$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft File: _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json) Hash identifier: BPARIn3trQY/nlvBuXJhzAxH4TME5tl7EPJa1ywZ+m4= Subject key identifier: 45:D2:B4:B7:B4:74:EC:B2:FF:A9:83:10:43:B3:AB:AD:3F:46:C9:88 Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 Certificate issuer: /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft Manifest number: 03D5 Signing time: Fri 19 Sep 2025 00:59:22 +0000 Manifest this update: Fri 19 Sep 2025 00:59:22 +0000 Manifest next update: Fri 26 Sep 2025 00:59:22 +0000 Files and hashes: 1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: dLIpUbPcE7RfSQu94+bk+rrcUt//frVQvSM3Zk6AG1c=) 2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: Eke8Nptjc+wFFIze4nM4012uB/SRIMQBKPKAnolzw/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Validity Not Before: Sep 19 00:59:22 2025 GMT Not After : Sep 26 00:59:22 2025 GMT Subject: CN=68ccaaea-ff00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:c8:11:24:75:48:2c:c9:8d:f4:38:a0:f3: 61:e6:86:47:ce:58:d3:b5:2f:d5:0a:fd:78:54:6a: a3:42:53:b7:68:98:8a:a4:0c:6c:a1:8f:0a:79:9b: c3:31:d8:cd:e6:78:e4:23:24:11:a1:ad:7a:88:f3: 25:44:45:0f:c1:f0:8b:40:58:e7:a1:3d:14:82:70: a1:2a:f7:91:4c:64:56:63:ae:a0:b8:87:46:00:39: 16:9e:71:c9:c3:ed:15:4e:aa:cc:45:81:31:95:64: e9:c1:c4:50:79:e5:0f:c4:8b:84:b0:8b:23:ef:0a: 1b:5a:6b:f7:a9:86:50:4c:55:87:ff:70:aa:e7:ee: 89:2b:dc:b4:b0:74:53:b6:2e:87:0d:14:20:69:62: 93:e3:2a:34:4b:55:71:bd:ef:ff:31:fb:f2:e0:fc: 1d:89:8d:61:15:7a:17:00:14:fc:ea:96:81:18:df: 28:b8:02:a2:a4:79:26:3a:c4:69:70:86:6a:06:5b: 78:3c:d7:9d:1c:02:8d:53:e4:8c:67:85:54:0f:2b: 35:c5:24:1c:7d:46:66:a8:d3:0d:a3:76:dc:22:4d: 7a:67:c1:6a:58:ea:c8:f9:11:65:10:d8:a5:74:01: f0:63:0c:9c:6a:12:87:98:52:8f:1a:02:02:d6:55: c6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D2:B4:B7:B4:74:EC:B2:FF:A9:83:10:43:B3:AB:AD:3F:46:C9:88 X509v3 Authority Key Identifier: keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c8:d1:89:f2:4f:9b:4a:f2:41:6c:49:31:fa:a5:f2:05:60: 58:a9:58:8d:ae:7a:34:21:f1:39:3f:f5:29:b2:58:4a:d3:87: 03:ee:9d:7e:2c:4b:50:49:9a:f9:8b:43:a5:7d:45:b9:d5:f2: b9:76:03:aa:d5:69:35:1d:e8:a7:ae:06:0f:88:f0:ee:ef:a7: a0:dc:35:f8:76:09:ca:38:3d:14:9f:16:5a:c3:6a:92:c3:bd: de:80:9a:47:a9:a7:33:e9:37:ce:76:13:16:13:19:58:fe:1f: b1:1e:3f:33:5f:7c:c0:91:99:42:9f:10:49:6c:a1:c9:19:4b: 28:94:f0:0d:8c:4f:4b:71:a6:14:29:6e:7c:f2:11:08:05:c1: 34:b8:7a:a6:be:18:6e:48:87:b7:ba:80:70:3d:e9:68:1d:21: 32:36:17:f6:f3:a1:7e:95:09:f3:05:f2:be:3b:8d:10:ab:9a: b5:30:3f:5e:37:13:8d:a3:87:69:fa:cc:3c:0c:09:27:54:c8: 8b:9e:d6:2e:9e:bf:08:bb:c4:b4:da:44:2f:7e:88:bf:c4:21: ad:06:1f:48:a3:80:f2:bc:6b:2a:c2:db:bc:96:16:a0:03:99: 34:e2:34:3a:a9:2c:95:c4:db:98:82:a9:fc:f0:ff:a4:85:b9: 11:b5:5b:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwRDYxMTAvBgNVBAUTKEZFRUU5RjM2MEE1REQxMzI4QkUxQzgyQTE3NzA3OTg5 Njg3NTlENDgwHhcNMjUwOTE5MDA1OTIyWhcNMjUwOTI2MDA1OTIyWjAYMRYwFAYD VQQDEw02OGNjYWFlYS1mZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptvIESR1SCzJjfQ4oPNh5oZHzljTtS/VCv14VGqjQlO3aJiKpAxsoY8KeZvD MdjN5njkIyQRoa16iPMlREUPwfCLQFjnoT0UgnChKveRTGRWY66guIdGADkWnnHJ w+0VTqrMRYExlWTpwcRQeeUPxIuEsIsj7wobWmv3qYZQTFWH/3Cq5+6JK9y0sHRT ti6HDRQgaWKT4yo0S1Vxve//Mfvy4PwdiY1hFXoXABT86paBGN8ouAKipHkmOsRp cIZqBlt4PNedHAKNU+SMZ4VUDys1xSQcfUZmqNMNo3bcIk16Z8FqWOrI+RFlENil dAHwYwycahKHmFKPGgIC1lXGyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXStLe0 dOyy/6mDEEOzq60/RsmIMB8GA1UdIwQYMBaAFP7unzYKXdEyi+HIKhdweYlodZ1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTBENi9GOTY0QkMzMjlB RUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBUS0w0Y2dxRjNCNWlXaDFu VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191NmZOZ3BkMFRLTDRjZ3FGM0I1aVdoMW5VZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTBENi9GOTY0QkMzMjlBRUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBU S0w0Y2dxRjNCNWlXaDFuVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlyNGJ8k+bSvJBbEkx+qXyBWBYqViNrno0IfE5P/UpslhK04cD7p1+ LEtQSZr5i0OlfUW51fK5dgOq1Wk1HeinrgYPiPDu76eg3DX4dgnKOD0UnxZaw2qS w73egJpHqacz6TfOdhMWExlY/h+xHj8zX3zAkZlCnxBJbKHJGUsolPANjE9LcaYU KW588hEIBcE0uHqmvhhuSIe3uoBwPeloHSEyNhf286F+lQnzBfK+O40Qq5q1MD9e NxONo4dp+sw8DAknVMiLntYunr8Iu8S02kQvfoi/xCGtBh9Io4DyvGsqwtu8lhag A5k04jQ6qSyVxNuYgqn88P+khbkRtVuw -----END CERTIFICATE-----Generated at Fri Sep 19 02:49:42 2025 by rpki-client