$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json) Hash identifier: gta677e646KNAfKCCwbtiCTMO/4OiR4wSazyyNWvpQk= Subject key identifier: 58:C0:ED:BB:A0:A8:21:24:8A:FE:95:54:21:48:03:EF:6E:81:55:F9 Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 1936 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft Manifest number: 18FF Signing time: Thu 18 Sep 2025 16:36:15 +0000 Manifest this update: Thu 18 Sep 2025 16:36:14 +0000 Manifest next update: Thu 25 Sep 2025 16:36:14 +0000 Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: fXGelCkyJJwNdw2dkAAc4DfJr0y90h6rFvAesyJldm8=) 2: 1295ACC8511811F0BC16C641C4F9AE02.roa (hash: 84OKZziZJhzWPyx/Qu58m71qp96Ia8UIPI3npSmJSak=) 3: 4D12993446CC11F08EB9471AC4F9AE02.roa (hash: vbJhtFwjv9AiVVu2dZyRBj8FMJ3ESi6HyljVMBZDFwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6454 (0x1936) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Validity Not Before: Sep 18 16:36:14 2025 GMT Not After : Sep 25 16:36:14 2025 GMT Subject: CN=68cc34ff-8a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:54:7e:40:8c:4c:af:03:ae:41:92:2a:ac: ac:f5:3d:e0:ee:81:06:51:b6:24:d1:24:8b:68:bd: 47:cf:12:af:ca:64:7c:97:e9:d1:0a:20:3f:4d:4d: dd:29:52:c3:d0:0b:3f:fc:bb:3a:af:25:49:83:11: 5c:98:ac:df:d9:bc:6c:2d:82:2f:ef:6f:df:f4:fd: aa:e7:47:f4:d7:92:44:ff:12:88:eb:76:1c:fe:d7: 07:33:28:6c:d5:99:e0:25:11:fe:b4:1e:e4:d8:8e: d4:64:ed:f1:2e:28:d7:9a:71:a2:60:51:1c:bd:83: fd:45:ef:a7:17:63:2a:fd:24:dd:ae:de:d2:a3:94: 2a:ee:25:31:59:ff:d3:08:8d:f9:e8:f1:b0:94:7c: a6:e5:07:42:63:d2:2c:ca:2c:d2:42:fc:2c:0f:fc: cb:da:61:c8:bb:6c:30:94:c6:64:85:db:25:f2:bc: 05:8a:ba:9c:6d:61:f7:53:c8:f8:3a:0c:e0:e0:52: ed:85:f9:b9:67:15:81:52:d2:49:0c:ec:6d:3a:3d: f4:a8:49:3b:64:33:97:0b:64:24:b9:55:c9:5a:81: a1:ad:9b:99:f2:e0:25:6c:05:14:72:0a:28:39:ce: b7:40:c1:02:a7:55:d2:8a:63:a9:3e:ed:b4:7e:25: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C0:ED:BB:A0:A8:21:24:8A:FE:95:54:21:48:03:EF:6E:81:55:F9 X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:0e:e6:ea:5b:58:a4:38:99:96:be:52:05:14:59:5d:e9:50: 67:c8:7c:be:e1:16:ec:3c:6b:19:5d:cb:94:bb:72:50:01:a2: 66:5a:82:48:77:24:47:16:19:47:c7:9f:99:38:10:46:61:b5: b7:04:e7:36:30:00:da:ba:dc:f2:63:61:f2:7a:76:5b:82:cf: 77:63:a1:97:2d:e8:99:f9:bf:a5:a0:52:5d:07:88:98:3c:94: e5:5f:e1:17:be:4f:4e:fa:51:f2:02:fc:60:ce:62:51:ae:04: c4:e7:b1:fc:74:04:92:c2:96:7c:1f:fe:47:7d:c8:e0:02:25: 1f:ed:18:f9:63:6f:06:e1:e4:1f:cb:05:83:81:44:e8:a2:e8: aa:1a:4d:3c:c1:29:05:2c:aa:f7:52:d0:9d:60:76:fa:0b:24: e1:90:f8:8e:db:0d:b0:57:d0:f7:af:d8:cd:d8:cd:7b:88:1b: b0:ed:81:14:88:4f:f3:be:fe:5f:e2:d9:d4:46:b4:30:cf:a1: 63:7c:70:e1:33:f4:3e:a6:4c:68:7d:9b:40:b1:10:5c:a0:33: e0:13:15:5c:de:4f:2a:c3:1b:cd:f3:6b:56:ef:95:f8:a8:fa: 80:99:87:cc:fb:83:ca:81:e2:4d:97:5d:e5:07:e2:f9:cd:6e: 18:10:ca:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjUwOTE4MTYzNjE0WhcNMjUwOTI1MTYzNjE0WjAYMRYwFAYD VQQDEw02OGNjMzRmZi04YTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs01UfkCMTK8DrkGSKqys9T3g7oEGUbYk0SSLaL1HzxKvymR8l+nRCiA/TU3d KVLD0As//Ls6ryVJgxFcmKzf2bxsLYIv72/f9P2q50f015JE/xKI63Yc/tcHMyhs 1ZngJRH+tB7k2I7UZO3xLijXmnGiYFEcvYP9Re+nF2Mq/STdrt7So5Qq7iUxWf/T CI356PGwlHym5QdCY9IsyizSQvwsD/zL2mHIu2wwlMZkhdsl8rwFirqcbWH3U8j4 Ogzg4FLthfm5ZxWBUtJJDOxtOj30qEk7ZDOXC2QkuVXJWoGhrZuZ8uAlbAUUcgoo Oc63QMECp1XSimOpPu20fiU+qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjA7bug qCEkiv6VVCFIA+9ugVX5MB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTBFMy9EQTE4QjE4NDlBNDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3 WGpmNndBcGJlSWpsZjFIRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDDubqW1ikOJmWvlIFFFld6VBnyHy+4RbsPGsZXcuUu3JQAaJmWoJI dyRHFhlHx5+ZOBBGYbW3BOc2MADautzyY2HyenZbgs93Y6GXLeiZ+b+loFJdB4iY PJTlX+EXvk9O+lHyAvxgzmJRrgTE57H8dASSwpZ8H/5HfcjgAiUf7Rj5Y28G4eQf ywWDgUToouiqGk08wSkFLKr3UtCdYHb6CyThkPiO2w2wV9D3r9jN2M17iBuw7YEU iE/zvv5f4tnURrQwz6FjfHDhM/Q+pkxofZtAsRBcoDPgExVc3k8qwxvN82tW75X4 qPqAmYfM+4PKgeJNl13lB+L5zW4YEMoO -----END CERTIFICATE-----Generated at Thu Sep 18 23:49:13 2025 by rpki-client