$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft File: 0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json) Hash identifier: 7Y5Lg1zvCz1gZQ7x6piwN2wCBf/+HxMLczJIPZsnl3g= Subject key identifier: 5A:A3:A7:36:26:F0:3C:CA:8A:70:06:2E:B7:24:80:02:F5:03:4B:20 Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Certificate serial: 1846 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft Manifest number: 1834 Signing time: Mon 08 Sep 2025 16:32:36 +0000 Manifest this update: Mon 08 Sep 2025 16:32:35 +0000 Manifest next update: Mon 15 Sep 2025 16:32:35 +0000 Files and hashes: 1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: v417UBVLZx8c2sW8MxzR9wibag2GKYsSfcbmh4OsmIM=) 2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: c58kYquiR7PhXwHG1m2k+88ex1+jC31dtd+q7AHBr2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6214 (0x1846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91743EF, serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Validity Not Before: Sep 8 16:32:35 2025 GMT Not After : Sep 15 16:32:35 2025 GMT Subject: CN=68bf0523-6285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e6:d5:fe:3d:9a:35:14:9e:0a:26:a7:88:9a: 21:d1:86:05:12:4c:e5:4c:49:6e:bf:68:bc:93:1b: 1c:5d:fc:13:ff:99:93:f0:78:b5:5a:98:18:3e:d5: eb:af:72:c7:0b:e8:55:5b:72:94:cf:a6:81:4f:3e: 04:0f:5a:9b:88:4b:1c:e5:3c:10:1b:2a:1b:f5:b7: 83:a3:a1:65:0c:50:97:fb:7a:be:dd:34:a1:ec:fa: ee:c1:c8:46:3a:0e:ef:98:a3:d8:c1:5f:14:04:8c: 54:39:0d:f6:6d:5f:a6:80:80:66:8e:43:5d:43:39: 26:f7:13:15:81:e3:b1:bf:16:6f:41:af:db:f1:3b: 0b:39:6e:8f:b9:6b:53:5c:5a:80:db:29:d7:39:ca: 4e:c9:c0:82:14:12:8d:0e:58:92:5d:2b:ef:fc:96: af:09:78:5c:56:8f:d3:ac:ef:6d:60:b4:06:81:fb: 66:19:44:af:b3:5b:58:aa:59:bc:a1:42:49:03:9f: 48:40:72:98:90:97:12:29:0f:58:23:47:8f:72:e1: 1d:08:a9:e0:70:fb:d3:81:77:a9:8f:43:b4:22:e7: 32:ba:a9:70:0e:90:89:88:4a:c9:fc:de:c2:74:d6: 17:0f:d5:db:14:3b:75:45:6b:4a:4f:7b:b7:95:20: 21:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A3:A7:36:26:F0:3C:CA:8A:70:06:2E:B7:24:80:02:F5:03:4B:20 X509v3 Authority Key Identifier: keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:2d:53:b6:34:c4:91:23:10:c2:bb:72:d1:a9:e4:7c:bc:0d: fe:25:e4:e7:10:7d:b7:e5:96:30:c6:e3:dc:96:f9:b5:3c:93: b1:bc:f7:c4:c1:bc:5e:63:c9:59:dd:a1:4d:b4:05:07:0a:cf: 27:3f:f4:9b:16:20:c6:51:ee:46:00:ac:d8:04:17:89:56:ea: a3:3c:74:0d:8b:4f:c5:93:33:69:aa:4a:29:3e:36:10:c4:44: 96:bf:ea:8e:86:b8:4a:cd:72:3b:9e:e2:c0:2b:1b:60:f8:d7: 82:f6:04:ad:14:8f:8f:86:44:e0:a7:1f:57:a0:30:0a:0e:aa: f1:57:ec:84:21:16:ea:96:d8:32:fb:36:8d:93:35:84:9b:9d: 7c:74:8e:e3:85:81:a9:cd:f6:74:8e:34:76:10:6d:86:0f:61: a1:07:e9:d7:7a:1f:99:21:a4:a4:98:bf:e4:d7:8e:d3:bb:b7: ed:0d:5b:97:4b:0e:2b:8c:97:f7:4f:ca:73:de:2a:96:8e:8a: 62:80:77:8d:d5:4f:e7:51:98:9d:a8:0e:2d:3e:5d:bd:ee:c1: 01:d2:da:eb:75:a0:4c:96:04:5e:26:6f:c1:33:28:2f:df:1f: 73:5c:0c:5a:88:cd:b4:61:0e:06:d2:d5:be:1a:47:58:b2:f1: 34:4f:7c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzRUYxMTAvBgNVBAUTKEQxRDY1QzhBNDMyNEUyODdGNkVBOTE1QjM5RjVEMzYw MkQxRTM3QTYwHhcNMjUwOTA4MTYzMjM1WhcNMjUwOTE1MTYzMjM1WjAYMRYwFAYD VQQDEw02OGJmMDUyMy02Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+bV/j2aNRSeCianiJoh0YYFEkzlTEluv2i8kxscXfwT/5mT8Hi1WpgYPtXr r3LHC+hVW3KUz6aBTz4ED1qbiEsc5TwQGyob9beDo6FlDFCX+3q+3TSh7PruwchG Og7vmKPYwV8UBIxUOQ32bV+mgIBmjkNdQzkm9xMVgeOxvxZvQa/b8TsLOW6PuWtT XFqA2ynXOcpOycCCFBKNDliSXSvv/JavCXhcVo/TrO9tYLQGgftmGUSvs1tYqlm8 oUJJA59IQHKYkJcSKQ9YI0ePcuEdCKngcPvTgXepj0O0IucyuqlwDpCJiErJ/N7C dNYXD9XbFDt1RWtKT3u3lSAhFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqjpzYm 8DzKinAGLrckgAL1A0sgMB8GA1UdIwQYMBaAFNHWXIpDJOKH9uqRWzn102AtHjem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDNFRi9FNkFCQjAxMEJB NDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRvZjI2cEZiT2ZYVFlDMGVO NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBkWmNpa01rNG9mMjZwRmJPZlhUWUMwZU42WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDNFRi9FNkFCQjAxMEJBNDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRv ZjI2cEZiT2ZYVFlDMGVONlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWLVO2NMSRIxDCu3LRqeR8vA3+JeTnEH235ZYwxuPclvm1PJOxvPfE wbxeY8lZ3aFNtAUHCs8nP/SbFiDGUe5GAKzYBBeJVuqjPHQNi0/FkzNpqkopPjYQ xESWv+qOhrhKzXI7nuLAKxtg+NeC9gStFI+PhkTgpx9XoDAKDqrxV+yEIRbqltgy +zaNkzWEm518dI7jhYGpzfZ0jjR2EG2GD2GhB+nXeh+ZIaSkmL/k147Tu7ftDVuX Sw4rjJf3T8pz3iqWjopigHeN1U/nUZidqA4tPl297sEB0trrdaBMlgReJm/BMygv 3x9zXAxaiM20YQ4G0tW+GkdYsvE0T3wY -----END CERTIFICATE-----Generated at Tue Sep 9 09:28:14 2025 by rpki-client