$ rpki-client -vvf rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft File: v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft (raw, json) Hash identifier: 8aFxVCTj9IV7Q2Pu8aST8yJg+3C3hc/bGx6wy1E3cTU= Subject key identifier: F9:19:0C:B3:95:C0:8F:37:84:1F:3F:F6:3B:B7:99:BA:63:20:1D:15 Authority key identifier: BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF Certificate issuer: /CN=A91401C4/serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Certificate serial: 3527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft Manifest number: 34F4 Signing time: Thu 18 Sep 2025 14:15:56 +0000 Manifest this update: Thu 18 Sep 2025 14:15:56 +0000 Manifest next update: Thu 25 Sep 2025 14:15:56 +0000 Files and hashes: 1: v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl (hash: tAF8PvhVZiRZBOJLgPCTSqaol2kGSunAYMf3cO8x5io=) 2: 13773D180C8111EB9BD25070C4F9AE02.roa (hash: EcHgJTBJZVSZcmyoGTsJf6lDzdXZarLLw4Yz9Tt75wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 14:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13607 (0x3527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91401C4, serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Validity Not Before: Sep 18 14:15:56 2025 GMT Not After : Sep 25 14:15:56 2025 GMT Subject: CN=68cc141c-2004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2f:3c:ac:29:a2:95:2a:b0:87:72:1c:f0:7b: df:6b:d8:42:a8:bc:4a:36:9b:c5:42:59:e3:7d:72: 48:a4:fd:b8:c6:9f:cc:9d:01:4e:82:56:19:3a:b7: eb:ea:99:02:ce:44:4c:7e:9a:a8:28:00:d1:12:9f: 11:c2:08:e0:fa:c9:e2:47:5c:09:ea:3d:71:28:ea: 29:07:d5:99:e5:e8:c7:de:62:a2:f6:f6:ea:b1:73: 69:1d:7a:f1:58:95:fd:fe:bb:7a:56:0e:25:37:dc: 66:aa:8e:3e:9f:4c:d7:7a:15:60:a8:a0:5e:fc:58: 84:0b:ec:6c:39:85:3c:d2:5e:a3:5f:9e:f5:5b:be: 85:ba:86:76:f1:a2:d3:8c:12:26:7a:c1:31:85:85: 70:9e:41:42:37:d2:88:8d:4c:1e:85:d3:ed:dd:9a: 71:53:d9:fb:19:17:99:90:d0:47:5e:0d:bf:53:b7: cd:5c:6c:7b:4d:1f:5a:06:76:8c:bd:66:bd:76:fd: 9b:a3:25:4a:70:f5:11:bc:d7:bd:c7:f4:ca:63:e5: 19:dd:fb:cb:5e:4f:3e:df:0e:fe:0e:05:c1:66:ae: 04:70:75:53:e9:4c:96:b3:5d:6d:56:fe:96:98:22: 4f:14:12:c1:ff:db:3d:51:a5:95:f1:0b:05:3c:84: a2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:19:0C:B3:95:C0:8F:37:84:1F:3F:F6:3B:B7:99:BA:63:20:1D:15 X509v3 Authority Key Identifier: keyid:BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:89:dd:b0:14:35:65:ef:bd:9e:2d:8f:6f:be:be:2e:9d:d8: 98:52:84:b9:f0:4d:b4:78:74:97:c5:96:da:a0:df:52:0b:96: a5:6a:cb:33:90:4b:28:c3:e1:b2:d7:2c:01:2d:12:40:db:28: e4:d9:3d:45:05:88:b9:be:e7:65:61:55:36:f9:60:5f:5d:d7: 90:2a:69:66:58:9f:f4:05:cf:0e:45:5b:e3:2f:90:07:b4:74: 08:ba:ad:b0:b9:b6:1e:5b:46:07:5c:87:db:fd:57:c0:88:35: f7:0b:e9:16:a6:6d:ab:a0:ce:b1:b8:05:cf:a4:34:69:2c:23: d7:0b:be:c5:18:df:6a:ed:f7:e6:3b:7b:04:78:38:d8:a9:29: d7:8d:7e:8b:a6:25:c0:75:12:79:3e:00:2a:8e:dc:3c:ae:62: a5:e7:ee:3c:61:dd:21:b1:48:bc:f2:d9:c3:ab:7e:9d:97:1d: 47:97:db:7e:ca:b7:23:38:01:c8:ae:af:1c:04:3b:c5:0c:2e: 89:08:48:a9:53:fc:a8:b2:46:b6:4b:35:bb:c5:ed:9f:86:a6: 4e:c0:c4:74:9c:1a:1d:15:b0:b6:e3:24:b3:f6:f5:f0:73:91: 97:48:c9:14:e2:8a:f4:bb:c5:f1:59:8e:4f:ae:cf:f5:47:b8: 28:68:db:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAxQzQxMTAvBgNVBAUTKEJGN0JDQUYxOTA5QzEwQkNGRUEwRDhFN0Q0NUQ4MjU0 RjI2OUM2QkYwHhcNMjUwOTE4MTQxNTU2WhcNMjUwOTI1MTQxNTU2WjAYMRYwFAYD VQQDEw02OGNjMTQxYy0yMDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS88rCmilSqwh3Ic8Hvfa9hCqLxKNpvFQlnjfXJIpP24xp/MnQFOglYZOrfr 6pkCzkRMfpqoKADREp8Rwgjg+sniR1wJ6j1xKOopB9WZ5ejH3mKi9vbqsXNpHXrx WJX9/rt6Vg4lN9xmqo4+n0zXehVgqKBe/FiEC+xsOYU80l6jX571W76FuoZ28aLT jBImesExhYVwnkFCN9KIjUwehdPt3ZpxU9n7GReZkNBHXg2/U7fNXGx7TR9aBnaM vWa9dv2boyVKcPURvNe9x/TKY+UZ3fvLXk8+3w7+DgXBZq4EcHVT6UyWs11tVv6W mCJPFBLB/9s9UaWV8QsFPISi0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkZDLOV wI83hB8/9ju3mbpjIB0VMB8GA1UdIwQYMBaAFL97yvGQnBC8/qDY59RdglTyaca/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDFDNC8yQjJCM0M5RTFE NjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VMei1vTmpuMUYyQ1ZQSnB4 cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Yzdks4WkNjRUx6LW9Oam4xRjJDVlBKcHhyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDFDNC8yQjJCM0M5RTFENjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VM ei1vTmpuMUYyQ1ZQSnB4cjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZid2wFDVl772eLY9vvr4undiYUoS58E20eHSXxZbaoN9SC5alassz kEsow+Gy1ywBLRJA2yjk2T1FBYi5vudlYVU2+WBfXdeQKmlmWJ/0Bc8ORVvjL5AH tHQIuq2wubYeW0YHXIfb/VfAiDX3C+kWpm2roM6xuAXPpDRpLCPXC77FGN9q7ffm O3sEeDjYqSnXjX6LpiXAdRJ5PgAqjtw8rmKl5+48Yd0hsUi88tnDq36dlx1Hl9t+ yrcjOAHIrq8cBDvFDC6JCEipU/yoska2SzW7xe2fhqZOwMR0nBodFbC24ySz9vXw c5GXSMkU4or0u8XxWY5Prs/1R7goaNtu -----END CERTIFICATE-----Generated at Thu Sep 18 21:38:02 2025 by rpki-client