$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: Ysje6ej3haR/nC9DpqOA3WDg2fLZySpmB3QNAm/8adQ= Subject key identifier: EC:64:50:F6:73:D7:AF:87:5C:1A:95:E0:81:D8:6A:52:8D:44:41:39 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 0267 Signing time: Fri 05 Sep 2025 02:11:11 +0000 Manifest this update: Fri 05 Sep 2025 02:11:10 +0000 Manifest next update: Fri 12 Sep 2025 02:11:10 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: 1h9NvDdV1zelF3ooc4D6Gu8Ywo55NOAWHWMcO2nNWVE=) 2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=) 3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=) 4: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: 09gHaKHodm8DnpQuTY9BuW6MFW3h5Zayu3XFpgrbJoc=) 5: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=) 6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Sep 5 02:11:10 2025 GMT Not After : Sep 12 02:11:10 2025 GMT Subject: CN=68ba46be-1e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:38:52:3a:29:c1:af:39:54:8e:36:4d:11: 05:48:a8:5e:7f:2a:93:41:2c:60:ee:d0:f2:d7:1c: ad:ed:c1:e8:4f:43:fc:72:ac:f0:3d:74:86:dc:a4: 00:47:16:a4:4d:40:e0:54:7e:09:60:1e:57:8f:4d: dc:38:40:ed:db:27:73:52:6a:c6:fe:a4:56:b2:2f: 86:97:26:d4:06:2a:e8:a8:f0:d9:1c:ed:1a:4d:f9: 0f:0c:32:ff:34:18:bc:ab:e5:8c:7f:b8:13:47:58: 47:c7:df:34:75:8d:38:b1:6b:a9:4e:e2:bd:31:c0: 5b:0f:13:0c:43:b0:cd:dc:ec:25:a1:18:6a:cf:8c: 35:94:05:b7:18:be:71:cd:6b:d6:c8:6f:fb:61:bd: 2e:cf:83:bc:67:97:cc:e2:13:2b:63:b5:a6:d3:23: 76:cf:5d:c0:4d:9a:4c:fe:c0:78:a4:c6:76:1a:40: 0d:de:04:a0:87:b6:3e:aa:49:83:88:22:f3:7d:f9: 75:40:87:ba:a7:2a:fb:ad:6a:ea:1d:9a:11:7d:01: 3f:73:c7:63:5b:34:51:32:f9:4b:3b:90:72:7b:7e: 62:ee:1a:51:19:8d:99:f9:b0:30:48:75:c6:d5:f9: 71:39:ad:aa:25:c5:6f:cc:ad:5c:2e:21:cc:f1:3b: 85:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:64:50:F6:73:D7:AF:87:5C:1A:95:E0:81:D8:6A:52:8D:44:41:39 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:1e:fc:69:7d:dc:41:32:a3:aa:48:de:42:38:7b:62:43:d3: 9c:ea:b2:32:f2:74:5d:35:87:62:b8:ed:bd:17:46:f2:2e:41: 62:f4:99:8b:91:56:b8:70:b3:84:24:3b:1e:74:ec:64:ca:d3: 1d:d9:00:89:46:f6:50:98:c3:1b:24:48:e2:e5:4f:f7:63:1a: 2e:e5:cc:18:04:4e:a3:80:83:26:0c:79:fd:2f:25:25:20:fe: d2:be:a6:86:62:2f:29:8f:74:10:d2:60:e8:fa:82:c2:61:d3: 63:5b:9e:c5:75:5e:5e:6f:5f:34:b2:e1:af:c7:c8:e4:39:0a: c3:24:01:07:15:8a:8a:e7:ea:d2:e6:39:e8:ba:b6:99:e9:fc: c8:8a:63:00:06:6e:2a:1a:fb:2f:7e:d9:0f:8d:d2:f4:53:2d: 7c:25:89:8e:65:d8:f9:39:cc:f8:18:66:10:4f:0d:4c:e1:af: d2:aa:2e:0a:84:63:7d:20:a5:93:50:d4:d8:64:56:8d:68:66: 62:b9:db:17:ec:99:76:20:28:7b:49:67:87:d6:e2:fa:b0:89: 6a:21:d6:d2:5a:8e:b9:4c:6b:cf:e9:82:0a:16:22:25:31:5f: 08:54:d9:d7:43:a1:28:f3:ce:ac:2f:ff:de:76:75:55:6d:80: 5d:83:1d:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjUwOTA1MDIxMTEwWhcNMjUwOTEyMDIxMTEwWjAYMRYwFAYD VQQDEw02OGJhNDZiZS0xZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLk4Ujopwa85VI42TREFSKhefyqTQSxg7tDy1xyt7cHoT0P8cqzwPXSG3KQA RxakTUDgVH4JYB5Xj03cOEDt2ydzUmrG/qRWsi+GlybUBiroqPDZHO0aTfkPDDL/ NBi8q+WMf7gTR1hHx980dY04sWupTuK9McBbDxMMQ7DN3OwloRhqz4w1lAW3GL5x zWvWyG/7Yb0uz4O8Z5fM4hMrY7Wm0yN2z13ATZpM/sB4pMZ2GkAN3gSgh7Y+qkmD iCLzffl1QIe6pyr7rWrqHZoRfQE/c8djWzRRMvlLO5Bye35i7hpRGY2Z+bAwSHXG 1flxOa2qJcVvzK1cLiHM8TuFqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxkUPZz 16+HXBqV4IHYalKNREE5MB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpHvxpfdxBMqOqSN5COHtiQ9Oc6rIy8nRdNYdiuO29F0byLkFi9JmL kVa4cLOEJDsedOxkytMd2QCJRvZQmMMbJEji5U/3Yxou5cwYBE6jgIMmDHn9LyUl IP7SvqaGYi8pj3QQ0mDo+oLCYdNjW57FdV5eb180suGvx8jkOQrDJAEHFYqK5+rS 5jnouraZ6fzIimMABm4qGvsvftkPjdL0Uy18JYmOZdj5Ocz4GGYQTw1M4a/Sqi4K hGN9IKWTUNTYZFaNaGZiudsX7Jl2ICh7SWeH1uL6sIlqIdbSWo65TGvP6YIKFiIl MV8IVNnXQ6Eo886sL//ednVVbYBdgx3e -----END CERTIFICATE-----Generated at Sat Sep 6 14:24:18 2025 by rpki-client