$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft File: aTn8BA2lwwt2bceU-cpML0Gsruo.mft (raw, json) Hash identifier: Nhuf0ijoCF0GKnZRgl9qau6UVeDlb1TzByLL/KkNnHQ= Subject key identifier: 8E:EF:10:5A:1C:3C:FB:A2:4A:2F:DC:1F:6C:91:BF:00:82:AC:69:6C Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA Certificate issuer: /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft Manifest number: 0479 Signing time: Fri 19 Sep 2025 00:33:12 +0000 Manifest this update: Fri 19 Sep 2025 00:33:12 +0000 Manifest next update: Fri 26 Sep 2025 00:33:12 +0000 Files and hashes: 1: aTn8BA2lwwt2bceU-cpML0Gsruo.crl (hash: x7MI+qJT/QMFPeoggwIv+gz5+54P1nJQEQ0TGCOz4dg=) 2: 17ABE41ACAF611EE894A2D50C4F9AE02.roa (hash: AhLlGMUsYbOkOCNOVYTJ9rkCcumTaBTxAyd6gwUn/6c=) 3: 27E42824621B11ECB96F443FC4F9AE02.roa (hash: Sm62SuE35DgQNzh5GVaogSxOvuwCjlanLDW6px4c/Bw=) 4: 63E8739003C111EEB2272068C4F9AE02.roa (hash: s5rt5810stg0IMwxcPAHiQGAgJsDkYqxT+dEjt1VNWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2A1F, serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA Validity Not Before: Sep 19 00:33:12 2025 GMT Not After : Sep 26 00:33:12 2025 GMT Subject: CN=68cca4c8-7382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ac:57:ce:bf:49:46:83:c4:f4:eb:8e:84:11: ea:26:61:81:39:4f:f4:b1:9a:b6:c8:1a:11:17:0a: 30:7e:bc:2c:28:70:4f:55:e9:1f:3c:dd:82:bb:05: c1:a5:22:57:4e:35:81:42:af:1a:e2:b5:a5:ce:9f: 01:9d:1d:d9:23:67:0e:72:3c:77:59:12:23:ab:29: 93:b3:03:4a:00:81:fc:24:f5:b2:45:7c:d0:87:86: 54:1c:8f:64:38:4b:c2:87:18:f9:e2:16:ca:a1:7d: 45:95:2a:6e:57:4f:86:ed:92:8d:fe:75:f9:62:b9: a4:47:59:bb:5d:74:02:50:b4:51:dc:b4:36:8d:76: 81:bd:eb:a5:36:75:af:ec:98:59:ee:c8:a0:43:02: 52:0b:b2:cb:f0:48:7a:09:f7:89:81:cf:6d:10:30: 02:4d:67:70:45:3c:0c:b3:ff:1e:0d:b5:25:9b:22: f4:00:0d:18:5d:5f:77:0c:29:d4:4b:9b:8a:d6:0a: 43:3c:65:d9:79:87:df:52:54:89:0b:17:0c:eb:2a: 97:d1:f4:7f:05:d4:25:0c:97:08:d4:a3:33:58:a0: 12:29:11:60:57:72:cd:a8:e1:30:ec:8b:36:f3:fd: c4:6f:9b:69:17:60:e6:ea:2d:69:fd:ae:5c:16:e8: 89:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EF:10:5A:1C:3C:FB:A2:4A:2F:DC:1F:6C:91:BF:00:82:AC:69:6C X509v3 Authority Key Identifier: keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:00:e5:26:2b:ea:56:26:f0:db:af:8f:aa:99:1c:38:6f:ee: 6c:77:93:ec:7e:94:b6:80:7b:59:7c:8b:4c:6e:40:d7:ee:10: f5:d4:97:52:0c:ef:b8:13:92:cb:1b:11:2b:d0:ec:4d:af:b4: 92:d7:f6:9f:5c:61:ba:d5:40:08:d5:06:83:3c:35:4f:59:86: 3a:03:d1:27:53:fb:bf:4e:18:c5:5d:21:2b:3c:19:96:07:b3: 64:85:7f:a1:88:aa:80:f6:0f:21:da:3e:e4:3f:d1:7e:c3:18: d1:2c:e8:f9:3b:1b:22:f7:a0:e9:df:ca:db:ff:73:af:b1:f7: ba:8b:18:7f:46:4a:24:19:be:ba:bf:b1:d4:ca:52:d0:6c:05: 53:03:84:c8:18:6a:b0:bc:36:38:6d:46:e8:ef:33:2d:2b:d5: 4c:f9:89:4b:a5:5c:f8:3d:0c:df:3b:25:bd:72:41:b5:c3:f7: 11:1f:f1:8b:47:bc:d0:70:7f:88:b6:fe:b0:6a:57:4b:f0:68: b1:01:c0:25:a4:7a:7c:67:01:d1:c7:ab:6f:51:95:3f:c2:ec: 5a:08:cf:91:34:57:da:89:78:f7:3c:2d:10:b3:4d:0b:3a:d2: 92:d8:e5:7c:c2:6c:0c:cc:c4:42:9f:a0:9a:0b:9b:16:b7:c8: c3:65:93:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJBMUYxMTAvBgNVBAUTKDY5MzlGQzA0MERBNUMzMEI3NjZEQzc5NEY5Q0E0QzJG NDFBQ0FFRUEwHhcNMjUwOTE5MDAzMzEyWhcNMjUwOTI2MDAzMzEyWjAYMRYwFAYD VQQDEw02OGNjYTRjOC03MzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KxXzr9JRoPE9OuOhBHqJmGBOU/0sZq2yBoRFwowfrwsKHBPVekfPN2CuwXB pSJXTjWBQq8a4rWlzp8BnR3ZI2cOcjx3WRIjqymTswNKAIH8JPWyRXzQh4ZUHI9k OEvChxj54hbKoX1FlSpuV0+G7ZKN/nX5YrmkR1m7XXQCULRR3LQ2jXaBveulNnWv 7JhZ7sigQwJSC7LL8Eh6CfeJgc9tEDACTWdwRTwMs/8eDbUlmyL0AA0YXV93DCnU S5uK1gpDPGXZeYffUlSJCxcM6yqX0fR/BdQlDJcI1KMzWKASKRFgV3LNqOEw7Is2 8/3Eb5tpF2Dm6i1p/a5cFuiJdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7vEFoc PPuiSi/cH2yRvwCCrGlsMB8GA1UdIwQYMBaAFGk5/AQNpcMLdm3HlPnKTC9BrK7q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkExRi8xRUNGRkM0QzYy MTkxMUVDOTlBNTVGM0VDNEY5QUUwMi9hVG44QkEybHd3dDJiY2VVLWNwTUwwR3Ny dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUbjhCQTJsd3d0MmJjZVUtY3BNTDBHc3J1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkExRi8xRUNGRkM0QzYyMTkxMUVDOTlBNTVGM0VDNEY5QUUwMi9hVG44QkEybHd3 dDJiY2VVLWNwTUwwR3NydW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/AOUmK+pWJvDbr4+qmRw4b+5sd5PsfpS2gHtZfItMbkDX7hD11JdS DO+4E5LLGxEr0OxNr7SS1/afXGG61UAI1QaDPDVPWYY6A9EnU/u/ThjFXSErPBmW B7NkhX+hiKqA9g8h2j7kP9F+wxjRLOj5Oxsi96Dp38rb/3Ovsfe6ixh/RkokGb66 v7HUylLQbAVTA4TIGGqwvDY4bUbo7zMtK9VM+YlLpVz4PQzfOyW9ckG1w/cRH/GL R7zQcH+Itv6waldL8GixAcAlpHp8ZwHRx6tvUZU/wuxaCM+RNFfaiXj3PC0Qs00L OtKS2OV8wmwMzMRCn6CaC5sWt8jDZZNx -----END CERTIFICATE-----Generated at Fri Sep 19 03:44:22 2025 by rpki-client