$ rpki-client -vvf rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft File: m5TObjVVCnQlu0QWLfN8v74FPCU.mft (raw, json) Hash identifier: fvdB+gIIsRyjxczGTU7XHBbEiYHqaFvI9JimTo3T6ao= Subject key identifier: 39:6A:F5:4D:46:EF:7D:AA:3F:94:2D:7F:C5:D2:69:F7:14:A0:FE:02 Authority key identifier: 9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25 Certificate issuer: /CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft Manifest number: 0195 Signing time: Tue 09 Sep 2025 03:30:49 +0000 Manifest this update: Tue 09 Sep 2025 03:30:48 +0000 Manifest next update: Tue 16 Sep 2025 03:30:48 +0000 Files and hashes: 1: m5TObjVVCnQlu0QWLfN8v74FPCU.crl (hash: oWKVSm9KJyPnmwGRLQPNlor8MJWDh1DD20O+YHzsXUc=) 2: C9819D5E705711EFBDEF9265C4F9AE02.roa (hash: 1McoUaNADtVmxnwjUYo0/yr8ZNju9sl8ZAS30i7LT7Y=) 3: C872E06C705711EFBDEF9265C4F9AE02.roa (hash: BmCmwmrfy1CENmrxL9jjUF6CdXOsP2Ds7n3Ty7zfap8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91776C9, serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25 Validity Not Before: Sep 9 03:30:48 2025 GMT Not After : Sep 16 03:30:48 2025 GMT Subject: CN=68bf9f69-8a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:9c:43:80:e0:e9:af:c2:5a:d2:97:f0:a1: 8d:0f:c1:27:27:53:78:be:a8:03:86:18:38:04:68: bc:57:24:2d:d9:7f:4d:c1:57:c4:41:ed:c5:4f:88: 3e:85:68:5d:cb:89:93:4b:3e:f9:cc:94:2b:c3:5e: 3e:35:67:42:8a:f1:66:ea:20:9c:8b:f5:3d:0c:f1: e4:8a:9f:f6:c7:22:00:93:a0:a4:bd:b0:d7:24:fd: fc:2d:01:96:ea:c3:7a:a7:e8:95:fd:94:50:81:34: a2:bb:f2:0b:2e:51:cb:fa:ae:95:ea:05:6d:84:de: cb:04:4b:35:3c:c6:b9:93:dd:ca:72:21:1c:d4:50: 02:45:2f:68:f2:9a:70:2c:b2:ae:ff:1f:7a:39:e7: 43:64:1b:7c:96:b1:b4:7d:22:c3:73:0c:5a:a4:a3: 41:a1:6d:18:8f:12:a4:11:4b:e8:c7:5d:a6:a8:df: 82:9c:f0:32:e3:11:60:f3:f3:36:61:28:ff:f8:c2: 8f:24:79:e6:a1:9f:6c:12:e7:5b:27:51:8d:e9:5c: 12:4a:58:c4:9a:52:3d:ae:20:ab:3b:1d:ff:b3:3a: 8b:62:3c:ce:0e:a3:01:c7:03:b8:ec:04:24:e6:01: 3c:40:a0:73:12:ad:b0:66:e0:dc:10:36:29:dd:84: 08:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6A:F5:4D:46:EF:7D:AA:3F:94:2D:7F:C5:D2:69:F7:14:A0:FE:02 X509v3 Authority Key Identifier: keyid:9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:a2:45:b4:fa:08:b6:68:2d:2b:9f:fa:72:d9:5e:20:1e:8e: 2f:93:3a:f8:51:17:31:15:29:26:c4:14:ba:87:d0:df:d9:f2: 23:25:76:ba:01:eb:d3:b2:05:5f:3e:a0:42:b9:5c:76:b2:fd: 4a:4f:82:ca:65:10:d8:7c:53:d6:42:9b:13:12:c5:8b:15:ce: 9d:ba:42:ba:9d:09:c1:6b:69:b4:2f:54:e4:36:81:7a:c0:3e: 3c:c6:2a:36:c8:f5:a6:e4:c7:8f:0d:ab:bd:b3:23:7b:11:c8: 1e:09:fd:c0:38:db:43:77:68:9d:85:a2:59:81:f8:64:2f:45: 1c:8c:18:87:c6:34:c4:ef:45:b9:25:e5:6e:e5:c1:a1:4b:e6: 65:bc:96:3e:c0:90:c2:91:23:56:88:3e:8d:31:10:86:58:2c: 85:6e:36:a4:f3:80:57:18:d5:d2:2a:a3:7f:d7:eb:ed:e5:a8: f1:37:66:3e:3c:60:a5:40:7d:e0:60:db:3f:97:4e:0b:6e:f7: 8e:7c:50:13:25:90:9b:90:de:a1:5b:25:48:dc:6d:93:87:28: fd:3e:a3:75:89:d7:d7:90:a8:79:f6:a3:37:4d:56:e5:c7:ed: 61:cf:3e:b6:dc:8a:06:d2:88:c9:6f:d2:3d:44:9c:9a:ee:a9: da:b8:7b:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc2QzkxMTAvBgNVBAUTKDlCOTRDRTZFMzU1NTBBNzQyNUJCNDQxNjJERjM3Q0JG QkUwNTNDMjUwHhcNMjUwOTA5MDMzMDQ4WhcNMjUwOTE2MDMzMDQ4WjAYMRYwFAYD VQQDEw02OGJmOWY2OS04YTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6icQ4Dg6a/CWtKX8KGND8EnJ1N4vqgDhhg4BGi8VyQt2X9NwVfEQe3FT4g+ hWhdy4mTSz75zJQrw14+NWdCivFm6iCci/U9DPHkip/2xyIAk6CkvbDXJP38LQGW 6sN6p+iV/ZRQgTSiu/ILLlHL+q6V6gVthN7LBEs1PMa5k93KciEc1FACRS9o8ppw LLKu/x96OedDZBt8lrG0fSLDcwxapKNBoW0YjxKkEUvox12mqN+CnPAy4xFg8/M2 YSj/+MKPJHnmoZ9sEudbJ1GN6VwSSljEmlI9riCrOx3/szqLYjzODqMBxwO47AQk 5gE8QKBzEq2wZuDcEDYp3YQIzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlq9U1G 732qP5Qtf8XSafcUoP4CMB8GA1UdIwQYMBaAFJuUzm41VQp0JbtEFi3zfL++BTwl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzZDOS8xOEMzQzc2ODJB OUQxMUVFQUFCNUM5NTNDNEY5QUUwMi9tNVRPYmpWVkNuUWx1MFFXTGZOOHY3NEZQ Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201VE9ialZWQ25RbHUwUVdMZk44djc0RlBDVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzZDOS8xOEMzQzc2ODJBOUQxMUVFQUFCNUM5NTNDNEY5QUUwMi9tNVRPYmpWVkNu UWx1MFFXTGZOOHY3NEZQQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFokW0+gi2aC0rn/py2V4gHo4vkzr4URcxFSkmxBS6h9Df2fIjJXa6 AevTsgVfPqBCuVx2sv1KT4LKZRDYfFPWQpsTEsWLFc6dukK6nQnBa2m0L1TkNoF6 wD48xio2yPWm5MePDau9syN7EcgeCf3AONtDd2idhaJZgfhkL0UcjBiHxjTE70W5 JeVu5cGhS+ZlvJY+wJDCkSNWiD6NMRCGWCyFbjak84BXGNXSKqN/1+vt5ajxN2Y+ PGClQH3gYNs/l04LbveOfFATJZCbkN6hWyVI3G2Thyj9PqN1idfXkKh59qM3TVbl x+1hzz623IoG0ojJb9I9RJya7qnauHvO -----END CERTIFICATE-----Generated at Tue Sep 9 12:45:53 2025 by rpki-client