$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: vGtSyJF9tuP8AhVKcof+CjOBkbkP/Ok7rpB32553Nxs= Subject key identifier: EB:90:21:8C:DD:E4:E4:A8:9F:92:DF:17:8B:D1:3D:85:57:62:3D:2A Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 0A25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 0A18 Signing time: Wed 10 Sep 2025 20:00:34 +0000 Manifest this update: Wed 10 Sep 2025 20:00:34 +0000 Manifest next update: Wed 17 Sep 2025 20:00:34 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: SmDNOydGV9B1YMFsr0zCX2Vzojt6e3Axy7cyINk7gqg=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: r8n2MjMUHYmVdEJ+7Xp+vud9daXi0fU7s6dyyzC3DT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 15:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2597 (0xa25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: Sep 10 20:00:34 2025 GMT Not After : Sep 17 20:00:34 2025 GMT Subject: CN=68c1d8e2-2f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c3:44:46:a8:f1:bf:3e:83:85:95:92:cd:86: 22:2f:e3:52:91:33:de:33:0a:ab:a5:55:34:0b:6a: 2e:f7:58:bb:e6:5e:77:15:e5:bd:4d:41:e5:d3:87: 5d:ff:31:b2:eb:3b:58:55:f4:55:45:f9:07:e3:0f: 60:a3:12:27:6d:ab:83:91:cb:e4:4d:18:d0:ea:27: 09:0e:07:7b:24:0b:b6:36:ac:ce:7c:06:bd:5b:11: 14:15:f4:ec:3d:8a:39:5c:4d:1f:77:75:b6:5c:68: cb:ed:60:f8:da:41:8f:a9:a7:08:06:d7:db:7e:3c: 91:e1:05:e5:c6:d7:35:f1:97:70:fd:d7:79:26:db: 83:9e:de:d8:ec:b7:f3:0b:40:04:23:e9:69:66:92: da:95:61:a6:a8:cf:73:e9:a2:d7:03:7a:e0:5a:27: 9b:85:57:e1:61:25:29:b9:33:c4:de:5b:78:6c:d5: 14:b4:f8:d8:bb:9d:d2:1e:4e:2b:1a:07:af:a6:57: aa:4b:e6:e8:80:12:d3:32:88:23:c9:0d:6e:21:bf: c5:eb:f8:53:fe:fa:04:0f:07:e6:85:b0:38:dd:fa: 94:64:0f:cf:0e:06:88:b5:a1:04:99:0e:9f:b2:a3: 6e:9f:e2:bd:fd:b5:c6:5b:9b:38:7d:e9:a3:f2:8f: d6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:90:21:8C:DD:E4:E4:A8:9F:92:DF:17:8B:D1:3D:85:57:62:3D:2A X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:39:bf:ae:0f:2c:f3:5c:c2:b5:90:24:47:1a:9f:53:23:1e: d1:12:3c:f1:57:3a:5b:d4:23:5d:96:95:e1:5d:2b:ab:e9:3d: 56:e6:84:a5:1e:32:f3:bd:db:68:16:5e:e3:b6:82:a6:c9:77: 75:6c:2d:d2:4c:1b:31:9b:b8:e4:c4:04:65:5e:47:9f:3f:df: 75:dd:d6:f3:51:51:33:e2:24:1a:f1:a2:38:46:8d:f1:0c:61: 12:d7:97:ec:bc:12:23:58:7e:9e:b4:d0:4e:0c:2d:9b:46:c6: 48:40:42:28:74:53:8f:d0:f3:9b:70:f0:0f:ff:9f:d4:d0:04: 0a:5d:97:06:ff:8b:2b:5c:f9:83:cb:74:3c:b1:4e:29:98:3e: f5:07:41:a9:ac:17:dc:4e:bf:8d:1e:9f:51:ac:81:ad:fa:73: 75:9f:57:a8:a4:f2:9b:8c:eb:f4:cd:92:fd:a5:6b:42:c1:1c: d9:d7:d4:ba:96:db:2c:ad:04:00:da:83:02:c6:68:6c:95:b0: 7e:ee:48:2f:d7:63:97:c1:11:75:b9:b6:9f:99:48:c8:d5:37: 1e:6c:d2:fd:c8:2d:67:06:92:9a:13:8a:57:44:8e:64:ff:99: 22:27:17:19:ce:a7:78:9d:9c:5a:03:23:e5:35:f9:ef:6c:4f: ea:99:14:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjUwOTEwMjAwMDM0WhcNMjUwOTE3MjAwMDM0WjAYMRYwFAYD VQQDEw02OGMxZDhlMi0yZjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sNERqjxvz6DhZWSzYYiL+NSkTPeMwqrpVU0C2ou91i75l53FeW9TUHl04dd /zGy6ztYVfRVRfkH4w9goxInbauDkcvkTRjQ6icJDgd7JAu2NqzOfAa9WxEUFfTs PYo5XE0fd3W2XGjL7WD42kGPqacIBtfbfjyR4QXlxtc18Zdw/dd5JtuDnt7Y7Lfz C0AEI+lpZpLalWGmqM9z6aLXA3rgWiebhVfhYSUpuTPE3lt4bNUUtPjYu53SHk4r GgevpleqS+bogBLTMogjyQ1uIb/F6/hT/voEDwfmhbA43fqUZA/PDgaItaEEmQ6f sqNun+K9/bXGW5s4femj8o/WIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuQIYzd 5OSon5LfF4vRPYVXYj0qMB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/Ob+uDyzzXMK1kCRHGp9TIx7REjzxVzpb1CNdlpXhXSur6T1W5oSl HjLzvdtoFl7jtoKmyXd1bC3STBsxm7jkxARlXkefP9913dbzUVEz4iQa8aI4Ro3x DGES15fsvBIjWH6etNBODC2bRsZIQEIodFOP0PObcPAP/5/U0AQKXZcG/4srXPmD y3Q8sU4pmD71B0GprBfcTr+NHp9RrIGt+nN1n1eopPKbjOv0zZL9pWtCwRzZ19S6 ltssrQQA2oMCxmhslbB+7kgv12OXwRF1ubafmUjI1TcebNL9yC1nBpKaE4pXRI5k /5kiJxcZzqd4nZxaAyPlNfnvbE/qmRR9 -----END CERTIFICATE-----Generated at Wed Sep 10 22:15:53 2025 by rpki-client