$ rpki-client -vvf rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft File: 57mHJeEOcOr07UTLjZz8LtAndII.mft (raw, json) Hash identifier: v3Hf6f8Sb5ldYerfwoMI1UNc+nVndahwR/NG+kqKs7w= Subject key identifier: E8:86:04:F2:E2:43:46:12:36:1D:4A:0E:6A:1C:C4:4B:71:3A:52:CB Authority key identifier: E7:B9:87:25:E1:0E:70:EA:F4:ED:44:CB:8D:9C:FC:2E:D0:27:74:82 Certificate issuer: /CN=A91764C1/serialNumber=E7B98725E10E70EAF4ED44CB8D9CFC2ED0277482 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft Manifest number: 09 Signing time: Sun 07 Sep 2025 08:38:00 +0000 Manifest this update: Sun 07 Sep 2025 08:37:59 +0000 Manifest next update: Sun 14 Sep 2025 08:37:59 +0000 Files and hashes: 1: 57mHJeEOcOr07UTLjZz8LtAndII.crl (hash: NHjgOVkRSPgd8156TVJZee7IQUFGv5CJrg1Sk3YJca4=) 2: 23A61F1A817011F08F821330C4F9AE02.roa (hash: U4f2TL1Nw6yGEyt2KKgu1w2UDLlsV+V95Sx4GlFACCI=) 3: 23278196817011F08F821330C4F9AE02.roa (hash: btm1G8nH7QUpRKAM7Nxi0i1txeAyqNXfCuUm0WkFHdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.crl rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 08:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764C1, serialNumber=E7B98725E10E70EAF4ED44CB8D9CFC2ED0277482 Validity Not Before: Sep 7 08:37:59 2025 GMT Not After : Sep 14 08:37:59 2025 GMT Subject: CN=68bd4467-74a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:eb:29:1f:a9:04:e2:9f:1b:20:15:2f:03:bb: aa:a2:23:33:d5:43:11:e1:12:3e:7b:5b:8e:f3:bb: 41:12:bd:4a:94:ac:f6:22:f2:c2:4e:e9:35:7e:7d: 62:a6:00:ff:83:16:81:2d:77:79:77:4e:21:51:b4: 3a:7a:0d:d3:a1:88:c9:5c:16:d5:65:d1:99:34:00: a2:72:22:04:fa:f7:86:15:d8:7b:a7:ce:40:ca:e0: 0a:6b:89:4b:79:e4:24:69:fd:52:02:ca:96:c2:41: 25:0b:9c:4a:56:8b:cb:b0:1a:d8:50:7f:92:6f:6a: 27:05:48:ce:5a:45:ce:1d:7a:f8:e0:04:51:b4:32: 07:be:10:90:94:06:c7:72:52:77:65:31:28:ee:a7: 70:e5:a9:17:d7:a4:c0:7d:5a:24:77:65:82:1d:83: 39:ad:04:b7:ea:87:46:72:29:25:fc:2d:db:ed:16: 86:f8:b6:de:0a:75:36:00:d7:23:3e:23:9d:a5:dc: 08:f7:54:16:41:01:fa:e6:ee:6d:08:61:24:7f:ff: 18:04:eb:04:73:08:e1:2c:26:e7:e1:10:9f:2f:0d: a1:72:14:3b:22:88:e9:87:54:5e:a8:84:e7:f0:93: be:22:bb:25:56:36:7b:85:f9:21:b2:78:dc:b8:b1: 3a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:86:04:F2:E2:43:46:12:36:1D:4A:0E:6A:1C:C4:4B:71:3A:52:CB X509v3 Authority Key Identifier: keyid:E7:B9:87:25:E1:0E:70:EA:F4:ED:44:CB:8D:9C:FC:2E:D0:27:74:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2c:6d:ca:eb:26:b2:df:af:3f:39:6d:33:f7:ac:74:8a:da: 70:55:de:bd:4a:d1:1a:3c:6e:b9:44:df:87:78:42:bd:54:35: a3:04:e2:23:4c:2f:cb:78:9d:3e:ac:67:6e:a0:77:bc:61:6f: e4:74:a2:a4:95:7b:0b:bb:86:16:a4:86:8f:f3:4a:a0:1f:22: 6d:52:85:22:3e:d5:75:93:04:19:2e:7e:09:fb:46:35:3a:67: 3d:84:c8:ac:a1:d1:05:0f:15:37:97:dc:2b:3b:62:c4:53:3c: 88:0a:a8:a5:1c:15:d4:fe:15:87:0b:0d:b9:c9:62:ef:35:9e: 17:47:07:b6:eb:dd:57:57:c7:0a:04:4c:7e:d2:0f:2f:e4:08: b7:14:ba:b2:1a:37:1c:83:e3:b0:ee:f1:1c:ed:53:8f:e4:ba: 6c:71:99:f2:8c:89:67:bf:35:47:ed:41:e5:be:36:28:05:16: 1d:05:d0:f1:b7:bf:ae:74:54:9b:24:f1:54:79:e8:71:89:b6: 09:ef:84:80:89:b0:9f:f7:7f:21:19:0d:1a:5b:89:30:cd:eb: d2:5e:e2:65:dd:2e:88:bb:de:5b:66:22:63:6a:c2:97:23:47: 4e:17:06:40:c4:49:a9:a0:64:98:87:50:12:0c:f1:e3:2c:26: 85:74:be:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjRDMTExMC8GA1UEBRMoRTdCOTg3MjVFMTBFNzBFQUY0RUQ0NENCOEQ5Q0ZDMkVE MDI3NzQ4MjAeFw0yNTA5MDcwODM3NTlaFw0yNTA5MTQwODM3NTlaMBgxFjAUBgNV BAMTDTY4YmQ0NDY3LTc0YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC66ykfqQTinxsgFS8Du6qiIzPVQxHhEj57W47zu0ESvUqUrPYi8sJO6TV+fWKm AP+DFoEtd3l3TiFRtDp6DdOhiMlcFtVl0Zk0AKJyIgT694YV2HunzkDK4ApriUt5 5CRp/VICypbCQSULnEpWi8uwGthQf5JvaicFSM5aRc4devjgBFG0Mge+EJCUBsdy UndlMSjup3DlqRfXpMB9WiR3ZYIdgzmtBLfqh0ZyKSX8LdvtFob4tt4KdTYA1yM+ I52l3Aj3VBZBAfrm7m0IYSR//xgE6wRzCOEsJufhEJ8vDaFyFDsiiOmHVF6ohOfw k74iuyVWNnuF+SGyeNy4sTrrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6IYE8uJD RhI2HUoOahzES3E6UsswHwYDVR0jBBgwFoAU57mHJeEOcOr07UTLjZz8LtAndIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2NEMxLzc0MzA5MTc4ODE2 RjExRjBCMEE5NDMyRUM0RjlBRTAyLzU3bUhKZUVPY09yMDdVVExqWno4THRBbmRJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNTdtSEplRU9jT3IwN1VUTGpaejhMdEFuZElJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 NEMxLzc0MzA5MTc4ODE2RjExRjBCMEE5NDMyRUM0RjlBRTAyLzU3bUhKZUVPY09y MDdVVExqWno4THRBbmRJSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF0sbcrrJrLfrz85bTP3rHSK2nBV3r1K0Ro8brlE34d4Qr1UNaME4iNM L8t4nT6sZ26gd7xhb+R0oqSVewu7hhakho/zSqAfIm1ShSI+1XWTBBkufgn7RjU6 Zz2EyKyh0QUPFTeX3Cs7YsRTPIgKqKUcFdT+FYcLDbnJYu81nhdHB7br3VdXxwoE TH7SDy/kCLcUurIaNxyD47Du8RztU4/kumxxmfKMiWe/NUftQeW+NigFFh0F0PG3 v650VJsk8VR56HGJtgnvhICJsJ/3fyEZDRpbiTDN69Je4mXdLoi73ltmImNqwpcj R04XBkDESamgZJiHUBIM8eMsJoV0viA= -----END CERTIFICATE-----Generated at Sun Sep 7 14:24:52 2025 by rpki-client