$ rpki-client -vvf rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft File: keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft (raw, json) Hash identifier: WUDZ5BC8z8XwC2VIxh7LDqiN2S32cvYPD+IqN8/x6DA= Subject key identifier: 8E:97:61:18:76:56:1E:EF:4B:D7:66:26:5C:AF:69:0A:58:74:71:F6 Authority key identifier: 91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF Certificate issuer: /CN=A91876D9/serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF Certificate serial: 0555 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft Manifest number: 054F Signing time: Thu 18 Sep 2025 23:46:56 +0000 Manifest this update: Thu 18 Sep 2025 23:46:55 +0000 Manifest next update: Thu 25 Sep 2025 23:46:55 +0000 Files and hashes: 1: keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl (hash: RNPNU09I90Rji59ujQXzE0IGy+8xAUlakki/fj/rvQ8=) 2: CDFDBE10061C11ECA4633B32C4F9AE02.roa (hash: phE+adBWK7PYAI4KAosAkS6IfQBeyVMqazuKmnqaEwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1365 (0x555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91876D9, serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF Validity Not Before: Sep 18 23:46:55 2025 GMT Not After : Sep 25 23:46:55 2025 GMT Subject: CN=68cc99ef-5ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dd:0a:e7:4f:33:dd:96:90:b8:8f:cc:e9:81: dc:88:57:44:d2:1b:d2:b3:d5:ec:6e:77:9e:19:a1: 46:54:8b:75:0c:19:ad:43:93:aa:74:b6:24:a0:cc: ff:4e:47:54:5c:13:ed:66:db:e7:5e:c7:56:48:05: 64:0f:98:3c:92:a4:4f:4c:df:32:03:63:62:91:d9: eb:ed:cc:09:5a:cd:9f:b2:32:a7:0c:cc:07:14:15: ff:71:b1:c8:fd:26:35:94:b1:dd:50:66:46:7e:6c: e8:d8:d1:da:80:2c:8c:95:dc:89:74:31:32:44:a2: d9:34:2d:a9:67:6d:f0:6d:24:ff:24:3a:46:27:e3: f4:82:ad:f5:b3:61:46:06:93:d9:a6:30:1e:a5:a7: 69:72:42:64:cb:69:1e:2a:fb:85:98:15:87:e6:b5: 23:29:10:2f:b6:c8:dc:19:1a:4f:b5:05:e9:5e:d3: 6f:87:98:4d:c5:ce:34:0c:f4:82:ab:88:6d:e7:97: 86:08:8d:e5:dc:63:8e:88:bb:04:f7:10:88:16:64: a8:b2:5d:81:84:a6:e9:79:ae:9c:05:39:3c:90:81: 36:0f:8c:7c:1b:4a:45:f6:9c:c0:2c:ce:89:5c:0e: 51:71:40:76:c8:36:7f:62:dc:44:ec:c8:d7:24:86: 2e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:97:61:18:76:56:1E:EF:4B:D7:66:26:5C:AF:69:0A:58:74:71:F6 X509v3 Authority Key Identifier: keyid:91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:b2:ce:5d:39:ae:30:d4:81:ee:08:6d:17:5a:bc:e5:62:ac: 63:e9:80:bd:a1:b2:4f:4a:fd:f7:22:74:95:1d:93:85:94:0c: e2:85:aa:ce:50:0c:77:65:2b:ff:d5:b9:a9:9f:4f:d8:76:ce: 05:5d:1b:9f:15:d1:d8:b8:c3:17:f8:57:82:d1:cc:31:3b:77: c7:e4:86:70:ec:71:8a:8b:25:75:0b:05:2c:a6:6f:ea:3f:0e: 65:31:5d:e6:e7:32:95:d7:d3:2e:38:79:c6:06:b1:c3:d6:f8: 06:26:10:7e:35:39:94:3f:4b:c8:2e:27:5d:d5:8d:c0:9c:7d: aa:9d:b7:33:a2:58:f4:2f:cd:47:84:44:b7:6b:fd:13:0b:9e: 52:af:30:a6:15:70:7a:a7:6a:41:41:86:76:63:c0:89:13:3a: 38:f5:25:b2:01:f4:86:33:4e:43:4f:c9:50:a1:15:dc:d7:de: 12:40:14:cb:43:70:91:35:01:42:a9:3e:03:89:9f:aa:a9:9f: f1:bb:91:85:af:04:b3:aa:3d:76:0e:79:56:bd:ea:79:eb:16: c7:8e:50:2d:3d:81:0d:41:f0:4c:cb:a7:07:58:52:5f:0f:3a: a5:64:5b:fb:75:36:bf:20:c1:4d:d0:ff:64:0d:d7:4a:8e:22: bd:20:1a:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2RDkxMTAvBgNVBAUTKDkxRTY2OUNFMDIxNTA5N0JENEQ0NzdBMUE3NDQ2QjBE OUQwMjQ4RkYwHhcNMjUwOTE4MjM0NjU1WhcNMjUwOTI1MjM0NjU1WjAYMRYwFAYD VQQDEw02OGNjOTllZi01ZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA490K508z3ZaQuI/M6YHciFdE0hvSs9XsbneeGaFGVIt1DBmtQ5OqdLYkoMz/ TkdUXBPtZtvnXsdWSAVkD5g8kqRPTN8yA2Nikdnr7cwJWs2fsjKnDMwHFBX/cbHI /SY1lLHdUGZGfmzo2NHagCyMldyJdDEyRKLZNC2pZ23wbST/JDpGJ+P0gq31s2FG BpPZpjAepadpckJky2keKvuFmBWH5rUjKRAvtsjcGRpPtQXpXtNvh5hNxc40DPSC q4ht55eGCI3l3GOOiLsE9xCIFmSosl2BhKbpea6cBTk8kIE2D4x8G0pF9pzALM6J XA5RcUB2yDZ/YtxE7MjXJIYuywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6XYRh2 Vh7vS9dmJlyvaQpYdHH2MB8GA1UdIwQYMBaAFJHmac4CFQl71NR3oadEaw2dAkj/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzZEOS85MjYwQzY1ODA2 MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJVkNYdlUxSGVocDBSckRaMENT UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWnB6Z0lWQ1h2VTFIZWhwMFJyRFowQ1NQOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzZEOS85MjYwQzY1ODA2MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJVkNY dlUxSGVocDBSckRaMENTUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCss5dOa4w1IHuCG0XWrzlYqxj6YC9obJPSv33InSVHZOFlAziharO UAx3ZSv/1bmpn0/Yds4FXRufFdHYuMMX+FeC0cwxO3fH5IZw7HGKiyV1CwUspm/q Pw5lMV3m5zKV19MuOHnGBrHD1vgGJhB+NTmUP0vILidd1Y3AnH2qnbczolj0L81H hES3a/0TC55SrzCmFXB6p2pBQYZ2Y8CJEzo49SWyAfSGM05DT8lQoRXc194SQBTL Q3CRNQFCqT4DiZ+qqZ/xu5GFrwSzqj12DnlWvep56xbHjlAtPYENQfBMy6cHWFJf DzqlZFv7dTa/IMFN0P9kDddKjiK9IBo0 -----END CERTIFICATE-----Generated at Fri Sep 19 18:55:43 2025 by rpki-client