$ rpki-client -vvf rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft File: e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft (raw, json) Hash identifier: gkw784P9sPbzhkSrWcAyUtUqMBZ2wGt7D6EWAp+rEEI= Subject key identifier: 88:C9:F8:E5:F4:52:89:AF:9A:10:E5:76:0F:B6:E4:02:BC:36:15:29 Authority key identifier: 7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4 Certificate issuer: /CN=A913C83A/serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft Manifest number: 91 Signing time: Tue 09 Sep 2025 06:40:20 +0000 Manifest this update: Tue 09 Sep 2025 06:40:19 +0000 Manifest next update: Tue 16 Sep 2025 06:40:19 +0000 Files and hashes: 1: e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl (hash: PWRE6UmH6obMPpEtRxylQhu/0JSyBY3863oqDbmd7RI=) 2: 265BE218B69F11EFB2CFE86CC4F9AE02.roa (hash: ROjBhj4WNSVnQpneHUZVLTay7BSLWkeCN2H9UxKd4tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C83A, serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4 Validity Not Before: Sep 9 06:40:19 2025 GMT Not After : Sep 16 06:40:19 2025 GMT Subject: CN=68bfcbd4-0b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:b4:c6:ed:50:10:0e:98:79:2e:59:bc:86: 02:da:50:ed:49:06:18:e8:1e:79:be:84:a5:06:d2: 52:4b:63:e6:f0:e5:81:26:a5:1d:89:6c:c9:2c:a7: 52:f7:c2:31:cf:d0:b1:4f:c2:19:32:40:ff:3d:05: 49:fc:f4:6b:57:79:17:71:ba:01:93:d4:8a:be:84: 5c:42:81:20:8f:bf:63:f8:b9:5a:49:26:0c:90:25: bf:46:55:7a:44:45:d2:07:ac:71:89:d9:b6:a7:f7: 27:65:58:1d:f8:c8:cb:84:db:c4:cc:9a:4a:b5:c8: b1:8d:ed:57:44:47:f2:09:8e:a7:60:3c:c7:ea:71: b3:e9:6e:f8:3a:b4:63:b5:68:56:ab:29:a0:b0:b1: 5c:c8:fc:de:0e:4c:a9:21:39:7a:e3:27:37:d8:0b: 29:f6:f4:ef:eb:ac:bd:04:9b:84:78:0e:f7:4b:2d: 5b:05:e3:78:5c:aa:bb:d9:9a:f8:f3:1a:d1:b3:5f: dd:06:6f:21:5d:6f:8e:53:10:bc:4c:a7:ca:2a:a8: 36:24:cd:34:e8:24:4b:87:15:56:7c:99:f2:8a:a6: 1e:3e:eb:32:95:b8:55:88:18:20:09:e7:21:1e:fc: 38:ea:69:67:c3:0b:1d:c2:05:39:56:50:47:96:62: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C9:F8:E5:F4:52:89:AF:9A:10:E5:76:0F:B6:E4:02:BC:36:15:29 X509v3 Authority Key Identifier: keyid:7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c4:a6:ea:5d:e1:60:f5:b1:8d:d8:af:b6:b5:e5:0e:86:db: b9:2b:53:2f:02:43:32:77:1e:1e:51:85:cd:40:21:12:d8:8c: 63:72:d0:43:12:fa:e6:f2:ef:52:0a:ab:12:a2:3d:dc:30:3d: ea:78:36:b5:42:e5:21:ef:86:4d:3a:dc:a1:e4:e6:8d:67:ab: 3f:1b:89:4f:ae:fc:f1:d0:16:8f:64:03:1e:a0:18:db:d8:0e: a3:29:e4:40:18:d0:16:bb:f0:63:50:07:17:de:9a:ca:70:20: 80:55:e7:0b:59:35:b7:88:b3:f6:7c:d6:b9:e3:c4:a5:03:ae: c0:bb:52:90:46:7e:15:9c:00:65:bf:5f:5c:4a:95:a6:9b:4f: c0:4a:7a:ae:2f:3c:17:49:78:f9:0f:ce:71:15:03:fe:8b:e5: 01:8f:97:03:4b:ef:37:21:58:df:9d:c9:93:01:90:fc:c5:fd: 09:65:f5:09:39:bc:78:7e:8e:99:6e:1f:ba:2a:6f:cb:61:60: cf:ea:22:1b:8c:61:7b:61:31:e5:4b:1c:ef:19:0b:a0:85:85: c0:de:76:fb:cb:79:70:c9:f0:18:f4:46:e8:f4:25:aa:f8:ed: 1b:0e:8e:21:7b:c9:d2:cd:d9:76:cc:1f:8a:7f:f8:02:41:27: e2:3a:7c:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M4M0ExMTAvBgNVBAUTKDdCNTM0QUVERDMwRjI0NDU5NTg4MEQ2NEU3NjQ2QkQx MzMzNEFGQjQwHhcNMjUwOTA5MDY0MDE5WhcNMjUwOTE2MDY0MDE5WjAYMRYwFAYD VQQDEw02OGJmY2JkNC0wYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMu0xu1QEA6YeS5ZvIYC2lDtSQYY6B55voSlBtJSS2Pm8OWBJqUdiWzJLKdS 98Ixz9CxT8IZMkD/PQVJ/PRrV3kXcboBk9SKvoRcQoEgj79j+LlaSSYMkCW/RlV6 REXSB6xxidm2p/cnZVgd+MjLhNvEzJpKtcixje1XREfyCY6nYDzH6nGz6W74OrRj tWhWqymgsLFcyPzeDkypITl64yc32Asp9vTv66y9BJuEeA73Sy1bBeN4XKq72Zr4 8xrRs1/dBm8hXW+OUxC8TKfKKqg2JM006CRLhxVWfJnyiqYePusylbhViBggCech Hvw46mlnwwsdwgU5VlBHlmKzzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjJ+OX0 UomvmhDldg+25AK8NhUpMB8GA1UdIwQYMBaAFHtTSu3TDyRFlYgNZOdka9EzNK+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzgzQS9DQjYyQTBBQUI2 OUQxMUVGQTgxMzk4NEJDNEY5QUUwMi9lMU5LN2RNUEpFV1ZpQTFrNTJScjBUTTBy N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxTks3ZE1QSkVXVmlBMWs1MlJyMFRNMHI3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzgzQS9DQjYyQTBBQUI2OUQxMUVGQTgxMzk4NEJDNEY5QUUwMi9lMU5LN2RNUEpF V1ZpQTFrNTJScjBUTTByN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANxKbqXeFg9bGN2K+2teUOhtu5K1MvAkMydx4eUYXNQCES2IxjctBD Evrm8u9SCqsSoj3cMD3qeDa1QuUh74ZNOtyh5OaNZ6s/G4lPrvzx0BaPZAMeoBjb 2A6jKeRAGNAWu/BjUAcX3prKcCCAVecLWTW3iLP2fNa548SlA67Au1KQRn4VnABl v19cSpWmm0/ASnquLzwXSXj5D85xFQP+i+UBj5cDS+83IVjfncmTAZD8xf0JZfUJ Obx4fo6Zbh+6Km/LYWDP6iIbjGF7YTHlSxzvGQughYXA3nb7y3lwyfAY9Ebo9CWq +O0bDo4he8nSzdl2zB+Kf/gCQSfiOnxH -----END CERTIFICATE-----Generated at Tue Sep 9 17:44:59 2025 by rpki-client