$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: N4LcLcwB1xsGFVpQ5feToMMQMFUhh5wh7Bd8T/r6KvE= Subject key identifier: 33:08:0D:AB:C8:33:9B:5C:74:4C:D6:BC:7C:09:4E:A7:F3:3E:1A:B9 Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 08E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 08E7 Signing time: Thu 18 Sep 2025 20:37:15 +0000 Manifest this update: Thu 18 Sep 2025 20:37:15 +0000 Manifest next update: Thu 25 Sep 2025 20:37:15 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: Q3YErRVNBvXlWBLG+OaAN+QiyrzfMJAlOat5YSHu2NE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2280 (0x8e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: Sep 18 20:37:15 2025 GMT Not After : Sep 25 20:37:15 2025 GMT Subject: CN=68cc6d7b-bab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8f:2c:49:a0:5c:25:94:47:0c:22:2e:9e:6c: 4c:b5:00:f2:10:ea:8c:61:a9:6c:85:53:e0:4a:e2: 0c:d8:50:d9:b1:26:01:45:f5:68:80:0b:8d:8d:dd: a7:2d:66:0e:62:02:48:1e:c0:6a:bc:d2:aa:bb:0b: 4d:b4:1e:d4:99:27:10:84:7f:9e:1d:0e:6d:67:37: 52:97:3f:3b:77:65:68:38:39:3e:2f:96:76:9b:4c: 64:d7:32:be:07:d6:0f:4e:3b:15:c4:e6:8f:c7:ce: 1a:9d:33:99:76:3f:0e:96:db:d2:6a:5f:ea:24:21: 3c:d4:9c:65:8b:14:bb:bd:51:4b:da:9b:aa:96:93: 90:41:16:fc:9b:48:df:d9:76:5d:b8:71:8b:6b:1b: bd:a9:ea:d8:86:a4:eb:48:f4:2d:da:7c:d9:64:f8: 34:72:81:36:a9:2c:bc:b3:55:04:26:d0:ca:b7:f9: 98:bd:40:a7:1f:41:84:de:64:e4:08:26:7a:5c:b3: 85:29:26:0a:8e:bf:93:48:1b:e7:dc:e5:84:45:8f: ac:be:e7:ba:3f:e4:66:c5:2b:b1:d5:a0:da:11:fb: 32:49:58:54:c3:23:b3:5c:79:75:ba:52:9d:21:ac: ed:6c:ae:9c:b8:58:c3:3b:04:99:e3:ce:78:4d:a0: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:08:0D:AB:C8:33:9B:5C:74:4C:D6:BC:7C:09:4E:A7:F3:3E:1A:B9 X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:58:03:43:f7:b4:45:bc:dc:3c:f1:0b:3c:f5:57:3f:8b:90: 14:e8:61:2f:cb:c4:06:89:ee:3a:da:42:d3:4a:6a:97:46:46: d5:4d:1c:10:23:06:64:41:7f:6f:07:94:70:87:02:0b:c9:2b: 0a:b7:07:3e:49:c7:8a:10:0c:66:73:3c:ed:13:72:0c:4f:e9: 35:61:90:0b:df:b2:85:c4:fc:50:d9:7c:98:83:a3:e0:06:ea: a2:aa:86:55:75:ed:f8:50:ab:66:84:c5:d0:ff:62:e5:c7:fc: b9:51:69:e6:9a:e1:17:a8:3b:dc:db:55:25:32:66:1b:7d:40: c1:ae:50:e5:39:16:a2:e3:ed:cc:f8:dc:90:ac:93:73:bd:f7: c2:38:a3:95:e0:a8:8b:b9:07:3e:f9:93:02:dd:cd:6e:f0:26: d0:5a:13:3c:8f:e9:ea:62:f1:0f:f1:c0:0a:f5:52:c0:7f:8f: 77:2d:11:6d:e9:98:f9:bb:a1:16:63:09:1c:df:f8:7a:f0:48: 33:1c:c7:75:7b:8d:49:35:7f:04:e1:ec:59:cb:40:79:34:28: e9:e1:61:67:ea:b9:bc:9d:cc:2a:23:ba:d0:5e:33:0d:cb:da: 24:dc:79:07:25:0c:88:2d:37:fc:10:77:77:8f:45:fb:7f:b5: bd:4d:b8:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjUwOTE4MjAzNzE1WhcNMjUwOTI1MjAzNzE1WjAYMRYwFAYD VQQDEw02OGNjNmQ3Yi1iYWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Y8sSaBcJZRHDCIunmxMtQDyEOqMYalshVPgSuIM2FDZsSYBRfVogAuNjd2n LWYOYgJIHsBqvNKquwtNtB7UmScQhH+eHQ5tZzdSlz87d2VoODk+L5Z2m0xk1zK+ B9YPTjsVxOaPx84anTOZdj8OltvSal/qJCE81JxlixS7vVFL2puqlpOQQRb8m0jf 2XZduHGLaxu9qerYhqTrSPQt2nzZZPg0coE2qSy8s1UEJtDKt/mYvUCnH0GE3mTk CCZ6XLOFKSYKjr+TSBvn3OWERY+svue6P+RmxSux1aDaEfsySVhUwyOzXHl1ulKd IaztbK6cuFjDOwSZ4854TaAT6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMIDavI M5tcdEzWvHwJTqfzPhq5MB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABWAND97RFvNw88Qs89Vc/i5AU6GEvy8QGie462kLTSmqXRkbVTRwQ IwZkQX9vB5RwhwILySsKtwc+SceKEAxmczztE3IMT+k1YZAL37KFxPxQ2XyYg6Pg BuqiqoZVde34UKtmhMXQ/2Llx/y5UWnmmuEXqDvc21UlMmYbfUDBrlDlORai4+3M +NyQrJNzvffCOKOV4KiLuQc++ZMC3c1u8CbQWhM8j+nqYvEP8cAK9VLAf493LRFt 6Zj5u6EWYwkc3/h68EgzHMd1e41JNX8E4exZy0B5NCjp4WFn6rm8ncwqI7rQXjMN y9ok3HkHJQyILTf8EHd3j0X7f7W9TbhX -----END CERTIFICATE-----Generated at Thu Sep 18 21:55:38 2025 by rpki-client