$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: tf+9+K145WGofGGpQiuOo5Q6lxEXlGpoYP0eB8uQ+u8= Subject key identifier: 4C:47:AA:99:F6:CC:69:54:A5:28:B5:F8:29:C7:09:86:9F:AD:3D:36 Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 156D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 1560 Signing time: Thu 18 Sep 2025 16:55:00 +0000 Manifest this update: Thu 18 Sep 2025 16:55:00 +0000 Manifest next update: Thu 25 Sep 2025 16:55:00 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: ouDiJnZXPbSxUU0gK8jdS2H6jTDdetVXWCFDPhQksSw=) 2: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: tCvJCiKT1CxBWkl8Ab7Cnl377oruRnl6LjKbMrrQtv8=) 3: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: tik1gv8xWyjalWVShAfgsNZP/VovqqNlmgUqnA0wMDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5485 (0x156d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Sep 18 16:55:00 2025 GMT Not After : Sep 25 16:55:00 2025 GMT Subject: CN=68cc3964-b330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d9:17:66:a1:bd:a8:f6:e9:c3:95:b7:ee:e2: b5:55:e5:bf:f2:e0:c8:2b:34:65:44:0e:9d:20:4a: a0:ab:d8:c5:84:0c:2c:a8:96:a6:d2:68:ac:68:7b: bd:e8:74:04:e9:b2:09:42:64:3c:d4:c8:24:f4:61: 89:d8:b7:44:50:32:04:c4:3c:72:dd:ad:be:d2:19: 53:fd:1d:bf:b8:40:bd:74:74:ed:94:95:80:99:00: 06:95:c0:e1:ed:cc:4b:2e:56:24:1d:88:29:d3:e8: 6f:e3:17:3e:01:02:59:bf:ad:db:e5:04:f8:94:03: 83:6d:b0:91:34:5a:b3:04:ea:5a:14:d6:e1:2d:ab: 8e:63:ff:36:14:0e:0d:4e:04:d0:b5:38:5b:4e:f1: bb:ef:21:bf:70:86:72:b7:85:9e:9c:98:2c:8d:f5: 91:5e:c2:a0:52:9d:05:e1:74:7e:2d:5b:7a:af:fd: 3c:14:a7:cf:16:f2:88:cb:c2:c6:e9:da:6a:c4:c7: da:88:ab:f1:f7:d0:75:05:70:f5:99:f9:b8:54:05: b4:b0:da:10:b6:e6:7b:b5:4c:70:fd:48:22:be:2c: 16:9a:7c:ef:5b:5a:a1:50:91:bc:f3:c9:20:35:86: 4d:89:5a:09:f4:9a:20:a7:d4:5b:6d:cc:6c:f0:31: 57:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:47:AA:99:F6:CC:69:54:A5:28:B5:F8:29:C7:09:86:9F:AD:3D:36 X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:65:3e:4c:14:5d:4e:aa:75:b5:3b:c9:0e:21:95:c9:d3:85: 8a:65:92:4f:2f:0f:a6:bb:e9:2e:c3:03:1a:fc:9e:90:a8:45: 11:3f:75:db:f5:64:50:12:6b:18:5f:33:67:59:2f:ed:fe:92: 58:2f:12:12:e8:9d:9f:c0:e7:d7:d8:4d:f8:c6:4f:63:70:22: ef:6f:a9:45:4e:0b:93:52:d0:c5:5b:c1:8c:eb:11:77:28:f8: de:80:25:46:70:56:19:55:a2:9d:ad:56:c5:07:82:31:34:cc: 94:18:87:dc:1a:38:6d:f5:c4:9f:9f:81:b3:9f:04:4c:94:b6: 87:a1:61:23:f9:c8:df:84:40:a2:cc:a8:86:51:f9:f8:d0:bd: d6:45:7f:1a:9b:94:8a:31:e5:4a:fc:44:86:0c:bf:7d:6d:09: 8a:03:2a:73:80:f6:4f:20:aa:84:36:c4:88:a8:ce:40:0e:1a: 15:fb:58:63:1e:ae:4e:64:ab:4f:90:ae:a3:b2:14:1f:7b:df: 64:50:e6:f2:24:05:18:c0:49:58:0d:d1:85:1a:c8:92:f9:d7: 1c:8b:47:72:4d:cf:0f:76:b4:36:22:dc:d5:45:b3:8a:8b:20: e9:0f:fe:6d:5a:f5:06:37:2c:4a:48:0a:a4:77:5b:01:44:d4: a6:29:d1:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjUwOTE4MTY1NTAwWhcNMjUwOTI1MTY1NTAwWjAYMRYwFAYD VQQDEw02OGNjMzk2NC1iMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntkXZqG9qPbpw5W37uK1VeW/8uDIKzRlRA6dIEqgq9jFhAwsqJam0misaHu9 6HQE6bIJQmQ81Mgk9GGJ2LdEUDIExDxy3a2+0hlT/R2/uEC9dHTtlJWAmQAGlcDh 7cxLLlYkHYgp0+hv4xc+AQJZv63b5QT4lAODbbCRNFqzBOpaFNbhLauOY/82FA4N TgTQtThbTvG77yG/cIZyt4WenJgsjfWRXsKgUp0F4XR+LVt6r/08FKfPFvKIy8LG 6dpqxMfaiKvx99B1BXD1mfm4VAW0sNoQtuZ7tUxw/UgiviwWmnzvW1qhUJG888kg NYZNiVoJ9Jogp9Rbbcxs8DFXIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExHqpn2 zGlUpSi1+CnHCYafrT02MB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZZT5MFF1OqnW1O8kOIZXJ04WKZZJPLw+mu+kuwwMa/J6QqEURP3Xb 9WRQEmsYXzNnWS/t/pJYLxIS6J2fwOfX2E34xk9jcCLvb6lFTguTUtDFW8GM6xF3 KPjegCVGcFYZVaKdrVbFB4IxNMyUGIfcGjht9cSfn4GznwRMlLaHoWEj+cjfhECi zKiGUfn40L3WRX8am5SKMeVK/ESGDL99bQmKAypzgPZPIKqENsSIqM5ADhoV+1hj Hq5OZKtPkK6jshQfe99kUObyJAUYwElYDdGFGsiS+dcci0dyTc8PdrQ2ItzVRbOK iyDpD/5tWvUGNyxKSAqkd1sBRNSmKdFx -----END CERTIFICATE-----Generated at Fri Sep 19 02:52:38 2025 by rpki-client