$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft File: tBNlbNepj73iI3_FMUyf9-jxoJ4.mft (raw, json) Hash identifier: E5Fuajw2Qu5XyBqj2BTfdtHd4iLuREeDwXKaWm8N5Rg= Subject key identifier: 7B:C2:61:53:6B:4B:68:93:3C:AE:8A:09:CF:22:58:D5:AE:80:05:CE Authority key identifier: B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E Certificate issuer: /CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Certificate serial: 071F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft Manifest number: 0710 Signing time: Sat 06 Sep 2025 22:08:34 +0000 Manifest this update: Sat 06 Sep 2025 22:08:34 +0000 Manifest next update: Sat 13 Sep 2025 22:08:34 +0000 Files and hashes: 1: tBNlbNepj73iI3_FMUyf9-jxoJ4.crl (hash: /OzximBxNf0/Rngb7WX0vczqVfDuTWRKpxzf3QUZRkE=) 2: B61AFCF654A411EB88DE1D23C4F9AE02.roa (hash: NhhtAZYHbi3OfuXlyk66ji/E3ItRuOfQUaOAVkaAmDI=) 3: 4DB43F043E6611ECBD788C16C4F9AE02.roa (hash: ing2Wn3yGuRf8bHPBaTCd2sus9ikor0GkhqqDA1X+gI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5252, serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Validity Not Before: Sep 6 22:08:34 2025 GMT Not After : Sep 13 22:08:34 2025 GMT Subject: CN=68bcb0e2-3d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:86:9b:f1:0e:5f:3f:44:bc:23:fa:01:4b: 4f:70:19:b5:63:7e:37:4d:f4:fb:01:b6:ed:72:7e: cb:fd:cf:af:aa:65:9f:da:15:49:b0:b5:90:04:19: 48:34:cd:a4:54:be:e1:b7:f7:e0:c5:0b:20:1b:fc: 1e:77:d9:24:04:3d:14:b5:d6:8b:48:0a:15:70:03: d1:a2:9e:e9:12:5b:14:1b:d3:1e:d5:4d:80:23:6e: a5:93:10:ec:45:59:78:2f:ea:bf:79:98:d9:1d:f5: 04:c7:c8:83:18:ba:af:df:2c:00:a3:a7:24:60:fb: ca:00:8f:a7:9b:55:2f:87:7b:67:5d:f1:42:b5:59: cf:f0:62:31:bb:1f:24:72:fb:20:cb:bc:9c:8d:6d: bc:a1:eb:3e:58:d6:7a:35:b3:ff:95:df:d5:17:5b: 07:53:85:80:06:b0:9b:ea:d4:7a:cb:bc:8d:a3:d6: f5:3e:06:54:a7:09:98:b5:08:33:cf:6a:af:31:0e: cf:94:77:5b:db:26:e8:32:e4:4c:f2:9e:c0:82:53: 51:6a:78:56:c3:cd:48:b5:a4:1d:a8:c5:95:95:50: fe:11:a2:77:7e:a4:18:11:43:a0:7f:2c:52:9d:02: 38:a5:6d:39:7b:0c:29:e1:ad:0e:c5:2e:c4:e3:57: 89:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C2:61:53:6B:4B:68:93:3C:AE:8A:09:CF:22:58:D5:AE:80:05:CE X509v3 Authority Key Identifier: keyid:B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:eb:ea:25:2a:94:b7:8f:7e:bc:59:05:2b:6d:41:8d:4c:55: 04:e8:2f:bf:bd:02:2a:e8:8c:96:8d:a1:ab:41:8c:9c:f3:97: fd:90:88:0e:83:1a:92:83:12:4b:61:22:26:e8:cd:7f:6e:03: f8:8b:a3:26:6f:9c:46:5e:a9:d4:3e:92:70:85:1f:2d:8c:16: dc:d9:f7:8c:5d:a5:c5:22:19:da:64:14:b3:81:4b:e6:43:d4: 47:66:80:aa:f8:4b:a5:94:f3:ee:2a:7c:f9:5e:d7:4a:39:55: 75:0f:17:54:cd:a7:9a:7f:ce:10:61:6a:79:47:27:ce:62:64: 43:3e:f5:56:b4:23:16:b5:1c:ba:f2:07:f8:e3:40:08:3d:4e: f8:2c:b7:bb:43:59:aa:ce:f7:69:0f:70:5e:04:7a:88:51:34: 71:02:13:9b:18:34:33:29:8e:3c:28:30:ae:3f:a0:63:a4:42: 95:77:5b:fe:61:f2:54:1b:8b:ec:14:1e:86:e7:7a:4d:cb:fc: 71:76:2a:21:34:71:97:75:27:ed:ab:22:30:8e:68:1b:00:28: cc:cd:01:c1:d2:58:04:d5:d8:6b:7d:7b:fe:33:51:fb:b0:63: 99:c2:54:ae:ff:00:24:19:0d:bb:e4:b3:10:09:c2:8f:8b:85: 62:40:70:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyNTIxMTAvBgNVBAUTKEI0MTM2NTZDRDdBOThGQkRFMjIzN0ZDNTMxNEM5RkY3 RThGMUEwOUUwHhcNMjUwOTA2MjIwODM0WhcNMjUwOTEzMjIwODM0WjAYMRYwFAYD VQQDEw02OGJjYjBlMi0zZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYWGm/EOXz9EvCP6AUtPcBm1Y343TfT7Abbtcn7L/c+vqmWf2hVJsLWQBBlI NM2kVL7ht/fgxQsgG/wed9kkBD0UtdaLSAoVcAPRop7pElsUG9Me1U2AI26lkxDs RVl4L+q/eZjZHfUEx8iDGLqv3ywAo6ckYPvKAI+nm1Uvh3tnXfFCtVnP8GIxux8k cvsgy7ycjW28oes+WNZ6NbP/ld/VF1sHU4WABrCb6tR6y7yNo9b1PgZUpwmYtQgz z2qvMQ7PlHdb2yboMuRM8p7AglNRanhWw81ItaQdqMWVlVD+EaJ3fqQYEUOgfyxS nQI4pW05ewwp4a0OxS7E41eJgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvCYVNr S2iTPK6KCc8iWNWugAXOMB8GA1UdIwQYMBaAFLQTZWzXqY+94iN/xTFMn/fo8aCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTI1Mi9DRDE2M0JDQTU0 QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3M2lJM19GTVV5Zjktanhv SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCTmxiTmVwajczaUkzX0ZNVXlmOS1qeG9KNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTI1Mi9DRDE2M0JDQTU0QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3 M2lJM19GTVV5ZjktanhvSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj6+olKpS3j368WQUrbUGNTFUE6C+/vQIq6IyWjaGrQYyc85f9kIgO gxqSgxJLYSIm6M1/bgP4i6Mmb5xGXqnUPpJwhR8tjBbc2feMXaXFIhnaZBSzgUvm Q9RHZoCq+EullPPuKnz5XtdKOVV1DxdUzaeaf84QYWp5RyfOYmRDPvVWtCMWtRy6 8gf440AIPU74LLe7Q1mqzvdpD3BeBHqIUTRxAhObGDQzKY48KDCuP6BjpEKVd1v+ YfJUG4vsFB6G53pNy/xxdiohNHGXdSftqyIwjmgbACjMzQHB0lgE1dhrfXv+M1H7 sGOZwlSu/wAkGQ275LMQCcKPi4ViQHC0 -----END CERTIFICATE-----Generated at Mon Sep 8 08:38:37 2025 by rpki-client