$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json) Hash identifier: HlvJOO4jW7yIdP7kUlqDv0RPZfT4RK1LC3tsfKSb8fk= Subject key identifier: EA:20:02:D2:88:1A:D4:F3:CC:21:8B:D5:EF:17:2B:2C:D4:6F:F2:F0 Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Certificate serial: 0BF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft Manifest number: 0BE8 Signing time: Thu 18 Sep 2025 19:04:09 +0000 Manifest this update: Thu 18 Sep 2025 19:04:08 +0000 Manifest next update: Thu 25 Sep 2025 19:04:08 +0000 Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: A3WHFbHewJaPa4b+2MU4UVSpz3n+hDrXB3dh15901Gs=) 2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: Myi9k4IrBdVLRWD9OtQqLIwtmIphhX+YDXYJBcNy/bw=) 3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: MyUFtJY4lLof0Zwtdhx7AIg2aYopA1OEBl/K6VizYaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3064 (0xbf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Validity Not Before: Sep 18 19:04:08 2025 GMT Not After : Sep 25 19:04:08 2025 GMT Subject: CN=68cc57a9-8652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:72:82:0d:c7:30:72:04:fa:4d:24:05:7c:89: 89:88:c3:ab:1f:e3:07:b0:a1:f6:5f:8d:4c:5d:b5: 50:aa:43:a7:53:38:7a:3d:e7:90:38:1c:fa:0d:88: ef:97:84:05:be:ff:10:b6:a4:70:99:31:b3:4a:55: 03:d5:a0:fb:06:d0:49:97:61:b4:27:99:41:d3:1c: bb:9d:33:91:dc:5e:90:81:c5:21:81:b1:e0:a9:e0: 5f:bb:9d:89:43:3a:e6:6b:cb:71:9c:24:46:b1:ac: b2:3b:3b:2f:44:1e:82:72:0a:55:b1:15:60:1e:dc: 00:98:0d:bf:c7:3c:70:b1:3f:76:e1:0a:9a:58:93: 5e:de:1f:1f:26:96:55:6d:ca:85:53:d7:f0:4b:d7: 33:b7:a2:50:0c:b3:79:36:56:3c:49:68:3f:2d:eb: a3:7a:96:c8:74:7e:7d:b3:83:c5:87:2a:50:ae:d9: 9a:61:3e:80:86:07:61:be:2c:fb:4e:01:69:57:7d: b3:d5:a4:6b:ea:c4:b2:1e:68:7e:21:c0:a0:91:bf: 83:7d:75:f9:61:1f:49:63:52:63:e0:2f:e8:54:a8: 8d:1d:5d:55:7f:fb:96:8f:9f:a6:9b:0d:87:db:0b: 58:b4:79:ad:50:d8:ec:48:4f:f7:5f:fd:51:e6:88: 45:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:20:02:D2:88:1A:D4:F3:CC:21:8B:D5:EF:17:2B:2C:D4:6F:F2:F0 X509v3 Authority Key Identifier: keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:0f:1f:92:13:8f:72:c4:f3:6d:ab:27:9c:d0:a8:73:9d:67: 30:37:f9:3a:4c:58:10:0f:57:33:92:8e:b6:53:e9:e0:ca:89: 45:ef:29:4f:4b:18:c5:a6:6d:fc:09:c4:85:ed:73:b1:50:d0: 64:8c:75:33:f1:d0:4b:24:65:ff:91:94:cf:3b:53:e1:66:02: b7:ea:fd:af:9e:be:3a:32:9c:f1:79:51:dd:a6:ba:b7:b3:c2: 97:e0:8a:53:de:0f:bd:05:f0:a1:ef:0a:76:45:60:cd:6b:a8: 6e:85:16:6d:c6:8e:ea:f1:99:0e:05:ec:2c:b4:47:48:1d:60: cd:fe:9e:06:2d:f3:27:68:7c:de:eb:a5:af:34:55:e1:a4:8a: 78:54:bf:04:a1:68:cc:9e:77:d7:9f:36:0b:e2:cd:60:65:af: aa:29:4c:a6:4d:51:62:61:c5:b1:34:be:2f:b8:e6:e3:ef:bc: 3f:d9:88:ad:7e:07:25:cc:d6:0e:bf:02:0a:86:96:dc:78:9a: dd:d4:54:04:99:d1:75:31:12:67:11:8c:cb:e9:b6:21:c2:35: 66:ab:5a:cb:12:94:3d:66:24:03:b5:74:a6:b0:bd:24:44:34: db:b1:ea:0b:d9:3a:12:b4:d5:65:28:26:e7:a8:3a:7f:fa:48: 5d:61:14:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy NDAyNDYyM0EwHhcNMjUwOTE4MTkwNDA4WhcNMjUwOTI1MTkwNDA4WjAYMRYwFAYD VQQDEw02OGNjNTdhOS04NjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XKCDccwcgT6TSQFfImJiMOrH+MHsKH2X41MXbVQqkOnUzh6PeeQOBz6DYjv l4QFvv8QtqRwmTGzSlUD1aD7BtBJl2G0J5lB0xy7nTOR3F6QgcUhgbHgqeBfu52J Qzrma8txnCRGsayyOzsvRB6CcgpVsRVgHtwAmA2/xzxwsT924QqaWJNe3h8fJpZV bcqFU9fwS9czt6JQDLN5NlY8SWg/LeujepbIdH59s4PFhypQrtmaYT6Ahgdhviz7 TgFpV32z1aRr6sSyHmh+IcCgkb+DfXX5YR9JY1Jj4C/oVKiNHV1Vf/uWj5+mmw2H 2wtYtHmtUNjsSE/3X/1R5ohFxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOogAtKI GtTzzCGL1e8XKyzUb/LwMB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4 ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBDx+SE49yxPNtqyec0KhznWcwN/k6TFgQD1czko62U+ngyolF7ylP SxjFpm38CcSF7XOxUNBkjHUz8dBLJGX/kZTPO1PhZgK36v2vnr46MpzxeVHdprq3 s8KX4IpT3g+9BfCh7wp2RWDNa6huhRZtxo7q8ZkOBewstEdIHWDN/p4GLfMnaHze 66WvNFXhpIp4VL8EoWjMnnfXnzYL4s1gZa+qKUymTVFiYcWxNL4vuObj77w/2Yit fgclzNYOvwIKhpbceJrd1FQEmdF1MRJnEYzL6bYhwjVmq1rLEpQ9ZiQDtXSmsL0k RDTbseoL2ToStNVlKCbnqDp/+khdYRTq -----END CERTIFICATE-----Generated at Fri Sep 19 00:57:41 2025 by rpki-client