$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: sQKjT/3Rea2b1zk+dFKznL5Hho8e4ZHxQFA7+ibG2lY= Subject key identifier: 0E:12:10:B6:4A:9F:C4:B6:FA:52:07:43:FB:01:63:39:21:9F:B7:5A Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: 0116 Signing time: Wed 17 Sep 2025 05:32:59 +0000 Manifest this update: Wed 17 Sep 2025 05:32:59 +0000 Manifest next update: Wed 24 Sep 2025 05:32:59 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: okRRsfXPg3Q0qu9liP1hd8+wDTTqxfDXDOVxXzDgBA0=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: IW95bSZsBV41wSCyDVp5L0J87U9yD7MOcR2qX+Jqshk=) 3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 2lCm+k56qwvoxDHPy2MJ2gVzKL/gSEiow6ar2mDrask=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: Sep 17 05:32:59 2025 GMT Not After : Sep 24 05:32:59 2025 GMT Subject: CN=68ca480b-4508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c0:51:b4:02:5d:89:ff:91:e3:80:0f:02:a6: 8d:b8:11:df:96:4f:d8:d0:4a:ac:94:d4:49:10:7a: dd:43:37:88:52:a4:11:a0:90:74:01:79:80:39:f0: 08:a8:7e:2b:cc:69:d6:2c:8f:38:48:52:04:f0:2d: 2b:13:be:08:2a:e5:4f:11:73:d1:ae:ca:ba:12:2b: f0:63:86:2d:97:c4:6b:b2:40:e6:12:a4:98:1e:45: 4a:ce:c6:98:c2:09:35:c1:91:22:ce:24:a6:4c:4b: 76:17:fc:fb:5f:57:33:74:93:66:01:c9:fa:09:9d: 3b:e7:11:56:ac:5b:18:c8:31:26:96:0b:d3:a8:d3: 44:23:64:db:95:06:4c:59:5a:1e:aa:33:d6:9c:2d: c0:93:c0:cb:85:75:ae:f9:fa:f8:b4:3d:d6:74:fc: 73:ff:13:33:05:93:f3:52:6a:b2:3c:cf:5f:32:fa: 04:42:b1:7c:dc:5a:83:40:08:99:2a:a7:0c:76:9f: 96:ee:06:13:4e:5f:98:cd:cd:67:ce:50:89:a8:9c: 9c:be:96:0e:ce:5a:93:85:43:a0:d8:8f:f6:75:24: 2b:bb:ac:6c:b7:9d:e8:44:13:34:15:04:d2:ad:b3: 75:c2:63:ad:15:5b:40:e0:24:85:0e:70:41:0b:ba: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:12:10:B6:4A:9F:C4:B6:FA:52:07:43:FB:01:63:39:21:9F:B7:5A X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:b1:92:6e:b5:ad:ee:32:f2:39:35:69:be:c6:eb:9c:3f:a7: e0:0d:31:b1:ce:1a:25:85:9d:25:35:75:8d:fd:8a:6a:f7:da: fa:5b:a4:e3:f7:89:6a:fc:b8:d7:fb:c2:44:37:c0:ca:c4:ff: 79:de:62:22:b8:6a:fd:3f:1a:7e:d5:f7:8e:d4:39:0f:d4:38: 80:49:c5:d0:9b:5a:57:b8:4a:30:a5:fa:5e:ee:ac:ba:76:b0: a4:5b:9c:1d:2a:83:56:d0:34:82:da:b4:45:85:eb:dd:ed:9e: 44:df:e6:e8:27:34:cf:6b:5b:69:ba:85:0d:91:7d:ab:9c:22: d4:a2:9e:9b:df:23:c1:16:d5:bf:11:09:d8:29:00:77:4d:9c: b0:f9:83:9b:d0:0f:0c:08:f4:a3:37:97:15:54:3e:73:88:81: b7:68:30:1f:36:f8:ed:89:2b:ef:c2:f6:10:e7:be:52:27:ce: 7f:43:48:cd:fd:9d:0f:0f:70:a1:51:1d:6b:1f:70:16:bd:df: 24:a9:3b:0d:e3:69:08:84:7d:6c:0d:23:6a:7c:80:cc:5a:df: 63:71:ec:4f:03:1f:a4:e1:b2:7b:60:1c:bc:c8:fa:61:ef:0b: fc:c5:43:99:14:f6:a9:1e:89:9b:69:fa:17:7e:47:b5:b3:23: 0f:1c:f4:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjUwOTE3MDUzMjU5WhcNMjUwOTI0MDUzMjU5WjAYMRYwFAYD VQQDEw02OGNhNDgwYi00NTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsBRtAJdif+R44APAqaNuBHflk/Y0EqslNRJEHrdQzeIUqQRoJB0AXmAOfAI qH4rzGnWLI84SFIE8C0rE74IKuVPEXPRrsq6EivwY4Ytl8RrskDmEqSYHkVKzsaY wgk1wZEiziSmTEt2F/z7X1czdJNmAcn6CZ075xFWrFsYyDEmlgvTqNNEI2TblQZM WVoeqjPWnC3Ak8DLhXWu+fr4tD3WdPxz/xMzBZPzUmqyPM9fMvoEQrF83FqDQAiZ KqcMdp+W7gYTTl+Yzc1nzlCJqJycvpYOzlqThUOg2I/2dSQru6xst53oRBM0FQTS rbN1wmOtFVtA4CSFDnBBC7oyuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4SELZK n8S2+lIHQ/sBYzkhn7daMB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlsZJuta3uMvI5NWm+xuucP6fgDTGxzholhZ0lNXWN/Ypq99r6W6Tj 94lq/LjX+8JEN8DKxP953mIiuGr9Pxp+1feO1DkP1DiAScXQm1pXuEowpfpe7qy6 drCkW5wdKoNW0DSC2rRFhevd7Z5E3+boJzTPa1tpuoUNkX2rnCLUop6b3yPBFtW/ EQnYKQB3TZyw+YOb0A8MCPSjN5cVVD5ziIG3aDAfNvjtiSvvwvYQ575SJ85/Q0jN /Z0PD3ChUR1rH3AWvd8kqTsN42kIhH1sDSNqfIDMWt9jcexPAx+k4bJ7YBy8yPph 7wv8xUOZFPapHombafoXfke1syMPHPSb -----END CERTIFICATE-----Generated at Fri Sep 19 02:33:11 2025 by rpki-client