$ rpki-client -vvf rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft File: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft (raw, json) Hash identifier: P55cSR+eSKCoQBDTuYa/pBWslkDW1OzT8bu3saYcD3E= Subject key identifier: AA:FC:69:49:C5:6B:95:23:29:28:FC:14:64:E2:CF:AC:B1:0C:A6:71 Authority key identifier: F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 Certificate issuer: /CN=A919834A/serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4 Certificate serial: 1A2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft Manifest number: 19EB Signing time: Thu 18 Sep 2025 16:30:20 +0000 Manifest this update: Thu 18 Sep 2025 16:30:20 +0000 Manifest next update: Thu 25 Sep 2025 16:30:20 +0000 Files and hashes: 1: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl (hash: 4hlYY0wqtYM0KGFJy1y/VecOQ570sQ11QWzLu1wI684=) 2: 48EE1EC6A80311EBA56CEC52C4F9AE02.roa (hash: c2CgFARH3NGyjJVcgLSdMDavs6AC8B7rRi2PB+rzCh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6698 (0x1a2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919834A, serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4 Validity Not Before: Sep 18 16:30:20 2025 GMT Not After : Sep 25 16:30:20 2025 GMT Subject: CN=68cc339c-846e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:42:3a:a5:69:af:a8:83:79:a9:c3:48:41:be: c4:6a:62:be:30:81:56:bf:73:fe:c7:c1:c3:54:f8: 1c:5e:df:b4:0a:64:5c:9b:3c:79:4d:b0:2b:17:c2: e8:90:f2:39:0f:66:04:a0:34:6c:7f:89:8d:5f:f0: 71:59:5d:3c:cc:24:48:66:4c:c8:f7:42:de:dd:89: 6f:88:be:ce:aa:03:47:91:01:8b:56:85:50:e6:b3: ae:6c:ce:3f:69:c9:56:8d:15:f5:35:dd:1c:0c:3c: 65:10:ec:4c:8f:67:aa:d0:cc:64:4e:66:a0:cf:f5: f7:16:3e:eb:df:4a:40:0c:d8:c9:5f:8b:35:db:ab: e8:8d:76:ce:dd:23:8e:64:e2:b4:b0:bc:05:d6:3c: 31:31:7a:73:13:66:a8:44:cf:67:40:5f:66:b9:26: ec:68:5d:eb:e5:74:68:65:d5:25:fa:0f:8c:2d:46: 09:35:af:cc:be:0e:1c:b9:e6:bf:72:ef:7e:6c:36: 62:30:db:4f:94:b9:b7:c8:87:93:fe:f1:f3:63:43: ef:3c:80:b7:11:ac:33:c0:b6:0c:76:ed:02:6c:63: 0b:e4:0c:ce:a3:21:68:ef:b2:2c:a8:2a:a0:31:57: 21:01:83:b1:69:94:ca:6c:7c:ad:43:55:34:9e:a1: 34:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FC:69:49:C5:6B:95:23:29:28:FC:14:64:E2:CF:AC:B1:0C:A6:71 X509v3 Authority Key Identifier: keyid:F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:85:93:a4:ef:d5:22:21:66:37:0b:ff:23:77:c3:fe:e8:e3: 6a:c8:e2:18:db:48:28:fa:9c:fa:5a:ea:ee:93:67:52:25:9d: 10:15:a2:1b:99:26:b2:41:f9:e1:ab:06:a7:72:60:ba:06:28: f9:f3:72:2d:1b:9a:b9:6f:29:ed:fc:a0:06:27:c4:a8:82:66: b9:69:14:81:03:65:23:d5:a1:aa:6a:be:40:07:5d:e3:7d:ba: 48:fb:84:84:da:fe:b4:65:8b:63:36:22:4c:19:2b:58:9e:48: bb:b3:95:d6:3f:17:a5:f9:a2:a6:31:be:fb:a6:0e:c3:97:27: 67:3f:14:4a:51:fa:ec:23:55:56:fb:2a:10:5d:10:83:0c:fa: 93:29:93:7b:43:48:a9:8b:6f:97:9d:3c:1c:dd:32:fa:f5:03: cf:83:b6:13:ac:1a:42:22:bc:19:39:5b:e1:10:b0:d0:18:47: 79:83:9a:78:39:d2:0c:d1:b8:4f:cb:0e:51:62:01:8d:14:ca: 04:47:b6:be:38:5b:c4:cb:39:73:cd:0e:39:a4:70:74:3b:d7: 78:8b:c1:85:af:98:4e:c5:2d:9e:00:09:57:19:71:da:7e:a2: f2:1b:05:c8:ee:62:20:03:65:d3:e1:22:e2:ca:32:38:b7:40: c0:1d:5d:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzNEExMTAvBgNVBAUTKEY2MjVENkJGQ0Q0MjFCRDNEQjk3QzY5NTk0MTRCQzcw OTQ2RUFCQzQwHhcNMjUwOTE4MTYzMDIwWhcNMjUwOTI1MTYzMDIwWjAYMRYwFAYD VQQDEw02OGNjMzM5Yy04NDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UI6pWmvqIN5qcNIQb7EamK+MIFWv3P+x8HDVPgcXt+0CmRcmzx5TbArF8Lo kPI5D2YEoDRsf4mNX/BxWV08zCRIZkzI90Le3YlviL7OqgNHkQGLVoVQ5rOubM4/ aclWjRX1Nd0cDDxlEOxMj2eq0MxkTmagz/X3Fj7r30pADNjJX4s126vojXbO3SOO ZOK0sLwF1jwxMXpzE2aoRM9nQF9muSbsaF3r5XRoZdUl+g+MLUYJNa/Mvg4cuea/ cu9+bDZiMNtPlLm3yIeT/vHzY0PvPIC3EawzwLYMdu0CbGML5AzOoyFo77IsqCqg MVchAYOxaZTKbHytQ1U0nqE0nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKr8aUnF a5UjKSj8FGTiz6yxDKZxMB8GA1UdIwQYMBaAFPYl1r/NQhvT25fGlZQUvHCUbqvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODM0QS8yQzA0NzQ3NDZF MzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5UGJsOGFWbEJTOGNKUnVx OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWFd2ODFDRzlQYmw4YVZsQlM4Y0pSdXE4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODM0QS8yQzA0NzQ3NDZFMzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5 UGJsOGFWbEJTOGNKUnVxOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9hZOk79UiIWY3C/8jd8P+6ONqyOIY20go+pz6Wuruk2dSJZ0QFaIb mSayQfnhqwancmC6Bij583ItG5q5bynt/KAGJ8Sogma5aRSBA2Uj1aGqar5AB13j fbpI+4SE2v60ZYtjNiJMGStYnki7s5XWPxel+aKmMb77pg7DlydnPxRKUfrsI1VW +yoQXRCDDPqTKZN7Q0ipi2+XnTwc3TL69QPPg7YTrBpCIrwZOVvhELDQGEd5g5p4 OdIM0bhPyw5RYgGNFMoER7a+OFvEyzlzzQ45pHB0O9d4i8GFr5hOxS2eAAlXGXHa fqLyGwXI7mIgA2XT4SLiyjI4t0DAHV1k -----END CERTIFICATE-----Generated at Fri Sep 19 04:45:06 2025 by rpki-client