$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json) Hash identifier: TD35/yCFTDRiyxsucL7huMTjuPqBrcqjSEaEKBvvk4w= Subject key identifier: 25:EF:23:E4:49:51:42:5E:4A:8F:E6:E2:63:61:5E:3F:C2:7A:63:DA Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Certificate serial: 0CED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft Manifest number: 0CD8 Signing time: Mon 08 Sep 2025 18:08:37 +0000 Manifest this update: Mon 08 Sep 2025 18:08:36 +0000 Manifest next update: Mon 15 Sep 2025 18:08:36 +0000 Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: cA7OY+g9Rui9SBwVisJZ2eOe6xdbHpC30MYzkoTWJ40=) 2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: vuIx5uN5ZZTHGHOWV+i45uzSngomzzsL58ntfcnGCEs=) 3: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: eD8TajPOjrIE4f1nFZu3J+ZWCoHsnqirX9VK+G/Tflw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3309 (0xced) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Validity Not Before: Sep 8 18:08:36 2025 GMT Not After : Sep 15 18:08:36 2025 GMT Subject: CN=68bf1ba4-9ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:ce:ae:6f:7f:1e:4f:25:dd:7b:1d:2a:26: 72:24:34:d0:37:10:d4:f5:78:1f:3f:f3:cb:5d:03: 59:7e:62:82:1c:05:96:d9:47:66:da:12:81:2b:42: 70:62:13:82:77:c8:f9:93:eb:d0:58:a2:bb:9a:24: c6:70:46:f4:77:13:c0:35:be:57:03:f1:e0:3b:f1: 7d:ec:4b:21:99:e0:1f:21:0c:ed:4f:3b:5c:a1:15: 27:bb:86:ef:e2:5d:d5:29:bc:23:57:bf:c1:ee:35: 78:3d:1a:45:d8:49:31:35:0e:82:d7:a1:f3:aa:f4: b3:81:aa:e7:86:9f:07:27:53:5c:c9:e1:43:f6:0b: 07:91:ed:27:07:ba:ad:0f:50:ab:27:9e:e3:78:23: 8c:36:c6:e6:63:bc:d3:d2:81:2f:d6:c8:77:ff:2a: ba:82:bf:dd:96:8f:7b:f8:43:d6:ae:ba:e5:a4:12: 40:70:05:33:f0:e0:16:38:5f:23:75:e2:cb:ea:c5: eb:ff:5f:6b:e3:91:ac:2c:2b:66:37:57:5a:7f:5c: 55:aa:e2:6c:2c:a0:73:5d:14:d6:75:fd:fc:32:c7: 87:99:7d:9e:80:64:4e:b8:37:54:3f:4a:0c:bc:80: 7b:18:8b:2b:15:07:7b:fe:fc:8a:03:8c:ee:c5:aa: 49:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EF:23:E4:49:51:42:5E:4A:8F:E6:E2:63:61:5E:3F:C2:7A:63:DA X509v3 Authority Key Identifier: keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:29:6f:e9:a9:95:bc:3f:73:d9:46:09:21:3b:63:f2:c4:2e: bd:50:fc:a4:3b:6e:bc:85:81:73:aa:84:5a:99:b1:17:aa:7e: 96:02:4f:1b:ed:05:3e:92:60:66:2b:0a:e6:96:b8:87:77:76: 47:0a:ac:38:b6:46:83:c3:08:a0:0a:4c:9d:43:d7:ee:39:dc: c0:69:6d:9a:5a:6e:65:63:75:bd:ea:af:d0:34:55:b3:2b:e0: ea:d5:98:51:56:38:e1:d8:d4:e2:1d:65:0e:46:fb:91:38:b6: 3c:34:92:a6:23:2a:33:ea:61:33:9b:6e:a8:4a:58:52:83:52: 3c:53:13:1c:0b:1a:3f:36:ac:2a:66:3e:d8:88:b3:bf:4a:bc: 5a:63:0c:b4:a3:ed:b6:c2:ac:c5:e7:86:0b:49:bd:8c:07:0b: cf:69:a0:30:f1:b9:ae:df:4b:9a:89:da:27:80:74:ed:b0:7a: 0e:fc:79:b0:ae:35:52:52:a4:5b:08:32:c1:f3:f0:54:7e:4a: 2c:5c:b3:bc:d7:4a:88:09:ab:a7:39:11:e7:c9:db:35:d2:41: 96:d3:a7:ff:0d:27:94:7a:fe:1a:aa:d3:99:8d:35:48:9b:ce: b3:66:5c:c1:e9:ad:cf:0d:2c:a1:b3:57:85:e2:73:ba:a9:87: 2c:55:b6:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDczRjgxMTAvBgNVBAUTKDBCRjJCNTk0NEMzQTJDQ0FCNkMxRDEyQkMzNkE1QUYz QzJEQ0Y3N0YwHhcNMjUwOTA4MTgwODM2WhcNMjUwOTE1MTgwODM2WjAYMRYwFAYD VQQDEw02OGJmMWJhNC05ZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6rOrm9/Hk8l3XsdKiZyJDTQNxDU9XgfP/PLXQNZfmKCHAWW2Udm2hKBK0Jw YhOCd8j5k+vQWKK7miTGcEb0dxPANb5XA/HgO/F97EshmeAfIQztTztcoRUnu4bv 4l3VKbwjV7/B7jV4PRpF2EkxNQ6C16HzqvSzgarnhp8HJ1NcyeFD9gsHke0nB7qt D1CrJ57jeCOMNsbmY7zT0oEv1sh3/yq6gr/dlo97+EPWrrrlpBJAcAUz8OAWOF8j deLL6sXr/19r45GsLCtmN1daf1xVquJsLKBzXRTWdf38MseHmX2egGROuDdUP0oM vIB7GIsrFQd7/vyKA4zuxapJbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXvI+RJ UUJeSo/m4mNhXj/CemPaMB8GA1UdIwQYMBaAFAvytZRMOizKtsHRK8NqWvPC3Pd/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzNGOC80QjQ1NkM4OEYz NjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxNcTJ3ZEVydzJwYTg4TGM5 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NfSzFsRXc2TE1xMndkRXJ3MnBhODhMYzkzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzNGOC80QjQ1NkM4OEYzNjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxN cTJ3ZEVydzJwYTg4TGM5MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtKW/pqZW8P3PZRgkhO2PyxC69UPykO268hYFzqoRambEXqn6WAk8b 7QU+kmBmKwrmlriHd3ZHCqw4tkaDwwigCkydQ9fuOdzAaW2aWm5lY3W96q/QNFWz K+Dq1ZhRVjjh2NTiHWUORvuROLY8NJKmIyoz6mEzm26oSlhSg1I8UxMcCxo/Nqwq Zj7YiLO/SrxaYwy0o+22wqzF54YLSb2MBwvPaaAw8bmu30uaidongHTtsHoO/Hmw rjVSUqRbCDLB8/BUfkosXLO810qICaunORHnyds10kGW06f/DSeUev4aqtOZjTVI m86zZlzB6a3PDSyhs1eF4nO6qYcsVbZP -----END CERTIFICATE-----Generated at Tue Sep 9 13:24:31 2025 by rpki-client