:0c:11:f3:a4:30:e7: c2:08:15:2d:e2:ca:e2:f5:c2:12:93:cd:40:da:19:a2:d6:49: 41:c3:cc:a3:3d:97:92:dc:ad:3b:a0:24:b8:63:83:9c:25:b4: f3:a6:59:6f:6d:04:5c:47:26:5b:ac:19:4f:c2:f0:43:4a:bf: c1:f5:f1:b7:9d:9c:4e:d3:79:40:2c:15:9a:93:82:db:f6:ab: a4:da:90:87:fe:08:c6:0e:d8:cf:6b:fc:57:4e:d7:bb:a6:21: 48:11:66:ef:95:08:f2:3c:d3:35:a0:24:2b:d0:ef:79:56:99: 81:0a:ef:04:e2:c3:06:7d:4a:87:8d:46:e4:f8:68:7f:92:78: d1:f3:ed:f8:4c:09:42:c3:f4:3a:ab:f6:e2:14:ed:28:ba:b3: 4c:54:04:31:ca:f6:24:34:da:53:56:ce:60:92:89:93:33:ee: 89:70:ba:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY5N0QxMTAvBgNVBAUTKEZGRDBCREZDNkQxRDZGNEVENkVEMzgzOTAzOUY0MUU5 RURDNjZGQkEwHhcNMjUwOTE4MjA0OTA4WhcNMjUwOTI1MjA0OTA4WjAYMRYwFAYD VQQDEw02OGNjNzA0NC1lYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1lEhnWO4xBBMW1V3b820NnllvHur4Zxscf/QooNd4H8sKHMPwa/HgdjhpXE vl1yW5Go7SRF6ei7is+gXXt4alC145ay4GePih3AFjYMutz0oacKfNB4bTg2WqJ+ lIKnQ9OljBPJsx6UV+DkV8BwfWWWaz0waplUupB9CHuWq6HKd4sWdQMZHzTJuo1Z ROvDtW9iEmBqBKjy2VPKp5+rJyloQlCVWBfk9rcLGIFa7laCR5DauWwpRIwuYI+9 o1hgOb+QX5FcW5EDoMiujl0wcdCMQ63W83JMpBgLQ/Ficbka723XQ+IX8+BpAy3u /YAhaF9LpLegxKSrZYHDIwSXnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIz22Bm GYFUkId/mhcYT6OBfl4cMB8GA1UdIwQYMBaAFP/QvfxtHW9O1u04OQOfQentxm+6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3RC85RDI4RUMwQ0M3 QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIwN1c3VGc1QTU5QjZlM0di N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL185QzlfRzBkYjA3VzdUZzVBNTlCNmUzR2I3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njk3RC85RDI4RUMwQ0M3QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIw N1c3VGc1QTU5QjZlM0diN28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3mhRoDk1h312CvSPp0ozTqDXvaGC9+8W+EyCIEPRlbA+b6jCI/FZH ciqey8gew1G7uU26jW2AuhAuhWkxZcOUxJqtGqRxbPXdNC2ZlmFYKrPtwMMMEfOk MOfCCBUt4sri9cISk81A2hmi1klBw8yjPZeS3K07oCS4Y4OcJbTzpllvbQRcRyZb rBlPwvBDSr/B9fG3nZxO03lALBWak4Lb9quk2pCH/gjGDtjPa/xXTte7piFIEWbv lQjyPNM1oCQr0O95VpmBCu8E4sMGfUqHjUbk+Gh/knjR8+34TAlCw/Q6q/biFO0o urNMVAQxyvYkNNpTVs5gkomTM+6JcLpe -----END CERTIFICATE-----Generated at Fri Sep 19 01:30:23 2025 by rpki-client