$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft (raw, json) Hash identifier: 0yyYg7UcLNewnufUm2yHAUeP/Mbn6YnnaxlLaEXYKk0= Subject key identifier: A8:37:8F:F7:53:D3:05:B8:49:1B:99:5E:7A:6D:15:8C:AE:1A:1D:CF Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 Certificate issuer: /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Certificate serial: 06D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft Manifest number: 06B3 Signing time: Tue 16 Sep 2025 22:38:19 +0000 Manifest this update: Tue 16 Sep 2025 22:38:19 +0000 Manifest next update: Tue 23 Sep 2025 22:38:19 +0000 Files and hashes: 1: lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl (hash: FKrfh2jRTrnIui7y0jweLDuMWF8rAuAPtc+RSkuwbjE=) 2: 1019A190866411EF9319811DC4F9AE02.roa (hash: iHNv1D4CuKh0MplUtgE1k/nBfju2p94sD6YSJueQYIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 22:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91211D4, serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Validity Not Before: Sep 16 22:38:19 2025 GMT Not After : Sep 23 22:38:19 2025 GMT Subject: CN=68c9e6db-8251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:51:c2:f1:a9:5b:de:7e:90:8e:52:0c:8c: 7b:57:6b:b5:a1:c1:5e:f1:66:17:e0:49:3d:f4:f8: 51:70:f9:a2:d2:df:6b:72:74:71:8f:6b:d4:87:d6: 91:29:30:e0:a9:b8:c0:34:e6:19:c6:87:d7:5a:78: ec:91:eb:78:a3:7b:6b:db:a8:90:dd:77:1b:57:ca: ed:fe:3b:5d:8e:64:2a:bf:be:3e:2a:6b:65:8d:b3: 41:b1:85:1e:93:59:e5:1c:06:cf:84:58:c3:cc:88: 1a:12:59:c1:91:ca:eb:cd:5c:94:6b:73:98:66:2a: c7:4c:70:66:33:80:9c:c6:23:bf:ca:3f:7a:49:55: ce:54:56:6f:1d:13:ed:6c:e8:4f:c2:1f:89:e3:49: 9f:1e:c3:9e:70:8b:ce:b6:ed:4a:75:99:85:2a:06: 71:02:f9:af:99:70:c0:64:ce:8a:09:48:32:e4:65: da:0a:38:c5:23:c4:8a:04:82:6e:d3:c3:9a:05:96: 35:b2:0f:35:50:23:56:02:53:6f:c5:16:2e:8b:1b: 3a:36:c9:c0:4d:b3:7b:36:41:3e:b5:fe:dc:8d:99: 99:70:00:98:dc:2b:48:38:1e:7c:8d:93:fe:47:6d: 1e:3c:27:b7:c2:7a:06:76:d4:94:83:76:6b:d0:9e: 8b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:37:8F:F7:53:D3:05:B8:49:1B:99:5E:7A:6D:15:8C:AE:1A:1D:CF X509v3 Authority Key Identifier: keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:7c:d0:ef:6e:63:e6:68:5a:cc:cd:9b:b7:f8:81:5d:a2:cf: d2:31:f3:de:fb:b4:b4:af:4f:de:7d:83:9b:4e:c9:cc:14:94: fb:e6:8a:13:7f:e2:33:ab:31:c4:2c:c6:e1:7c:21:04:42:5e: 91:0f:bd:58:b6:c9:46:6f:b2:37:36:2f:3e:11:bb:0f:38:fc: d5:47:c8:39:69:6b:c8:7c:01:9a:17:67:ac:4f:ec:24:6d:71: 23:f5:8c:ad:d5:30:dd:ca:43:82:3f:2f:e0:4b:09:15:38:bf: 6e:b1:55:2e:10:94:e4:73:ba:0e:02:14:e3:be:d2:f8:41:86: bc:bf:e3:4e:3d:58:96:05:3c:c9:8b:61:17:f7:c0:2f:8d:df: 1e:23:7e:f9:ae:2b:c6:2a:37:ca:ca:fc:f1:aa:ab:22:e1:7d: e4:13:26:dc:cf:ae:98:2d:95:47:b5:49:8d:30:c2:e0:8e:f3: 52:f6:92:52:e4:64:77:d5:7e:84:f8:e3:2f:8c:57:d5:ec:8b: 6b:ca:6e:f7:62:29:6a:f6:85:06:22:f4:c8:49:27:2f:7a:01: f9:f5:76:f2:7b:fd:a0:8d:6f:92:1a:ee:70:fa:b6:1c:1a:74: 37:c4:83:7d:1e:ad:8a:90:13:76:ea:39:92:4e:0b:65:1f:1c: 7a:d0:13:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcyNzAxOEFGQjQy QTI2RTMxRTEwHhcNMjUwOTE2MjIzODE5WhcNMjUwOTIzMjIzODE5WjAYMRYwFAYD VQQDEw02OGM5ZTZkYi04MjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7JRwvGpW95+kI5SDIx7V2u1ocFe8WYX4Ek99PhRcPmi0t9rcnRxj2vUh9aR KTDgqbjANOYZxofXWnjsket4o3tr26iQ3XcbV8rt/jtdjmQqv74+KmtljbNBsYUe k1nlHAbPhFjDzIgaElnBkcrrzVyUa3OYZirHTHBmM4CcxiO/yj96SVXOVFZvHRPt bOhPwh+J40mfHsOecIvOtu1KdZmFKgZxAvmvmXDAZM6KCUgy5GXaCjjFI8SKBIJu 08OaBZY1sg81UCNWAlNvxRYuixs6NsnATbN7NkE+tf7cjZmZcACY3CtIOB58jZP+ R20ePCe3wnoGdtSUg3Zr0J6L1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKg3j/dT 0wW4SRuZXnptFYyuGh3PMB8GA1UdIwQYMBaAFJaNKqphaMtJaUSnJwGK+0KibjHh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTFENC9BOUY0OTY1Mjg2 Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kwbHBSS2NuQVlyN1FxSnVN ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvMHFxbUZveTBscFJLY25BWXI3UXFKdU1lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTFENC9BOUY0OTY1Mjg2Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kw bHBSS2NuQVlyN1FxSnVNZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxfNDvbmPmaFrMzZu3+IFdos/SMfPe+7S0r0/efYObTsnMFJT75ooT f+IzqzHELMbhfCEEQl6RD71YtslGb7I3Ni8+EbsPOPzVR8g5aWvIfAGaF2esT+wk bXEj9Yyt1TDdykOCPy/gSwkVOL9usVUuEJTkc7oOAhTjvtL4QYa8v+NOPViWBTzJ i2EX98Avjd8eI375rivGKjfKyvzxqqsi4X3kEybcz66YLZVHtUmNMMLgjvNS9pJS 5GR31X6E+OMvjFfV7Itrym73Yilq9oUGIvTISScvegH59Xbye/2gjW+SGu5w+rYc GnQ3xIN9Hq2KkBN26jmSTgtlHxx60BNT -----END CERTIFICATE-----Generated at Thu Sep 18 21:43:04 2025 by rpki-client