$ rpki-client -vvf rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft File: 83GJVwUMS84UpOw46qzunHQkTE8.mft (raw, json) Hash identifier: 5OvZlUPNLXgPDWp3L0BHZMSQ6qQXOlwh+mkR2aWllUg= Subject key identifier: E2:4F:02:08:68:7E:F0:66:BE:FE:D7:62:1E:9A:24:6C:69:59:D0:2F Authority key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F Certificate issuer: /CN=A91426E8/serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft Manifest number: 3A Signing time: Wed 17 Sep 2025 08:18:35 +0000 Manifest this update: Wed 17 Sep 2025 08:18:35 +0000 Manifest next update: Wed 24 Sep 2025 08:18:35 +0000 Files and hashes: 1: 83GJVwUMS84UpOw46qzunHQkTE8.crl (hash: sEM2T2ldzr7VExYEfGngAijMFQZI1TUP+h1xxvmRqqI=) 2: F34C44FC3F7511F0A963EE11C4F9AE02.roa (hash: 0lT1AyOiOXe+BKO1a/7QwW0Ghznoxt7Inz7Ksh5dWQc=) 3: B240CFC23F8A11F0B3F03A67C4F9AE02.roa (hash: sM8LsbsoEf9GFMasQUHdxFdj0W4Z3+oN5Sb3It4tBgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F Validity Not Before: Sep 17 08:18:35 2025 GMT Not After : Sep 24 08:18:35 2025 GMT Subject: CN=68ca6edb-6f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:56:c8:ed:57:12:9a:c2:86:0c:1c:02:0c:4b: a3:dc:28:14:1c:d6:67:9c:8a:c5:df:a1:ff:2f:35: 06:95:81:02:eb:4e:50:cf:0f:29:e2:a4:d9:9b:4d: 69:ab:d2:78:c6:b8:da:97:52:f3:71:64:d8:16:ba: 41:a9:04:d3:a6:e3:81:ae:80:0d:eb:af:b7:fb:f9: d2:58:8a:c9:40:2d:1c:f2:14:fd:aa:2e:f3:5a:1c: eb:88:1f:e2:75:19:cb:70:66:ba:38:d5:30:78:77: ea:d1:3e:3c:07:43:79:13:48:83:0b:fc:e8:18:1c: f6:de:68:5f:70:9c:35:d2:e2:b2:10:b1:0b:ea:3a: 53:f6:aa:3f:a3:4d:77:b3:0d:94:ff:65:22:78:73: e5:ff:11:35:f1:a8:f7:de:db:fd:80:dc:0d:1c:51: 9b:df:00:90:3e:8f:44:ea:7a:69:6b:95:a6:2f:c2: f8:16:a8:a4:25:7b:20:0d:c6:16:2b:27:89:1a:6a: 87:64:72:0d:86:92:84:4e:44:b0:be:2b:14:3d:77: c3:b8:0b:d8:74:24:f2:d6:74:46:b7:1b:78:9e:39: ab:dc:de:34:0c:55:c7:56:ed:ef:35:e4:5d:01:d2: 89:2e:f3:1e:56:74:77:15:a8:92:e8:79:4d:9b:40: 66:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4F:02:08:68:7E:F0:66:BE:FE:D7:62:1E:9A:24:6C:69:59:D0:2F X509v3 Authority Key Identifier: keyid:F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e1:03:78:41:c0:c8:b3:57:a3:c7:d4:6d:37:77:f2:d1:87: a5:bc:11:03:09:f9:f4:6c:04:a4:e6:86:5a:26:39:34:04:49: 21:16:f1:21:a1:d1:49:68:c8:21:90:16:1e:fe:0b:9a:ae:80: 20:ed:65:1f:b7:0f:16:0c:3b:60:69:1b:e1:c9:4d:61:ae:ee: bc:8a:c1:90:b1:c1:07:96:dc:17:e6:bc:eb:10:04:40:5c:2a: b9:9b:c1:dc:c2:92:de:09:c3:d9:50:1f:cc:57:1c:16:2e:b4: 03:03:2a:26:cf:da:a9:63:42:88:c4:0a:33:b8:74:74:35:b7: f4:61:e6:14:9c:37:86:a5:8d:cc:21:3d:e9:e6:f5:25:2f:96: d5:29:5a:7b:84:93:c7:a8:10:9c:ab:5f:31:4a:f8:b9:5d:72: 57:dc:41:07:c4:0a:13:60:0f:18:4f:16:8f:d2:e5:0f:7b:66: 6a:ee:f8:a0:16:1a:f7:83:1d:e0:e5:c4:16:d8:82:b8:ba:a9: a6:d0:de:8d:76:b2:76:a5:a8:f1:92:a2:cd:c2:97:26:24:dc: 0c:be:27:65:5c:f9:fc:ec:0d:bf:95:be:f6:e0:a2:8d:e2:3c: 67:0a:50:33:74:8b:7f:58:8d:c9:42:d2:67:d3:84:68:8c:10: 34:9f:5a:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjZFODExMC8GA1UEBRMoRjM3MTg5NTcwNTBDNEJDRTE0QTRFQzM4RUFBQ0VFOUM3 NDI0NEM0RjAeFw0yNTA5MTcwODE4MzVaFw0yNTA5MjQwODE4MzVaMBgxFjAUBgNV BAMTDTY4Y2E2ZWRiLTZmOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZVsjtVxKawoYMHAIMS6PcKBQc1mecisXfof8vNQaVgQLrTlDPDynipNmbTWmr 0njGuNqXUvNxZNgWukGpBNOm44GugA3rr7f7+dJYislALRzyFP2qLvNaHOuIH+J1 GctwZro41TB4d+rRPjwHQ3kTSIML/OgYHPbeaF9wnDXS4rIQsQvqOlP2qj+jTXez DZT/ZSJ4c+X/ETXxqPfe2/2A3A0cUZvfAJA+j0TqemlrlaYvwvgWqKQleyANxhYr J4kaaodkcg2GkoRORLC+KxQ9d8O4C9h0JPLWdEa3G3ieOavc3jQMVcdW7e815F0B 0oku8x5WdHcVqJLoeU2bQGZjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4k8CCGh+ 8Ga+/tdiHpokbGlZ0C8wHwYDVR0jBBgwFoAU83GJVwUMS84UpOw46qzunHQkTE8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNkU4LzhENUFBMTdBM0Y3 NTExRjA5NjIzMkExMUM0RjlBRTAyLzgzR0pWd1VNUzg0VXBPdzQ2cXp1bkhRa1RF OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODNHSlZ3VU1TODRVcE93NDZxenVuSFFrVEU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NkU4LzhENUFBMTdBM0Y3NTExRjA5NjIzMkExMUM0RjlBRTAyLzgzR0pWd1VNUzg0 VXBPdzQ2cXp1bkhRa1RFOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfhA3hBwMizV6PH1G03d/LRh6W8EQMJ+fRsBKTmhlomOTQESSEW8SGh 0UloyCGQFh7+C5qugCDtZR+3DxYMO2BpG+HJTWGu7ryKwZCxwQeW3BfmvOsQBEBc KrmbwdzCkt4Jw9lQH8xXHBYutAMDKibP2qljQojECjO4dHQ1t/Rh5hScN4aljcwh Penm9SUvltUpWnuEk8eoEJyrXzFK+LldclfcQQfEChNgDxhPFo/S5Q97Zmru+KAW GveDHeDlxBbYgri6qabQ3o12snalqPGSos3ClyYk3Ay+J2Vc+fzsDb+Vvvbgoo3i PGcKUDN0i39YjclC0mfThGiMEDSfWtk= -----END CERTIFICATE-----Generated at Fri Sep 19 01:31:52 2025 by rpki-client