$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft File: R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json) Hash identifier: bV8z1oE9OppVaWRYTOnE+Z73bj449jZhCukkYFfomsU= Subject key identifier: 85:89:A7:3C:C7:60:70:02:1A:C9:53:43:E9:A0:F6:A8:C3:27:17:9D Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Certificate serial: 12D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft Manifest number: 12B0 Signing time: Thu 18 Sep 2025 17:13:56 +0000 Manifest this update: Thu 18 Sep 2025 17:13:55 +0000 Manifest next update: Thu 25 Sep 2025 17:13:55 +0000 Files and hashes: 1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: tSldETwQmfK0ON4MVK7bfrgM6Rs3SzXo2Te2gePt9i8=) 2: 4978C5B2089911F0B2664480C4F9AE02.roa (hash: 00dFUbxtRi+P5zmsb5ryh9HhmqE32J+HOZ/FYXFpiHQ=) 3: 48B8F476089911F0B2664480C4F9AE02.roa (hash: JWTxPbAMnC0V4yG1gFdPedapzuHJ8Aw4XsiM14hADdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4818 (0x12d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Validity Not Before: Sep 18 17:13:55 2025 GMT Not After : Sep 25 17:13:55 2025 GMT Subject: CN=68cc3dd3-1e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e1:2e:eb:62:a4:40:e9:e8:25:d0:89:6c:f9: f7:d1:b7:17:da:4a:fc:6c:9f:da:a1:a4:3f:9b:64: 21:ab:ff:4b:f3:48:0a:3b:1a:45:e3:63:54:11:5a: f7:0e:06:95:cc:8e:1e:0d:33:ac:a7:96:43:c0:36: b3:82:2d:89:06:d7:d9:c7:89:e8:c3:dd:33:67:83: ab:1e:23:c0:60:bb:a0:6d:9e:b6:93:77:1b:53:a7: 6b:4b:a5:17:33:ef:f4:28:d5:b5:c2:66:46:7f:3b: c0:a7:24:0c:55:ed:ef:70:fc:c9:45:b1:0f:ba:bc: 80:08:8f:b7:46:46:47:35:fe:22:48:8d:d7:bc:d6: 79:b7:9d:20:e5:5a:61:32:a4:34:ff:65:39:33:25: 58:10:1b:08:65:98:2a:d9:c1:c9:10:04:6d:e8:c1: 69:a6:af:36:1b:7c:6e:4d:58:1d:4b:09:d2:4f:71: 35:74:1b:0d:ce:9c:9a:19:8e:7d:af:06:ba:c0:17: b1:1a:4c:24:a7:61:eb:fb:f4:f1:fa:98:18:6a:ed: fd:e1:3f:f8:79:25:ae:6f:a2:19:dd:d2:71:cd:e3: 26:a4:47:58:08:17:f5:3e:55:67:50:6c:dc:76:53: 81:fe:fa:16:f6:7d:e0:ed:98:60:24:03:d6:a6:c7: 2f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:89:A7:3C:C7:60:70:02:1A:C9:53:43:E9:A0:F6:A8:C3:27:17:9D X509v3 Authority Key Identifier: keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:23:8f:93:f5:de:e1:8e:f5:fd:65:4b:26:90:87:8a:93:2a: 49:b9:5d:5a:88:24:ca:f7:82:5b:7b:17:3b:ee:c9:9c:04:cd: bc:ab:37:08:70:57:16:54:76:f8:95:36:53:33:ee:05:19:1f: b0:e3:f3:e4:70:34:66:63:e5:a2:3c:df:86:91:95:6a:4e:48: e5:6a:31:13:fb:1d:c4:88:d3:95:e7:4e:29:a3:0a:db:19:dd: 6f:9b:90:c1:70:c9:a4:a7:78:41:ce:a6:f1:3b:05:9a:b3:fe: a5:26:bb:5d:a3:51:d7:cf:71:eb:ba:52:5d:08:36:bf:0e:77: e3:6a:4c:f5:c9:99:70:af:d8:1e:a7:dc:ba:08:3b:89:40:15: 61:16:7a:3c:68:d7:74:28:ae:f1:cc:dd:81:2e:70:d4:5a:39: c5:71:10:4a:ac:ac:c5:22:3a:2a:3e:11:83:77:d8:68:77:86: d8:30:2e:72:9b:51:c5:58:56:64:56:ac:73:a2:64:22:69:dd: 39:0c:61:76:d9:f9:3b:bb:b8:3a:f2:7a:80:be:bd:ce:fb:82: a5:e2:29:e6:59:e0:52:2b:fb:92:e5:7d:04:3c:6a:24:77:b0: 3e:23:5b:73:88:f0:f5:77:26:62:a3:75:1e:71:3a:31:50:cc: 42:ef:e9:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE MkZCQkFEN0MwHhcNMjUwOTE4MTcxMzU1WhcNMjUwOTI1MTcxMzU1WjAYMRYwFAYD VQQDEw02OGNjM2RkMy0xZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+Eu62KkQOnoJdCJbPn30bcX2kr8bJ/aoaQ/m2Qhq/9L80gKOxpF42NUEVr3 DgaVzI4eDTOsp5ZDwDazgi2JBtfZx4now90zZ4OrHiPAYLugbZ62k3cbU6drS6UX M+/0KNW1wmZGfzvApyQMVe3vcPzJRbEPuryACI+3RkZHNf4iSI3XvNZ5t50g5Vph MqQ0/2U5MyVYEBsIZZgq2cHJEARt6MFppq82G3xuTVgdSwnST3E1dBsNzpyaGY59 rwa6wBexGkwkp2Hr+/Tx+pgYau394T/4eSWub6IZ3dJxzeMmpEdYCBf1PlVnUGzc dlOB/voW9n3g7ZhgJAPWpscv6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWJpzzH YHACGslTQ+mg9qjDJxedMB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTVENS80RUJDQUYyNkQwQUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05x OHo5aTJDcGJvbVRTLTdyWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMI4+T9d7hjvX9ZUsmkIeKkypJuV1aiCTK94Jbexc77smcBM28qzcI cFcWVHb4lTZTM+4FGR+w4/PkcDRmY+WiPN+GkZVqTkjlajET+x3EiNOV504powrb Gd1vm5DBcMmkp3hBzqbxOwWas/6lJrtdo1HXz3HrulJdCDa/Dnfjakz1yZlwr9ge p9y6CDuJQBVhFno8aNd0KK7xzN2BLnDUWjnFcRBKrKzFIjoqPhGDd9hod4bYMC5y m1HFWFZkVqxzomQiad05DGF22fk7u7g68nqAvr3O+4Kl4inmWeBSK/uS5X0EPGok d7A+I1tziPD1dyZio3UecToxUMxC7+kM -----END CERTIFICATE-----Generated at Fri Sep 19 01:17:47 2025 by rpki-client