$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: ae1WFd+QkuFDTix/M1DFtZgMM/DznWftdVM9SEqQFt4= Subject key identifier: 6E:2B:00:D1:20:60:7F:56:A1:EC:19:13:E5:2A:F1:68:DA:5F:48:DD Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0CD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0CCE Signing time: Thu 18 Sep 2025 18:18:33 +0000 Manifest this update: Thu 18 Sep 2025 18:18:33 +0000 Manifest next update: Thu 25 Sep 2025 18:18:33 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: wznVO+fGn3XOh0I02CqmFp8eEnixEKrUm2iSVBdIGiY=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: srN4MybkybSjP5c+l2pI3OXFvu05+GspG1m/SkxGd6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Sep 18 18:18:33 2025 GMT Not After : Sep 25 18:18:33 2025 GMT Subject: CN=68cc4cf9-464c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:0d:88:06:f9:ce:28:05:3d:f8:ba:5b:eb: 00:da:1f:23:9f:68:f4:70:97:77:83:e8:63:c1:22: f8:b3:23:0c:52:15:0b:7e:a1:fa:60:92:11:03:0d: cc:39:14:af:a0:6b:e8:a9:33:fc:cc:6c:ce:bd:b7: 21:58:39:3b:c4:82:2d:2e:60:b4:7c:df:96:1f:fb: 00:5f:0b:ff:61:6f:cf:b2:5d:2d:c5:ea:84:06:af: 9e:9b:05:dc:0e:84:b9:9d:e4:bf:4c:1e:06:61:5e: 4c:86:7c:68:33:d9:aa:9b:34:78:2f:56:c5:9b:87: 44:3a:62:fc:92:d3:c1:f6:b1:3a:7d:fe:fd:39:2c: 97:7a:02:d8:40:28:4c:24:79:da:53:86:7a:55:89: a2:26:c3:39:18:e9:be:eb:f5:34:ac:4a:f9:26:21: 9e:93:8e:76:2e:a4:6d:9c:b1:a3:2f:3a:b9:83:8c: 1a:45:3d:d6:0a:03:c8:da:fe:a8:db:a3:06:83:86: 39:97:e3:2d:68:5d:12:de:4d:28:ff:42:28:5c:d6: b9:6d:19:8f:fa:cb:8b:fa:3c:70:0c:7c:16:25:22: 49:93:b5:83:52:70:14:c3:94:31:a6:44:4f:e2:db: 96:0c:20:2a:fe:78:94:a2:93:18:0b:af:3a:95:41: 21:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2B:00:D1:20:60:7F:56:A1:EC:19:13:E5:2A:F1:68:DA:5F:48:DD X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ac:45:b0:1a:a0:fa:82:84:d4:15:4d:c7:39:6c:36:e0:22: 04:3d:de:59:71:30:46:2d:d7:f7:de:04:59:54:e5:ae:b1:f5: 10:80:71:6f:8d:6b:f3:c7:62:69:7f:f9:ad:43:13:cc:cf:7d: 26:9c:ac:09:c1:61:b0:f8:16:92:75:d5:72:7a:d0:ff:c9:de: 6f:70:61:ef:1c:6e:f4:72:01:79:cd:5f:75:96:d7:0e:ed:36: 55:b3:af:8c:95:f1:d1:d7:9d:e6:5a:11:d4:e2:79:87:e3:26: 13:8f:0c:f4:60:5e:ea:f9:ad:e0:c6:10:0d:27:fc:c4:74:37: c9:d9:3f:dc:08:e1:b5:d3:30:80:ec:7a:e0:74:6e:7d:e4:7a: 04:4d:ba:01:60:5a:54:c8:12:0f:5d:e8:ec:94:db:f0:f9:5a: 49:68:29:f7:4a:33:aa:49:74:58:26:24:35:91:bc:9e:27:ec: dd:17:6d:37:95:7d:c3:41:4a:3d:b6:0b:e5:68:fe:c9:53:80: 5b:90:42:56:ad:8c:9c:e3:af:d7:38:73:e9:2f:fa:bf:15:f8: 61:f9:89:71:aa:b1:53:94:96:da:45:d5:cd:a2:aa:0c:c8:1d: 10:49:ad:88:10:73:0c:de:7e:f8:0a:9c:07:ac:43:05:8f:7e: ac:0d:11:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjUwOTE4MTgxODMzWhcNMjUwOTI1MTgxODMzWjAYMRYwFAYD VQQDEw02OGNjNGNmOS00NjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseQNiAb5zigFPfi6W+sA2h8jn2j0cJd3g+hjwSL4syMMUhULfqH6YJIRAw3M ORSvoGvoqTP8zGzOvbchWDk7xIItLmC0fN+WH/sAXwv/YW/Psl0txeqEBq+emwXc DoS5neS/TB4GYV5MhnxoM9mqmzR4L1bFm4dEOmL8ktPB9rE6ff79OSyXegLYQChM JHnaU4Z6VYmiJsM5GOm+6/U0rEr5JiGek452LqRtnLGjLzq5g4waRT3WCgPI2v6o 26MGg4Y5l+MtaF0S3k0o/0IoXNa5bRmP+suL+jxwDHwWJSJJk7WDUnAUw5QxpkRP 4tuWDCAq/niUopMYC686lUEhQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4rANEg YH9WoewZE+Uq8WjaX0jdMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBorEWwGqD6goTUFU3HOWw24CIEPd5ZcTBGLdf33gRZVOWusfUQgHFv jWvzx2Jpf/mtQxPMz30mnKwJwWGw+BaSddVyetD/yd5vcGHvHG70cgF5zV91ltcO 7TZVs6+MlfHR153mWhHU4nmH4yYTjwz0YF7q+a3gxhANJ/zEdDfJ2T/cCOG10zCA 7HrgdG595HoETboBYFpUyBIPXejslNvw+VpJaCn3SjOqSXRYJiQ1kbyeJ+zdF203 lX3DQUo9tgvlaP7JU4BbkEJWrYyc46/XOHPpL/q/Ffhh+YlxqrFTlJbaRdXNoqoM yB0QSa2IEHMM3n74CpwHrEMFj36sDREF -----END CERTIFICATE-----Generated at Fri Sep 19 05:04:16 2025 by rpki-client