$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: 23CyPa8amiQUaYWVYnUXC2O88kIIjBsxEmwKhO8m3A8= Subject key identifier: 37:AB:C1:EC:CB:B0:66:A2:60:FA:F1:01:DC:AC:7A:09:06:24:69:08 Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: CB Signing time: Sun 07 Sep 2025 06:10:24 +0000 Manifest this update: Sun 07 Sep 2025 06:10:23 +0000 Manifest next update: Sun 14 Sep 2025 06:10:23 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: St603nOFpWsv+7wk1a1ozQig4lUhKGMM8zKnHuM5J00=) 2: A8F5426250E311F09F3F2B1BC4F9AE02.roa (hash: TRnNVoMiwQ6ZhiElb/0Y9VLIsehKNmu+1efnXTmukN4=) 3: 9694E5F050E311F08B08231BC4F9AE02.roa (hash: 5CgN7FIvEpNpHCGRCJcHy85PN3cLvODwNDO+xufh/6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 06:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Sep 7 06:10:23 2025 GMT Not After : Sep 14 06:10:23 2025 GMT Subject: CN=68bd21cf-1f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:43:99:20:29:2c:01:6f:e5:94:8e:17:6b: 01:da:60:dd:15:31:82:19:35:7b:4c:2f:a0:bc:6c: f1:20:40:06:73:f9:c5:0a:45:d9:5c:e9:d0:84:b8: d3:c0:e9:70:be:90:5b:6c:02:5e:95:4a:b5:06:06: 60:3d:cb:b3:9c:a4:f0:ea:73:e0:34:19:a3:e1:c2: e7:a7:c0:06:e2:57:e4:97:66:c9:31:23:fc:9f:08: de:1e:31:b1:ac:97:5f:8d:b2:53:50:1e:56:57:ed: 89:07:f7:7c:66:d4:eb:88:3d:a1:14:35:2f:ca:20: 2d:ce:70:c3:95:f3:9b:58:48:de:2b:58:cd:02:23: fc:07:c1:fd:da:15:b0:18:c5:16:fa:56:54:69:27: f6:0f:45:51:52:20:b3:b1:e5:86:c8:17:cc:9b:2d: ce:f4:fb:6e:ac:88:55:e4:df:fe:77:00:ef:49:66: 9d:ca:39:79:11:ea:d2:48:b2:cf:94:1b:17:c8:d5: 71:87:ea:fc:5c:40:e0:42:f3:b3:43:7b:3a:8f:50: d3:00:d6:03:76:26:00:ec:6d:2c:7d:3e:2e:ab:52: 90:52:0a:c7:e9:ba:83:40:81:56:75:4f:f8:70:37: 80:9a:30:62:8d:c3:ec:e7:1c:b9:69:2c:4d:dc:a7: f6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AB:C1:EC:CB:B0:66:A2:60:FA:F1:01:DC:AC:7A:09:06:24:69:08 X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:0d:c1:47:69:77:b1:1a:22:3d:c4:ad:fc:85:ea:10:f9:aa: 1e:16:1b:59:fb:71:8b:60:88:6b:0b:1f:8c:52:d0:6c:ea:dc: 0c:07:a9:3c:4f:ae:cc:0e:06:cd:7e:af:31:1f:2f:7a:27:6e: 99:70:d9:1a:25:eb:57:47:24:04:95:18:ce:1e:51:fe:73:c9: 6e:d9:f8:0c:e4:a5:9b:b2:bd:d4:bf:cb:0e:cd:42:3a:67:d8: b0:a4:2e:39:00:c8:d4:2c:40:1f:cb:4b:0c:de:5b:75:c4:f8: e6:ae:db:1f:45:5c:0d:c2:e5:f4:33:26:ed:c5:5a:30:74:b6: e7:fc:ee:a9:af:9e:74:26:8d:b5:fa:d0:67:22:13:62:cf:bd: aa:c9:5a:d7:c4:f7:de:7d:30:97:70:68:74:04:3d:9d:d3:f6: 8d:5a:ff:31:82:58:b1:ac:e2:3b:98:b9:f7:71:3d:06:53:ec: 54:c6:18:55:1a:f5:50:72:e9:bb:a2:15:57:9e:22:af:f7:33: 44:9c:9d:cb:f4:d4:2e:43:63:ca:21:ee:05:99:32:93:82:e7: 2a:4d:91:5e:f4:f4:b1:3f:f0:33:55:2e:b7:5d:33:59:0e:f2: 68:dc:52:cd:b1:d5:fd:ba:aa:b5:cb:fd:6a:2d:ac:6a:93:c0: 5f:7f:ca:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjUwOTA3MDYxMDIzWhcNMjUwOTE0MDYxMDIzWjAYMRYwFAYD VQQDEw02OGJkMjFjZi0xZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiJDmSApLAFv5ZSOF2sB2mDdFTGCGTV7TC+gvGzxIEAGc/nFCkXZXOnQhLjT wOlwvpBbbAJelUq1BgZgPcuznKTw6nPgNBmj4cLnp8AG4lfkl2bJMSP8nwjeHjGx rJdfjbJTUB5WV+2JB/d8ZtTriD2hFDUvyiAtznDDlfObWEjeK1jNAiP8B8H92hWw GMUW+lZUaSf2D0VRUiCzseWGyBfMmy3O9PturIhV5N/+dwDvSWadyjl5EerSSLLP lBsXyNVxh+r8XEDgQvOzQ3s6j1DTANYDdiYA7G0sfT4uq1KQUgrH6bqDQIFWdU/4 cDeAmjBijcPs5xy5aSxN3Kf2VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDerwezL sGaiYPrxAdysegkGJGkIMB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY5MC80MDlDOTcwQTVBRTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBw eUJfY3p0ZVdMc3UzYkIwaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRDcFHaXexGiI9xK38heoQ+aoeFhtZ+3GLYIhrCx+MUtBs6twMB6k8 T67MDgbNfq8xHy96J26ZcNkaJetXRyQElRjOHlH+c8lu2fgM5KWbsr3Uv8sOzUI6 Z9iwpC45AMjULEAfy0sM3lt1xPjmrtsfRVwNwuX0MybtxVowdLbn/O6pr550Jo21 +tBnIhNiz72qyVrXxPfefTCXcGh0BD2d0/aNWv8xglixrOI7mLn3cT0GU+xUxhhV GvVQcum7ohVXniKv9zNEnJ3L9NQuQ2PKIe4FmTKTgucqTZFe9PSxP/AzVS63XTNZ DvJo3FLNsdX9uqq1y/1qLaxqk8Bff8qq -----END CERTIFICATE-----Generated at Mon Sep 8 08:38:04 2025 by rpki-client