$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: crAXMkQp1sEfqJiHc+4HiUh0J+CaGfN57Nve192gKDE= Subject key identifier: D1:AF:1B:3F:C6:75:BC:BF:E6:F5:AA:03:D6:12:F6:26:4A:CB:58:8C Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 09FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 09F2 Signing time: Thu 04 Sep 2025 20:07:08 +0000 Manifest this update: Thu 04 Sep 2025 20:07:08 +0000 Manifest next update: Thu 11 Sep 2025 20:07:08 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: J8DO0IF6zLbZseboSOBr4Cj69h5OOMUFDBOrtdLK6K8=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: nTti14+ixHvCqHgk8IwtFdkQ1Ouiq6aL3zx3Hm8MMGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2554 (0x9fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: Sep 4 20:07:08 2025 GMT Not After : Sep 11 20:07:08 2025 GMT Subject: CN=68b9f16c-eef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:da:18:f7:6d:05:23:0e:12:d9:74:84:83: 4d:e5:8b:0a:05:cd:d6:40:fe:94:bc:8e:da:22:06: fb:1b:0e:ec:c6:42:8a:7e:62:42:70:f3:14:75:22: c2:67:74:af:1a:dc:f9:d0:e6:cb:f8:cc:39:49:5d: 91:3e:2f:f2:fe:1d:bb:8b:5c:f8:c9:bd:6b:9d:27: cb:5b:34:7a:72:12:1f:db:a2:3c:29:cf:c2:5d:19: 13:59:6a:2b:76:62:1f:87:8f:e9:91:48:a4:0c:e6: 75:b5:6d:0c:86:37:31:3f:25:1a:57:50:0e:f2:04: d8:43:0c:ce:e8:19:b7:4c:8a:23:a9:3e:f2:3f:bf: 9f:89:0d:ad:52:9b:a0:3c:44:60:d2:fe:5f:10:22: d5:2e:b0:8a:8e:5c:61:84:84:7a:f3:ef:1f:db:5c: 44:51:27:c2:3e:4e:63:d2:09:75:a4:7e:60:00:1e: ff:da:f1:a6:95:61:00:54:e9:68:fe:ee:ea:dd:b8: d1:a0:01:e8:c7:12:56:ad:65:1e:1f:d0:42:34:aa: 92:89:28:58:91:a6:dd:a8:43:5e:c4:d5:38:fc:88: 27:e9:a5:42:50:20:b0:32:d0:90:c7:8e:32:ee:59: d1:6f:4d:a2:e7:9d:73:68:72:40:b8:dc:89:a6:72: 43:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AF:1B:3F:C6:75:BC:BF:E6:F5:AA:03:D6:12:F6:26:4A:CB:58:8C X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:72:f8:aa:ce:40:5f:b8:aa:f2:6b:62:1f:4a:99:f7:24:4e: 9c:1c:2c:21:0e:33:6e:84:3a:d1:c8:ab:73:bf:1e:d1:1b:2d: b8:36:b2:f9:04:4b:a1:eb:bf:9c:fa:dc:30:17:8f:d1:c0:3e: 77:58:3e:95:76:78:79:a3:e5:78:53:fc:50:c5:6c:f5:cf:21: 22:db:fb:b9:ec:d4:62:39:97:68:aa:a9:8c:e4:e1:ea:6c:41: 9b:a1:43:0a:35:9f:66:28:5f:bd:53:d8:18:46:e2:73:b1:cf: d3:39:44:a0:d2:a2:79:f4:94:db:01:27:fb:77:cd:e1:df:aa: 7a:20:f5:c8:4d:c1:ae:1a:02:32:13:6a:9f:88:fd:1b:54:05: f2:b2:3d:be:e7:0c:aa:3d:b4:d6:1c:92:23:7e:e9:1d:78:7d: f8:11:e6:e6:93:fc:66:b7:6e:6a:57:d6:2b:d9:3a:81:9b:1a: 24:1d:11:a5:f8:29:8f:63:83:b3:76:a2:ad:eb:ad:87:01:54: d5:c4:6c:e8:16:04:16:79:b7:c5:b0:f1:77:16:41:6e:cd:a1: 02:88:37:43:6e:10:70:65:a3:59:91:3a:af:59:ac:93:9d:36: e6:de:2e:50:04:8f:9a:45:4d:97:85:83:0a:c4:18:23:1c:ee: 59:99:48:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUwOTA0MjAwNzA4WhcNMjUwOTExMjAwNzA4WjAYMRYwFAYD VQQDEw02OGI5ZjE2Yy1lZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaHaGPdtBSMOEtl0hINN5YsKBc3WQP6UvI7aIgb7Gw7sxkKKfmJCcPMUdSLC Z3SvGtz50ObL+Mw5SV2RPi/y/h27i1z4yb1rnSfLWzR6chIf26I8Kc/CXRkTWWor dmIfh4/pkUikDOZ1tW0MhjcxPyUaV1AO8gTYQwzO6Bm3TIojqT7yP7+fiQ2tUpug PERg0v5fECLVLrCKjlxhhIR68+8f21xEUSfCPk5j0gl1pH5gAB7/2vGmlWEAVOlo /u7q3bjRoAHoxxJWrWUeH9BCNKqSiShYkabdqENexNU4/Ign6aVCUCCwMtCQx44y 7lnRb02i551zaHJAuNyJpnJDWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGvGz/G dby/5vWqA9YS9iZKy1iMMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJcviqzkBfuKrya2IfSpn3JE6cHCwhDjNuhDrRyKtzvx7RGy24NrL5 BEuh67+c+twwF4/RwD53WD6Vdnh5o+V4U/xQxWz1zyEi2/u57NRiOZdoqqmM5OHq bEGboUMKNZ9mKF+9U9gYRuJzsc/TOUSg0qJ59JTbASf7d83h36p6IPXITcGuGgIy E2qfiP0bVAXysj2+5wyqPbTWHJIjfukdeH34Eebmk/xmt25qV9Yr2TqBmxokHRGl +CmPY4OzdqKt662HAVTVxGzoFgQWebfFsPF3FkFuzaECiDdDbhBwZaNZkTqvWayT nTbm3i5QBI+aRU2XhYMKxBgjHO5ZmUjK -----END CERTIFICATE-----Generated at Sat Sep 6 16:47:50 2025 by rpki-client