$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft File: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json) Hash identifier: FtHJ/asXTLbW9rCt0rLy4kOAxv1iDSCfS2hsc1fTr6M= Subject key identifier: 4B:CA:DC:2C:E9:FA:2B:4E:2E:15:2F:ED:F2:3B:5B:90:0C:A0:D7:84 Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 Certificate issuer: /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft Manifest number: 67 Signing time: Tue 09 Sep 2025 07:10:16 +0000 Manifest this update: Tue 09 Sep 2025 07:10:15 +0000 Manifest next update: Tue 16 Sep 2025 07:10:15 +0000 Files and hashes: 1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: BxWXs4IHdJZzCWGNqx/4jOe3OihRtVGUFBfJdmz2iz4=) 2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: 5D2jjmxRmYaXjLCMnBDCQ4uD7aGag4RBTpQpYik03Wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Validity Not Before: Sep 9 07:10:15 2025 GMT Not After : Sep 16 07:10:15 2025 GMT Subject: CN=68bfd2d8-8436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:99:80:41:44:05:88:db:66:6e:3d:b8:c2:4f: fc:c6:eb:11:85:73:23:59:09:66:09:dd:ec:0d:ed: 9c:e4:da:c6:99:32:c7:c7:9d:fb:35:9f:59:94:37: 8b:55:04:c0:59:d1:11:e5:65:74:95:8a:7a:70:df: a1:f2:4d:83:35:21:24:03:05:73:77:bf:ce:7f:fb: 24:e7:c3:e2:e5:d3:b0:61:57:6c:d9:0e:74:f1:b2: b4:a9:a1:d3:8b:69:d5:46:73:a0:c8:97:4a:17:4b: aa:de:ac:30:66:07:16:be:9a:67:3e:3f:fb:48:b0: f4:8c:28:96:37:0a:26:f8:ed:90:db:aa:79:28:a3: 77:d7:37:cb:85:eb:80:5c:cc:b3:38:db:d8:54:29: 16:5e:d3:8c:67:cc:85:6b:36:af:74:08:ac:40:35: 11:62:da:35:e3:74:0b:15:a9:c3:0f:0d:f8:67:87: 2d:0f:4a:2e:46:65:fa:46:3f:ea:18:f8:39:cd:1e: 0c:52:97:b3:59:3d:d4:10:09:bf:89:34:ab:48:ee: 62:ae:76:30:c6:e0:91:ed:a9:b3:bd:5d:5c:e6:66: be:6c:e9:e9:db:82:34:46:39:94:47:5b:8a:9e:45: 63:02:1d:c7:33:25:d6:38:76:11:6b:44:71:ad:5c: c1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CA:DC:2C:E9:FA:2B:4E:2E:15:2F:ED:F2:3B:5B:90:0C:A0:D7:84 X509v3 Authority Key Identifier: keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4d:0f:bf:2a:a1:66:83:c2:33:3f:b0:5f:67:d0:a7:7c:d9: 83:f9:08:fe:4b:7c:15:54:19:06:4a:7b:bd:da:59:ec:cb:25: c9:e6:7d:4c:38:8f:35:37:4d:e6:5f:02:b3:a0:54:09:1a:a8: 90:e8:e3:f4:dd:23:8a:d3:4e:ee:d3:12:5a:28:74:41:30:75: c5:43:85:76:8f:1a:9d:7b:dc:27:62:50:90:62:ed:16:ce:ea: 7e:19:1a:1a:7d:09:1d:e3:19:59:3f:8e:f6:31:44:ee:bd:68: b8:8d:91:3c:4b:ef:90:5d:b9:26:17:a9:61:82:34:1b:37:a0: 62:2b:dd:05:d4:16:12:6d:df:26:71:f9:3a:ab:e2:65:7e:5e: 81:5a:3e:9d:bc:33:38:74:48:1c:1b:f4:e8:81:ad:6d:57:c6: e8:c7:2e:56:4d:13:9d:78:0a:1c:5b:aa:e6:ab:c9:07:39:82: 65:11:a3:78:ae:f4:52:47:82:31:eb:06:74:47:b5:9a:51:78: 80:35:1d:bb:c1:5d:1d:e6:a7:be:7a:cd:c4:13:74:f5:8e:91: 90:06:dc:78:8c:fe:82:fd:fd:9f:01:f3:21:d8:da:c3:2f:aa: 56:07:49:13:c6:a0:e2:0e:6e:c4:d4:b1:ce:08:3a:7b:35:76: 45:75:c0:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MThDNzExMC8GA1UEBRMoRTM2OTI5MEZENzE5RTNFNDk4N0Q3MTlBNzNCMUVDNzdB QUFGNDlCNjAeFw0yNTA5MDkwNzEwMTVaFw0yNTA5MTYwNzEwMTVaMBgxFjAUBgNV BAMTDTY4YmZkMmQ4LTg0MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0mYBBRAWI22ZuPbjCT/zG6xGFcyNZCWYJ3ewN7Zzk2saZMsfHnfs1n1mUN4tV BMBZ0RHlZXSVinpw36HyTYM1ISQDBXN3v85/+yTnw+Ll07BhV2zZDnTxsrSpodOL adVGc6DIl0oXS6rerDBmBxa+mmc+P/tIsPSMKJY3Cib47ZDbqnkoo3fXN8uF64Bc zLM429hUKRZe04xnzIVrNq90CKxANRFi2jXjdAsVqcMPDfhnhy0PSi5GZfpGP+oY +DnNHgxSl7NZPdQQCb+JNKtI7mKudjDG4JHtqbO9XVzmZr5s6enbgjRGOZRHW4qe RWMCHcczJdY4dhFrRHGtXMGbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS8rcLOn6 K04uFS/t8jtbkAyg14QwHwYDVR0jBBgwFoAU42kpD9cZ4+SYfXGac7Hsd6qvSbYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxOEM3L0Y5MzAwMUI2RjhD RjExRUY4MkQ4RDUyQkM0RjlBRTAyLzQya3BEOWNaNC1TWWZYR2FjN0hzZDZxdlNi WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNDJrcEQ5Y1o0LVNZZlhHYWM3SHNkNnF2U2JZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx OEM3L0Y5MzAwMUI2RjhDRjExRUY4MkQ4RDUyQkM0RjlBRTAyLzQya3BEOWNaNC1T WWZYR2FjN0hzZDZxdlNiWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAExND78qoWaDwjM/sF9n0Kd82YP5CP5LfBVUGQZKe73aWezLJcnmfUw4 jzU3TeZfArOgVAkaqJDo4/TdI4rTTu7TEloodEEwdcVDhXaPGp173CdiUJBi7RbO 6n4ZGhp9CR3jGVk/jvYxRO69aLiNkTxL75BduSYXqWGCNBs3oGIr3QXUFhJt3yZx +Tqr4mV+XoFaPp28Mzh0SBwb9OiBrW1XxujHLlZNE514ChxbquaryQc5gmURo3iu 9FJHgjHrBnRHtZpReIA1HbvBXR3mp756zcQTdPWOkZAG3HiM/oL9/Z8B8yHY2sMv qlYHSRPGoOIObsTUsc4IOns1dkV1wOM= -----END CERTIFICATE-----Generated at Tue Sep 9 17:26:39 2025 by rpki-client