$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json) Hash identifier: JvBieeSdfiiAfEVkezBJSLzBiEYfM3lzn0mzTMa4/R0= Subject key identifier: 31:DF:D7:12:51:43:71:C7:1F:B1:76:EE:EE:6F:3C:30:14:FF:CB:1B Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Certificate serial: 0BD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft Manifest number: 0BD1 Signing time: Thu 18 Sep 2025 19:06:09 +0000 Manifest this update: Thu 18 Sep 2025 19:06:08 +0000 Manifest next update: Thu 25 Sep 2025 19:06:08 +0000 Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: YH5idBh/qcg/CAbFo9cD8WeueeMt9BrPk8O1k1t4za4=) 2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: iz8rOu7sc7+N3/1kzdgDjJg5F86O0Z4mGrtUPPC8sj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3032 (0xbd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Validity Not Before: Sep 18 19:06:08 2025 GMT Not After : Sep 25 19:06:08 2025 GMT Subject: CN=68cc5820-74e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:10:19:22:a3:fe:f4:a4:92:90:a4:21:40: 6f:3d:5d:53:98:ef:ed:10:a8:c5:a4:cc:99:e9:90: 82:0e:b1:29:b1:bc:97:62:89:c2:cb:fb:7c:f3:7b: 82:17:f5:e8:db:72:c5:86:74:37:13:2c:45:c8:08: 4a:6c:67:22:0c:fc:46:a1:0f:c0:bf:2c:93:60:d1: d0:4e:a7:96:2c:a2:30:46:2c:70:f7:da:25:52:36: fd:a5:c5:16:5c:06:c3:88:f5:9d:a1:bd:f8:33:ba: 13:b8:35:af:f6:b2:1b:2b:96:40:a8:a1:8d:c4:1d: d1:53:5e:73:a9:53:ad:d1:8f:38:e9:62:d6:d9:07: 58:4c:70:bd:5f:67:56:9d:3d:5c:04:d6:bf:8a:bf: 71:7f:ed:e4:9c:35:3e:4d:cc:34:56:29:23:30:ec: e8:75:3a:d5:9d:df:ee:70:c9:71:ea:e7:ee:c5:69: e5:5d:4b:0d:1d:59:f8:ca:73:ee:da:7c:e6:2c:4e: e4:a2:6c:29:1e:c8:0f:a0:83:79:34:12:cc:e3:9b: ce:e0:dd:33:1a:02:74:6d:d4:f4:f8:ea:23:6b:d8: e8:a9:b4:20:7c:73:3d:1e:76:94:7f:ac:a5:ec:5b: b0:f8:6f:79:69:01:21:28:ae:f8:36:6c:16:1c:90: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DF:D7:12:51:43:71:C7:1F:B1:76:EE:EE:6F:3C:30:14:FF:CB:1B X509v3 Authority Key Identifier: keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:08:6c:98:1b:10:f9:af:d1:85:79:ef:de:29:0c:bf:74:e1: 08:11:7d:4f:a5:dc:3d:68:52:29:ee:36:06:ec:b2:6b:e9:b4: 97:cc:b1:3f:ab:1d:b8:fc:c5:69:ce:fe:50:01:8f:63:94:94: 0e:b7:c7:0d:fe:b3:8b:c8:26:4c:45:9c:01:46:59:1f:0f:2d: f3:24:ca:16:b4:2e:5e:71:4b:29:e2:9b:ca:d5:07:7a:8d:34: 08:ac:81:84:c4:48:53:ba:43:98:dc:15:a6:85:07:3e:f1:4f: 1a:2a:20:3d:30:a6:cb:7e:be:60:55:22:67:6e:1f:27:f8:77: c8:bc:1c:d9:22:90:01:26:e3:d9:ac:ef:5c:5e:8a:b9:44:e1: 22:e5:24:2f:af:88:5b:f8:45:b9:e4:84:36:dd:a1:d3:7c:ca: 95:36:a9:c9:c5:d2:df:4a:7c:1e:96:f1:8a:e9:7d:b2:94:4f: 4a:4d:5b:b2:39:3c:b7:49:39:36:f7:9a:d2:4e:24:dd:a6:dd: dd:e9:07:b2:a3:1a:e3:cb:81:bc:9e:9f:43:f7:29:b5:7d:0f: 49:bc:ce:a9:69:8c:25:4b:33:29:2e:e8:e0:e4:cc:5c:f9:0c: d2:2b:a8:1e:6e:05:26:29:4d:b8:8f:f2:a7:55:bc:9a:4e:b1: db:00:85:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1 RDNDRDQ2RTMwHhcNMjUwOTE4MTkwNjA4WhcNMjUwOTI1MTkwNjA4WjAYMRYwFAYD VQQDEw02OGNjNTgyMC03NGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdgQGSKj/vSkkpCkIUBvPV1TmO/tEKjFpMyZ6ZCCDrEpsbyXYonCy/t883uC F/Xo23LFhnQ3EyxFyAhKbGciDPxGoQ/AvyyTYNHQTqeWLKIwRixw99olUjb9pcUW XAbDiPWdob34M7oTuDWv9rIbK5ZAqKGNxB3RU15zqVOt0Y846WLW2QdYTHC9X2dW nT1cBNa/ir9xf+3knDU+Tcw0VikjMOzodTrVnd/ucMlx6ufuxWnlXUsNHVn4ynPu 2nzmLE7komwpHsgPoIN5NBLM45vO4N0zGgJ0bdT0+Ooja9joqbQgfHM9HnaUf6yl 7Fuw+G95aQEhKK74NmwWHJCvAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHf1xJR Q3HHH7F27u5vPDAU/8sbMB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2 MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDCGyYGxD5r9GFee/eKQy/dOEIEX1Ppdw9aFIp7jYG7LJr6bSXzLE/ qx24/MVpzv5QAY9jlJQOt8cN/rOLyCZMRZwBRlkfDy3zJMoWtC5ecUsp4pvK1Qd6 jTQIrIGExEhTukOY3BWmhQc+8U8aKiA9MKbLfr5gVSJnbh8n+HfIvBzZIpABJuPZ rO9cXoq5ROEi5SQvr4hb+EW55IQ23aHTfMqVNqnJxdLfSnwelvGK6X2ylE9KTVuy OTy3STk295rSTiTdpt3d6Qeyoxrjy4G8np9D9ym1fQ9JvM6paYwlSzMpLujg5Mxc +QzSK6gebgUmKU24j/KnVbyaTrHbAIXP -----END CERTIFICATE-----Generated at Fri Sep 19 13:10:14 2025 by rpki-client