$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft File: 509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json) Hash identifier: 486ZCmjVMKs4HRe3S9RGZ4Zc3WlEPSD4o7Nte0F+erw= Subject key identifier: 03:1D:41:2E:51:99:CF:40:33:5B:6D:00:15:C5:AE:D8:E5:15:F6:0D Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Certificate serial: 0B65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft Manifest number: 0B58 Signing time: Thu 18 Sep 2025 19:20:46 +0000 Manifest this update: Thu 18 Sep 2025 19:20:45 +0000 Manifest next update: Thu 25 Sep 2025 19:20:45 +0000 Files and hashes: 1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: wnlMyQ8YYIL38mFkpFOsSzCvcGZ/Nae1rxE9HouG7U0=) 2: 3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa (hash: PAA4OxtlazOKwYLjk6aLytCy9NItnRL8j4f8o3mJBHg=) 3: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (hash: a+Zi9iESugqvqoTYb4WkQmUuVNUV8p+uqNbSEtnaZ8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2917 (0xb65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Validity Not Before: Sep 18 19:20:45 2025 GMT Not After : Sep 25 19:20:45 2025 GMT Subject: CN=68cc5b8e-bef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2c:fd:90:43:f5:82:2a:d0:3b:7e:e3:f1:8d: 09:d1:48:ec:c7:07:f9:c6:0c:1e:fc:c5:8b:71:dd: d5:5b:ee:83:0e:d6:40:a2:15:d8:20:97:89:72:56: d1:d5:17:06:d4:fd:98:29:65:6d:f2:e8:c4:d8:1d: be:b3:68:56:31:ac:7a:e1:15:5c:30:eb:5f:48:6f: ef:d6:c0:53:07:a3:98:a8:ad:b2:4b:11:d3:03:2f: 47:12:81:56:97:bf:28:5d:c0:b4:b9:f9:fb:50:a8: 9e:99:a2:d6:8c:a6:b3:81:7f:05:d8:18:ea:b5:44: 4c:a2:b4:8c:0b:ed:de:b4:cc:08:56:84:a6:71:8e: ca:88:8f:8f:f2:ad:6d:04:15:83:d0:2c:4a:12:34: 76:07:6e:2d:44:81:6b:65:97:56:0d:b7:1a:f1:e9: 82:90:a8:fa:a2:d6:53:71:83:d7:ba:25:48:f8:c2: 46:c0:67:ee:8f:31:b7:38:ed:43:b9:f1:1b:92:69: a1:2c:34:6e:b8:82:ad:7e:e2:40:42:0e:18:83:ef: 99:f5:d1:93:c2:03:ce:a7:c9:87:ea:7d:44:c5:78: 97:05:7b:e6:5c:44:60:bb:02:ef:8d:6d:85:67:11: ed:86:df:0d:08:94:44:3c:4c:fb:ba:1f:30:5c:bc: 0d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1D:41:2E:51:99:CF:40:33:5B:6D:00:15:C5:AE:D8:E5:15:F6:0D X509v3 Authority Key Identifier: keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3d:0a:02:d2:4d:85:8a:8a:08:95:2c:f1:61:d8:df:c8:95: 34:b0:26:43:da:6c:9b:4c:d3:aa:92:6f:5c:44:eb:a2:6f:ef: 11:c3:58:bc:39:9a:c6:57:b7:93:fb:d6:91:a0:df:7d:9d:b8: 7b:b8:e7:a3:0f:37:15:09:a1:96:e0:31:e3:09:d2:2e:86:5d: 4d:fe:02:97:54:76:60:37:91:6e:8e:06:61:4e:b0:6a:9f:3a: 30:3a:3b:65:36:af:23:6b:83:2c:d3:9a:c3:a9:99:2c:d0:48: e5:d9:99:a4:4d:d4:d8:35:c8:bb:b9:95:71:8e:f7:1b:ea:9d: ec:36:5b:6d:33:e9:d8:46:04:86:a3:0c:50:01:f0:4d:ce:08: db:51:dd:08:fd:85:61:e5:ea:8d:54:f4:c8:22:94:f9:8d:68: b6:3c:45:92:80:8a:0d:6f:1e:54:c7:d6:9d:fb:d0:89:bc:f6: 0a:c0:36:da:2a:22:da:4f:37:1e:2e:67:8d:e2:5c:40:0e:75: 12:7b:50:ff:d7:d6:82:9c:e4:c6:4d:f2:76:f6:d2:30:c8:05: 20:43:3b:a1:a6:07:0d:7f:0d:f6:5b:6b:5f:e1:f7:36:f5:87: 9f:e1:d1:cb:bd:5b:c5:51:93:05:31:14:e6:d3:91:49:d3:af: ee:bd:df:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA2RjIxMTAvBgNVBAUTKEU3NEY0NjRDNDA4NjU5RUQyNTg5REI2NjRDRThFRjZB NkM2MDBDNDcwHhcNMjUwOTE4MTkyMDQ1WhcNMjUwOTI1MTkyMDQ1WjAYMRYwFAYD VQQDEw02OGNjNWI4ZS1iZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiz9kEP1girQO37j8Y0J0Ujsxwf5xgwe/MWLcd3VW+6DDtZAohXYIJeJclbR 1RcG1P2YKWVt8ujE2B2+s2hWMax64RVcMOtfSG/v1sBTB6OYqK2ySxHTAy9HEoFW l78oXcC0ufn7UKiemaLWjKazgX8F2BjqtURMorSMC+3etMwIVoSmcY7KiI+P8q1t BBWD0CxKEjR2B24tRIFrZZdWDbca8emCkKj6otZTcYPXuiVI+MJGwGfujzG3OO1D ufEbkmmhLDRuuIKtfuJAQg4Yg++Z9dGTwgPOp8mH6n1ExXiXBXvmXERguwLvjW2F ZxHtht8NCJREPEz7uh8wXLwNRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMdQS5R mc9AM1ttABXFrtjlFfYNMB8GA1UdIwQYMBaAFOdPRkxAhlntJYnbZkzo72psYAxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDZGMi84QjhDNEREMjNG NDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dlMGxpZHRtVE9qdmFteGdE RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUwOUdURUNHV2UwbGlkdG1UT2p2YW14Z0RFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDZGMi84QjhDNEREMjNGNDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dl MGxpZHRtVE9qdmFteGdERWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+PQoC0k2FiooIlSzxYdjfyJU0sCZD2mybTNOqkm9cROuib+8Rw1i8 OZrGV7eT+9aRoN99nbh7uOejDzcVCaGW4DHjCdIuhl1N/gKXVHZgN5FujgZhTrBq nzowOjtlNq8ja4Ms05rDqZks0Ejl2ZmkTdTYNci7uZVxjvcb6p3sNlttM+nYRgSG owxQAfBNzgjbUd0I/YVh5eqNVPTIIpT5jWi2PEWSgIoNbx5Ux9ad+9CJvPYKwDba KiLaTzceLmeN4lxADnUSe1D/19aCnOTGTfJ29tIwyAUgQzuhpgcNfw32W2tf4fc2 9Yef4dHLvVvFUZMFMRTm05FJ06/uvd/U -----END CERTIFICATE-----Generated at Fri Sep 19 00:56:23 2025 by rpki-client