$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: OhTIGZD4bks6nikYyndoYbpjiH5PjUjpbk3O3P3Sxro= Subject key identifier: 67:74:DD:E0:D6:E9:A4:C9:9F:6F:0E:A7:84:DD:CE:08:EC:71:1E:A8 Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 2393 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 2377 Signing time: Thu 18 Sep 2025 15:55:19 +0000 Manifest this update: Thu 18 Sep 2025 15:55:19 +0000 Manifest next update: Thu 25 Sep 2025 15:55:19 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: KmRO1wbFS+WLuLDVLamaeEsUlZCzUcf/PKR1saACf4M=) 2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: yQ+XYCupRjpKC1z+KmqRpy0/MHYgLpl3GjcGFImbs1s=) 3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: c0fUfF2O4q3/3ooNrYKlqBAmFHkp10eQdlPnj3yP614=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9107 (0x2393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: Sep 18 15:55:19 2025 GMT Not After : Sep 25 15:55:19 2025 GMT Subject: CN=68cc2b67-ca1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:1f:58:07:26:1b:d3:0e:fe:32:7d:e1:87: 6f:b8:95:ce:21:1d:64:98:c0:3a:1b:13:cc:04:a1: 52:d4:0b:ec:ee:82:dc:e1:51:66:4f:40:62:0c:35: 03:d6:2b:6b:a6:7d:a1:f3:f4:d3:4e:f3:c8:07:d7: ee:a0:af:4d:89:bb:49:33:65:48:b7:1b:d2:21:9b: 0a:24:5d:03:61:9a:05:41:ed:14:17:0c:cd:f0:d9: ea:f1:df:51:40:b4:e6:fe:6b:70:bd:d9:b5:2e:f0: eb:54:43:57:a5:d3:84:34:c1:53:c1:d0:be:06:83: 35:39:84:dc:c6:9e:73:4b:d4:84:39:53:b1:3f:af: 7b:53:25:e8:b1:7f:76:ff:8d:4e:f8:41:2d:ee:39: 24:7b:29:5d:34:72:44:df:66:e7:45:5b:2f:25:28: d2:a1:a6:89:64:5b:85:5a:21:2d:b3:3a:2d:ca:ec: 7f:96:ae:c8:e8:9b:1f:bd:64:e5:a1:25:30:97:3a: b0:7f:15:27:21:d6:94:22:d2:8d:8c:cd:19:37:7d: a7:cd:7a:1b:21:f1:a2:bf:be:a2:41:29:1e:84:29: 2c:3c:9c:6e:34:20:a7:6b:a6:7c:8c:97:56:06:3e: 8c:f9:32:51:20:c8:b8:19:a1:5d:0c:09:77:e5:50: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:74:DD:E0:D6:E9:A4:C9:9F:6F:0E:A7:84:DD:CE:08:EC:71:1E:A8 X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ff:de:c3:06:ee:4d:d7:e7:74:43:92:a6:e9:55:fe:bf:0e: d9:a5:c7:1b:4f:e5:87:79:85:26:24:50:4d:a3:de:20:03:e1: 5c:c8:ff:91:e3:c4:1e:26:cc:a3:2d:24:18:4a:89:a4:64:b4: 99:ad:f5:f9:22:b0:d0:d2:3d:93:18:25:fc:ec:d7:c4:ed:3b: 5c:34:33:56:4e:5d:bb:5a:de:c5:e5:94:d7:ff:c3:02:ac:d0: c3:74:a7:0c:4d:0f:f8:3a:ca:0f:9b:19:3e:0e:80:b6:0b:28: 8c:97:b2:36:bf:08:f7:e2:f7:d1:83:2c:a5:2a:5a:65:09:57: 54:50:59:ca:69:b5:f6:c6:85:e4:12:57:b2:5d:8d:e9:d0:c9: 1a:83:41:2b:98:68:3b:d2:88:9f:50:c0:03:56:be:88:9a:ac: cd:4c:e1:47:c6:32:1f:1c:c4:61:d5:b9:23:fd:20:ac:4e:1a: c1:75:f4:b0:b1:09:ad:5f:33:6c:6d:b4:9e:f1:58:12:e3:af: d0:b9:be:4c:d9:e2:62:31:07:80:55:30:af:a0:b0:f0:9a:f0: 1d:7c:94:f2:5d:7c:c6:1e:24:bf:4d:9d:05:14:79:81:ea:4c: 5b:b2:21:89:f5:3d:6e:2e:af:72:10:c5:ca:62:16:88:6d:86: 15:e9:68:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjUwOTE4MTU1NTE5WhcNMjUwOTI1MTU1NTE5WjAYMRYwFAYD VQQDEw02OGNjMmI2Ny1jYTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/IfWAcmG9MO/jJ94YdvuJXOIR1kmMA6GxPMBKFS1Avs7oLc4VFmT0BiDDUD 1itrpn2h8/TTTvPIB9fuoK9NibtJM2VItxvSIZsKJF0DYZoFQe0UFwzN8Nnq8d9R QLTm/mtwvdm1LvDrVENXpdOENMFTwdC+BoM1OYTcxp5zS9SEOVOxP697UyXosX92 /41O+EEt7jkkeyldNHJE32bnRVsvJSjSoaaJZFuFWiEtszotyux/lq7I6JsfvWTl oSUwlzqwfxUnIdaUItKNjM0ZN32nzXobIfGiv76iQSkehCksPJxuNCCna6Z8jJdW Bj6M+TJRIMi4GaFdDAl35VBZIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGd03eDW 6aTJn28Op4TdzgjscR6oMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt/97DBu5N1+d0Q5Km6VX+vw7ZpccbT+WHeYUmJFBNo94gA+FcyP+R 48QeJsyjLSQYSomkZLSZrfX5IrDQ0j2TGCX87NfE7TtcNDNWTl27Wt7F5ZTX/8MC rNDDdKcMTQ/4OsoPmxk+DoC2CyiMl7I2vwj34vfRgyylKlplCVdUUFnKabX2xoXk EleyXY3p0Mkag0ErmGg70oifUMADVr6ImqzNTOFHxjIfHMRh1bkj/SCsThrBdfSw sQmtXzNsbbSe8VgS46/Qub5M2eJiMQeAVTCvoLDwmvAdfJTyXXzGHiS/TZ0FFHmB 6kxbsiGJ9T1uLq9yEMXKYhaIbYYV6WiB -----END CERTIFICATE-----Generated at Fri Sep 19 12:21:29 2025 by rpki-client