$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json) Hash identifier: hMagFQLyIY37bEramky5qI90XajUACeWcQHtsPNbKx0= Subject key identifier: D1:58:0F:D5:90:47:57:D1:42:98:D4:18:95:FC:00:62:CC:DA:D8:B2 Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft Manifest number: 1048 Signing time: Thu 18 Sep 2025 17:49:43 +0000 Manifest this update: Thu 18 Sep 2025 17:49:42 +0000 Manifest next update: Thu 25 Sep 2025 17:49:42 +0000 Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: yo42b1SNu/KrAkBfGgEfQt5LgJXQnPqfeAneGE+tveE=) 2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: MZyOtnzSYRn5H5siK78kl2QRZxsNV35INBP6UfbHk9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: Sep 18 17:49:42 2025 GMT Not After : Sep 25 17:49:42 2025 GMT Subject: CN=68cc4637-fd68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:96:5b:66:cd:ee:c4:f0:1f:a6:67:51:cc:3d: c5:d5:77:a3:3b:3e:9e:2b:36:9f:1b:20:8e:a1:47: 96:eb:d8:84:af:9f:62:a9:84:a9:75:18:7e:3f:13: 4d:ad:f8:f6:83:eb:2c:d7:40:5d:a9:aa:bc:f7:10: 23:1a:ba:a8:5b:1b:21:ab:31:23:b2:00:70:5b:16: a2:68:85:08:3d:49:5c:51:4e:df:e0:e4:ca:3b:22: d2:e5:c4:a7:11:d6:b4:8d:ea:ab:f2:c0:6d:88:23: 09:b2:c5:b9:23:ea:45:75:76:01:e1:e3:23:ae:06: 38:ba:33:09:13:53:23:b2:40:08:ad:45:1f:25:f1: 26:30:96:e1:03:07:3e:2c:ae:aa:b4:ac:87:ec:85: 37:bd:f9:0e:50:a7:c4:ce:c1:ec:ae:62:5c:df:8b: 41:ba:04:48:02:7a:63:b1:34:5a:56:8a:79:9f:98: 87:ef:1d:8e:6b:19:6c:1f:f7:c4:79:2a:ac:8a:b6: 54:67:e3:56:69:b7:6b:04:7a:92:6c:fc:f3:f8:66: 36:9b:80:ec:e6:6b:04:4c:55:45:cd:c8:82:fe:f1: 44:2a:f7:e4:22:59:bc:e7:2a:dc:ad:8f:a9:66:81: 1d:b2:8f:d0:ac:18:74:e1:a2:56:17:a5:e0:c1:76: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:58:0F:D5:90:47:57:D1:42:98:D4:18:95:FC:00:62:CC:DA:D8:B2 X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:d3:a5:1f:1a:c7:c4:77:e9:a2:e7:ce:97:00:d9:f2:ec:59: 00:13:74:20:e8:6a:fe:60:41:7d:3c:a0:91:de:cc:2a:97:85: b9:2b:91:b8:37:34:09:f9:c8:30:4a:e7:01:ab:bc:d8:21:75: 51:5f:d8:f8:a3:b4:0e:ac:12:8a:ad:51:67:b4:db:4f:54:0c: f0:74:e1:45:79:06:8d:44:a3:ef:32:bf:47:a3:3f:a2:39:61: 3e:d8:f0:39:17:bf:16:7f:23:a3:18:2a:dc:ec:61:f3:17:e9: 37:9b:ce:92:fe:d7:95:7f:71:05:73:76:b8:7d:1a:9a:77:9a: 51:00:13:1b:48:69:81:72:4a:44:54:c8:7d:54:d7:c3:d7:0b: e2:82:cb:a0:45:68:15:dc:de:e9:82:10:4f:bc:06:8d:7d:12: 16:18:84:55:14:44:41:5e:75:7f:61:0a:2f:a4:da:39:22:58: 41:77:47:91:21:5b:a9:95:55:98:eb:de:33:43:46:b1:84:9c: 6d:82:c3:78:6f:37:66:86:bb:84:7b:63:93:19:e1:08:77:48: f8:5f:14:36:ae:56:c7:f8:53:74:4a:49:bb:69:80:71:d1:53: e3:52:5f:79:91:8a:fb:fd:12:4f:fc:9f:21:db:e6:08:6a:ae: e4:6f:ea:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE MkY2MjMxQTQwHhcNMjUwOTE4MTc0OTQyWhcNMjUwOTI1MTc0OTQyWjAYMRYwFAYD VQQDEw02OGNjNDYzNy1mZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZZbZs3uxPAfpmdRzD3F1XejOz6eKzafGyCOoUeW69iEr59iqYSpdRh+PxNN rfj2g+ss10Bdqaq89xAjGrqoWxshqzEjsgBwWxaiaIUIPUlcUU7f4OTKOyLS5cSn Eda0jeqr8sBtiCMJssW5I+pFdXYB4eMjrgY4ujMJE1MjskAIrUUfJfEmMJbhAwc+ LK6qtKyH7IU3vfkOUKfEzsHsrmJc34tBugRIAnpjsTRaVop5n5iH7x2OaxlsH/fE eSqsirZUZ+NWabdrBHqSbPzz+GY2m4Ds5msETFVFzciC/vFEKvfkIlm85yrcrY+p ZoEdso/QrBh04aJWF6XgwXY+NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFYD9WQ R1fRQpjUGJX8AGLM2tiyMB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhp UU9FNVE1V2x6TVRTOWlNYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW06UfGsfEd+mi586XANny7FkAE3Qg6Gr+YEF9PKCR3swql4W5K5G4 NzQJ+cgwSucBq7zYIXVRX9j4o7QOrBKKrVFntNtPVAzwdOFFeQaNRKPvMr9Hoz+i OWE+2PA5F78WfyOjGCrc7GHzF+k3m86S/teVf3EFc3a4fRqad5pRABMbSGmBckpE VMh9VNfD1wvigsugRWgV3N7pghBPvAaNfRIWGIRVFERBXnV/YQovpNo5IlhBd0eR IVuplVWY694zQ0axhJxtgsN4bzdmhruEe2OTGeEId0j4XxQ2rlbH+FN0Skm7aYBx 0VPjUl95kYr7/RJP/J8h2+YIaq7kb+rJ -----END CERTIFICATE-----Generated at Fri Sep 19 07:33:40 2025 by rpki-client