$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft File: D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json) Hash identifier: n5rvjmplbnj+oxMnhhUCHe6nyx17pAPrJPluZpwpMBY= Subject key identifier: 0A:41:B8:72:73:9B:A3:42:69:A7:A4:41:A1:E4:C2:55:13:A6:0E:D0 Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 Certificate issuer: /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft Manifest number: 41 Signing time: Wed 17 Sep 2025 08:11:23 +0000 Manifest this update: Wed 17 Sep 2025 08:11:23 +0000 Manifest next update: Wed 24 Sep 2025 08:11:23 +0000 Files and hashes: 1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: LijDxqpFDEYkRhQwy5Xw9u3M2ifuxEwoiDp/qfoyR/Q=) 2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: C2osSUSGXaoVQWIdcbrfsnLCIsFQre/GUrWQUTRuHn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Validity Not Before: Sep 17 08:11:23 2025 GMT Not After : Sep 24 08:11:23 2025 GMT Subject: CN=68ca6d2b-db7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:28:02:23:77:37:ef:b4:b3:13:25:a2:c6:f0: b3:c7:ac:c4:ad:a4:3b:c5:e3:71:c1:63:10:5d:20: b4:81:ba:47:96:e1:d9:bf:09:90:2f:4c:85:58:41: 13:dc:b6:1f:7b:27:e0:35:f0:af:5e:75:3f:b1:0b: 6b:4a:f5:92:7c:d9:73:d9:9d:16:2d:a4:9d:a5:78: a5:18:d2:e4:6b:93:2c:48:f8:9e:6a:6f:e5:ea:e8: 1a:41:a5:dc:eb:f6:0b:c9:0a:2b:33:3b:12:c4:27: ab:3e:42:17:cc:5c:ee:5a:31:81:f2:e0:6b:51:e4: 63:27:66:eb:23:bf:02:a8:6a:df:d7:43:05:7f:2b: d8:07:68:cf:08:43:57:a0:b4:e4:15:a4:dc:15:5c: 2c:b2:26:60:66:cb:a0:8e:77:d3:6d:1c:e4:a5:fe: 5f:68:12:ec:89:0e:c3:6a:c2:d3:c3:23:76:25:54: 5a:cc:c3:4c:2c:a6:2c:62:a7:a7:d9:0f:8b:9d:8f: 89:cd:a8:89:c2:c2:d8:4c:44:9b:21:24:16:85:46: e0:67:b4:38:41:af:31:ea:2b:ad:90:ea:ee:63:4f: a9:4b:e3:1a:34:2c:f3:22:fc:de:2b:28:83:33:de: 1a:64:60:19:66:f0:51:2a:2d:d5:14:01:ad:0c:5e: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:41:B8:72:73:9B:A3:42:69:A7:A4:41:A1:E4:C2:55:13:A6:0E:D0 X509v3 Authority Key Identifier: keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:be:4d:dd:c1:20:e5:74:e0:37:a3:4f:e2:04:e8:09:52:7d: c8:f5:ec:fe:27:d5:28:02:d6:59:9a:36:b9:01:6b:ae:7c:f4: de:a7:20:69:be:31:54:5f:ec:e5:47:ad:61:24:16:ae:5f:0f: 99:28:a9:78:de:a5:f9:d1:c8:91:34:48:df:bd:e5:df:6e:fb: 52:0f:88:a8:d3:25:e7:e7:e0:6b:95:ca:77:70:ed:5d:9e:ef: 46:47:47:f0:eb:f2:5a:f4:07:e0:ce:24:b7:85:70:35:ce:34: 83:44:f1:a2:11:8a:60:fa:06:6c:f7:ec:6d:28:a9:6d:48:2c: 94:a8:c7:89:87:a7:53:12:da:ab:39:ed:f4:37:93:5a:9e:6e: 06:f4:54:16:77:fb:56:97:83:af:88:66:0a:2f:47:27:d2:06: 92:06:4b:e5:68:57:75:06:b2:28:f1:b2:2c:c3:a6:a7:5f:e9: 64:14:56:40:3b:42:34:c8:f7:be:08:6e:2b:cf:28:75:d5:2f: 86:ce:bc:3a:68:91:7e:ce:0e:90:7b:1a:6a:95:37:2a:16:cc: f3:1a:e1:23:4f:63:0a:29:6e:86:25:43:b0:60:2b:f9:70:36: ac:6c:24:58:bf:e6:2b:85:45:0d:2d:3a:20:81:65:53:45:ac: 7d:91:c5:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTZDRjExMC8GA1UEBRMoMEZGRjcxNzk4MkQ5RTFEOTZGNEQ3RkM1MzExRUQzMjMy MzZCQTA5MzAeFw0yNTA5MTcwODExMjNaFw0yNTA5MjQwODExMjNaMBgxFjAUBgNV BAMTDTY4Y2E2ZDJiLWRiN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEKAIjdzfvtLMTJaLG8LPHrMStpDvF43HBYxBdILSBukeW4dm/CZAvTIVYQRPc th97J+A18K9edT+xC2tK9ZJ82XPZnRYtpJ2leKUY0uRrkyxI+J5qb+Xq6BpBpdzr 9gvJCiszOxLEJ6s+QhfMXO5aMYHy4GtR5GMnZusjvwKoat/XQwV/K9gHaM8IQ1eg tOQVpNwVXCyyJmBmy6COd9NtHOSl/l9oEuyJDsNqwtPDI3YlVFrMw0wspixip6fZ D4udj4nNqInCwthMRJshJBaFRuBntDhBrzHqK62Q6u5jT6lL4xo0LPMi/N4rKIMz 3hpkYBlm8FEqLdUUAa0MXr8pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCkG4cnOb o0Jpp6RBoeTCVROmDtAwHwYDVR0jBBgwFoAUD/9xeYLZ4dlvTX/FMR7TIyNroJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NkNGLzAxMzkzNDk2MzEy RDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRsdlRYX0ZNUjdUSXlOcm9K TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRF85eGVZTFo0ZGx2VFhfRk1SN1RJeU5yb0pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NkNGLzAxMzkzNDk2MzEyRDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRs dlRYX0ZNUjdUSXlOcm9KTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK++Td3BIOV04DejT+IE6AlSfcj17P4n1SgC1lmaNrkBa6589N6nIGm+ MVRf7OVHrWEkFq5fD5koqXjepfnRyJE0SN+95d9u+1IPiKjTJefn4GuVyndw7V2e 70ZHR/Dr8lr0B+DOJLeFcDXONINE8aIRimD6Bmz37G0oqW1ILJSox4mHp1MS2qs5 7fQ3k1qebgb0VBZ3+1aXg6+IZgovRyfSBpIGS+VoV3UGsijxsizDpqdf6WQUVkA7 QjTI974IbivPKHXVL4bOvDpokX7ODpB7GmqVNyoWzPMa4SNPYwopboYlQ7BgK/lw NqxsJFi/5iuFRQ0tOiCBZVNFrH2RxZw= -----END CERTIFICATE-----Generated at Fri Sep 19 02:28:49 2025 by rpki-client