$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json) Hash identifier: v/OKtpLP62R0MdoQhJ5kNAWZNPAEdWfmtV3DRIhETos= Subject key identifier: 32:CB:78:57:B2:9A:E6:16:23:44:0B:11:88:EB:CC:62:31:3A:88:B3 Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE Certificate issuer: /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Certificate serial: 0B28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft Manifest number: 0B1A Signing time: Thu 18 Sep 2025 19:31:26 +0000 Manifest this update: Thu 18 Sep 2025 19:31:25 +0000 Manifest next update: Thu 25 Sep 2025 19:31:25 +0000 Files and hashes: 1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: HLvAJZ/F4xN4PYfkxWj2z1ooOqRkFKLm35DgTlJKyzU=) 2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: ndMYLuFm1npGXhTqyafB2ux+qylKnhbABDCIs0+SmbQ=) 3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: DJ5UPh4W8eU78pV9FNPBPxM5RGyD7+r3WrHHI7kvMUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2856 (0xb28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Validity Not Before: Sep 18 19:31:25 2025 GMT Not After : Sep 25 19:31:25 2025 GMT Subject: CN=68cc5e0d-247a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:34:b7:c5:67:8a:23:07:42:f6:f5:d5:90: 1e:07:9e:4c:9d:0f:de:9a:b1:46:ef:f1:70:84:d0: bc:2f:dd:37:aa:a0:58:98:e2:2a:f7:a1:e6:4e:57: b5:5e:c9:b6:ba:51:37:3f:29:15:bd:a2:10:6d:de: 6e:e8:35:03:ba:e6:ae:56:a8:35:a1:1c:b4:d6:7a: 73:87:d6:7a:52:2d:f6:82:9a:34:dd:0b:8d:7a:24: 75:5f:01:7c:02:c5:3b:15:ff:18:01:96:09:96:61: 98:3e:f1:eb:63:eb:79:2b:b2:b9:fb:8b:87:96:b8: b2:31:f3:90:0b:d2:27:fb:17:99:db:b7:39:2e:ca: 8e:5c:ff:a5:66:76:57:ce:5e:1c:78:8d:02:43:48: 9a:46:78:22:b2:2f:5d:ed:b0:5b:b5:bb:60:3e:5f: c8:b6:17:9e:ca:fb:41:29:50:69:75:b3:4a:19:23: 55:c7:f5:4f:60:9b:1c:9f:82:45:6a:6c:3d:3e:28: ae:ed:f2:5f:1e:6f:db:df:4d:1f:f9:28:fd:d0:76: 82:3f:b4:a2:87:56:8e:cc:09:da:6f:73:49:07:da: 01:85:03:e7:4f:15:99:0e:73:07:b0:1c:cc:c2:8b: 19:4e:18:29:53:3e:57:e0:d3:a7:49:33:9c:d5:74: ae:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CB:78:57:B2:9A:E6:16:23:44:0B:11:88:EB:CC:62:31:3A:88:B3 X509v3 Authority Key Identifier: keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6e:45:b7:6b:81:20:cd:f4:86:73:1b:59:99:14:1f:f7:9f: 00:28:8f:8d:2f:87:ef:51:de:73:4a:ee:d2:d8:03:21:70:96: 58:d7:9e:54:9a:7a:e2:51:27:10:76:96:9a:f7:5f:a9:24:d3: 9d:df:1b:b0:52:2d:80:8e:1d:31:8b:12:fa:fe:38:90:63:e4: d9:4a:de:96:42:03:8e:42:21:d4:33:9d:e6:6b:bb:a2:76:da: f6:8f:9e:08:a4:2a:e2:bf:45:ce:92:07:44:8a:5d:53:8e:2f: d9:76:d6:5c:5c:ed:9c:3d:73:59:58:0b:fe:9f:a9:67:a1:00: 14:fd:1e:50:bf:69:6b:f8:48:15:77:54:a4:b7:c1:bb:15:fe: 01:bc:4d:93:f8:90:62:d9:6e:60:99:d3:52:62:de:b0:28:d6: e1:22:03:81:66:97:6f:a7:6c:80:e1:61:a4:ac:23:bc:fd:70: 84:49:10:dd:f6:3f:69:f8:a1:69:65:2e:14:e0:f1:a3:13:26: a7:a1:57:03:42:fe:79:16:e9:44:05:ff:7a:3d:34:50:c3:d1: 9e:90:2e:e5:62:03:fb:3b:a7:4d:54:86:b6:76:ec:a8:c3:9f: b7:50:f3:13:71:a3:19:c1:df:d3:e6:ec:31:a0:4b:8f:78:10: ea:2c:4c:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFRjMxMTAvBgNVBAUTKEY2Q0IyRThFQkM3QTg5MkJGQTE1QzQ0N0IzOTgyNEEw NThDNzU1QUUwHhcNMjUwOTE4MTkzMTI1WhcNMjUwOTI1MTkzMTI1WjAYMRYwFAYD VQQDEw02OGNjNWUwZC0yNDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEI0t8VniiMHQvb11ZAeB55MnQ/emrFG7/FwhNC8L903qqBYmOIq96HmTle1 Xsm2ulE3PykVvaIQbd5u6DUDuuauVqg1oRy01npzh9Z6Ui32gpo03QuNeiR1XwF8 AsU7Ff8YAZYJlmGYPvHrY+t5K7K5+4uHlriyMfOQC9In+xeZ27c5LsqOXP+lZnZX zl4ceI0CQ0iaRngisi9d7bBbtbtgPl/ItheeyvtBKVBpdbNKGSNVx/VPYJscn4JF amw9Piiu7fJfHm/b300f+Sj90HaCP7Sih1aOzAnab3NJB9oBhQPnTxWZDnMHsBzM wosZThgpUz5X4NOnSTOc1XSujwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLLeFey muYWI0QLEYjrzGIxOoizMB8GA1UdIwQYMBaAFPbLLo68eokr+hXER7OYJKBYx1Wu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVGMy8yNTE5Q0RGMDQ5 MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlTdjZGY1JIczVna29GakhW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlzc3Vqcng2aVN2NkZjUkhzNWdrb0ZqSFZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVGMy8yNTE5Q0RGMDQ5MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlT djZGY1JIczVna29GakhWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6bkW3a4EgzfSGcxtZmRQf958AKI+NL4fvUd5zSu7S2AMhcJZY155U mnriUScQdpaa91+pJNOd3xuwUi2Ajh0xixL6/jiQY+TZSt6WQgOOQiHUM53ma7ui dtr2j54IpCriv0XOkgdEil1Tji/ZdtZcXO2cPXNZWAv+n6lnoQAU/R5Qv2lr+EgV d1Skt8G7Ff4BvE2T+JBi2W5gmdNSYt6wKNbhIgOBZpdvp2yA4WGkrCO8/XCESRDd 9j9p+KFpZS4U4PGjEyanoVcDQv55FulEBf96PTRQw9GekC7lYgP7O6dNVIa2duyo w5+3UPMTcaMZwd/T5uwxoEuPeBDqLEw9 -----END CERTIFICATE-----Generated at Fri Sep 19 05:28:09 2025 by rpki-client