$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft File: 9BV_dExCEMP_Rqrw4CLe5on0bj8.mft (raw, json) Hash identifier: 9IEBUVOk3/CtXbl8mqp/MFcthfVa7FBLdLji4plKvkE= Subject key identifier: 5B:2F:5A:19:DC:A3:C4:0D:5C:4C:27:03:19:58:13:B7:D4:44:87:A2 Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F Certificate issuer: /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft Manifest number: 0431 Signing time: Wed 17 Sep 2025 00:43:07 +0000 Manifest this update: Wed 17 Sep 2025 00:43:07 +0000 Manifest next update: Wed 24 Sep 2025 00:43:07 +0000 Files and hashes: 1: 9BV_dExCEMP_Rqrw4CLe5on0bj8.crl (hash: VSPFqSq9YakwLVVKNvwoAKZTvVrp+64nFsu9SiCDf3I=) 2: B4C25A82772811ECA418E366C4F9AE02.roa (hash: QYcCnoMCfQ986vrEGW9wDEsLwINXTjV/NRBoNHmvHAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7B81, serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F Validity Not Before: Sep 17 00:43:07 2025 GMT Not After : Sep 24 00:43:07 2025 GMT Subject: CN=68ca041b-a4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bf:75:e2:77:95:b5:fc:81:9e:53:a1:81:19: 8c:64:12:90:9f:da:17:d5:99:d1:44:5c:67:d5:69: 53:a7:73:cc:00:a2:cf:c7:0c:24:4f:78:6c:8b:68: c5:a5:8c:9d:0c:11:73:df:c8:16:30:bc:7a:53:c0: 64:f9:42:0e:44:04:c0:d0:ee:ff:39:f9:d5:3d:79: ff:47:d8:9a:9c:7f:e2:c4:7a:9c:aa:7f:95:37:e2: 6b:db:38:f8:9c:1b:b0:2e:d4:c7:8a:e8:b1:2a:2a: c0:1f:4a:82:38:90:f8:24:8b:53:ee:02:ba:1b:9f: 1a:2b:90:b5:af:42:9d:c6:8b:6c:5a:22:ad:d4:a5: e4:77:0c:5d:33:95:37:f1:ca:46:b6:bb:76:7e:db: 73:5d:26:85:55:0f:38:98:9c:56:f0:8e:22:9f:a6: 06:ed:f9:13:a3:f1:11:b9:ee:52:13:6e:bc:04:50: 5d:4d:20:9c:83:63:53:ff:bb:89:b3:4a:ed:ff:61: b9:2b:4c:a3:53:8a:1e:e0:8c:97:9b:1c:6d:58:c9: 07:7c:64:09:22:e8:23:33:5d:ec:eb:5d:2a:4c:2e: 0e:a0:1c:62:cc:9d:e4:bc:6e:ee:21:13:ff:08:d6: 3e:fc:e5:41:90:f5:79:40:c5:1b:b1:38:9f:58:06: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2F:5A:19:DC:A3:C4:0D:5C:4C:27:03:19:58:13:B7:D4:44:87:A2 X509v3 Authority Key Identifier: keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0e:67:00:fb:32:66:3d:51:47:87:a6:66:7a:de:86:f9:9c: 3b:7d:b5:4f:0e:6e:b8:48:8f:58:d2:bc:5c:fe:43:74:bb:13: 7f:ac:db:4b:cc:37:1a:e7:82:1a:b6:e8:8e:fe:89:9e:5f:5a: 8b:d3:4d:1c:5d:f1:86:0c:95:de:e6:ed:0b:eb:fb:79:9b:2f: 00:79:bd:a8:9a:f1:d8:dd:cb:43:cf:51:44:30:5b:ae:17:40: fd:0e:a2:09:63:55:e8:04:b5:ec:e9:fd:8a:4b:c6:67:8d:59: ea:ff:f9:ee:91:53:72:5f:95:0c:91:cc:6f:fd:b3:e5:93:65: f6:0d:aa:60:7e:16:37:dd:54:d7:6a:94:3c:d7:d0:98:9e:37: a6:f3:95:82:a5:78:95:8a:6f:e3:c2:f6:49:5f:98:96:89:63: dc:e5:33:08:3c:74:b1:8a:89:b1:ae:a4:65:d9:27:4c:ba:41: 0d:b3:62:6e:c9:5d:6e:74:fe:cd:87:72:7b:37:22:85:0e:7a: f4:2d:3a:06:85:66:11:8f:52:7f:ba:78:94:2f:07:76:73:58: 1d:80:d2:5c:b7:a1:1b:c8:c3:c7:3e:f2:6e:2f:b6:4a:27:a4: 32:f6:73:de:4d:15:fa:dc:95:82:dc:bc:19:20:b0:47:12:c3: ea:6a:76:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCODExMTAvBgNVBAUTKEY0MTU3Rjc0NEM0MjEwQzNGRjQ2QUFGMEUwMjJERUU2 ODlGNDZFM0YwHhcNMjUwOTE3MDA0MzA3WhcNMjUwOTI0MDA0MzA3WjAYMRYwFAYD VQQDEw02OGNhMDQxYi1hNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzL914neVtfyBnlOhgRmMZBKQn9oX1ZnRRFxn1WlTp3PMAKLPxwwkT3hsi2jF pYydDBFz38gWMLx6U8Bk+UIORATA0O7/OfnVPXn/R9ianH/ixHqcqn+VN+Jr2zj4 nBuwLtTHiuixKirAH0qCOJD4JItT7gK6G58aK5C1r0KdxotsWiKt1KXkdwxdM5U3 8cpGtrt2fttzXSaFVQ84mJxW8I4in6YG7fkTo/ERue5SE268BFBdTSCcg2NT/7uJ s0rt/2G5K0yjU4oe4IyXmxxtWMkHfGQJIugjM13s610qTC4OoBxizJ3kvG7uIRP/ CNY+/OVBkPV5QMUbsTifWAZohwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsvWhnc o8QNXEwnAxlYE7fURIeiMB8GA1UdIwQYMBaAFPQVf3RMQhDD/0aq8OAi3uaJ9G4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0I4MS80OUM4OTI1RTc3 MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VNUF9ScXJ3NENMZTVvbjBi ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCVl9kRXhDRU1QX1Jxcnc0Q0xlNW9uMGJqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0I4MS80OUM4OTI1RTc3MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VN UF9ScXJ3NENMZTVvbjBiajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKDmcA+zJmPVFHh6Zmet6G+Zw7fbVPDm64SI9Y0rxc/kN0uxN/rNtL zDca54IatuiO/omeX1qL000cXfGGDJXe5u0L6/t5my8Aeb2omvHY3ctDz1FEMFuu F0D9DqIJY1XoBLXs6f2KS8ZnjVnq//nukVNyX5UMkcxv/bPlk2X2DapgfhY33VTX apQ819CYnjem85WCpXiVim/jwvZJX5iWiWPc5TMIPHSxiomxrqRl2SdMukENs2Ju yV1udP7Nh3J7NyKFDnr0LToGhWYRj1J/uniULwd2c1gdgNJct6EbyMPHPvJuL7ZK J6Qy9nPeTRX63JWC3LwZILBHEsPqanZp -----END CERTIFICATE-----Generated at Fri Sep 19 01:00:55 2025 by rpki-client