$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json) Hash identifier: AknZfdMhvxvjkGMVfm6kOt/+/N5oDAUfFJMV40vYuJI= Subject key identifier: 79:6C:26:F3:C4:50:FE:55:21:D6:60:E0:35:D6:D8:9E:BF:D6:E3:4E Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Certificate serial: 0996 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft Manifest number: 0987 Signing time: Tue 16 Sep 2025 20:17:53 +0000 Manifest this update: Tue 16 Sep 2025 20:17:53 +0000 Manifest next update: Tue 23 Sep 2025 20:17:53 +0000 Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: zsTKZtO1FBJVnNeG0Y5Y+NUQ4RxtmcssOnSuSrFIgUY=) 2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: DaSUtI7cCFZVDFGMxaMRlNVdC4PaCp9TfzAzL8z3Ug0=) 3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: bvQWUn/Y7cckd5n8bfNYd/nHmrLV3J+fhc4s5WO5wQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 20:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2454 (0x996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Validity Not Before: Sep 16 20:17:53 2025 GMT Not After : Sep 23 20:17:53 2025 GMT Subject: CN=68c9c5f1-d542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:bd:69:99:33:11:90:77:4a:3d:0f:d3:e2: 65:03:15:08:f2:8a:c7:b7:50:ec:97:08:da:0b:94: b0:55:ec:be:22:c9:a0:04:0d:db:38:f8:c4:8a:1e: e5:6d:9c:3b:18:16:aa:55:6c:42:6a:f6:d9:bf:cd: 83:f8:93:ae:d1:16:f8:8f:55:69:ad:0f:33:c1:3c: 93:ee:2d:29:36:9d:d6:88:14:bd:38:3f:93:d2:81: 31:bb:81:73:8e:1d:30:15:22:4e:67:64:f5:61:01: 19:c7:17:30:79:5c:11:50:17:8c:90:75:30:6c:8f: a9:b6:c0:13:d5:4e:92:49:c2:60:f6:2a:e5:7d:22: ee:62:63:6a:61:ca:77:16:aa:82:96:8e:56:17:1d: 9e:1e:ba:32:7d:83:11:18:2e:b4:3e:2b:b7:27:c1: cf:e6:bd:4e:32:5e:3d:60:21:7f:ad:c2:1d:3a:a8: 09:d8:53:eb:b5:2b:52:e8:d3:a2:bb:1d:94:a8:45: 77:0a:4e:21:c3:c6:6f:c1:23:87:59:1f:7a:85:f9: ac:ac:e5:04:a1:0b:0e:1c:01:b8:0a:63:b2:3b:89: 8e:8a:cb:c5:92:b5:75:00:ad:8d:09:2d:d5:ac:31: 5c:d1:d7:db:ae:0f:ef:8d:a8:cc:09:1d:29:a0:d6: 23:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6C:26:F3:C4:50:FE:55:21:D6:60:E0:35:D6:D8:9E:BF:D6:E3:4E X509v3 Authority Key Identifier: keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:aa:2a:28:47:8f:08:5c:0f:be:ba:cb:35:49:4e:e6:3a:8a: 63:84:3b:6e:71:bf:ae:33:bc:5d:32:86:59:23:9f:94:53:5f: 22:3e:db:91:ec:23:f2:de:bb:f4:f6:6f:42:26:2c:13:10:dc: 49:e4:e9:6f:72:b0:39:4b:e6:d1:42:f5:1f:ac:d2:f6:78:04: 4c:fe:2f:7b:d2:00:83:9a:6b:45:10:21:da:11:d5:14:c0:f4: e1:62:3c:73:e0:99:5e:10:bb:93:82:0e:1f:79:9b:06:b6:59: 8d:f1:54:27:1c:c2:1f:80:ed:61:a4:67:4c:d5:0d:c0:0c:74: 16:0b:95:70:78:b2:fe:0b:29:20:e8:4c:0e:ed:32:86:8a:05: be:f0:9e:cc:8d:2b:94:4a:05:9b:55:be:58:b8:07:52:60:b5: c3:25:78:77:ee:0f:85:7a:57:f1:68:82:a7:90:3b:42:3a:48: 8d:37:de:ad:7e:fd:5b:e9:8b:6e:84:6c:b2:97:08:81:04:f5: e9:fa:76:63:67:f8:36:0f:a4:50:e2:75:10:83:53:fb:3f:8a: 64:8e:6a:d3:42:e8:09:42:45:d8:b8:73:fe:dc:04:fd:f7:26: 62:c5:6c:32:78:a4:e3:4b:ad:43:c2:d5:2e:e2:e2:6d:33:f7: 54:72:d3:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ3RUYxMTAvBgNVBAUTKDAyMTU1MDJBQThGRkRDNzIxRDdGODRGNzRDRDA3MEI3 NTYzOTAwMTYwHhcNMjUwOTE2MjAxNzUzWhcNMjUwOTIzMjAxNzUzWjAYMRYwFAYD VQQDEw02OGM5YzVmMS1kNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZK9aZkzEZB3Sj0P0+JlAxUI8orHt1DslwjaC5SwVey+IsmgBA3bOPjEih7l bZw7GBaqVWxCavbZv82D+JOu0Rb4j1VprQ8zwTyT7i0pNp3WiBS9OD+T0oExu4Fz jh0wFSJOZ2T1YQEZxxcweVwRUBeMkHUwbI+ptsAT1U6SScJg9irlfSLuYmNqYcp3 FqqClo5WFx2eHroyfYMRGC60Piu3J8HP5r1OMl49YCF/rcIdOqgJ2FPrtStS6NOi ux2UqEV3Ck4hw8ZvwSOHWR96hfmsrOUEoQsOHAG4CmOyO4mOisvFkrV1AK2NCS3V rDFc0dfbrg/vjajMCR0poNYj1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlsJvPE UP5VIdZg4DXW2J6/1uNOMB8GA1UdIwQYMBaAFAIVUCqo/9xyHX+E90zQcLdWOQAW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDdFRi84QTI5MTA0Njk5 MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNISWRmNFQzVE5Cd3QxWTVB QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FoVlFLcWpfM0hJZGY0VDNUTkJ3dDFZNUFCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDdFRi84QTI5MTA0Njk5MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNI SWRmNFQzVE5Cd3QxWTVBQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChqiooR48IXA++uss1SU7mOopjhDtucb+uM7xdMoZZI5+UU18iPtuR 7CPy3rv09m9CJiwTENxJ5OlvcrA5S+bRQvUfrNL2eARM/i970gCDmmtFECHaEdUU wPThYjxz4JleELuTgg4feZsGtlmN8VQnHMIfgO1hpGdM1Q3ADHQWC5VweLL+Cykg 6EwO7TKGigW+8J7MjSuUSgWbVb5YuAdSYLXDJXh37g+FelfxaIKnkDtCOkiNN96t fv1b6YtuhGyylwiBBPXp+nZjZ/g2D6RQ4nUQg1P7P4pkjmrTQugJQkXYuHP+3AT9 9yZixWwyeKTjS61DwtUu4uJtM/dUctPc -----END CERTIFICATE-----Generated at Thu Sep 18 11:26:17 2025 by rpki-client