$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: VIMT6N+/ATAEL954MPFNjkwDNvv3trOKCrlq+rLifWw= Subject key identifier: C4:B6:3B:44:1B:B1:22:62:C7:D9:4B:4A:36:07:B3:04:CA:6B:0A:3B Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 018A Signing time: Fri 05 Sep 2025 03:51:01 +0000 Manifest this update: Fri 05 Sep 2025 03:51:01 +0000 Manifest next update: Fri 12 Sep 2025 03:51:01 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: eVqYGYPtDbBABgQyVjkSIHWTTIsDTTG2FpV46nJ9Tbs=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: UzoADIDRcmbkR0v1b40VKhU4NXIbJvMsYpFVM0H3D88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 03:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: Sep 5 03:51:01 2025 GMT Not After : Sep 12 03:51:01 2025 GMT Subject: CN=68ba5e25-7345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:ad:a7:da:5b:05:a8:ee:5d:33:b9:02:e9: ec:9e:93:f1:5a:f2:bd:bd:44:52:c7:9f:e3:4b:0c: 42:9a:a6:8c:4e:49:24:bf:d6:6b:e2:41:9f:62:83: f3:ea:15:49:fe:32:b2:27:85:d3:70:70:b6:c9:be: a2:8d:12:1d:8b:c8:b2:90:44:66:ef:3c:0d:da:e7: f9:86:5c:16:58:0d:52:f8:42:98:47:98:4d:63:ef: cf:16:7c:87:f5:83:ff:62:56:09:e4:89:f0:42:85: c3:99:4c:8b:54:b6:dc:0e:d0:45:2a:22:63:64:af: 2b:68:dd:64:b8:86:91:2f:e0:93:93:ca:d3:c6:22: dd:5e:5f:5d:22:54:45:d6:26:e3:db:20:2f:ba:e2: 33:91:14:01:16:9d:97:67:02:e7:98:04:6b:58:fc: e0:ee:89:ff:0c:ea:6c:7f:c9:a3:b5:25:d4:f1:c7: c3:aa:74:a9:0f:34:12:76:c4:2f:3e:4d:34:ca:20: 5f:1a:e8:da:cd:ac:8b:e0:0a:37:2b:5a:9d:35:83: ce:1b:79:14:d4:7b:5f:2e:d6:aa:d2:d3:24:ba:70: 2e:86:fc:88:7e:1f:1b:2b:aa:c9:75:f3:24:7f:26: c4:76:9b:7a:0e:98:f3:e1:b2:0a:29:02:bd:89:d7: ba:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B6:3B:44:1B:B1:22:62:C7:D9:4B:4A:36:07:B3:04:CA:6B:0A:3B X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:23:56:66:bb:d1:af:e0:3f:0c:90:50:04:e6:6b:51:9f:7d: ad:e0:b6:65:e8:53:23:1b:b0:f6:69:41:31:5c:81:98:34:cc: 39:2c:77:0e:c5:26:f0:d6:f0:c5:45:83:50:35:a9:a9:a4:65: e0:d0:9a:c2:8f:3c:e5:c5:92:cc:bc:ef:7f:df:74:b0:81:e0: 9b:70:46:af:21:fb:2e:04:56:1b:4b:9a:fd:62:34:fd:fd:b2: 3f:d5:d0:a7:f1:f5:7d:2d:10:f3:c5:6c:9f:32:e3:03:e7:dc: 13:14:94:0d:64:7b:6c:42:42:10:dd:3b:f8:49:2a:8a:65:33: 37:68:af:df:16:02:19:cd:df:62:41:f3:d6:c7:9e:17:1e:87: 7e:ff:c5:34:f6:56:a1:52:f8:1f:fa:db:1c:dc:1e:ec:be:ba: e4:5e:d3:5b:ab:f5:9f:4e:57:c9:d0:17:6d:07:ab:1f:45:4f: ad:c6:aa:ef:2b:38:54:9d:37:20:fa:44:e3:63:30:4d:79:cf: fe:8b:c0:9f:02:50:2e:79:01:86:d3:7a:52:97:e6:56:a0:f5: b8:93:d6:2a:77:54:7c:99:6f:65:bb:d3:01:68:c9:25:01:8e: 13:e7:ad:da:b2:05:74:83:e9:8a:47:96:2d:64:44:bf:63:47: 00:d7:08:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjUwOTA1MDM1MTAxWhcNMjUwOTEyMDM1MTAxWjAYMRYwFAYD VQQDEw02OGJhNWUyNS03MzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NCtp9pbBajuXTO5AunsnpPxWvK9vURSx5/jSwxCmqaMTkkkv9Zr4kGfYoPz 6hVJ/jKyJ4XTcHC2yb6ijRIdi8iykERm7zwN2uf5hlwWWA1S+EKYR5hNY+/PFnyH 9YP/YlYJ5InwQoXDmUyLVLbcDtBFKiJjZK8raN1kuIaRL+CTk8rTxiLdXl9dIlRF 1ibj2yAvuuIzkRQBFp2XZwLnmARrWPzg7on/DOpsf8mjtSXU8cfDqnSpDzQSdsQv Pk00yiBfGujazayL4Ao3K1qdNYPOG3kU1HtfLtaq0tMkunAuhvyIfh8bK6rJdfMk fybEdpt6Dpjz4bIKKQK9ide6AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS2O0Qb sSJix9lLSjYHswTKawo7MB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXI1Zmu9Gv4D8MkFAE5mtRn32t4LZl6FMjG7D2aUExXIGYNMw5LHcO xSbw1vDFRYNQNamppGXg0JrCjzzlxZLMvO9/33SwgeCbcEavIfsuBFYbS5r9YjT9 /bI/1dCn8fV9LRDzxWyfMuMD59wTFJQNZHtsQkIQ3Tv4SSqKZTM3aK/fFgIZzd9i QfPWx54XHod+/8U09lahUvgf+tsc3B7svrrkXtNbq/WfTlfJ0BdtB6sfRU+txqrv KzhUnTcg+kTjYzBNec/+i8CfAlAueQGG03pSl+ZWoPW4k9Yqd1R8mW9lu9MBaMkl AY4T563asgV0g+mKR5YtZES/Y0cA1wgn -----END CERTIFICATE-----Generated at Sat Sep 6 13:26:46 2025 by rpki-client