$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft File: -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json) Hash identifier: gR22dvG3/itLeiWavXhK4xdxZ8G34V36aZeUrqFo1Jc= Subject key identifier: 4C:B3:BA:FD:5B:64:08:7C:89:C2:37:03:EB:C7:D1:C1:84:1C:FF:AE Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Certificate serial: 0270 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft Manifest number: 026B Signing time: Fri 19 Sep 2025 02:11:46 +0000 Manifest this update: Fri 19 Sep 2025 02:11:45 +0000 Manifest next update: Fri 26 Sep 2025 02:11:45 +0000 Files and hashes: 1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: jHkZjSYtHMCaqUpoYi6cgVNVnMFaFOa8BJoQ+29bWCg=) 2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: qFfisBxRiCqfGUur/S/I0P4ucD2aKemCvw2qjb/eV4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 02:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Validity Not Before: Sep 19 02:11:45 2025 GMT Not After : Sep 26 02:11:45 2025 GMT Subject: CN=68ccbbe1-4305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:19:f9:24:ec:7f:2f:e3:b0:e8:de:2d:1c: 03:80:98:ae:66:3a:ee:0a:a7:01:62:d4:3c:de:50: df:52:63:d9:d2:59:10:d1:d1:4b:82:39:43:7d:aa: 0d:e2:37:c5:98:5e:fe:9e:dc:78:32:fc:c1:22:73: b0:35:e4:61:b7:7b:1a:37:50:cd:04:a0:f4:4e:3c: e9:01:38:49:cf:26:7e:d6:0e:44:58:01:fe:8c:d6: 2c:66:d9:a5:06:35:92:b9:6a:89:d3:e5:3e:78:7f: 59:77:07:a3:75:f1:91:d4:ef:27:05:df:01:77:45: d9:1a:42:63:51:a5:3e:84:81:da:f4:ad:e4:df:5c: e2:4f:5f:de:69:c9:bf:7b:26:54:2b:5c:54:cc:af: a2:e7:a2:80:a7:a5:28:98:65:3f:69:56:1f:91:e8: 2b:d3:fa:02:22:b0:18:7e:3c:c4:44:71:ea:0b:4c: f1:fe:95:f3:40:df:81:ef:fc:96:3b:28:d3:8b:37: 78:b8:e4:97:dc:69:42:27:30:c1:67:76:52:0d:fa: b6:cc:ff:5a:f9:d7:da:bc:04:71:89:7c:4c:ca:af: 6a:3c:ec:a4:3c:52:af:71:a8:7f:97:b3:af:44:da: 3f:66:86:2e:7a:d3:87:2c:b4:57:5e:50:35:33:d1: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B3:BA:FD:5B:64:08:7C:89:C2:37:03:EB:C7:D1:C1:84:1C:FF:AE X509v3 Authority Key Identifier: keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:59:06:7f:7f:f3:b7:61:c3:89:e7:cd:23:40:1e:d3:8d:bb: 2d:55:64:e6:aa:52:fa:3c:8f:17:31:18:d3:18:1d:aa:46:c4: 0e:73:73:8f:a5:5c:6a:c9:37:17:c3:d7:4f:ec:f4:0f:a0:3f: 8b:79:d3:85:0a:00:e6:d6:69:44:10:30:f5:2b:fa:75:80:eb: 41:38:3a:1c:f2:53:05:af:5e:43:23:e0:10:a2:46:e6:bf:e4: 55:c3:39:ba:5c:26:6f:d3:82:e1:ce:51:8b:24:5f:9f:f2:8f: 24:86:c4:b8:e6:0d:0a:95:ad:19:64:32:dd:f7:fc:2d:7b:c2: 89:9e:ae:44:04:7a:bc:86:77:3c:92:2d:df:12:d6:c6:6a:e9: ad:d7:cb:46:28:5a:c0:bf:4e:64:37:3a:99:3b:6a:bc:36:e4: 15:b6:a8:dd:9b:5d:68:1e:65:2c:af:f8:ef:57:1f:ca:cd:7f: 4c:89:57:2a:fb:23:44:d3:e1:f8:8b:c7:04:8a:0d:cd:07:9f: 59:29:f0:7c:94:3a:9c:bd:df:fd:7a:14:7b:40:04:cd:f5:40: 18:d7:1c:01:25:32:f4:f3:5e:7b:4f:61:19:48:64:3c:ea:4f: ad:c4:51:01:58:c9:ef:4e:41:70:c4:74:45:6f:65:52:41:bc: a3:7d:a0:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QjgxMTAvBgNVBAUTKEY4MDNDMzcxOEYwRTgxMjBENDNFQjAzNDgwOUY2QThC Mzg4NEQ3OUIwHhcNMjUwOTE5MDIxMTQ1WhcNMjUwOTI2MDIxMTQ1WjAYMRYwFAYD VQQDEw02OGNjYmJlMS00MzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjgZ+STsfy/jsOjeLRwDgJiuZjruCqcBYtQ83lDfUmPZ0lkQ0dFLgjlDfaoN 4jfFmF7+ntx4MvzBInOwNeRht3saN1DNBKD0TjzpAThJzyZ+1g5EWAH+jNYsZtml BjWSuWqJ0+U+eH9ZdwejdfGR1O8nBd8Bd0XZGkJjUaU+hIHa9K3k31ziT1/eacm/ eyZUK1xUzK+i56KAp6UomGU/aVYfkegr0/oCIrAYfjzERHHqC0zx/pXzQN+B7/yW OyjTizd4uOSX3GlCJzDBZ3ZSDfq2zP9a+dfavARxiXxMyq9qPOykPFKvcah/l7Ov RNo/ZoYuetOHLLRXXlA1M9GxQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyzuv1b ZAh8icI3A+vH0cGEHP+uMB8GA1UdIwQYMBaAFPgDw3GPDoEg1D6wNICfaos4hNeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZCOC8zODg0MTMxODJB NjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dTRFVQckEwZ0o5cWl6aUUx NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BUERjWThPZ1NEVVByQTBnSjlxaXppRTE1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZCOC8zODg0MTMxODJBNjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dT RFVQckEwZ0o5cWl6aUUxNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzWQZ/f/O3YcOJ580jQB7TjbstVWTmqlL6PI8XMRjTGB2qRsQOc3OP pVxqyTcXw9dP7PQPoD+LedOFCgDm1mlEEDD1K/p1gOtBODoc8lMFr15DI+AQokbm v+RVwzm6XCZv04LhzlGLJF+f8o8khsS45g0Kla0ZZDLd9/wte8KJnq5EBHq8hnc8 ki3fEtbGaumt18tGKFrAv05kNzqZO2q8NuQVtqjdm11oHmUsr/jvVx/KzX9MiVcq +yNE0+H4i8cEig3NB59ZKfB8lDqcvd/9ehR7QATN9UAY1xwBJTL08157T2EZSGQ8 6k+txFEBWMnvTkFwxHRFb2VSQbyjfaDo -----END CERTIFICATE-----Generated at Fri Sep 19 18:55:42 2025 by rpki-client