$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft File: 09zhcUP5z134AE-MZZf7LIzMcEY.mft (raw, json) Hash identifier: e1/b/8tvZ/5fvDZ5UR7VHhdTZ0pYLuOYSsW1/kb39Gs= Subject key identifier: 1D:7D:DB:B2:DA:8C:F4:2D:EB:35:B1:2D:2B:F3:FC:68:BF:60:44:58 Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 Certificate issuer: /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft Manifest number: C9 Signing time: Wed 17 Sep 2025 06:29:30 +0000 Manifest this update: Wed 17 Sep 2025 06:29:29 +0000 Manifest next update: Wed 24 Sep 2025 06:29:29 +0000 Files and hashes: 1: 09zhcUP5z134AE-MZZf7LIzMcEY.crl (hash: BCmdfhFvifJ7LcisYBsJ2YpOxMroRUv4xBZgXgpS0qk=) 2: 6A3FA88A693C11EF8B032237C4F9AE02.roa (hash: xlsUk+nBjbtHnwZ4MERgcwqdT/rxsOcTBiheef/VMVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D74, serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Validity Not Before: Sep 17 06:29:29 2025 GMT Not After : Sep 24 06:29:29 2025 GMT Subject: CN=68ca5549-1d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:42:f8:20:d6:23:68:d5:a4:4b:4d:d1:b8:89: 4d:e0:8a:33:97:ed:32:a7:a1:fd:97:24:39:82:58: d4:20:76:dd:a5:1b:29:77:ce:0b:60:fc:0f:bd:c3: a1:1c:ad:bd:f5:32:56:a5:8e:66:19:6a:1d:a4:fb: c4:7a:87:64:a8:39:a6:b7:d5:13:22:ea:dd:eb:a7: 35:36:02:73:00:fd:78:3e:6a:78:9b:c8:60:0f:ff: c4:0f:4f:fe:7a:4b:1b:92:f2:1a:80:01:c1:0b:ef: 01:2f:6d:e3:0f:b7:b1:db:c4:71:27:f4:f8:e8:72: e4:78:35:ed:3b:ca:69:ab:17:a8:ce:3e:75:7d:ed: 36:ac:05:10:ec:35:11:e3:9b:97:41:9f:9c:0c:30: f8:96:7b:ff:2b:d8:72:e4:f4:ca:d8:25:bd:d1:5b: 1d:55:cb:e2:4c:a1:de:ce:ba:32:40:ad:00:fd:12: e2:03:eb:51:42:45:7a:03:0c:11:42:c0:71:34:d7: 29:f3:43:9f:c7:69:c8:9c:2f:0b:6d:31:02:e7:61: 61:6e:f9:51:eb:54:9e:b2:a8:21:02:90:03:ec:64: d3:a2:ce:32:02:38:69:1d:9f:3a:da:5b:b2:ce:4b: 69:66:65:0c:6b:7d:90:08:ac:13:87:48:bc:c9:5e: 8f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7D:DB:B2:DA:8C:F4:2D:EB:35:B1:2D:2B:F3:FC:68:BF:60:44:58 X509v3 Authority Key Identifier: keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:d4:06:71:11:9a:1e:e6:f9:55:4f:30:76:e8:29:af:b4:f5: 57:c3:cb:99:1e:85:46:7a:af:4e:55:fc:dd:4b:7f:e8:58:29: 20:5a:53:73:88:79:38:9c:a4:d9:8a:1d:4f:71:30:c7:07:53: 5d:2b:d4:df:aa:2e:60:34:1d:ea:12:13:c9:c4:ea:66:aa:7e: d2:5c:91:1f:b8:62:86:1c:ce:ac:9a:2b:00:b5:c2:81:2a:67: dc:0b:ef:60:cb:9e:d2:57:15:78:d3:87:e6:9c:42:e0:e2:d9: 65:43:05:b2:a9:a0:a9:11:07:f7:38:81:1c:75:a9:e1:45:5b: 63:be:19:ed:97:d4:e5:38:bb:75:bb:be:b7:1b:fb:17:e1:c2: 71:e3:fe:de:20:67:86:0c:6e:24:e9:99:3e:a2:84:59:5f:d5: 63:62:37:2b:75:ab:5a:1c:4a:7d:37:47:21:34:40:b8:b4:ab: 6c:a6:3c:fc:8b:f0:2b:85:8a:39:fd:70:cb:3d:50:ac:d0:8e: c5:ea:10:62:7d:9d:44:f4:65:61:02:74:59:c4:f7:6f:72:82: fd:76:10:8f:1b:a4:93:2f:46:6b:8a:6f:8e:da:6b:12:c1:91: 2a:0a:7c:46:93:ab:46:cc:cb:6a:97:87:da:d4:7b:fd:5d:59: 77:76:42:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENzQxMTAvBgNVBAUTKEQzRENFMTcxNDNGOUNGNURGODAwNEY4QzY1OTdGQjJD OENDQzcwNDYwHhcNMjUwOTE3MDYyOTI5WhcNMjUwOTI0MDYyOTI5WjAYMRYwFAYD VQQDEw02OGNhNTU0OS0xZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UL4INYjaNWkS03RuIlN4Iozl+0yp6H9lyQ5gljUIHbdpRspd84LYPwPvcOh HK299TJWpY5mGWodpPvEeodkqDmmt9UTIurd66c1NgJzAP14Pmp4m8hgD//ED0/+ eksbkvIagAHBC+8BL23jD7ex28RxJ/T46HLkeDXtO8ppqxeozj51fe02rAUQ7DUR 45uXQZ+cDDD4lnv/K9hy5PTK2CW90VsdVcviTKHezroyQK0A/RLiA+tRQkV6AwwR QsBxNNcp80Ofx2nInC8LbTEC52FhbvlR61SesqghApAD7GTTos4yAjhpHZ862luy zktpZmUMa32QCKwTh0i8yV6PlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1927La jPQt6zWxLSvz/Gi/YERYMB8GA1UdIwQYMBaAFNPc4XFD+c9d+ABPjGWX+yyMzHBG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q3NC8zNzhEOUEwQTY5 MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXoxMzRBRS1NWlpmN0xJek1j RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5emhjVVA1ejEzNEFFLU1aWmY3TEl6TWNFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q3NC8zNzhEOUEwQTY5MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXox MzRBRS1NWlpmN0xJek1jRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDS1AZxEZoe5vlVTzB26CmvtPVXw8uZHoVGeq9OVfzdS3/oWCkgWlNz iHk4nKTZih1PcTDHB1NdK9Tfqi5gNB3qEhPJxOpmqn7SXJEfuGKGHM6smisAtcKB KmfcC+9gy57SVxV404fmnELg4tllQwWyqaCpEQf3OIEcdanhRVtjvhntl9TlOLt1 u763G/sX4cJx4/7eIGeGDG4k6Zk+ooRZX9VjYjcrdataHEp9N0chNEC4tKtspjz8 i/ArhYo5/XDLPVCs0I7F6hBifZ1E9GVhAnRZxPdvcoL9dhCPG6STL0Zrim+O2msS wZEqCnxGk6tGzMtql4fa1Hv9XVl3dkL2 -----END CERTIFICATE-----Generated at Fri Sep 19 03:01:01 2025 by rpki-client