$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft File: s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft (raw, json) Hash identifier: ifo8GbsnD1OZFiGbmd5+TPiuuKDVWtA8aZO2eCaKZ9s= Subject key identifier: 63:DA:D0:A1:B7:CA:33:C1:0E:FF:5D:DA:21:B7:84:E6:86:1B:02:56 Authority key identifier: B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6 Certificate issuer: /CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6 Certificate serial: 0B5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft Manifest number: 12C8 Signing time: Thu 18 Sep 2025 19:18:18 +0000 Manifest this update: Thu 18 Sep 2025 19:18:17 +0000 Manifest next update: Thu 25 Sep 2025 19:18:17 +0000 Files and hashes: 1: s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl (hash: O9ciARLS/UPXaXvDB0AshdG0yHo2IkKCpntx5jg569w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199231, serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6 Validity Not Before: Sep 18 19:18:17 2025 GMT Not After : Sep 25 19:18:17 2025 GMT Subject: CN=68cc5af9-dc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2a:d2:b7:e2:ba:9c:4e:fc:21:92:85:ee:1a: fe:a7:d0:42:d9:72:4e:0d:54:65:55:3e:0f:41:d2: f8:35:6f:14:4f:fe:f7:9b:9a:14:98:d1:12:12:16: 64:03:2b:e3:95:df:f2:dc:19:df:d9:37:82:e4:60: b3:80:6d:da:71:3d:1d:9b:49:b9:24:66:0b:38:38: 72:65:8d:12:63:b0:eb:6d:a5:5b:b5:a5:03:ea:b5: c2:c3:13:51:cd:36:9d:d1:44:af:92:93:e5:47:8a: 16:2e:94:d0:cc:04:f6:3b:31:b6:c6:cd:8f:d1:cf: 1c:a8:e9:61:5b:99:af:da:b5:6a:b5:53:35:eb:46: 8b:74:d6:4b:7d:db:6c:32:67:f2:e8:8b:2b:0c:b7: cf:62:53:4a:76:84:e9:32:d6:f5:6a:5c:39:9d:03: 80:64:26:93:95:63:09:c9:e1:1f:23:27:9b:fb:16: 78:d4:86:09:f1:7b:64:2d:fb:1a:69:c1:d7:59:93: 59:33:31:69:8f:ce:9a:88:81:5e:aa:d0:7a:bb:6a: a8:52:ce:e2:dd:86:17:6f:f3:09:14:3d:01:76:a2: f6:a7:91:43:18:b8:83:d5:87:03:3c:a8:12:9d:e2: 23:b6:ae:98:cf:12:40:df:ca:c2:f5:80:cf:52:2e: 27:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DA:D0:A1:B7:CA:33:C1:0E:FF:5D:DA:21:B7:84:E6:86:1B:02:56 X509v3 Authority Key Identifier: keyid:B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:69:c0:1d:19:40:73:24:3d:07:df:53:0b:89:c4:ba:3c:92: 2a:28:0b:a6:c6:d3:de:95:a9:66:df:ac:42:3d:78:1b:c0:a5: 51:a3:32:c5:47:e1:c7:82:47:e7:b1:79:80:8f:2a:72:36:c5: 3b:87:c6:86:57:02:06:e2:2f:02:b4:e0:a6:42:f2:55:66:15: d8:92:f9:f1:1b:9d:61:93:c3:d3:13:b0:80:1e:37:9e:d6:6e: 89:74:e4:3c:63:71:61:2b:77:40:c3:5d:e0:2e:76:8e:38:36: 72:9e:e3:d6:8d:24:df:5b:03:df:2b:47:e1:0e:d8:2d:cc:ef: 08:aa:8a:d6:3a:5f:dd:e9:b9:30:04:ee:01:7f:e7:ae:81:46: d4:74:8e:ab:c7:7c:a6:94:d8:45:bd:8c:00:34:74:55:1c:75: 31:26:4e:e2:6a:65:88:f1:6a:b5:3f:14:b5:9d:04:a9:a5:df: 86:71:fe:40:8a:aa:5e:09:b5:f7:7e:5b:b1:e6:43:91:88:2c: 36:03:db:60:bb:d4:0e:e1:62:70:ca:cc:fd:6e:51:58:8d:38: 33:5a:d3:25:d4:59:d0:d9:a9:20:8a:b0:db:d6:1d:79:34:44: 0a:94:3a:a2:1a:0e:8e:87:ca:04:59:4c:df:02:ed:d9:18:08: 4f:e6:ef:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyMzExMTAvBgNVBAUTKEIzRTQxNTdERDU4RDQzQTdBN0Q4MEZGMzA2RkJDNTQx NTQ0NTE2RTYwHhcNMjUwOTE4MTkxODE3WhcNMjUwOTI1MTkxODE3WjAYMRYwFAYD VQQDEw02OGNjNWFmOS1kYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0irSt+K6nE78IZKF7hr+p9BC2XJODVRlVT4PQdL4NW8UT/73m5oUmNESEhZk Ayvjld/y3Bnf2TeC5GCzgG3acT0dm0m5JGYLODhyZY0SY7DrbaVbtaUD6rXCwxNR zTad0USvkpPlR4oWLpTQzAT2OzG2xs2P0c8cqOlhW5mv2rVqtVM160aLdNZLfdts Mmfy6IsrDLfPYlNKdoTpMtb1alw5nQOAZCaTlWMJyeEfIyeb+xZ41IYJ8XtkLfsa acHXWZNZMzFpj86aiIFeqtB6u2qoUs7i3YYXb/MJFD0BdqL2p5FDGLiD1YcDPKgS neIjtq6YzxJA38rC9YDPUi4nJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPa0KG3 yjPBDv9d2iG3hOaGGwJWMB8GA1UdIwQYMBaAFLPkFX3VjUOnp9gP8wb7xUFURRbm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTIzMS8wOEZEQ0Q1MDND ODExMUVBODIwRDdGNDlDNEY5QUUwMi9zLVFWZmRXTlE2ZW4yQV96QnZ2RlFWUkZG dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtUVZmZFdOUTZlbjJBX3pCdnZGUVZSRkZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTIzMS8wOEZEQ0Q1MDNDODExMUVBODIwRDdGNDlDNEY5QUUwMi9zLVFWZmRXTlE2 ZW4yQV96QnZ2RlFWUkZGdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAacAdGUBzJD0H31MLicS6PJIqKAumxtPelalm36xCPXgbwKVRozLF R+HHgkfnsXmAjypyNsU7h8aGVwIG4i8CtOCmQvJVZhXYkvnxG51hk8PTE7CAHjee 1m6JdOQ8Y3FhK3dAw13gLnaOODZynuPWjSTfWwPfK0fhDtgtzO8IqorWOl/d6bkw BO4Bf+eugUbUdI6rx3ymlNhFvYwANHRVHHUxJk7iamWI8Wq1PxS1nQSppd+Gcf5A iqpeCbX3flux5kORiCw2A9tgu9QO4WJwysz9blFYjTgzWtMl1FnQ2akgirDb1h15 NEQKlDqiGg6Oh8oEWUzfAu3ZGAhP5u8x -----END CERTIFICATE-----Generated at Fri Sep 19 10:54:15 2025 by rpki-client