$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: zz2Mg41Z7hN0Feqtd0IE6A0ouaosvpsMm2xLT49zyNs= Subject key identifier: 74:39:AA:F5:88:E4:C5:1D:A8:52:94:49:40:3F:6A:2E:7E:A2:75:B3 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0CE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0CC7 Signing time: Fri 22 Aug 2025 18:17:35 +0000 Manifest this update: Fri 22 Aug 2025 18:17:35 +0000 Manifest next update: Fri 29 Aug 2025 18:17:35 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: kwArkqBYbmTP232VY0GUOqR+zkYzTFWX5IehTajfQyY=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: bcWV9If/HkIEw6hnBH3pLaQkTOmCSNPL+NkOOV2t9w0=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: Kha4B3O3qamR+l9aTTTF0PytPbYw8JUKGu9zz6Pcn9M=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3301 (0xce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Aug 22 18:17:35 2025 GMT Not After : Aug 29 18:17:35 2025 GMT Subject: CN=68a8b43f-a86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:e9:31:7b:ef:21:86:1e:43:05:af:23:d6: 13:90:f2:68:b6:f3:39:4a:35:4b:51:04:97:b6:76: 1d:11:84:4b:da:2f:f2:e7:91:f2:bf:4b:c9:13:3d: 5a:d3:40:c4:bc:c1:25:8f:51:e4:57:b1:2f:79:93: 78:c8:9a:68:84:de:00:fe:c1:18:ff:39:c6:5b:7c: 18:5b:0d:81:2b:45:1f:f0:42:99:7f:83:37:67:14: ad:73:ad:9b:30:18:7d:8f:22:44:fe:b4:38:7b:8c: 69:08:2b:a9:b8:d1:d8:77:99:9c:16:9e:e6:51:16: 2b:45:fa:7b:0f:cd:1f:b9:47:26:84:62:96:92:b8: c2:18:51:6c:2b:ec:af:63:b1:b9:d6:53:58:ce:6a: 8b:11:af:6a:7f:1c:c2:81:18:13:63:c7:74:94:e7: 54:e5:a3:31:f8:37:79:12:90:e0:4d:c5:08:73:07: 03:1c:9c:70:75:04:f8:de:ed:9d:4f:2d:76:41:f5: ca:89:55:de:66:e5:44:0a:12:4b:11:21:eb:b8:f4: 6d:e4:5e:57:e5:51:00:b5:e5:1e:d3:8d:da:e2:d3: 38:d0:8d:c1:94:2b:0a:18:f1:4f:26:f0:1a:f1:35: 9a:c1:3d:f4:72:d1:ba:51:6b:88:47:72:6a:7b:97: f5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:39:AA:F5:88:E4:C5:1D:A8:52:94:49:40:3F:6A:2E:7E:A2:75:B3 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:dc:91:7a:ce:f4:8f:a6:18:65:7b:a9:e8:aa:01:f7:51:5b: 02:02:a5:96:d8:40:08:29:a2:e6:7f:58:5f:c4:ce:12:0a:5a: cd:1f:56:89:93:d3:7e:53:6a:fc:c5:6c:fb:94:4d:6a:ee:2d: 5f:6a:d5:33:f9:e6:1c:fc:ce:8a:4b:df:fb:eb:6a:3b:12:a7: 2e:8c:94:cc:28:93:03:52:b8:0f:0c:30:28:e4:cf:ab:f7:0f: bd:b9:0c:66:cd:19:fb:9e:7c:dd:12:10:51:c1:b7:0a:7e:2f: 9f:f3:68:14:ff:2f:2c:a8:18:90:91:17:a4:d9:7e:a6:d1:28: b6:d3:c4:b0:5a:7e:ff:f2:af:77:e7:18:49:a9:05:11:56:95: 36:db:af:08:d4:14:8c:f3:64:36:13:49:c4:03:62:68:7f:df: 6c:f3:1b:bc:d2:aa:ac:47:61:e7:1a:74:ca:90:2d:1c:17:55: a3:f1:4c:98:8e:59:8b:33:1c:63:d1:2a:cb:c5:f5:bc:25:64: dd:0b:38:67:ba:b0:46:77:df:07:d4:59:25:5c:37:7f:dd:44: c2:9a:bd:c0:6b:9b:fe:9f:c8:b8:7f:02:6c:0e:72:89:c7:1c: fb:34:7c:9f:19:84:41:28:a5:de:c8:ba:44:b8:c6:82:b9:94: 26:69:ef:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUwODIyMTgxNzM1WhcNMjUwODI5MTgxNzM1WjAYMRYwFAYD VQQDEw02OGE4YjQzZi1hODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2DpMXvvIYYeQwWvI9YTkPJotvM5SjVLUQSXtnYdEYRL2i/y55Hyv0vJEz1a 00DEvMElj1HkV7EveZN4yJpohN4A/sEY/znGW3wYWw2BK0Uf8EKZf4M3ZxStc62b MBh9jyJE/rQ4e4xpCCupuNHYd5mcFp7mURYrRfp7D80fuUcmhGKWkrjCGFFsK+yv Y7G51lNYzmqLEa9qfxzCgRgTY8d0lOdU5aMx+Dd5EpDgTcUIcwcDHJxwdQT43u2d Ty12QfXKiVXeZuVEChJLESHruPRt5F5X5VEAteUe043a4tM40I3BlCsKGPFPJvAa 8TWawT30ctG6UWuIR3Jqe5f1PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQ5qvWI 5MUdqFKUSUA/ai5+onWzMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA03JF6zvSPphhle6noqgH3UVsCAqWW2EAIKaLmf1hfxM4SClrNH1aJ k9N+U2r8xWz7lE1q7i1fatUz+eYc/M6KS9/762o7EqcujJTMKJMDUrgPDDAo5M+r 9w+9uQxmzRn7nnzdEhBRwbcKfi+f82gU/y8sqBiQkRek2X6m0Si208SwWn7/8q93 5xhJqQURVpU2268I1BSM82Q2E0nEA2Jof99s8xu80qqsR2HnGnTKkC0cF1Wj8UyY jlmLMxxj0SrLxfW8JWTdCzhnurBGd98H1FklXDd/3UTCmr3Aa5v+n8i4fwJsDnKJ xxz7NHyfGYRBKKXeyLpEuMaCuZQmae+x -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:35 2025 by rpki-client