$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json) Hash identifier: DPeE2uU1IxQj3BdtsG3PgblTdWfBMh3yqBrFQ4ATXKY= Subject key identifier: 40:8F:78:07:17:46:96:FD:17:25:54:21:3C:51:03:CB:98:6E:6C:98 Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft Manifest number: 014F Signing time: Wed 17 Sep 2025 04:50:57 +0000 Manifest this update: Wed 17 Sep 2025 04:50:56 +0000 Manifest next update: Wed 24 Sep 2025 04:50:56 +0000 Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: SE0OVPOg+7f1Y1kSYcEgmuIefgJyyQPtk9mX6EdvwRg=) 2: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: vJ2YKh1qvo6z7EsNb01ZnfIC7WfZlHkFbVKbRaXaFP0=) 3: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: /ZzSx5BufcsBFJm8hzU4SO+vyDuIxcR/d9CCuElSRT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Validity Not Before: Sep 17 04:50:56 2025 GMT Not After : Sep 24 04:50:56 2025 GMT Subject: CN=68ca3e31-fc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f3:5c:95:13:8a:c7:b4:f3:b8:81:ff:c3:f8: cf:47:46:d2:22:32:5e:f4:c0:4f:e0:65:2e:3c:ab: 52:c8:1a:05:2a:00:34:13:66:13:bd:f7:3c:20:46: 8e:2f:b2:15:e4:99:df:80:96:7c:31:c0:09:e0:08: 45:86:6e:e9:4f:f8:e8:bc:78:f4:c5:ce:d1:0c:79: e5:c2:59:5d:c7:a5:e0:66:c1:c1:a9:a0:dd:f3:70: 91:67:50:50:4f:68:24:b1:8e:03:e4:ab:99:5a:ae: 59:d8:eb:b1:25:4a:1d:38:0e:4e:ea:06:87:fc:b8: dd:f1:5e:c5:13:dd:0f:ca:3c:e8:f8:4c:a0:b1:f5: 6d:74:ed:65:5b:7e:26:79:9c:c5:9c:19:9b:fd:b5: 07:5e:72:75:34:8b:8a:0f:67:44:77:29:f6:55:3f: 78:36:0d:46:55:0d:8c:b1:a0:9a:ab:0e:d6:28:81: 77:46:95:77:2e:4e:c4:32:ff:2a:75:74:27:97:d9: 97:80:1f:82:f8:41:c9:5b:5f:96:84:1a:31:1e:a4: f3:9d:29:30:80:aa:87:fe:e4:03:48:31:08:b0:78: 08:ba:cf:50:c0:6f:6c:b8:d9:eb:6e:de:17:09:ca: f2:6a:d4:a0:77:4a:1f:17:c2:e1:f1:95:ba:f6:da: 87:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8F:78:07:17:46:96:FD:17:25:54:21:3C:51:03:CB:98:6E:6C:98 X509v3 Authority Key Identifier: keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:22:08:73:14:8d:d4:84:ce:53:d3:84:be:65:70:f7:8a:cc: f1:22:d7:74:9a:6a:39:88:c3:da:eb:4f:e4:f4:c2:27:29:bc: 68:d6:29:7d:eb:38:06:f0:19:c8:73:6b:6c:20:64:e3:40:41: 01:d5:de:b1:f0:73:f7:80:84:11:c6:8c:90:60:e0:38:fa:88: 80:6c:5e:08:43:98:f3:d8:f5:44:50:42:e4:02:10:7a:2c:48: a9:58:d9:98:83:7b:83:38:03:75:ec:97:c3:78:d3:b4:c2:93: 33:68:56:61:34:e0:af:8b:00:4f:69:5a:a7:97:34:e7:e1:89: e3:43:34:f5:50:7d:0f:24:5f:45:4f:18:a2:ec:13:ce:1c:62: 17:bf:c9:a0:d3:1a:30:cc:78:98:fe:49:db:77:51:76:64:00: 31:4a:70:47:e5:74:fc:1b:3d:95:5c:f8:a4:f4:03:3d:3e:c7: da:ae:cd:f0:d4:af:e6:ab:5d:51:f5:d8:26:96:d3:5c:52:f0: 90:10:21:1d:33:8e:54:1f:64:f1:8a:bf:f6:31:04:37:70:0c: 7a:91:74:a2:1b:32:46:35:45:45:fe:0b:10:1f:95:58:cc:5e: 34:29:ec:f3:79:6c:5a:e7:da:37:2c:b4:e5:af:cd:1f:c6:c3: 89:0b:02:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MjYxMTAvBgNVBAUTKDA1RkQyRDUxOUQ0MENCMjA4OTM3QkY4QThFNDYzRTZE ODQyQ0MwN0QwHhcNMjUwOTE3MDQ1MDU2WhcNMjUwOTI0MDQ1MDU2WjAYMRYwFAYD VQQDEw02OGNhM2UzMS1mYzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/NclROKx7TzuIH/w/jPR0bSIjJe9MBP4GUuPKtSyBoFKgA0E2YTvfc8IEaO L7IV5JnfgJZ8McAJ4AhFhm7pT/jovHj0xc7RDHnlwlldx6XgZsHBqaDd83CRZ1BQ T2gksY4D5KuZWq5Z2OuxJUodOA5O6gaH/Ljd8V7FE90Pyjzo+EygsfVtdO1lW34m eZzFnBmb/bUHXnJ1NIuKD2dEdyn2VT94Ng1GVQ2MsaCaqw7WKIF3RpV3Lk7EMv8q dXQnl9mXgB+C+EHJW1+WhBoxHqTznSkwgKqH/uQDSDEIsHgIus9QwG9suNnrbt4X CcryatSgd0ofF8Lh8ZW69tqHVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECPeAcX Rpb9FyVUITxRA8uYbmyYMB8GA1UdIwQYMBaAFAX9LVGdQMsgiTe/io5GPm2ELMB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyNi9BMTNDNTVDRTk4 QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5Q0pONy1LamtZLWJZUXN3 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JmMHRVWjFBeXlDSk43LUtqa1ktYllRc3dIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzUyNi9BMTNDNTVDRTk4QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5 Q0pONy1LamtZLWJZUXN3SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpIghzFI3UhM5T04S+ZXD3iszxItd0mmo5iMPa60/k9MInKbxo1il9 6zgG8BnIc2tsIGTjQEEB1d6x8HP3gIQRxoyQYOA4+oiAbF4IQ5jz2PVEUELkAhB6 LEipWNmYg3uDOAN17JfDeNO0wpMzaFZhNOCviwBPaVqnlzTn4YnjQzT1UH0PJF9F Txii7BPOHGIXv8mg0xowzHiY/knbd1F2ZAAxSnBH5XT8Gz2VXPik9AM9Psfars3w 1K/mq11R9dgmltNcUvCQECEdM45UH2Txir/2MQQ3cAx6kXSiGzJGNUVF/gsQH5VY zF40KezzeWxa59o3LLTlr80fxsOJCwKr -----END CERTIFICATE-----Generated at Fri Sep 19 02:34:25 2025 by rpki-client