$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json) Hash identifier: 8xvJF8NChXm/iVxciJUDFrcUNfmufWJONZnMB26duwY= Subject key identifier: 05:6D:0A:F3:DF:23:A4:0C:04:93:A8:CC:AA:32:84:E1:CF:1B:73:1C Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft Manifest number: 01AD Signing time: Wed 17 Sep 2025 03:41:16 +0000 Manifest this update: Wed 17 Sep 2025 03:41:16 +0000 Manifest next update: Wed 24 Sep 2025 03:41:16 +0000 Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: NiRvpEI0tzP34eVi8J8h2YUIeQU75gURWJ7DzHMtDss=) 2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: eMm1aATtYTxr8yulbbTqFy3KIRD0+Hc1f6QKDsCg/8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: Sep 17 03:41:16 2025 GMT Not After : Sep 24 03:41:16 2025 GMT Subject: CN=68ca2ddc-d81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5e:c4:6b:6e:45:af:11:f5:7d:c1:bd:da:96: a3:f6:39:6a:2a:37:f6:69:70:39:0c:4b:86:99:8b: 4c:f4:70:4e:9c:50:28:8a:35:0a:52:d3:c1:d1:a3: 8b:d6:3a:9e:6c:9c:ee:1c:a9:73:6f:55:65:7f:d8: d1:ea:51:11:63:21:f0:b5:98:29:b9:04:10:be:c0: f8:f5:84:85:73:a5:83:48:bd:16:61:59:67:12:67: 98:fa:4d:68:c4:19:45:dc:a7:55:d2:b7:c2:8c:e7: 89:08:83:52:83:4b:87:71:af:b3:84:23:99:de:2f: 42:09:f0:a7:66:8b:79:f2:e3:ee:12:f3:50:39:20: 46:67:09:23:9a:3d:50:c3:9c:e6:b3:25:c7:0c:97: a9:7a:d2:96:0e:a2:14:d6:c8:fc:79:c2:ba:89:3c: 26:d8:cc:d4:17:30:33:a4:23:25:0e:72:b3:29:7b: 7a:83:ad:61:5a:3f:01:79:34:2f:b1:3a:c7:af:9e: e3:4a:9b:8d:b5:ab:9b:56:61:53:e9:d1:68:ea:a9: 7d:16:ba:1f:f7:a9:ac:e4:d4:d1:0d:5c:82:1d:97: fa:e7:a8:ee:fa:8d:97:d4:7b:1b:31:19:20:bb:e1: 10:63:66:bd:1f:8c:55:98:5a:90:65:09:5a:2e:7f: db:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6D:0A:F3:DF:23:A4:0C:04:93:A8:CC:AA:32:84:E1:CF:1B:73:1C X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:78:a4:dd:d2:6e:f0:78:a4:f7:ad:40:31:ef:70:a3:06:bb: e3:fe:dc:6c:07:9f:99:4c:fd:1d:28:dc:21:c1:57:16:3b:e2: a7:08:28:74:52:72:a8:85:d2:8d:fa:6f:cd:eb:fc:ab:c4:d0: b1:ff:5f:9a:f6:29:ee:8d:12:af:c5:d6:47:92:a9:12:71:fc: 5d:e7:a2:4e:7c:f5:2a:5a:a9:ea:2a:97:c9:1f:e0:d6:4e:e1: a1:21:90:fe:fe:a5:59:46:e9:4e:2b:01:0f:4a:3e:6e:2d:b3: ff:82:a3:58:8b:90:01:c7:eb:36:28:3a:90:bb:34:4f:ac:8f: a4:50:9c:7b:ec:de:a1:15:8e:e6:25:20:7b:e1:1d:b5:7c:7a: ce:6f:1d:cb:89:d2:36:a2:34:2d:5b:bd:ce:cc:1a:38:cb:12: 4b:fd:9f:cc:91:45:7f:a6:3d:e7:85:3e:04:66:16:5c:65:cd: d6:a7:e7:67:cc:b0:3d:45:86:60:99:44:75:55:e1:88:eb:56: 50:45:70:9c:2e:0b:7d:7d:0d:67:4c:d3:33:52:39:b9:53:e5: cd:e4:02:18:a8:4d:cb:00:46:08:d7:e9:0b:3c:a4:dc:76:85: 19:54:a0:0b:de:66:65:c0:b8:cd:57:e8:af:75:8d:0e:ec:9e: e5:05:9f:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjUwOTE3MDM0MTE2WhcNMjUwOTI0MDM0MTE2WjAYMRYwFAYD VQQDEw02OGNhMmRkYy1kODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyl7Ea25FrxH1fcG92paj9jlqKjf2aXA5DEuGmYtM9HBOnFAoijUKUtPB0aOL 1jqebJzuHKlzb1Vlf9jR6lERYyHwtZgpuQQQvsD49YSFc6WDSL0WYVlnEmeY+k1o xBlF3KdV0rfCjOeJCINSg0uHca+zhCOZ3i9CCfCnZot58uPuEvNQOSBGZwkjmj1Q w5zmsyXHDJepetKWDqIU1sj8ecK6iTwm2MzUFzAzpCMlDnKzKXt6g61hWj8BeTQv sTrHr57jSpuNtaubVmFT6dFo6ql9Frof96ms5NTRDVyCHZf656ju+o2X1HsbMRkg u+EQY2a9H4xVmFqQZQlaLn/bgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVtCvPf I6QMBJOozKoyhOHPG3McMB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlBNC8yN0EyNUE1NjA0RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFC TGVPSEJXLUl5LTNUYkVxR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeeKTd0m7weKT3rUAx73CjBrvj/txsB5+ZTP0dKNwhwVcWO+KnCCh0 UnKohdKN+m/N6/yrxNCx/1+a9inujRKvxdZHkqkScfxd56JOfPUqWqnqKpfJH+DW TuGhIZD+/qVZRulOKwEPSj5uLbP/gqNYi5ABx+s2KDqQuzRPrI+kUJx77N6hFY7m JSB74R21fHrObx3LidI2ojQtW73OzBo4yxJL/Z/MkUV/pj3nhT4EZhZcZc3Wp+dn zLA9RYZgmUR1VeGI61ZQRXCcLgt9fQ1nTNMzUjm5U+XN5AIYqE3LAEYI1+kLPKTc doUZVKAL3mZlwLjNV+ivdY0O7J7lBZ8x -----END CERTIFICATE-----Generated at Thu Sep 18 21:59:16 2025 by rpki-client