$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json) Hash identifier: 39WfIsdq1u2NrwOYU4M19ZulfEkIsyhn8rcnfUotwR4= Subject key identifier: E6:58:C9:97:AB:B0:16:31:38:41:CA:20:6D:38:B1:49:30:17:A2:3D Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft Manifest number: 04B9 Signing time: Wed 17 Sep 2025 00:16:48 +0000 Manifest this update: Wed 17 Sep 2025 00:16:48 +0000 Manifest next update: Wed 24 Sep 2025 00:16:48 +0000 Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: UnTYXXc2vru0oCdS4ztcywjiOJ4TnmwvveO7aOxOFYM=) 2: CF272560413111ECB71E086AC4F9AE02.roa (hash: DFm7D2HD21ulEvvyR2LKRVZi0MMQ+cGXUer0vQ5hcd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: Sep 17 00:16:48 2025 GMT Not After : Sep 24 00:16:48 2025 GMT Subject: CN=68c9fdf0-e191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:f4:4a:20:6c:f5:40:57:62:c2:55:45:a4: ef:97:71:18:d9:a6:e2:4e:92:04:64:b2:8d:db:62: 0e:fa:d1:18:72:96:27:82:72:b3:35:4b:80:23:15: 26:40:6a:a9:01:03:e6:6b:d9:44:a1:3b:98:12:e3: e3:c4:77:a3:21:c6:b9:ab:b8:42:72:e2:6b:da:32: 5a:c5:62:65:03:6c:db:8f:d5:b1:b6:d9:a9:ea:10: 05:41:38:3b:4d:de:0f:f9:20:65:5e:7b:b3:f7:bf: 6f:d6:c4:13:ec:f3:10:66:e7:8b:91:e9:0d:da:a9: a7:6a:d4:81:92:b1:8a:e4:53:3f:53:58:f4:75:5e: 40:38:12:c4:e4:ca:36:2c:e1:82:18:84:f2:02:d8: b5:21:97:a9:bf:1e:0d:53:a7:1b:9b:7f:d7:15:e6: 37:71:b7:14:86:60:b2:75:2d:76:cc:3b:80:d1:87: 34:0b:4d:a3:32:e2:41:25:93:93:19:bb:6f:d1:e4: e7:4a:5c:39:e2:65:ab:9f:58:7c:77:8b:05:ac:70: c9:bd:04:b3:21:67:b5:ec:a5:af:9d:b4:0a:3f:b7: d1:0e:5f:4c:45:68:bf:9b:05:05:d0:b2:99:8f:e1: 7d:8c:90:42:ad:c6:44:67:58:48:38:71:97:0b:3d: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:58:C9:97:AB:B0:16:31:38:41:CA:20:6D:38:B1:49:30:17:A2:3D X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:f1:0c:a5:d4:bd:42:af:fd:3f:ad:37:fb:4a:91:42:08:bf: e2:d4:af:78:6f:0a:ae:73:08:9d:63:ac:fa:53:6f:85:ff:d1: 4c:5c:f6:a0:af:b8:a9:95:c3:4a:a4:d1:2b:e7:c6:32:a4:36: f4:ec:72:08:c0:d2:3b:7a:1f:9c:30:83:10:a1:ed:9e:57:fc: 63:8c:d2:2e:82:3d:c3:27:26:c2:26:79:35:ff:de:eb:8d:bf: 8a:80:7c:63:12:4f:bd:00:f6:70:58:57:63:33:89:e7:64:a5: 01:83:be:a0:ee:6c:94:75:11:03:d0:89:62:b5:a9:91:99:63: 6d:61:6a:be:af:6b:2b:68:ba:7c:84:a7:88:ef:07:2d:37:48: 7a:c8:c6:66:7d:90:2b:b3:52:28:10:b9:1c:ab:2a:d8:b9:0f: 6a:4b:e7:b0:ec:80:b5:e5:9f:b5:cf:e4:40:b8:2c:7c:3c:12: 0f:cf:07:ae:b0:6e:44:50:33:63:32:cd:dc:05:a7:43:08:63: 38:9c:47:1a:6b:8d:a4:4f:bf:2d:92:80:f7:79:02:b1:25:2f: 3a:34:f3:3e:3d:dc:a0:c1:b5:a1:b0:96:cb:dc:57:b3:f3:36: d8:7f:af:9e:58:9d:7e:70:7d:ca:95:33:e0:44:00:2c:58:52: 25:76:ed:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjUwOTE3MDAxNjQ4WhcNMjUwOTI0MDAxNjQ4WjAYMRYwFAYD VQQDEw02OGM5ZmRmMC1lMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRL0SiBs9UBXYsJVRaTvl3EY2abiTpIEZLKN22IO+tEYcpYngnKzNUuAIxUm QGqpAQPma9lEoTuYEuPjxHejIca5q7hCcuJr2jJaxWJlA2zbj9Wxttmp6hAFQTg7 Td4P+SBlXnuz979v1sQT7PMQZueLkekN2qmnatSBkrGK5FM/U1j0dV5AOBLE5Mo2 LOGCGITyAti1IZepvx4NU6cbm3/XFeY3cbcUhmCydS12zDuA0Yc0C02jMuJBJZOT Gbtv0eTnSlw54mWrn1h8d4sFrHDJvQSzIWe17KWvnbQKP7fRDl9MRWi/mwUF0LKZ j+F9jJBCrcZEZ1hIOHGXCz18awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZYyZer sBYxOEHKIG04sUkwF6I9MB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0 UDhIOXAwSDJwMUtkV2w1cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC18Qyl1L1Cr/0/rTf7SpFCCL/i1K94bwqucwidY6z6U2+F/9FMXPag r7iplcNKpNEr58YypDb07HIIwNI7eh+cMIMQoe2eV/xjjNIugj3DJybCJnk1/97r jb+KgHxjEk+9APZwWFdjM4nnZKUBg76g7myUdRED0IlitamRmWNtYWq+r2sraLp8 hKeI7wctN0h6yMZmfZArs1IoELkcqyrYuQ9qS+ew7IC15Z+1z+RAuCx8PBIPzweu sG5EUDNjMs3cBadDCGM4nEcaa42kT78tkoD3eQKxJS86NPM+PdygwbWhsJbL3Fez 8zbYf6+eWJ1+cH3KlTPgRAAsWFIldu24 -----END CERTIFICATE-----Generated at Thu Sep 18 20:33:59 2025 by rpki-client