$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json) Hash identifier: 3gfDqjvLIwFsun7kJBqhw48+S9WftGLmqrz9iNkjNog= Subject key identifier: A7:D4:1A:0C:6B:B1:03:64:8E:C2:9D:4B:C0:AD:44:B9:9A:12:82:01 Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft Manifest number: 0179 Signing time: Wed 17 Sep 2025 04:17:15 +0000 Manifest this update: Wed 17 Sep 2025 04:17:14 +0000 Manifest next update: Wed 24 Sep 2025 04:17:14 +0000 Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: GA0obXLCY9hZBZgD2N59da8R3q1cGB6aagewascfYuk=) 2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: vLaYuuYnarn+LGPGR9ZLrnHgOaNMvO/0VgOiG0azlng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Validity Not Before: Sep 17 04:17:14 2025 GMT Not After : Sep 24 04:17:14 2025 GMT Subject: CN=68ca364a-f1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9a:a1:2c:fa:9e:71:78:e0:cc:a2:41:6f:13: 93:8a:bc:91:f0:f1:b2:78:66:e6:9b:78:2e:04:bd: d7:2a:bb:c2:1e:dd:78:fb:b5:30:3e:bf:c6:95:6a: 39:05:6d:3f:52:f0:4d:67:15:e6:c7:07:84:da:f2: 7b:8b:ea:34:e7:27:c1:c2:27:04:2d:e0:9e:8b:a9: 50:8b:25:33:d6:f8:f1:a0:ff:11:c2:3e:f3:5a:af: 59:d4:66:55:b1:78:06:6a:1b:62:6c:4d:fb:63:79: a0:78:5d:19:4b:df:fc:78:55:89:c7:61:6b:29:38: fc:1e:dc:37:b3:5d:4c:b8:1a:5f:23:57:e7:33:84: da:bf:ed:14:0b:19:7b:c4:cf:f0:6e:48:aa:de:47: c5:93:79:2f:43:24:7b:75:c4:73:fc:5b:c3:30:88: 0d:f4:b7:e2:9e:3e:aa:d0:7f:26:c4:89:f5:57:68: 10:1f:96:eb:0f:bf:06:dd:70:0d:2a:a4:36:a8:81: e8:2b:2f:a5:70:cd:db:ad:fb:fb:77:b2:d4:6e:97: c3:92:f2:64:e3:27:29:78:bf:be:c2:23:85:5a:1c: 18:14:6a:cb:0b:8f:71:c1:1b:2b:af:24:93:f2:56: c8:e5:0b:a4:c5:c9:9c:10:c5:31:40:a7:c0:2c:71: eb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D4:1A:0C:6B:B1:03:64:8E:C2:9D:4B:C0:AD:44:B9:9A:12:82:01 X509v3 Authority Key Identifier: keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:eb:09:0b:b4:c2:d6:9d:1d:d4:f9:94:0b:25:bb:d4:14:77: ed:8c:a3:2f:87:60:e0:2f:f0:c6:46:3b:20:1d:eb:5b:ca:de: 46:09:41:df:63:39:96:ab:7e:ba:46:d3:7c:e0:0b:e2:37:1f: 60:c6:74:85:12:52:84:da:90:e0:67:8c:18:bb:cd:be:a2:31: 8b:fb:0a:e9:7f:dc:3d:90:c6:e4:2b:24:42:bd:9c:d2:5d:f3: dc:e3:5b:ef:c7:8a:1a:68:0d:a9:33:e0:69:97:f3:7c:02:f1: b2:7b:06:0d:f2:c6:43:96:48:bc:48:12:4c:54:61:28:a6:4d: 9a:96:57:15:94:90:9a:bc:f8:15:51:97:38:6d:fc:e9:61:e8: 65:3e:47:63:85:39:fc:be:29:7d:bc:dd:46:46:c8:76:82:c5: 37:d0:4e:e7:f5:00:ed:9a:77:f5:6b:fb:97:d9:2c:57:74:3c: be:f3:71:6d:2b:79:71:57:6f:d8:a1:d5:1d:84:fa:0e:eb:d5: 4d:ad:c1:a4:51:67:ff:a0:e3:59:c4:2d:e4:f1:38:a9:29:2a: 81:57:a8:14:da:f4:e1:dd:2d:53:23:d3:8b:46:d6:01:a8:02: 6b:f6:f0:d4:b5:6c:48:7d:eb:bc:90:c0:07:96:db:be:54:74: 60:f8:e4:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5 QTgwQkVBMDgwHhcNMjUwOTE3MDQxNzE0WhcNMjUwOTI0MDQxNzE0WjAYMRYwFAYD VQQDEw02OGNhMzY0YS1mMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pqhLPqecXjgzKJBbxOTiryR8PGyeGbmm3guBL3XKrvCHt14+7UwPr/GlWo5 BW0/UvBNZxXmxweE2vJ7i+o05yfBwicELeCei6lQiyUz1vjxoP8Rwj7zWq9Z1GZV sXgGahtibE37Y3mgeF0ZS9/8eFWJx2FrKTj8Htw3s11MuBpfI1fnM4Tav+0UCxl7 xM/wbkiq3kfFk3kvQyR7dcRz/FvDMIgN9Lfinj6q0H8mxIn1V2gQH5brD78G3XAN KqQ2qIHoKy+lcM3brfv7d7LUbpfDkvJk4ycpeL++wiOFWhwYFGrLC49xwRsrryST 8lbI5QukxcmcEMUxQKfALHHrkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfUGgxr sQNkjsKdS8CtRLmaEoIBMB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0 QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyQi9DNDYwODFGMjU0QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5 cXhoclF1VmtGSldhZ0w2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP6wkLtMLWnR3U+ZQLJbvUFHftjKMvh2DgL/DGRjsgHetbyt5GCUHf YzmWq366RtN84AviNx9gxnSFElKE2pDgZ4wYu82+ojGL+wrpf9w9kMbkKyRCvZzS XfPc41vvx4oaaA2pM+Bpl/N8AvGyewYN8sZDlki8SBJMVGEopk2allcVlJCavPgV UZc4bfzpYehlPkdjhTn8vil9vN1GRsh2gsU30E7n9QDtmnf1a/uX2SxXdDy+83Ft K3lxV2/YodUdhPoO69VNrcGkUWf/oONZxC3k8TipKSqBV6gU2vTh3S1TI9OLRtYB qAJr9vDUtWxIfeu8kMAHltu+VHRg+OTU -----END CERTIFICATE-----Generated at Thu Sep 18 21:53:22 2025 by rpki-client