$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: C7kNFMdKN9hiHILzMzeojWc8ZF7RKl9p7Bxpp4SHINE= Subject key identifier: 4F:0A:37:93:E2:E5:1F:97:85:D2:F3:F4:15:45:19:EC:EC:FC:D2:E7 Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0B01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0CB4 Signing time: Thu 18 Sep 2025 19:35:17 +0000 Manifest this update: Thu 18 Sep 2025 19:35:16 +0000 Manifest next update: Thu 25 Sep 2025 19:35:16 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: WHOrQTX7tQCQkrb89uAZrze9y65doNd0Z7gvcIUv2tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: Sep 18 19:35:16 2025 GMT Not After : Sep 25 19:35:16 2025 GMT Subject: CN=68cc5ef4-cea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:f5:88:f9:33:ed:66:43:4f:c8:fd:66:e7: d6:3e:c9:8f:80:a2:9b:ac:6d:00:5d:18:db:bb:dd: 83:3a:c6:bd:c0:4a:da:0b:02:61:61:34:2e:84:3c: 09:b4:92:ab:fa:29:aa:d9:ea:29:00:c7:69:97:83: c6:97:98:28:89:df:a0:62:38:0d:a1:6e:0b:cb:de: 08:7c:6e:2d:bf:c1:94:b5:f1:1e:2b:8f:a7:73:2d: 89:49:37:9d:42:3e:88:0f:8f:48:97:2b:4d:ee:2e: b7:09:b9:22:bc:18:15:5f:a6:83:8d:d4:a7:85:5e: c8:62:f0:c1:f7:23:df:ea:b6:01:98:48:fb:7a:6b: 61:1b:b1:4a:23:4a:20:8c:e9:e1:23:20:34:ab:5a: 4b:53:a1:f3:5a:8d:f7:5a:1b:8f:79:6a:c1:23:98: 8c:8d:a8:a2:3d:16:7e:60:07:aa:76:ce:af:c7:74: d8:76:88:8c:bd:3a:ca:f5:6b:62:76:05:1b:3d:8e: d6:e1:9f:b3:a2:e9:c3:ad:88:06:33:26:f2:d2:6b: 0d:c4:e7:f1:9f:34:ef:ab:b6:9a:17:ff:35:14:30: ab:45:df:d2:d7:18:13:58:6d:b2:c5:8b:eb:07:01: 5c:61:a1:70:a9:3d:3a:59:ec:3e:e5:79:fa:de:71: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0A:37:93:E2:E5:1F:97:85:D2:F3:F4:15:45:19:EC:EC:FC:D2:E7 X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:7a:15:ed:e9:d5:93:20:69:91:99:bd:95:de:19:f1:e2:ca: 80:39:53:3e:1d:8a:65:d4:0d:9d:f9:f9:2c:f0:0b:bc:41:58: b0:cd:54:d1:67:ee:a4:6a:9a:5d:57:85:f3:44:67:65:d2:f8: 5e:5f:42:3e:55:32:ec:08:45:58:30:b4:92:83:c6:e6:82:86: 82:c6:b8:fd:bd:3a:91:fe:6f:7d:33:40:b4:9b:d6:60:ed:5f: 8f:27:b3:2a:d9:31:33:94:0c:1c:e8:f0:32:a7:c4:45:ef:db: d0:b4:39:79:e7:63:80:80:a6:10:39:c3:df:88:4a:eb:63:93: 79:91:7a:40:a4:0a:42:3e:39:54:e9:96:49:92:3c:29:ab:8f: 34:d9:48:49:de:18:fd:19:54:62:a2:9d:92:40:dc:1e:37:f0: aa:80:89:32:cc:79:58:cc:76:17:f1:ec:d0:48:04:4c:40:eb: 29:9c:6c:21:46:56:0e:08:43:74:0f:cf:c3:22:83:fa:f7:37: a9:8c:74:38:1d:b4:58:5d:f4:7f:40:38:82:9c:16:6b:55:97: 9c:00:f2:69:e4:f4:09:e6:71:d3:f3:4e:c1:ff:f8:db:bc:62: 3a:66:bb:3b:04:7d:1b:8c:38:ff:65:0a:03:77:a5:12:85:0d: bf:58:be:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjUwOTE4MTkzNTE2WhcNMjUwOTI1MTkzNTE2WjAYMRYwFAYD VQQDEw02OGNjNWVmNC1jZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArG31iPkz7WZDT8j9ZufWPsmPgKKbrG0AXRjbu92DOsa9wEraCwJhYTQuhDwJ tJKr+imq2eopAMdpl4PGl5goid+gYjgNoW4Ly94IfG4tv8GUtfEeK4+ncy2JSTed Qj6ID49IlytN7i63CbkivBgVX6aDjdSnhV7IYvDB9yPf6rYBmEj7emthG7FKI0og jOnhIyA0q1pLU6HzWo33WhuPeWrBI5iMjaiiPRZ+YAeqds6vx3TYdoiMvTrK9Wti dgUbPY7W4Z+zounDrYgGMyby0msNxOfxnzTvq7aaF/81FDCrRd/S1xgTWG2yxYvr BwFcYaFwqT06Wew+5Xn63nFczQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8KN5Pi 5R+XhdLz9BVFGezs/NLnMB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACehXt6dWTIGmRmb2V3hnx4sqAOVM+HYpl1A2d+fks8Au8QViwzVTR Z+6kappdV4XzRGdl0vheX0I+VTLsCEVYMLSSg8bmgoaCxrj9vTqR/m99M0C0m9Zg 7V+PJ7Mq2TEzlAwc6PAyp8RF79vQtDl552OAgKYQOcPfiErrY5N5kXpApApCPjlU 6ZZJkjwpq4802UhJ3hj9GVRiop2SQNweN/CqgIkyzHlYzHYX8ezQSARMQOspnGwh RlYOCEN0D8/DIoP69zepjHQ4HbRYXfR/QDiCnBZrVZecAPJp5PQJ5nHT807B//jb vGI6Zrs7BH0bjDj/ZQoDd6UShQ2/WL5I -----END CERTIFICATE-----Generated at Fri Sep 19 02:58:42 2025 by rpki-client