$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft File: rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json) Hash identifier: xijNI3ueN6lTDujM+LdidzyPZjjTLzSYOl+HRlCo3vs= Subject key identifier: 58:D9:C3:91:55:46:5B:02:73:B3:9E:39:57:99:A9:CA:AF:53:12:88 Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 Certificate issuer: /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft Manifest number: 0438 Signing time: Wed 17 Sep 2025 01:41:19 +0000 Manifest this update: Wed 17 Sep 2025 01:41:18 +0000 Manifest next update: Wed 24 Sep 2025 01:41:18 +0000 Files and hashes: 1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: rtPPQBmQx09OTaXu30wWF28I0O140Wn5/86zHa1+4TM=) 2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: tIDiP3hNqVNzA0IqRbP/SuZVvzepUKW2qtpK5KHsOYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Validity Not Before: Sep 17 01:41:18 2025 GMT Not After : Sep 24 01:41:18 2025 GMT Subject: CN=68ca11bf-3f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:38:22:88:69:8d:6c:83:a2:86:40:ba:c9: 6e:55:99:01:32:9c:cd:0a:08:65:14:3f:00:69:59: 31:a3:70:62:17:41:0d:67:e1:c1:a6:0f:50:f6:b9: 10:58:f1:03:6d:b7:06:0b:71:86:49:86:e9:ae:6b: be:91:78:55:e7:5d:49:97:0a:da:f8:61:5d:e9:e9: a8:96:75:fd:22:8d:1e:47:8c:56:6e:2e:fb:b9:91: fa:17:a9:d1:2b:ab:b4:46:56:54:66:86:47:a2:38: 13:31:9b:9b:96:af:c6:89:7a:39:9d:16:53:52:14: 88:cf:27:0e:b4:bf:19:3d:c6:e0:f1:b7:58:61:0f: 7b:f9:13:bf:46:d2:35:9d:94:83:bc:f8:b5:5b:41: 1c:0e:7c:8b:c8:70:2b:49:eb:95:72:3b:d7:cf:da: ef:51:85:96:2c:02:2c:6b:81:ae:f1:a2:15:d7:9c: a9:42:78:b1:b8:0a:22:75:ee:20:3b:b0:9f:1e:73: 36:19:51:2d:36:54:da:f1:c3:27:ba:62:0f:37:9f: b6:39:e3:00:4d:78:0e:2a:c4:ed:15:f4:80:39:51: d5:6a:58:ff:32:d6:54:2e:97:b3:67:15:9f:44:e7: af:ea:a8:6e:67:3c:78:8b:f5:e5:11:9d:e3:d4:59: 13:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D9:C3:91:55:46:5B:02:73:B3:9E:39:57:99:A9:CA:AF:53:12:88 X509v3 Authority Key Identifier: keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:65:30:1e:30:28:18:6d:9f:75:b9:5e:04:26:e1:02:41:a3: fd:ef:97:8a:cc:f6:d2:4f:18:40:9b:70:29:ae:8c:e1:d1:a9: 2c:e5:d3:dd:c3:83:97:07:e5:89:8f:1d:c7:22:f7:54:b0:a9: 6b:16:46:41:db:89:80:6f:0c:02:b2:36:e0:0a:4f:8d:49:9a: 79:1c:2b:16:7c:bd:39:33:2d:50:b8:e8:0b:37:09:c2:03:8c: 69:fa:0e:9a:44:61:18:fb:55:4c:c5:e1:a6:70:33:10:d2:7d: d8:39:bc:7a:6e:b9:54:53:2d:85:d5:fd:58:a9:64:3a:45:78: 8e:aa:cf:61:55:6d:5d:d9:fe:bf:0c:47:3a:eb:c9:0f:9e:56: 78:dc:6b:c6:d4:aa:98:5c:c8:48:d1:1b:e7:a0:06:9f:7a:7f: 0b:87:e0:64:50:55:de:39:0b:2f:05:2d:e9:7e:d9:ff:90:3b: a5:c0:7e:90:25:90:73:93:52:b1:d9:6f:a0:1c:0b:cd:a3:66: f0:90:65:2d:8e:a0:be:9e:08:c2:d7:db:4d:2c:6d:52:ce:0c: ba:a2:2b:ea:bb:99:07:2e:c9:44:25:74:7f:fc:3f:f6:89:23: f7:51:65:02:bf:14:be:22:ac:28:f5:13:2c:8b:27:65:28:91: a2:7e:ce:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKEFDNkEyMkYxRTRFMTY1MEFDRkI1Mjg5RjVEQ0I1RDUz OTIwRkNGMzQwHhcNMjUwOTE3MDE0MTE4WhcNMjUwOTI0MDE0MTE4WjAYMRYwFAYD VQQDEw02OGNhMTFiZi0zZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy344IohpjWyDooZAusluVZkBMpzNCghlFD8AaVkxo3BiF0ENZ+HBpg9Q9rkQ WPEDbbcGC3GGSYbprmu+kXhV511Jlwra+GFd6emolnX9Io0eR4xWbi77uZH6F6nR K6u0RlZUZoZHojgTMZublq/GiXo5nRZTUhSIzycOtL8ZPcbg8bdYYQ97+RO/RtI1 nZSDvPi1W0EcDnyLyHArSeuVcjvXz9rvUYWWLAIsa4Gu8aIV15ypQnixuAoide4g O7CfHnM2GVEtNlTa8cMnumIPN5+2OeMATXgOKsTtFfSAOVHValj/MtZULpezZxWf ROev6qhuZzx4i/XlEZ3j1FkT4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjZw5FV RlsCc7OeOVeZqcqvUxKIMB8GA1UdIwQYMBaAFKxqIvHk4WUKz7Uon13LXVOSD880 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpRclB0U2lmWGN0ZFU1SVB6 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHb2k4ZVRoWlFyUHRTaWZYY3RkVTVJUHp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpR clB0U2lmWGN0ZFU1SVB6elEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbZTAeMCgYbZ91uV4EJuECQaP975eKzPbSTxhAm3Aprozh0aks5dPd w4OXB+WJjx3HIvdUsKlrFkZB24mAbwwCsjbgCk+NSZp5HCsWfL05My1QuOgLNwnC A4xp+g6aRGEY+1VMxeGmcDMQ0n3YObx6brlUUy2F1f1YqWQ6RXiOqs9hVW1d2f6/ DEc668kPnlZ43GvG1KqYXMhI0RvnoAafen8Lh+BkUFXeOQsvBS3pftn/kDulwH6Q JZBzk1Kx2W+gHAvNo2bwkGUtjqC+ngjC19tNLG1Szgy6oivqu5kHLslEJXR//D/2 iSP3UWUCvxS+Iqwo9RMsiydlKJGifs6J -----END CERTIFICATE-----Generated at Thu Sep 18 20:34:44 2025 by rpki-client