$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft File: ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json) Hash identifier: fiTpuN4+n1L622i4tzYNp9+aqcO3NbgFx+FPS78Ssqk= Subject key identifier: FB:AF:8F:B2:DC:70:AD:61:57:BC:26:69:08:D1:14:02:A4:F2:BF:58 Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 Certificate issuer: /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft Manifest number: 9E Signing time: Fri 19 Sep 2025 07:01:06 +0000 Manifest this update: Fri 19 Sep 2025 07:01:05 +0000 Manifest next update: Fri 26 Sep 2025 07:01:05 +0000 Files and hashes: 1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: FZzzd5bEADNHzh8MqJVbplozAb7HjqgnlhDEXeGAfpc=) 2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: J45sLiwW4UVC5sdSS+IxX3cBMgJ0HE+7WdnowtCp0yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Validity Not Before: Sep 19 07:01:05 2025 GMT Not After : Sep 26 07:01:05 2025 GMT Subject: CN=68ccffb1-992c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:8d:e0:f5:3f:ca:1a:19:97:c0:95:6d:11: f2:1f:ee:dd:11:35:06:d2:68:d8:52:c0:bd:d6:c5: 0f:ff:26:d5:bc:26:4a:c7:51:a5:d4:58:b7:e2:98: 30:f6:12:c3:3e:59:29:b4:ec:c5:aa:4b:96:b7:15: dd:51:d4:33:be:8b:a6:16:52:a5:51:fb:cc:bf:b7: fa:ee:ad:39:ab:6a:a5:be:d5:2c:e4:c1:37:4b:5e: d2:f1:83:14:3e:6d:c1:95:7d:96:b8:bc:6d:0c:7d: 31:34:f5:a1:6b:a2:3f:69:68:c6:99:9d:6c:e2:cb: 0c:d9:f9:47:d8:26:f0:d7:f8:36:c1:ee:91:43:d0: 5d:ad:54:9e:89:64:01:55:45:81:1b:aa:4d:a7:72: f7:f4:ef:d6:7f:7a:9e:56:12:51:d7:f8:5d:38:94: a4:d6:ec:f9:49:f4:41:c3:45:81:3a:da:e1:0c:28: 58:b6:08:f8:bd:56:e0:77:32:74:da:4d:70:41:1e: a9:cf:f6:79:84:67:f8:3f:e1:15:5b:76:ac:b4:c2: fb:f8:fd:f4:06:0d:e6:0a:69:88:22:8b:66:c9:81: d8:71:c8:9d:c3:44:70:c8:e7:69:e2:0a:d7:e0:00: 61:15:69:0a:55:1b:4e:65:d6:e7:03:01:55:02:9d: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AF:8F:B2:DC:70:AD:61:57:BC:26:69:08:D1:14:02:A4:F2:BF:58 X509v3 Authority Key Identifier: keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:39:6e:1e:32:09:6b:b4:56:f0:9c:5b:2a:dc:30:7e:9b:cc: 9d:d9:cd:93:1b:d6:2c:a3:ab:36:e0:4e:b3:db:9c:be:01:65: 38:fc:65:15:04:93:61:3f:a1:62:98:32:73:ec:07:7d:75:7b: 57:54:1c:45:50:44:a8:0d:3a:16:d0:58:50:1b:9f:98:f7:c8: c2:2c:14:3d:7c:84:31:6a:50:7f:21:81:1d:7c:ad:dc:4c:7b: 9b:17:26:b5:a3:10:b5:31:6d:0c:fe:7d:4f:e6:2a:ef:38:7e: 38:fa:b3:90:9a:33:38:11:ad:35:0f:27:6a:8f:5d:02:15:bb: e8:15:9e:6d:4a:8e:ad:b8:77:25:df:08:39:b6:38:8b:5b:f7: 7d:4b:aa:97:d0:16:fb:7d:88:ad:19:38:24:da:c1:82:6e:57: d6:df:3b:31:12:67:cc:3e:86:e9:96:74:d7:ec:d7:6c:42:f9: f9:91:83:62:a6:78:39:d6:35:f0:00:47:bb:ec:83:65:6e:37: fc:ef:e8:9f:3c:6c:61:b0:cf:18:61:b8:e8:b7:7a:1f:df:0d: 11:85:cc:fc:8c:4a:9c:9e:0e:dc:f3:f7:26:03:9c:38:9e:0c: c7:4d:6e:47:c7:bf:14:24:ed:20:d6:4a:4f:a3:20:32:16:b9: c8:81:a6:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwRjcxMTAvBgNVBAUTKDAwQjcyQUQ1MzMzQ0VBQUUxQTU4NUM4MjgwODlDNDQ1 NTk5OTYzRjIwHhcNMjUwOTE5MDcwMTA1WhcNMjUwOTI2MDcwMTA1WjAYMRYwFAYD VQQDEw02OGNjZmZiMS05OTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprGN4PU/yhoZl8CVbRHyH+7dETUG0mjYUsC91sUP/ybVvCZKx1Gl1Fi34pgw 9hLDPlkptOzFqkuWtxXdUdQzvoumFlKlUfvMv7f67q05q2qlvtUs5ME3S17S8YMU Pm3BlX2WuLxtDH0xNPWha6I/aWjGmZ1s4ssM2flH2Cbw1/g2we6RQ9BdrVSeiWQB VUWBG6pNp3L39O/Wf3qeVhJR1/hdOJSk1uz5SfRBw0WBOtrhDChYtgj4vVbgdzJ0 2k1wQR6pz/Z5hGf4P+EVW3astML7+P30Bg3mCmmIIotmyYHYccidw0RwyOdp4grX 4ABhFWkKVRtOZdbnAwFVAp36ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuvj7Lc cK1hV7wmaQjRFAKk8r9YMB8GA1UdIwQYMBaAFAC3KtUzPOquGlhcgoCJxEVZmWPy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBGNy85Rjc2OEFGQUE3 RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZxNGFXRnlDZ0luRVJWbVpZ X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FMY3ExVE04NnE0YVdGeUNnSW5FUlZtWllfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODBGNy85Rjc2OEFGQUE3RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZx NGFXRnlDZ0luRVJWbVpZX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaOW4eMglrtFbwnFsq3DB+m8yd2c2TG9Yso6s24E6z25y+AWU4/GUV BJNhP6FimDJz7Ad9dXtXVBxFUESoDToW0FhQG5+Y98jCLBQ9fIQxalB/IYEdfK3c THubFya1oxC1MW0M/n1P5irvOH44+rOQmjM4Ea01Dydqj10CFbvoFZ5tSo6tuHcl 3wg5tjiLW/d9S6qX0Bb7fYitGTgk2sGCblfW3zsxEmfMPobplnTX7NdsQvn5kYNi png51jXwAEe77INlbjf87+ifPGxhsM8YYbjot3of3w0Rhcz8jEqcng7c8/cmA5w4 ngzHTW5Hx78UJO0g1kpPoyAyFrnIgaYo -----END CERTIFICATE-----Generated at Fri Sep 19 14:03:37 2025 by rpki-client