$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft File: 9buuhcb_s2DO1AgNETaiv9Opf9E.mft (raw, json) Hash identifier: KdhYAbFbM1r8pzqNGEPzmRRZHibzViP7zYTSi8XnVr4= Subject key identifier: 72:35:32:E0:2E:45:D4:29:1D:83:30:53:04:6C:BE:16:59:DB:FD:DC Authority key identifier: F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 Certificate issuer: /CN=A91CA5F9/serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft Manifest number: 60 Signing time: Wed 17 Sep 2025 07:50:48 +0000 Manifest this update: Wed 17 Sep 2025 07:50:48 +0000 Manifest next update: Wed 24 Sep 2025 07:50:48 +0000 Files and hashes: 1: 9buuhcb_s2DO1AgNETaiv9Opf9E.crl (hash: zhpaz4e8jYLKmNuXQjk/AssHYmbBX+pOR5hrX3G2mvg=) 2: 16B651C6048411F094895C27C4F9AE02.roa (hash: OgiLwS+wM43XPTUlA+FtXtKx1I6fbzOSjezQMzWQe7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5F9, serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Validity Not Before: Sep 17 07:50:48 2025 GMT Not After : Sep 24 07:50:48 2025 GMT Subject: CN=68ca6858-6a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f2:ba:3c:75:8e:a1:35:1b:a8:f1:df:13:d7: 3d:7b:11:fd:70:da:ff:f6:f3:47:9c:13:79:13:ec: 4d:ac:eb:eb:c7:a9:69:40:f7:69:b1:db:77:53:85: 99:a8:38:cb:10:a4:ca:9b:33:cb:2d:fe:4d:9c:97: 64:3c:4c:18:88:31:60:04:30:d7:0e:59:1c:61:6c: cf:7a:e0:62:49:6f:60:ed:9c:2e:33:2f:e4:dd:cc: f7:a3:e4:88:88:11:a8:67:1b:cd:c7:ca:e2:1f:7c: d0:65:e4:c0:7f:34:da:98:70:b8:2a:70:b4:91:26: 95:96:ea:99:ea:e2:92:f1:47:03:c0:96:06:1d:5a: 2c:6b:35:b0:9f:39:3d:8a:d7:b8:76:c3:77:f7:b1: 37:86:96:f7:75:cb:7b:73:74:29:fe:0d:bc:6b:e7: 28:ff:88:ad:6c:04:1e:a0:29:ad:67:ff:96:dc:44: 15:a3:74:44:58:06:1b:23:95:57:03:c4:37:fb:5b: 8a:94:62:91:e9:6e:73:17:4a:9c:53:1e:a9:94:29: 9c:c3:2d:3b:73:ca:c3:8c:15:e9:d5:ed:8a:53:84: f2:98:7d:1c:12:69:80:8a:e6:d2:c0:80:ef:a8:a0: e0:73:03:f0:60:f8:2e:05:f0:f7:d8:8f:f3:30:1c: 00:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:35:32:E0:2E:45:D4:29:1D:83:30:53:04:6C:BE:16:59:DB:FD:DC X509v3 Authority Key Identifier: keyid:F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:f7:c6:d8:4f:68:90:1c:fe:7f:9a:24:b6:37:aa:c5:d5:c4: d0:85:70:7f:3f:b5:8f:1f:83:40:aa:ab:3a:4b:de:f7:f4:76: 7a:7f:58:a8:81:82:5b:a0:40:f5:2b:87:49:f5:13:f4:57:3d: fb:78:22:8d:41:15:09:2c:79:78:9f:3b:6c:1b:e8:ff:48:f0: e2:7e:cf:69:54:94:d2:40:20:08:b7:a6:4b:b4:c1:26:1d:cd: 35:52:d9:49:e1:b3:ac:d3:49:8a:e7:6f:2e:3e:73:5a:5e:6b: 14:c7:59:b2:a0:5d:8a:8b:36:0e:a0:2d:15:e3:94:92:66:aa: 16:8b:4f:54:bb:39:8b:b9:29:21:46:33:28:6f:b2:5b:20:8b: 0f:37:0c:3d:80:51:24:e2:19:8c:f7:55:7a:4b:71:94:85:64: 5a:87:45:03:05:89:dc:cf:5d:b3:f5:8c:62:5c:0a:1b:f8:de: 7e:88:a1:74:57:dd:dc:d5:ba:5a:d4:a5:47:47:58:fc:c7:cb: f6:e6:c0:5a:8f:97:1e:13:6d:65:88:7b:a9:e6:c9:0d:c5:d3: 14:9a:95:8d:36:9b:55:f6:0b:cc:e8:20:3d:2d:13:51:ea:d3: 92:66:95:70:d7:a1:aa:02:a0:9c:bd:a5:f5:d0:3b:27:9c:f8: a8:77:03:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTVGOTExMC8GA1UEBRMoRjVCQkFFODVDNkZGQjM2MENFRDQwODBEMTEzNkEyQkZE M0E5N0ZEMTAeFw0yNTA5MTcwNzUwNDhaFw0yNTA5MjQwNzUwNDhaMBgxFjAUBgNV BAMTDTY4Y2E2ODU4LTZhN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC28ro8dY6hNRuo8d8T1z17Ef1w2v/280ecE3kT7E2s6+vHqWlA92mx23dThZmo OMsQpMqbM8st/k2cl2Q8TBiIMWAEMNcOWRxhbM964GJJb2DtnC4zL+TdzPej5IiI EahnG83HyuIffNBl5MB/NNqYcLgqcLSRJpWW6pnq4pLxRwPAlgYdWixrNbCfOT2K 17h2w3f3sTeGlvd1y3tzdCn+Dbxr5yj/iK1sBB6gKa1n/5bcRBWjdERYBhsjlVcD xDf7W4qUYpHpbnMXSpxTHqmUKZzDLTtzysOMFenV7YpThPKYfRwSaYCK5tLAgO+o oOBzA/Bg+C4F8PfYj/MwHACJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcjUy4C5F 1CkdgzBTBGy+Flnb/dwwHwYDVR0jBBgwFoAU9buuhcb/s2DO1AgNETaiv9Opf9Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNUY5LzY5MjBDNzRBMDQ4 MjExRjA4RjVBNTI4MEM0RjlBRTAyLzlidXVoY2JfczJETzFBZ05FVGFpdjlPcGY5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWJ1dWhjYl9zMkRPMUFnTkVUYWl2OU9wZjlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB NUY5LzY5MjBDNzRBMDQ4MjExRjA4RjVBNTI4MEM0RjlBRTAyLzlidXVoY2JfczJE TzFBZ05FVGFpdjlPcGY5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIT3xthPaJAc/n+aJLY3qsXVxNCFcH8/tY8fg0CqqzpL3vf0dnp/WKiB glugQPUrh0n1E/RXPft4Io1BFQkseXifO2wb6P9I8OJ+z2lUlNJAIAi3pku0wSYd zTVS2Unhs6zTSYrnby4+c1peaxTHWbKgXYqLNg6gLRXjlJJmqhaLT1S7OYu5KSFG Myhvslsgiw83DD2AUSTiGYz3VXpLcZSFZFqHRQMFidzPXbP1jGJcChv43n6IoXRX 3dzVulrUpUdHWPzHy/bmwFqPlx4TbWWIe6nmyQ3F0xSalY02m1X2C8zoID0tE1Hq 05JmlXDXoaoCoJy9pfXQOyec+Kh3A9Y= -----END CERTIFICATE-----Generated at Fri Sep 19 00:52:06 2025 by rpki-client