$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft File: C71wWJDyeOHVk-mKdPA0cPeU_lw.mft (raw, json) Hash identifier: 6NZ6J13PAmfMLpARAdaUwdT1zMaoOT319n/pEm0mOQw= Subject key identifier: 44:6B:0B:F7:30:B0:43:F3:BA:C7:DC:0E:B9:19:A2:8E:46:CF:8A:44 Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C Certificate issuer: /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Certificate serial: 0AE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft Manifest number: 0AD8 Signing time: Mon 08 Sep 2025 19:29:45 +0000 Manifest this update: Mon 08 Sep 2025 19:29:45 +0000 Manifest next update: Mon 15 Sep 2025 19:29:45 +0000 Files and hashes: 1: C71wWJDyeOHVk-mKdPA0cPeU_lw.crl (hash: Tw+Nn9/y5b8ovFnVPEhZQFGgQiRJ1EnrLS064gZXnvU=) 2: FF723568A0F311EBA4E4D83CC4F9AE02.roa (hash: mPyJyn/hNgsJM5dLLqcQiKjGiDQ28uU6I1BenfIYNic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2791 (0xae7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5E1F, serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Validity Not Before: Sep 8 19:29:45 2025 GMT Not After : Sep 15 19:29:45 2025 GMT Subject: CN=68bf2ea9-7a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:b0:a0:74:b5:6c:81:ae:b3:2e:52:09:e0: be:89:b7:07:10:6b:ac:0d:52:ca:67:ac:47:ee:f3: d2:1b:b8:e8:57:a0:fc:6f:5b:f3:d5:01:ba:fc:f6: a4:67:a3:20:c6:3a:b8:01:67:f4:78:53:fe:c6:65: 7a:b5:9a:51:7b:13:91:2e:a6:93:2d:f9:9a:b8:99: ac:9e:21:6e:70:80:59:d2:d3:bd:a9:1b:95:ca:72: b5:d7:c7:46:90:ab:e4:dd:6f:e9:5a:09:ae:95:08: 58:f3:9f:b3:f8:1f:c6:e6:50:69:fc:21:42:b7:8d: c6:a0:2a:30:2d:40:37:fb:c3:b7:4e:f3:ca:53:75: 99:26:28:91:d8:1d:94:a7:3d:20:46:2b:b3:d2:1a: 56:0b:19:21:19:75:80:cd:0f:94:1b:56:f4:4a:ba: b6:84:0f:c6:a1:0a:1c:19:ce:b2:85:7a:7c:6e:43: 37:1d:b5:14:87:96:ad:a0:60:f3:60:6c:5d:d4:c9: 81:b9:c7:30:e8:89:5f:5e:94:0b:95:1d:3f:65:40: 15:93:4d:20:49:22:55:cd:89:de:82:db:71:68:dd: e6:42:77:70:3c:0d:11:d1:cf:43:db:f3:bc:28:b0: 64:42:43:3f:e1:74:71:28:db:5b:53:19:1a:ae:8b: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6B:0B:F7:30:B0:43:F3:BA:C7:DC:0E:B9:19:A2:8E:46:CF:8A:44 X509v3 Authority Key Identifier: keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4f:f1:e6:bb:59:8f:4d:db:90:42:51:eb:95:c9:2e:49:d4: f2:c3:9f:ad:09:84:74:3f:2f:f8:5a:de:25:bf:09:c7:c8:a4: 13:50:57:f2:30:f0:44:78:e7:e3:d9:a0:f6:e4:19:5d:42:96: 34:d6:2c:87:d7:60:34:d4:bb:3a:4c:b5:aa:6c:ce:e3:37:fe: 65:05:13:3a:bf:4b:aa:3c:e4:ab:9c:f9:25:77:a4:ff:08:d0: f4:6c:e5:54:07:01:01:e6:75:c3:e3:83:9d:8d:18:96:9f:98: cc:85:ef:e8:bf:6a:d1:c4:10:90:24:df:4e:5c:14:1d:83:e8: a6:54:07:ad:f3:cf:fd:d5:7f:2a:41:14:e7:ab:4a:44:dc:ab: 5c:3f:90:19:67:52:60:f8:66:f3:ea:03:b9:69:f9:39:fe:11: 92:f7:e4:72:6b:25:fb:43:c2:88:6a:e1:eb:e3:52:54:fd:8d: 4a:e7:18:c6:ae:a2:1c:af:c1:f5:0e:e1:e7:22:87:e8:9a:08: 85:05:88:c2:8a:cc:11:c2:60:84:e8:e1:be:85:a6:cc:6b:ba: ee:3e:b2:57:3d:47:e0:b6:ee:6e:3f:4d:a3:36:14:2b:7c:02: 8e:ba:bd:af:98:b5:6c:7c:8d:ea:19:85:e0:56:e4:15:db:d9: 75:fb:6f:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFMUYxMTAvBgNVBAUTKDBCQkQ3MDU4OTBGMjc4RTFENTkzRTk4QTc0RjAzNDcw Rjc5NEZFNUMwHhcNMjUwOTA4MTkyOTQ1WhcNMjUwOTE1MTkyOTQ1WjAYMRYwFAYD VQQDEw02OGJmMmVhOS03YTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4CwoHS1bIGusy5SCeC+ibcHEGusDVLKZ6xH7vPSG7joV6D8b1vz1QG6/Pak Z6Mgxjq4AWf0eFP+xmV6tZpRexORLqaTLfmauJmsniFucIBZ0tO9qRuVynK118dG kKvk3W/pWgmulQhY85+z+B/G5lBp/CFCt43GoCowLUA3+8O3TvPKU3WZJiiR2B2U pz0gRiuz0hpWCxkhGXWAzQ+UG1b0Srq2hA/GoQocGc6yhXp8bkM3HbUUh5atoGDz YGxd1MmBuccw6IlfXpQLlR0/ZUAVk00gSSJVzYnegttxaN3mQndwPA0R0c9D2/O8 KLBkQkM/4XRxKNtbUxkarovozwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERrC/cw sEPzusfcDrkZoo5Gz4pEMB8GA1UdIwQYMBaAFAu9cFiQ8njh1ZPpinTwNHD3lP5c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUUxRi8wMUY3RDZDQTU4 NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVPSFZrLW1LZFBBMGNQZVVf bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3MXdXSkR5ZU9IVmstbUtkUEEwY1BlVV9sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUUxRi8wMUY3RDZDQTU4NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVP SFZrLW1LZFBBMGNQZVVfbHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPT/Hmu1mPTduQQlHrlckuSdTyw5+tCYR0Py/4Wt4lvwnHyKQTUFfy MPBEeOfj2aD25BldQpY01iyH12A01Ls6TLWqbM7jN/5lBRM6v0uqPOSrnPkld6T/ CND0bOVUBwEB5nXD44OdjRiWn5jMhe/ov2rRxBCQJN9OXBQdg+imVAet88/91X8q QRTnq0pE3KtcP5AZZ1Jg+Gbz6gO5afk5/hGS9+RyayX7Q8KIauHr41JU/Y1K5xjG rqIcr8H1DuHnIofomgiFBYjCiswRwmCE6OG+habMa7ruPrJXPUfgtu5uP02jNhQr fAKOur2vmLVsfI3qGYXgVuQV29l1+2+B -----END CERTIFICATE-----Generated at Tue Sep 9 19:18:43 2025 by rpki-client