$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json) Hash identifier: L3DvAJvUAL1Lan4HhNAVrt1UIfDXkdhK3oTUN82d4vI= Subject key identifier: 93:0D:39:E4:14:8B:A0:F5:EF:CE:95:18:43:25:83:D9:AA:9D:2E:B9 Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft Manifest number: 06CE Signing time: Thu 18 Sep 2025 22:21:01 +0000 Manifest this update: Thu 18 Sep 2025 22:21:01 +0000 Manifest next update: Thu 25 Sep 2025 22:21:01 +0000 Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: 5StOi3FDZNbDbOtu2VATaIgB21kkHWdgo79Zae7KEq0=) 2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: FREW3BYIhAyr82gwSpG+aXABGrdd/q2DunYmdFOCRY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: Sep 18 22:21:01 2025 GMT Not After : Sep 25 22:21:01 2025 GMT Subject: CN=68cc85cd-8806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9f:5b:a2:25:d6:76:9e:b2:d1:17:a5:42:1d: 5a:dd:8a:74:52:b9:31:3a:51:73:63:66:b8:bf:cc: c6:29:8f:0b:8f:ee:7b:0e:11:7d:f6:22:e8:5f:88: 72:22:70:99:f2:0c:e0:2f:cf:ee:d6:ec:a4:17:a9: 46:70:94:7a:58:ef:e9:27:62:81:68:45:b6:bc:78: a5:c2:01:39:54:84:a7:ab:69:a0:57:75:22:08:bb: a3:ed:f9:6d:69:cb:8d:e3:8c:f9:3a:96:c7:a2:d5: b7:47:52:e6:a3:48:fd:88:54:f9:18:f1:26:22:51: 2a:c4:f6:2b:62:ba:b1:25:9a:16:72:e0:44:86:8b: d6:57:92:fa:bb:41:4c:8d:5c:a7:b1:9e:02:4d:7d: 4b:9b:70:b3:31:9b:16:fb:28:ae:dd:ba:43:0a:78: 27:2f:ff:5f:1b:f8:aa:56:f7:9f:83:fa:7c:be:ae: 84:bc:71:61:40:5f:d3:89:44:07:71:00:98:67:b7: 25:a3:b4:a0:b2:f1:8b:8b:5d:25:15:a9:62:e5:63: b6:76:28:ba:0a:34:8f:aa:13:7b:4a:5e:95:23:1d: 9a:4a:10:4c:3b:89:4d:23:0b:19:12:a1:35:70:18: 0e:7f:a5:ad:ee:5d:40:a9:55:93:d5:24:dc:8a:17: 86:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0D:39:E4:14:8B:A0:F5:EF:CE:95:18:43:25:83:D9:AA:9D:2E:B9 X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f9:a0:f9:8f:fb:6f:21:1f:f6:ac:08:56:9a:54:cc:7d:52: 50:cb:cf:5d:71:a6:3e:a9:05:c6:3a:98:83:d0:3b:c9:d9:88: c6:7e:74:42:30:52:bf:a3:38:92:85:c0:27:46:7a:a8:08:b5: 5c:52:56:60:3c:2d:0c:c9:4a:48:13:7e:67:27:e2:6f:4d:d4: a1:07:d1:97:fb:9d:0b:cf:dc:be:c3:55:d6:d8:42:5b:64:10: 4e:4a:1e:e6:ce:3c:7c:16:f9:6b:c7:2c:5d:81:60:37:87:d5: d1:df:78:a3:08:9e:c2:ed:c0:86:da:93:4e:7e:12:89:cf:aa: 8b:d4:24:f8:56:22:b1:cb:cf:ae:0d:03:27:45:cd:08:45:15: 57:f2:4c:93:7f:c2:9c:d6:b1:f3:d8:b5:45:b3:88:d2:ed:a0: 65:d5:36:76:e6:54:cc:f2:a9:8c:18:67:c0:86:73:72:21:f8: ad:cc:75:07:1e:7d:cf:7b:b5:5b:4f:25:62:43:31:b7:27:43: cf:25:ca:33:61:9c:72:f5:3b:1a:7f:c6:49:0e:82:60:cb:85: e8:37:c1:b7:18:60:19:9f:2b:35:05:6d:27:10:88:42:81:0a: fb:21:dc:58:5a:27:ec:53:6e:0d:70:a4:fc:56:ee:01:09:0a: a5:36:07:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjUwOTE4MjIyMTAxWhcNMjUwOTI1MjIyMTAxWjAYMRYwFAYD VQQDEw02OGNjODVjZC04ODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3J9boiXWdp6y0RelQh1a3Yp0UrkxOlFzY2a4v8zGKY8Lj+57DhF99iLoX4hy InCZ8gzgL8/u1uykF6lGcJR6WO/pJ2KBaEW2vHilwgE5VISnq2mgV3UiCLuj7flt acuN44z5OpbHotW3R1Lmo0j9iFT5GPEmIlEqxPYrYrqxJZoWcuBEhovWV5L6u0FM jVynsZ4CTX1Lm3CzMZsW+yiu3bpDCngnL/9fG/iqVvefg/p8vq6EvHFhQF/TiUQH cQCYZ7clo7SgsvGLi10lFali5WO2dii6CjSPqhN7Sl6VIx2aShBMO4lNIwsZEqE1 cBgOf6Wt7l1AqVWT1STciheG1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMNOeQU i6D1786VGEMlg9mqnS65MB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT dXlBMU1jUmdTYTFBTllqOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU+aD5j/tvIR/2rAhWmlTMfVJQy89dcaY+qQXGOpiD0DvJ2YjGfnRC MFK/oziShcAnRnqoCLVcUlZgPC0MyUpIE35nJ+JvTdShB9GX+50Lz9y+w1XW2EJb ZBBOSh7mzjx8FvlrxyxdgWA3h9XR33ijCJ7C7cCG2pNOfhKJz6qL1CT4ViKxy8+u DQMnRc0IRRVX8kyTf8Kc1rHz2LVFs4jS7aBl1TZ25lTM8qmMGGfAhnNyIfitzHUH Hn3Pe7VbTyViQzG3J0PPJcozYZxy9Tsaf8ZJDoJgy4XoN8G3GGAZnys1BW0nEIhC gQr7IdxYWifsU24NcKT8Vu4BCQqlNgfE -----END CERTIFICATE-----Generated at Fri Sep 19 05:30:01 2025 by rpki-client