$ rpki-client -vvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft File: 91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json) Hash identifier: JlTWcqsTwQpoGeuejLrfCfTiBNLAE8ys7Cozhf9yCVk= Subject key identifier: B7:AC:AC:BD:69:62:1C:1A:8F:75:35:46:C6:5F:7B:88:AB:E4:68:18 Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 Certificate issuer: /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft Manifest number: 01D4 Signing time: Wed 17 Sep 2025 03:18:32 +0000 Manifest this update: Wed 17 Sep 2025 03:18:31 +0000 Manifest next update: Wed 24 Sep 2025 03:18:31 +0000 Files and hashes: 1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: 6xVwThK4WdvJfEtM7yXhnU8AZWgN4Idc6j0+y6fNxHs=) 2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: sO+2+/cvQ7fG/IUMq+A+e08x9da5+jbIe5T9qmjARBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CDE4, serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Validity Not Before: Sep 17 03:18:31 2025 GMT Not After : Sep 24 03:18:31 2025 GMT Subject: CN=68ca2887-14b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:ea:a9:82:9b:8e:4f:47:53:8a:0a:e1:71: 70:a3:82:76:a0:05:3a:24:94:8b:62:80:3b:c9:74: e8:e9:2a:e2:1f:c2:72:08:79:0b:a4:23:6f:b0:10: f5:48:69:a1:15:f8:0a:af:46:79:e1:81:51:f7:42: 44:38:bc:1b:1b:5b:b1:ed:8d:cc:d2:f6:0b:4d:d6: 8c:f7:5a:f5:eb:e0:44:5a:96:9b:19:82:0c:65:a8: 45:47:ca:bf:5c:97:c5:34:dc:67:91:b2:b1:c0:5f: ee:22:ad:a6:22:db:76:c0:01:bd:12:4f:f1:a3:01: c3:ea:36:3d:c6:f1:2b:8c:d7:09:05:65:2a:55:52: b7:95:66:96:78:b6:11:7b:a2:61:cf:da:b5:ee:23: 48:fc:06:4b:b9:d4:c3:a7:f0:b4:73:df:49:25:ae: 36:f1:85:87:7b:67:0f:27:73:45:db:22:54:b7:cd: 16:b0:fd:9b:c0:23:26:83:6c:3e:35:09:1f:fe:f0: 62:68:4d:f5:82:65:53:7a:6c:f0:bb:fd:f7:01:97: 80:31:4c:b6:2a:e1:b8:e3:3f:ef:cf:c4:51:fb:47: 2a:ef:2e:e2:9a:2c:93:02:f2:bc:5e:b7:02:dd:9a: 3d:21:4f:96:ea:2b:e9:6b:28:6f:09:10:10:a2:01: e0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AC:AC:BD:69:62:1C:1A:8F:75:35:46:C6:5F:7B:88:AB:E4:68:18 X509v3 Authority Key Identifier: keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:31:af:e5:0c:1b:34:0f:b6:30:b2:71:99:03:59:99:81:f0: 3e:71:2d:98:dd:b5:36:d2:43:93:84:04:17:81:b0:fa:6f:4e: ea:15:3c:05:ab:06:e5:1b:29:f9:22:07:c6:b0:56:c2:0a:39: db:05:e9:43:8f:d9:46:46:7d:c6:a9:b2:d4:bd:34:38:76:63: 52:bf:9e:16:78:d3:0c:a9:5e:d1:4e:b5:0b:7f:71:18:9c:ab: 7a:01:0b:9f:c7:0d:df:df:d0:54:18:61:1b:06:e3:f2:5c:58: 87:bc:c4:28:25:f2:03:d9:e8:c6:ae:0b:12:26:70:70:f9:14: 04:28:97:4f:a3:ea:27:fa:84:8a:62:e5:77:61:46:a2:bf:1c: 3d:d9:98:31:ea:99:c2:fa:dd:a0:38:ba:3c:11:11:d2:31:ea: 5f:bc:3b:ca:c4:01:e4:0d:9d:4f:25:87:62:2d:ec:f1:08:16: b8:72:ef:91:d3:02:fa:9b:d6:8a:0e:81:af:74:f9:67:23:42: 86:88:fe:9a:d8:11:47:33:fc:64:30:06:c0:11:8f:b6:73:15: d6:7c:ef:8e:04:40:36:d8:97:58:89:cd:e9:d8:56:4b:c1:f8: 38:e6:13:fe:22:68:7f:e9:0d:7b:74:c6:16:4b:da:93:52:81: ce:79:fc:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNERTQxMTAvBgNVBAUTKEY3NUFDOERDMDQ0OTU3QjFCMTVBMEIxNUM2RURBMzE4 QjIzQjQwMzMwHhcNMjUwOTE3MDMxODMxWhcNMjUwOTI0MDMxODMxWjAYMRYwFAYD VQQDEw02OGNhMjg4Ny0xNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoTqqYKbjk9HU4oK4XFwo4J2oAU6JJSLYoA7yXTo6SriH8JyCHkLpCNvsBD1 SGmhFfgKr0Z54YFR90JEOLwbG1ux7Y3M0vYLTdaM91r16+BEWpabGYIMZahFR8q/ XJfFNNxnkbKxwF/uIq2mItt2wAG9Ek/xowHD6jY9xvErjNcJBWUqVVK3lWaWeLYR e6Jhz9q17iNI/AZLudTDp/C0c99JJa428YWHe2cPJ3NF2yJUt80WsP2bwCMmg2w+ NQkf/vBiaE31gmVTemzwu/33AZeAMUy2KuG44z/vz8RR+0cq7y7imiyTAvK8XrcC 3Zo9IU+W6ivpayhvCRAQogHgkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLesrL1p Yhwaj3U1RsZfe4ir5GgYMB8GA1UdIwQYMBaAFPdayNwESVexsVoLFcbtoxiyO0Az MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0RFNC9CNUE0NzM5MEM5 OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3R3hXZ3NWeHUyakdMSTdR RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxckkzQVJKVjdHeFdnc1Z4dTJqR0xJN1FETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0RFNC9CNUE0NzM5MEM5OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3 R3hXZ3NWeHUyakdMSTdRRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIMa/lDBs0D7YwsnGZA1mZgfA+cS2Y3bU20kOThAQXgbD6b07qFTwF qwblGyn5IgfGsFbCCjnbBelDj9lGRn3GqbLUvTQ4dmNSv54WeNMMqV7RTrULf3EY nKt6AQufxw3f39BUGGEbBuPyXFiHvMQoJfID2ejGrgsSJnBw+RQEKJdPo+on+oSK YuV3YUaivxw92Zgx6pnC+t2gOLo8ERHSMepfvDvKxAHkDZ1PJYdiLezxCBa4cu+R 0wL6m9aKDoGvdPlnI0KGiP6a2BFHM/xkMAbAEY+2cxXWfO+OBEA22JdYic3p2FZL wfg45hP+Imh/6Q17dMYWS9qTUoHOefwz -----END CERTIFICATE-----Generated at Fri Sep 19 00:41:16 2025 by rpki-client