$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: SbmMM8Klx8nKONtsieoSqTxrdA9HjNteYXd3M4ie6zs= Subject key identifier: 6F:C8:AC:98:57:91:DB:DE:42:7D:1A:FE:DF:B5:13:E8:F5:67:06:73 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0DD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0D9D Signing time: Mon 08 Sep 2025 18:00:39 +0000 Manifest this update: Mon 08 Sep 2025 18:00:38 +0000 Manifest next update: Mon 15 Sep 2025 18:00:38 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: jTZ3F14LiQKX1fe62ZD4ubzTVUpW+v8tY4JEwZzkjzk=) 2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=) 3: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: ephMktk7dldPDpqOYOq0zlTVGd1aoKcLbgXlsFlKEgM=) 4: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=) 5: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: TY0we0LCT2NhieXnw4ZC8SmWs1+jQYEFzS94Z1jJrh0=) 6: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: e7UzY1XC0eLBl2c9zPdawS11TdFN1eY25CHBco5Agic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3540 (0xdd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Sep 8 18:00:38 2025 GMT Not After : Sep 15 18:00:38 2025 GMT Subject: CN=68bf19c7-c6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:ec:ae:66:fb:79:a5:95:36:84:0c:d6:06: 48:a4:d9:17:0e:bc:81:39:ad:1f:8c:3f:77:1b:06: 87:e7:fc:1c:9f:6d:1f:29:86:80:71:dd:ba:d5:2a: 33:d7:1f:d9:07:0f:ea:c9:85:40:9c:76:d9:25:9b: d3:2a:8a:9c:10:1f:b0:2c:49:a3:5f:e0:77:c7:90: b6:23:9d:2e:be:6e:e6:ca:eb:47:0d:10:65:e3:41: 31:4c:db:2f:cd:7d:1a:57:4c:b4:02:67:93:d1:87: d5:23:2f:3e:7f:ba:e2:f9:ef:75:65:10:67:a6:96: 47:97:b3:29:14:5a:ac:ad:95:bb:d4:08:a5:62:c6: 1d:ab:82:b7:a3:b4:f5:a5:53:c7:d0:06:5e:ab:ac: dc:32:21:97:4c:29:f2:92:ac:16:fc:83:79:a5:fc: 26:81:ce:72:a2:9f:22:fc:e5:9c:60:4c:fc:6f:4e: 77:e1:bc:d0:18:0a:31:b5:78:ae:8e:28:19:b1:2f: 5e:04:2b:a0:74:17:4a:03:13:f3:1d:0e:6a:9f:f0: f0:e4:dc:a8:36:c4:7a:43:f4:66:47:8a:31:d5:18: 28:a6:47:ed:b5:e4:53:48:f8:d5:30:95:44:17:34: 81:0c:9c:4b:d7:ba:dd:76:1a:98:65:ac:a6:25:d1: 56:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C8:AC:98:57:91:DB:DE:42:7D:1A:FE:DF:B5:13:E8:F5:67:06:73 X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:15:6a:41:99:0e:ab:f9:65:69:4f:e9:1e:ad:5c:de:18:79: 58:06:e5:24:77:86:39:4c:b1:0f:63:0b:b5:c7:6f:bd:90:9a: 2e:c4:84:40:e7:94:1f:1c:8a:b6:2f:5d:21:8d:77:7b:e5:4f: e0:68:bc:28:9d:01:01:ec:ca:ef:ec:66:ca:0f:7f:3a:0d:8f: 74:99:f7:16:3e:98:d5:57:f3:00:21:e7:ce:04:32:1d:5b:50: b8:cc:af:d7:88:95:56:6f:a1:76:da:4b:07:b1:d3:ae:37:b0: 46:6c:8c:03:82:d2:32:3d:1b:4a:3c:76:a8:94:4e:20:ae:fe: 8d:fb:f4:26:3d:91:42:f8:ee:24:8b:35:8e:18:ec:47:be:30: 11:0f:a1:15:03:ea:a0:34:8e:a7:a9:52:ac:d7:9c:09:e8:ba: 3d:cc:7e:84:07:e3:4d:8c:9a:82:ec:72:f5:08:c8:2e:16:6c: 1b:29:10:cf:84:91:36:6e:dd:dd:d0:8b:5e:24:fb:5f:11:2e: 6f:44:21:4c:b8:45:6d:fe:2d:6c:cd:f0:a7:62:09:43:26:99: d4:1a:c9:37:d4:19:a4:02:69:21:73:6a:1f:c0:38:e7:de:20: 74:ad:71:b9:3e:67:29:17:8d:0d:26:e6:fe:c8:56:2e:38:2a: 5e:01:92:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjUwOTA4MTgwMDM4WhcNMjUwOTE1MTgwMDM4WjAYMRYwFAYD VQQDEw02OGJmMTljNy1jNmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw3srmb7eaWVNoQM1gZIpNkXDryBOa0fjD93GwaH5/wcn20fKYaAcd261Soz 1x/ZBw/qyYVAnHbZJZvTKoqcEB+wLEmjX+B3x5C2I50uvm7myutHDRBl40ExTNsv zX0aV0y0AmeT0YfVIy8+f7ri+e91ZRBnppZHl7MpFFqsrZW71AilYsYdq4K3o7T1 pVPH0AZeq6zcMiGXTCnykqwW/IN5pfwmgc5yop8i/OWcYEz8b0534bzQGAoxtXiu jigZsS9eBCugdBdKAxPzHQ5qn/Dw5NyoNsR6Q/RmR4ox1RgopkftteRTSPjVMJVE FzSBDJxL17rddhqYZaymJdFWjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/IrJhX kdveQn0a/t+1E+j1ZwZzMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATFWpBmQ6r+WVpT+kerVzeGHlYBuUkd4Y5TLEPYwu1x2+9kJouxIRA 55QfHIq2L10hjXd75U/gaLwonQEB7Mrv7GbKD386DY90mfcWPpjVV/MAIefOBDId W1C4zK/XiJVWb6F22ksHsdOuN7BGbIwDgtIyPRtKPHaolE4grv6N+/QmPZFC+O4k izWOGOxHvjARD6EVA+qgNI6nqVKs15wJ6Lo9zH6EB+NNjJqC7HL1CMguFmwbKRDP hJE2bt3d0IteJPtfES5vRCFMuEVt/i1szfCnYglDJpnUGsk31BmkAmkhc2ofwDjn 3iB0rXG5PmcpF40NJub+yFYuOCpeAZKP -----END CERTIFICATE-----Generated at Wed Sep 10 13:35:10 2025 by rpki-client