$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: x/RVTuSelBCQG6sp0EgGMcYJ+DpFpUzaMxR8f4v5Sf8= Subject key identifier: C3:39:AC:DD:18:8A:9F:97:92:04:B4:13:EC:C2:C9:C8:72:95:B4:B3 Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 015B Signing time: Mon 15 Sep 2025 04:39:45 +0000 Manifest this update: Mon 15 Sep 2025 04:39:44 +0000 Manifest next update: Mon 22 Sep 2025 04:39:44 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: QPol71qTYKSd+lUPTP8fIhFFE+/8KuiQCpCnPjZ2Bw8=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: D3GA9GI+1ZpOYK34vPRNum86peu3I5thgqu5liFntgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 04:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Sep 15 04:39:44 2025 GMT Not After : Sep 22 04:39:44 2025 GMT Subject: CN=68c79891-4a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:32:33:54:ad:ad:4b:a7:4d:92:f9:7f:aa:75: d0:39:26:57:94:78:a6:9e:25:00:f3:4a:24:f6:1d: ae:7c:26:32:5e:58:27:94:a7:22:eb:4f:96:5e:aa: 3c:88:ec:8d:46:e6:72:ec:6c:bd:17:b8:67:e5:5c: 1b:39:58:b1:66:c6:81:2c:c7:b8:d7:e3:83:54:14: 48:e5:fe:bc:69:6c:72:d1:f6:06:31:26:4a:59:4b: 47:12:99:5a:46:51:46:7c:b0:9b:82:cf:be:42:3f: 18:10:43:7e:be:73:3a:ef:af:0f:55:1f:dc:fc:8c: f3:c9:60:16:a6:a7:9d:ec:82:bb:93:fd:44:65:15: a5:28:92:be:d8:53:14:61:74:ff:3f:85:0f:53:2a: 37:fc:d6:87:3b:81:aa:bd:a6:ac:3e:97:c9:22:13: 21:57:f2:71:a1:e0:bd:24:82:ee:45:69:8f:f0:6c: 8a:ff:ce:f2:c3:4f:f6:82:80:0f:7b:72:df:f6:f7: c2:e9:68:ed:01:98:06:1f:0a:cc:8c:5b:4c:ca:dd: 92:73:6d:28:09:37:d3:f4:ed:a7:fe:68:92:44:ca: d0:98:7c:e7:ec:b2:47:44:be:6c:27:a5:cf:be:bd: 08:b6:e7:08:d1:9a:fd:5f:35:85:d3:23:af:64:c0: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:39:AC:DD:18:8A:9F:97:92:04:B4:13:EC:C2:C9:C8:72:95:B4:B3 X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0d:4e:57:08:9a:b2:bc:25:97:8c:9f:e4:ef:2e:de:4c:b3: c3:24:b8:66:b0:3e:5d:74:3a:c4:9f:d2:00:e1:a9:88:2a:fd: 57:45:f9:7e:d3:cf:10:2a:10:4c:ca:08:bb:5a:1b:b4:67:2f: 8f:ec:11:de:90:d4:72:d2:53:d0:63:b9:be:10:c7:15:0e:18: 0c:36:d7:63:b0:01:48:66:61:6d:ba:f2:ea:74:d6:d2:df:87: c9:e5:69:88:63:60:a1:28:43:6a:8a:59:75:18:1c:31:e8:45: 32:8b:3e:2c:09:31:e6:9e:90:ea:70:12:41:58:a7:3b:78:7f: 7f:d5:32:27:fe:7b:f7:7e:af:02:ff:1f:39:17:ee:d4:e5:a8: 79:92:f0:3d:40:7e:f8:cd:61:dc:58:e3:13:d8:da:47:b4:16: 03:14:f8:46:46:5f:cc:fb:a9:33:c7:96:91:4b:cc:83:7b:5f: b6:ed:05:a8:8d:be:cf:bb:45:25:e5:f8:ad:73:f3:68:34:6e: 0f:13:14:bd:ec:64:5e:74:86:60:37:92:cf:02:1e:5e:c2:d2: be:07:92:70:c0:b7:11:9b:e8:5e:bd:d9:03:0d:46:3d:02:6b: 10:ab:8d:7c:83:8e:67:41:0c:0f:ea:fa:33:df:e6:f8:d5:8f: da:75:94:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjUwOTE1MDQzOTQ0WhcNMjUwOTIyMDQzOTQ0WjAYMRYwFAYD VQQDEw02OGM3OTg5MS00YTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TIzVK2tS6dNkvl/qnXQOSZXlHimniUA80ok9h2ufCYyXlgnlKci60+WXqo8 iOyNRuZy7Gy9F7hn5VwbOVixZsaBLMe41+ODVBRI5f68aWxy0fYGMSZKWUtHEpla RlFGfLCbgs++Qj8YEEN+vnM6768PVR/c/IzzyWAWpqed7IK7k/1EZRWlKJK+2FMU YXT/P4UPUyo3/NaHO4GqvaasPpfJIhMhV/JxoeC9JILuRWmP8GyK/87yw0/2goAP e3Lf9vfC6WjtAZgGHwrMjFtMyt2Sc20oCTfT9O2n/miSRMrQmHzn7LJHRL5sJ6XP vr0ItucI0Zr9XzWF0yOvZMDsDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM5rN0Y ip+XkgS0E+zCychylbSzMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbDU5XCJqyvCWXjJ/k7y7eTLPDJLhmsD5ddDrEn9IA4amIKv1XRfl+ 088QKhBMygi7Whu0Zy+P7BHekNRy0lPQY7m+EMcVDhgMNtdjsAFIZmFtuvLqdNbS 34fJ5WmIY2ChKENqill1GBwx6EUyiz4sCTHmnpDqcBJBWKc7eH9/1TIn/nv3fq8C /x85F+7U5ah5kvA9QH74zWHcWOMT2NpHtBYDFPhGRl/M+6kzx5aRS8yDe1+27QWo jb7Pu0Ul5fitc/NoNG4PExS97GRedIZgN5LPAh5ewtK+B5JwwLcRm+hevdkDDUY9 AmsQq418g45nQQwP6voz3+b41Y/adZT7 -----END CERTIFICATE-----Generated at Tue Sep 16 13:42:00 2025 by rpki-client