$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: KhRPqeFFP6EN0vWi42SxT7r5H8/AxK3GoW4lL0LMh7I= Subject key identifier: E6:75:E3:F9:49:82:B4:69:F9:7C:EF:40:77:F1:62:5B:25:A9:65:7E Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 04AB Signing time: Wed 17 Sep 2025 00:21:33 +0000 Manifest this update: Wed 17 Sep 2025 00:21:33 +0000 Manifest next update: Wed 24 Sep 2025 00:21:33 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: KIvkX2YERtJ4iwmSVrUAD0jTbMehkOVnt5xwLZOceAU=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: Sep 17 00:21:33 2025 GMT Not After : Sep 24 00:21:33 2025 GMT Subject: CN=68c9ff0d-bea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:b0:fb:f8:d8:f6:73:49:1e:aa:eb:64:63: c1:d7:0b:63:6a:6f:c5:04:09:71:29:29:de:02:30: f4:49:af:a8:bd:f3:65:d5:e9:e9:f4:56:d8:31:55: c3:df:3b:d2:35:78:7e:6d:86:c1:1d:53:1d:4f:3d: 18:d1:eb:3b:f5:ab:10:88:96:e4:93:df:3d:bf:6a: cf:ca:8e:26:8c:26:52:27:d4:de:43:07:5c:cd:7e: 19:09:37:8a:d2:1e:3a:eb:08:a3:78:14:d1:4a:2d: 78:6a:ed:ad:e2:97:a7:ed:f1:b9:51:db:8e:f3:51: a8:9a:bb:1c:37:2a:eb:66:5c:9d:b3:26:24:30:ec: 54:29:00:96:57:b9:cb:a3:40:54:00:9d:c9:5b:a8: 00:a2:51:ac:c3:01:d9:62:da:a9:6e:99:27:4e:69: cd:e9:78:46:71:12:fc:36:24:d0:ae:32:0a:8a:90: 50:23:5e:99:b4:ee:d5:a6:66:58:7f:9d:d2:bf:8e: 25:c3:2c:56:39:7e:5e:a8:fb:01:22:93:97:5b:ce: 5c:c2:9a:82:02:d3:ce:49:a2:0d:15:aa:13:c0:eb: 06:64:f7:78:a7:29:69:2b:f6:c4:1c:27:67:4f:20: 7d:2d:31:01:75:05:a9:d7:8d:bc:8c:c4:8d:8a:a5: 48:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:75:E3:F9:49:82:B4:69:F9:7C:EF:40:77:F1:62:5B:25:A9:65:7E X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:f6:69:59:d3:0f:80:48:09:c8:67:65:b0:6a:e6:3a:04:c2: 4a:ad:93:38:29:7a:d1:7e:84:a3:a0:2f:98:63:e7:2b:ed:b1: d4:ac:fc:71:4f:fa:b9:de:d5:dc:54:b8:1a:d3:ca:a5:a1:c3: 99:1d:9b:1e:6e:7b:1e:0a:01:1a:66:a4:10:8d:ef:8b:da:af: 17:34:01:f2:5e:a4:5e:79:44:a2:1e:9c:86:a4:0c:70:e4:0c: 3d:1d:87:2a:c0:2b:7a:08:bc:7f:9e:ac:03:0e:57:a6:c5:c6: 61:de:99:cc:f4:cf:06:0d:47:a5:5d:4b:5c:99:b5:4d:d4:f2: 1f:96:d4:39:39:bf:c1:16:a9:23:bf:c4:4d:e2:f7:c8:e3:1e: 9f:a3:24:f0:9e:af:a6:ba:5e:9d:0a:7b:92:73:3f:28:4b:95: 6f:4f:5b:9e:c9:0d:e8:de:06:74:42:08:5e:10:1a:a3:0d:0b: df:15:75:55:7f:0c:87:27:3e:97:2d:2a:e6:4d:a9:80:59:17: 86:ef:12:6d:6e:c8:5a:fe:f0:2c:96:75:0a:e1:b3:ee:c9:50: 42:2f:ae:2e:0f:3b:e8:1b:1f:fd:48:0c:7d:c6:06:be:c4:90: 40:80:33:b3:49:24:9b:b5:e4:76:ce:d6:cf:86:1e:bb:6d:80: 33:7b:ef:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjUwOTE3MDAyMTMzWhcNMjUwOTI0MDAyMTMzWjAYMRYwFAYD VQQDEw02OGM5ZmYwZC1iZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrGw+/jY9nNJHqrrZGPB1wtjam/FBAlxKSneAjD0Sa+ovfNl1enp9FbYMVXD 3zvSNXh+bYbBHVMdTz0Y0es79asQiJbkk989v2rPyo4mjCZSJ9TeQwdczX4ZCTeK 0h466wijeBTRSi14au2t4pen7fG5UduO81GomrscNyrrZlydsyYkMOxUKQCWV7nL o0BUAJ3JW6gAolGswwHZYtqpbpknTmnN6XhGcRL8NiTQrjIKipBQI16ZtO7VpmZY f53Sv44lwyxWOX5eqPsBIpOXW85cwpqCAtPOSaINFaoTwOsGZPd4pylpK/bEHCdn TyB9LTEBdQWp1428jMSNiqVINwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZ14/lJ grRp+XzvQHfxYlslqWV+MB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF9mlZ0w+ASAnIZ2WwauY6BMJKrZM4KXrRfoSjoC+YY+cr7bHUrPxx T/q53tXcVLga08qlocOZHZsebnseCgEaZqQQje+L2q8XNAHyXqReeUSiHpyGpAxw 5Aw9HYcqwCt6CLx/nqwDDlemxcZh3pnM9M8GDUelXUtcmbVN1PIfltQ5Ob/BFqkj v8RN4vfI4x6foyTwnq+mul6dCnuScz8oS5VvT1ueyQ3o3gZ0QgheEBqjDQvfFXVV fwyHJz6XLSrmTamAWReG7xJtbsha/vAslnUK4bPuyVBCL64uDzvoGx/9SAx9xga+ xJBAgDOzSSSbteR2ztbPhh67bYAze++R -----END CERTIFICATE-----Generated at Fri Sep 19 00:34:20 2025 by rpki-client