$ rpki-client -vvf rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft File: D0a9vHSQTl34KfAVlbUcqqIBuds.mft (raw, json) Hash identifier: tMWSm7mJxtkxZB0Fcr748/eVqGkpHht6IuVW/riPU4M= Subject key identifier: 92:90:02:D6:E1:F7:31:30:45:F7:2C:EC:35:A7:D7:0C:7C:65:4E:1D Authority key identifier: 0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB Certificate issuer: /CN=A91449E2/serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft Manifest number: 01BB Signing time: Fri 19 Sep 2025 03:30:08 +0000 Manifest this update: Fri 19 Sep 2025 03:30:07 +0000 Manifest next update: Fri 26 Sep 2025 03:30:07 +0000 Files and hashes: 1: D0a9vHSQTl34KfAVlbUcqqIBuds.crl (hash: uARki1lyQsbiel3kakLrVPQFvuaw3uXBuF4MSKFrnGI=) 2: 568D8AACF00511ED9239BC6EC4F9AE02.roa (hash: INPCDc0DcqgC408Ka6XEyt5LGDqlBDYRzaUMMyrzKIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449E2, serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Validity Not Before: Sep 19 03:30:07 2025 GMT Not After : Sep 26 03:30:07 2025 GMT Subject: CN=68ccce40-eb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:da:97:fc:ac:03:e0:d2:d7:9c:a2:02:bb: 4d:f6:a2:10:28:15:f8:5d:b9:af:17:4d:cc:7a:ac: 7e:a8:4b:fd:f9:3e:4b:30:e1:5a:94:2d:bc:1a:5b: 06:4e:f4:d5:db:a6:97:a5:bc:3f:d5:4d:f4:34:10: b4:17:82:11:9b:95:be:ea:c2:99:2a:fe:4b:de:87: 58:fe:e7:b4:4a:db:37:47:18:fb:fa:fb:c2:be:93: 64:86:44:98:76:85:29:bd:7c:f0:33:56:89:63:99: 94:a7:2f:fb:b5:b1:33:e4:d9:7e:0d:e9:65:7f:08: 0c:2f:75:1a:67:8c:7e:76:23:b9:ad:cb:40:24:01: da:d9:86:01:64:bf:5c:f0:ed:85:fa:06:1b:15:5c: c5:8d:d4:a1:32:6e:70:fa:0f:93:8e:09:21:6e:f1: 77:a8:ca:10:b2:f8:9a:5d:58:8c:ce:c3:b8:6a:23: 32:cb:40:ff:53:d7:6f:af:48:d5:ff:c1:47:bd:cc: d8:77:c3:c6:bf:96:7d:97:d6:03:67:71:bf:85:32: 7f:81:ad:c7:74:82:f0:1a:bd:53:94:28:a9:33:e3: 84:ac:5b:dc:3c:86:08:37:d8:1f:01:9e:5a:ca:bc: bc:51:8c:83:a5:8b:88:e4:49:28:ca:df:26:e6:43: 0a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:90:02:D6:E1:F7:31:30:45:F7:2C:EC:35:A7:D7:0C:7C:65:4E:1D X509v3 Authority Key Identifier: keyid:0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:e3:6d:56:00:d1:fb:2f:b5:ae:61:a1:a5:7f:24:4a:5f:55: 3d:18:99:ef:0d:c0:86:4c:11:f3:7e:39:ef:a6:37:d7:0f:cf: 69:5b:18:72:70:22:9f:f1:a4:fb:a5:28:43:4a:12:d5:f3:bc: 83:22:0b:3e:58:d2:1b:bb:84:83:19:41:3a:d9:84:4c:51:a7: e0:6c:8b:88:9b:9e:3b:ef:55:f9:c8:c3:26:db:4e:b8:a4:fe: b9:09:81:78:72:60:7f:fe:ec:77:dc:ed:ec:91:37:e8:95:e4: 45:a7:69:e4:cc:4a:dd:77:a6:ff:78:82:13:d2:8f:1b:c1:72: 89:36:bc:bc:1a:34:9d:4e:3e:2f:f2:a0:52:1a:eb:3c:58:a5: 1e:8f:a4:59:19:83:7d:8a:7c:48:1f:51:39:1e:90:a5:84:f6: 8f:5f:54:cb:b3:8f:c0:ff:5b:ac:a4:3b:3d:dc:8a:5b:0e:70: ce:84:d1:f4:92:a4:7f:be:3e:40:8d:b5:ef:97:f6:aa:ac:e5: 06:63:df:49:6d:26:f2:94:f0:53:d5:71:64:53:69:06:9b:d7: 98:46:24:91:67:db:e4:29:59:37:58:40:c0:2a:b0:9c:cd:65: 83:2f:e1:27:35:99:d2:17:b0:5a:33:fe:3d:58:67:f8:db:d5: 58:0b:4d:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5RTIxMTAvBgNVBAUTKDBGNDZCREJDNzQ5MDRFNURGODI5RjAxNTk1QjUxQ0FB QTIwMUI5REIwHhcNMjUwOTE5MDMzMDA3WhcNMjUwOTI2MDMzMDA3WjAYMRYwFAYD VQQDEw02OGNjY2U0MC1lYjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthLal/ysA+DS15yiArtN9qIQKBX4XbmvF03Meqx+qEv9+T5LMOFalC28GlsG TvTV26aXpbw/1U30NBC0F4IRm5W+6sKZKv5L3odY/ue0Sts3Rxj7+vvCvpNkhkSY doUpvXzwM1aJY5mUpy/7tbEz5Nl+DellfwgML3UaZ4x+diO5rctAJAHa2YYBZL9c 8O2F+gYbFVzFjdShMm5w+g+TjgkhbvF3qMoQsviaXViMzsO4aiMyy0D/U9dvr0jV /8FHvczYd8PGv5Z9l9YDZ3G/hTJ/ga3HdILwGr1TlCipM+OErFvcPIYIN9gfAZ5a yry8UYyDpYuI5Ekoyt8m5kMKtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKQAtbh 9zEwRfcs7DWn1wx8ZU4dMB8GA1UdIwQYMBaAFA9Gvbx0kE5d+CnwFZW1HKqiAbnb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlFMi9CNjQ0MzM4NEVG RkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRsMzRLZkFWbGJVY3FxSUJ1 ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QwYTl2SFNRVGwzNEtmQVZsYlVjcXFJQnVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlFMi9CNjQ0MzM4NEVGRkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRs MzRLZkFWbGJVY3FxSUJ1ZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDm421WANH7L7WuYaGlfyRKX1U9GJnvDcCGTBHzfjnvpjfXD89pWxhy cCKf8aT7pShDShLV87yDIgs+WNIbu4SDGUE62YRMUafgbIuIm54771X5yMMm2064 pP65CYF4cmB//ux33O3skTfoleRFp2nkzErdd6b/eIIT0o8bwXKJNry8GjSdTj4v 8qBSGus8WKUej6RZGYN9inxIH1E5HpClhPaPX1TLs4/A/1uspDs93IpbDnDOhNH0 kqR/vj5AjbXvl/aqrOUGY99JbSbylPBT1XFkU2kGm9eYRiSRZ9vkKVk3WEDAKrCc zWWDL+EnNZnSF7BaM/49WGf429VYC01v -----END CERTIFICATE-----Generated at Fri Sep 19 06:56:49 2025 by rpki-client