$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json) Hash identifier: VhfUBRgoLIJ5Fc4Fa1BzP73IB1KkoCJ4a7ciPzS+LLs= Subject key identifier: 27:FC:35:43:A5:6E:FC:23:29:72:A4:63:98:B9:3B:5F:CC:1A:98:80 Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft Manifest number: 0157 Signing time: Sun 07 Sep 2025 04:38:50 +0000 Manifest this update: Sun 07 Sep 2025 04:38:49 +0000 Manifest next update: Sun 14 Sep 2025 04:38:49 +0000 Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: LMCEdbxZtE24Vu4DFwEvf6ClL+9cU2IG33+7545N/Eg=) 2: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: H7JonSUtz6tgIVuXpEGUpFZ7fUQBIkEHbO/Cd9DHtNo=) 3: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: j/6dClTGKIF6Y0W3OQ8vmv5qC35aQkMZjQK9N8GGPFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Validity Not Before: Sep 7 04:38:49 2025 GMT Not After : Sep 14 04:38:49 2025 GMT Subject: CN=68bd0c5a-b211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:32:56:4b:fa:fb:15:92:7a:d2:ef:2c:ba: 9f:57:74:3b:76:c6:28:49:19:e4:dc:df:34:de:a6: 01:e2:c4:14:23:19:d5:14:de:22:01:61:96:2d:70: 34:d0:21:c5:c1:6d:83:4b:23:eb:40:ab:ee:95:55: cd:c0:29:50:2e:54:30:79:f5:4b:50:43:25:75:82: 00:63:cb:e7:cd:16:a4:30:98:8f:67:59:02:83:ae: 31:9b:d5:3c:d1:6b:be:26:23:33:c3:b7:1d:4a:e2: ac:9c:ca:ab:c3:50:5d:e0:b4:a1:5b:8d:ee:f3:69: 1c:3f:78:54:4b:b9:97:cd:22:ec:68:8a:29:30:36: 47:3c:ed:59:26:4e:e1:28:d1:ed:31:d8:8f:f3:95: d4:98:20:07:81:c5:94:4c:77:05:96:90:5e:1e:bb: 8c:fb:37:63:24:3c:62:87:79:31:f9:67:e1:f2:82: 16:f0:46:38:83:43:1e:79:70:c4:cb:eb:eb:e2:51: ac:bb:5c:ba:a7:58:9c:39:4c:9c:80:ee:4c:f9:7f: 99:63:fe:40:78:4d:05:8d:95:0e:cb:04:13:b1:a4: 20:f6:bf:8f:ce:1d:51:2f:31:26:ed:48:b8:7d:e7: 92:cd:74:b7:06:bf:12:1f:7d:b3:63:a3:52:44:f4: fb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FC:35:43:A5:6E:FC:23:29:72:A4:63:98:B9:3B:5F:CC:1A:98:80 X509v3 Authority Key Identifier: keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c7:1e:6b:f9:f1:eb:69:6e:91:69:ce:d6:d4:cb:64:82:f9: d4:d3:40:0f:95:48:68:4a:1b:6c:2d:82:4c:f9:a5:8e:2d:77: 70:f5:2e:2f:59:c2:4f:14:e5:b8:b2:e8:0d:ba:f0:e3:ee:01: 61:de:51:0a:8b:f9:d4:2e:1c:ad:e5:7d:54:b7:b0:c4:c7:c9: 43:80:4e:5b:ba:d6:e5:75:f5:93:35:10:1d:9d:5e:f2:00:5b: 1a:e6:61:80:92:a6:73:c7:94:6b:2f:3a:97:d1:c4:d9:c3:52: 27:18:2d:ee:4b:fc:0a:92:4b:10:f0:f7:bf:36:c6:ff:03:34: bd:55:d9:49:7f:c1:61:44:15:53:ac:5a:59:8d:40:f2:6b:91: 2e:29:99:93:59:7e:de:2d:6b:64:df:5e:f6:33:05:a4:61:4c: 82:8e:b8:be:48:ae:65:77:d2:56:67:3e:61:7f:ef:39:21:dc: c5:a3:a5:b9:6e:d7:ba:39:e0:fa:79:aa:c4:ea:1a:5d:f9:c2: 97:a5:20:c1:b5:ae:29:fe:ad:9f:91:55:1e:0e:0f:a0:c8:37: 71:be:9d:7e:d2:e0:bc:fa:32:6e:ba:81:5f:6f:ae:a7:56:d2: 55:bc:eb:e8:56:ae:4b:63:f1:2b:70:81:f9:79:1d:7a:f1:d6: a5:14:d8:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1REIxMTAvBgNVBAUTKDdCRTIzMDE1M0NGRjkwMDE2NDJEQkM5QjI0Rjg1RDBD QzI4MjM2NEUwHhcNMjUwOTA3MDQzODQ5WhcNMjUwOTE0MDQzODQ5WjAYMRYwFAYD VQQDEw02OGJkMGM1YS1iMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlsyVkv6+xWSetLvLLqfV3Q7dsYoSRnk3N803qYB4sQUIxnVFN4iAWGWLXA0 0CHFwW2DSyPrQKvulVXNwClQLlQwefVLUEMldYIAY8vnzRakMJiPZ1kCg64xm9U8 0Wu+JiMzw7cdSuKsnMqrw1Bd4LShW43u82kcP3hUS7mXzSLsaIopMDZHPO1ZJk7h KNHtMdiP85XUmCAHgcWUTHcFlpBeHruM+zdjJDxih3kx+Wfh8oIW8EY4g0MeeXDE y+vr4lGsu1y6p1icOUycgO5M+X+ZY/5AeE0FjZUOywQTsaQg9r+Pzh1RLzEm7Ui4 feeSzXS3Br8SH32zY6NSRPT7DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCf8NUOl bvwjKXKkY5i5O1/MGpiAMB8GA1UdIwQYMBaAFHviMBU8/5ABZC28myT4XQzCgjZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjVEQi8xMTkzOUQxMDkw NjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tBRmtMYnliSlBoZERNS0NO azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05rNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjVEQi8xMTkzOUQxMDkwNjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tB RmtMYnliSlBoZERNS0NOazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcxx5r+fHraW6Rac7W1MtkgvnU00APlUhoShtsLYJM+aWOLXdw9S4v WcJPFOW4sugNuvDj7gFh3lEKi/nULhyt5X1Ut7DEx8lDgE5butbldfWTNRAdnV7y AFsa5mGAkqZzx5RrLzqX0cTZw1InGC3uS/wKkksQ8Pe/Nsb/AzS9VdlJf8FhRBVT rFpZjUDya5EuKZmTWX7eLWtk3172MwWkYUyCjri+SK5ld9JWZz5hf+85IdzFo6W5 bte6OeD6earE6hpd+cKXpSDBta4p/q2fkVUeDg+gyDdxvp1+0uC8+jJuuoFfb66n VtJVvOvoVq5LY/ErcIH5eR168dalFNii -----END CERTIFICATE-----Generated at Mon Sep 8 17:40:29 2025 by rpki-client