$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft File: 0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json) Hash identifier: HXOu/99TuLNWihBuuAZADpdxmDPI3JAMoECTVY2gc2M= Subject key identifier: 47:E8:76:EF:3A:9D:B2:35:AA:2F:26:ED:DE:06:9E:17:1F:2F:2A:71 Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 Certificate issuer: /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft Manifest number: 0183 Signing time: Thu 21 Aug 2025 03:40:22 +0000 Manifest this update: Thu 21 Aug 2025 03:40:22 +0000 Manifest next update: Thu 28 Aug 2025 03:40:22 +0000 Files and hashes: 1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: 6rU6eqpnq3hlWOa81zgD+GHG2hnqck53Xe/bV6hGEsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91402E0, serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Validity Not Before: Aug 21 03:40:22 2025 GMT Not After : Aug 28 03:40:22 2025 GMT Subject: CN=68a69526-5473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:cf:85:28:8b:4e:a3:5d:ff:49:f4:98:35: 77:7c:61:7f:fd:80:c4:0d:45:3b:0a:06:7e:be:e8: 68:f1:4d:e8:34:d2:1d:b6:96:67:84:7e:6e:9f:bc: 77:28:1a:21:7f:c9:5d:6a:68:cc:68:21:c8:c8:4d: 5f:59:91:65:53:48:0d:2a:0b:fd:25:4c:4e:e9:9e: 75:1e:1a:58:1a:db:4b:4e:7c:eb:31:fb:c8:bc:4c: d9:61:0c:8c:f1:a7:6c:6e:17:89:e6:cd:2c:58:d4: 3b:cb:8a:dd:7d:7f:bb:b2:39:d2:05:db:a9:3b:a4: 32:79:95:0b:ea:9b:43:25:59:28:af:d3:a9:87:1e: 88:b8:29:3e:77:e0:d2:97:bd:a7:b4:2e:46:58:86: 26:6e:0f:4f:ac:47:fe:06:ea:a8:91:27:f6:02:10: 7c:37:3d:25:72:cf:2c:e0:f2:55:71:7d:96:0a:de: 23:a6:ca:5d:a2:4a:72:7a:8e:63:b6:5d:37:40:56: 66:37:0f:7e:03:1e:dd:9f:19:12:92:07:8d:d1:54: be:d5:7f:67:bd:b7:7f:38:c6:67:ea:ae:d6:62:d9: 19:55:0d:5c:54:d5:bc:69:8b:25:a3:b1:ca:22:9e: 66:f3:29:55:18:ba:06:94:06:bd:40:6e:ff:82:a5: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E8:76:EF:3A:9D:B2:35:AA:2F:26:ED:DE:06:9E:17:1F:2F:2A:71 X509v3 Authority Key Identifier: keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:bb:e4:1a:6f:6a:bf:d0:22:25:00:2a:a6:e4:55:21:48:70: 5b:9e:51:0b:86:4f:7b:cb:64:ba:71:fe:65:e6:3b:34:59:07: 27:8a:ae:b1:17:9c:76:45:7f:d3:15:af:94:24:c1:26:41:9b: 34:50:1b:3f:78:95:40:a3:8b:1f:1f:bf:8c:de:16:f1:27:cd: 43:f2:c5:a8:c4:dc:d1:60:3a:d0:1c:1b:e7:97:e1:18:f2:b3: 28:63:89:02:2c:94:9b:97:7c:d2:97:45:45:44:39:52:f7:6f: b2:00:a4:66:49:6b:f7:6b:9a:58:04:3a:ed:7a:a6:ab:cd:50: 51:ad:f5:8c:7d:06:d6:09:af:22:96:eb:92:8c:6d:1d:21:56: 5c:72:ab:33:9f:1c:1b:21:95:86:6d:76:59:13:20:79:cd:47: 12:b7:32:bf:d1:ed:65:ec:79:44:75:c4:07:ee:32:a9:24:b9: 3b:4b:33:3e:0b:2c:b7:a3:db:bc:c7:2c:e8:62:24:00:4d:41: 07:c1:a0:c0:34:e1:8a:7f:7b:7c:cd:e4:57:15:f7:c7:71:1e: 16:3f:99:7c:23:76:de:64:93:c6:6c:a6:53:20:ac:24:bb:52: d1:c9:38:c7:0b:df:d0:9a:6f:b2:e3:65:a9:70:a5:2a:f5:86: 53:7b:b5:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyRTAxMTAvBgNVBAUTKEQzMTQ3RDhEMjdBOUFEMURDQjgyMzQ3RjE0NEIwODU1 RTA1NUUxQTAwHhcNMjUwODIxMDM0MDIyWhcNMjUwODI4MDM0MDIyWjAYMRYwFAYD VQQDEw02OGE2OTUyNi01NDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5TPhSiLTqNd/0n0mDV3fGF//YDEDUU7CgZ+vuho8U3oNNIdtpZnhH5un7x3 KBohf8ldamjMaCHIyE1fWZFlU0gNKgv9JUxO6Z51HhpYGttLTnzrMfvIvEzZYQyM 8adsbheJ5s0sWNQ7y4rdfX+7sjnSBdupO6QyeZUL6ptDJVkor9Ophx6IuCk+d+DS l72ntC5GWIYmbg9PrEf+BuqokSf2AhB8Nz0lcs8s4PJVcX2WCt4jpspdokpyeo5j tl03QFZmNw9+Ax7dnxkSkgeN0VS+1X9nvbd/OMZn6q7WYtkZVQ1cVNW8aYslo7HK Ip5m8ylVGLoGlAa9QG7/gqW1IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfodu86 nbI1qi8m7d4GnhcfLypxMB8GA1UdIwQYMBaAFNMUfY0nqa0dy4I0fxRLCFXgVeGg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJFMC9BQTZCRjQ0MDJC NTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJSM0xnalJfRkVzSVZlQlY0 YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4UjlqU2VwclIzTGdqUl9GRXNJVmVCVjRhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDJFMC9BQTZCRjQ0MDJCNTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJS M0xnalJfRkVzSVZlQlY0YUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1u+Qab2q/0CIlACqm5FUhSHBbnlELhk97y2S6cf5l5js0WQcniq6x F5x2RX/TFa+UJMEmQZs0UBs/eJVAo4sfH7+M3hbxJ81D8sWoxNzRYDrQHBvnl+EY 8rMoY4kCLJSbl3zSl0VFRDlS92+yAKRmSWv3a5pYBDrteqarzVBRrfWMfQbWCa8i luuSjG0dIVZccqsznxwbIZWGbXZZEyB5zUcStzK/0e1l7HlEdcQH7jKpJLk7SzM+ Cyy3o9u8xyzoYiQATUEHwaDANOGKf3t8zeRXFffHcR4WP5l8I3beZJPGbKZTIKwk u1LRyTjHC9/Qmm+y42WpcKUq9YZTe7Vi -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:19 2025 by rpki-client