$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft File: F2vOFchi1HunYKH2ZTj4HVxJO4E.mft (raw, json) Hash identifier: Mka97Kg5L0VYNaxmDsxoP6rlh394j510tgiv72IXQTg= Subject key identifier: 66:68:FF:BD:0D:1F:97:95:04:1A:A9:CC:58:85:9B:CC:96:39:8C:44 Authority key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 Certificate issuer: /CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft Manifest number: 97 Signing time: Tue 09 Sep 2025 06:30:58 +0000 Manifest this update: Tue 09 Sep 2025 06:30:58 +0000 Manifest next update: Tue 16 Sep 2025 06:30:57 +0000 Files and hashes: 1: F2vOFchi1HunYKH2ZTj4HVxJO4E.crl (hash: 4ZqpWYaNpgCrG7rM8DXscbj57LaxckNbVIRFOpqe16g=) 2: 2CE10886A68511EFB0CF9981C4F9AE02.roa (hash: veK+ihHT7rgGehPtR5m7GK/hbNWI81sjRNiKcGQwWGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Validity Not Before: Sep 9 06:30:58 2025 GMT Not After : Sep 16 06:30:57 2025 GMT Subject: CN=68bfc9a2-07e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:a3:d7:c9:f8:e7:f5:03:41:dc:ad:da:ac: 45:a6:73:a7:ec:e2:0e:68:49:11:b1:2f:fb:53:eb: b9:d0:e4:9d:83:e6:6a:3f:f2:80:e1:38:d8:27:4e: fb:33:87:4c:9d:e6:90:8b:98:41:67:0a:0c:f1:d6: 47:fc:81:cb:00:76:ec:0c:da:39:a0:04:7e:72:e0: f5:08:97:27:cb:d9:6a:bf:09:5d:95:82:28:04:d5: c3:4c:f1:14:7d:65:4b:fe:63:e0:d9:8d:9a:be:a5: 5a:3d:2d:4b:bc:42:c2:61:52:94:81:d1:a5:c5:f8: 50:b8:c1:d2:5c:58:af:8a:30:9c:ad:79:70:82:44: 5e:9d:6b:09:58:94:90:ae:89:5d:05:a2:91:5f:85: b8:f8:4b:ae:22:7c:d8:06:0a:f5:97:4f:79:56:4c: ba:db:f1:72:36:d2:83:e2:0d:b8:11:9d:00:15:06: c9:9e:5f:fd:16:fb:99:bb:8a:b0:f3:be:3b:5a:c1: 8f:72:51:7e:a7:6a:db:d5:91:35:2f:36:c6:15:31: 3b:ab:3a:ce:0e:e5:42:55:04:ff:87:47:fe:e2:fe: 36:8c:b4:93:21:6f:00:d6:e0:a6:df:99:79:d9:48: f8:1d:a6:38:52:1f:09:47:c2:86:2a:af:dd:e1:42: 5e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:68:FF:BD:0D:1F:97:95:04:1A:A9:CC:58:85:9B:CC:96:39:8C:44 X509v3 Authority Key Identifier: keyid:17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2b:33:ed:25:c9:13:70:62:2a:f2:7d:5d:07:87:55:99:e5: 46:58:12:a6:35:50:60:6a:b6:b4:35:73:22:ff:43:02:fa:ef: 77:bd:e5:1e:a7:55:a7:e0:b7:a0:e0:99:55:a0:09:1f:e4:90: 54:bf:ea:d3:b8:97:28:f2:aa:5f:e7:23:0f:04:34:9e:b8:8c: 1a:a7:4c:e1:87:4e:ad:9d:c3:77:3b:a0:71:5e:77:b6:41:bf: 38:2f:01:de:ea:d2:b8:25:d0:af:fc:e0:41:44:32:d6:7c:46: 3b:e3:b9:1c:f5:27:70:f8:55:aa:ba:bd:dd:44:d9:c6:b0:05: e1:81:42:a3:95:ba:37:6a:54:42:a5:24:47:be:a2:2c:05:db: ec:d0:75:d8:25:80:d1:11:1e:9c:c9:09:89:65:87:69:9f:ce: 45:2e:4c:c6:db:62:c3:56:2b:f8:0f:09:58:41:df:12:3a:9c: 4c:b7:a7:10:fd:f9:78:59:23:c1:35:4b:30:90:a5:c7:16:2a: da:c4:26:3a:9a:a8:c6:46:da:05:49:68:92:88:b4:74:0e:6a: d7:2c:33:f9:5a:f7:0a:4c:7c:a3:b0:b8:47:38:87:b1:f1:aa: 2e:54:a8:44:fa:a5:ea:42:44:78:48:2e:f2:fc:55:4c:d8:4b: ac:77:1b:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2RTQxMTAvBgNVBAUTKDE3NkJDRTE1Qzg2MkQ0N0JBNzYwQTFGNjY1MzhGODFE NUM0OTNCODEwHhcNMjUwOTA5MDYzMDU4WhcNMjUwOTE2MDYzMDU3WjAYMRYwFAYD VQQDEw02OGJmYzlhMi0wN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmej18n45/UDQdyt2qxFpnOn7OIOaEkRsS/7U+u50OSdg+ZqP/KA4TjYJ077 M4dMneaQi5hBZwoM8dZH/IHLAHbsDNo5oAR+cuD1CJcny9lqvwldlYIoBNXDTPEU fWVL/mPg2Y2avqVaPS1LvELCYVKUgdGlxfhQuMHSXFivijCcrXlwgkRenWsJWJSQ roldBaKRX4W4+EuuInzYBgr1l095Vky62/FyNtKD4g24EZ0AFQbJnl/9FvuZu4qw 8747WsGPclF+p2rb1ZE1LzbGFTE7qzrODuVCVQT/h0f+4v42jLSTIW8A1uCm35l5 2Uj4HaY4Uh8JR8KGKq/d4UJexQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZo/70N H5eVBBqpzFiFm8yWOYxEMB8GA1UdIwQYMBaAFBdrzhXIYtR7p2Ch9mU4+B1cSTuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZFNC8zMkU5OTNDMEE2 ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFIdW5ZS0gyWlRqNEhWeEpP NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Yydk9GY2hpMUh1bllLSDJaVGo0SFZ4Sk80RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZFNC8zMkU5OTNDMEE2ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFI dW5ZS0gyWlRqNEhWeEpPNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMKzPtJckTcGIq8n1dB4dVmeVGWBKmNVBgara0NXMi/0MC+u93veUe p1Wn4Leg4JlVoAkf5JBUv+rTuJco8qpf5yMPBDSeuIwap0zhh06tncN3O6BxXne2 Qb84LwHe6tK4JdCv/OBBRDLWfEY747kc9Sdw+FWqur3dRNnGsAXhgUKjlbo3alRC pSRHvqIsBdvs0HXYJYDRER6cyQmJZYdpn85FLkzG22LDViv4DwlYQd8SOpxMt6cQ /fl4WSPBNUswkKXHFiraxCY6mqjGRtoFSWiSiLR0DmrXLDP5WvcKTHyjsLhHOIex 8aouVKhE+qXqQkR4SC7y/FVM2Eusdxt0 -----END CERTIFICATE-----Generated at Wed Sep 10 10:05:42 2025 by rpki-client