$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json) Hash identifier: 69aex4Q0wdbOpAlyuODsSRUxN3GH3qd6LR94EAw0Cjc= Subject key identifier: 2A:45:0D:41:27:E0:57:AB:8A:F9:4C:D0:92:37:FD:4D:84:EB:41:8E Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft Manifest number: 4D Signing time: Wed 17 Sep 2025 08:02:51 +0000 Manifest this update: Wed 17 Sep 2025 08:02:51 +0000 Manifest next update: Wed 24 Sep 2025 08:02:51 +0000 Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: To9Oir4yZZDyl5/5DEmN6Tm7p/BFVbMIXAtCuAebxv0=) 2: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: OpKLsw9gUBvgDq3xLq9YboZIcPYYkBwvYdkkqKU3FB4=) 3: 301DED0C86F911F08DBDFA61C4F9AE02.roa (hash: AdxHV9vvwlkePP0ziZ0q7aeuDgAw2EtvgFWx56k+iSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Validity Not Before: Sep 17 08:02:51 2025 GMT Not After : Sep 24 08:02:51 2025 GMT Subject: CN=68ca6b2b-f66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:30:50:4e:64:5c:fd:0e:96:3e:7d:4b:57:17: a7:19:f2:25:21:b8:9e:e6:03:d9:72:99:1b:ef:a6: 63:8e:9e:b0:70:a9:36:37:54:36:2d:33:7e:86:6e: 8e:9d:9b:28:9f:26:43:8b:b9:3f:eb:fc:18:64:0a: c7:86:14:18:b7:6f:64:46:b3:ee:9c:97:09:7b:36: 43:82:5b:ca:75:e3:39:27:74:4b:1b:28:4e:6e:a1: 53:f4:4e:14:d1:06:0c:40:f6:cf:25:69:12:d3:ea: 8e:87:26:bc:be:4a:cf:93:87:3f:e9:87:e8:d6:eb: c0:6a:35:7f:ec:0b:28:e3:8c:66:98:cc:bd:7a:05: d6:8a:72:f1:db:2a:0b:06:8f:15:fa:46:59:78:a0: 5b:59:65:54:d6:2d:57:0a:ae:e5:ce:e5:6b:ac:9b: ed:3d:d8:4b:30:f1:3b:af:2f:95:64:4e:94:86:4e: ab:48:97:16:4f:81:8a:e3:df:a8:78:68:29:e0:a3: f7:e5:d6:e6:bb:c1:fe:aa:a1:f4:99:60:23:59:be: ab:d0:07:e5:68:eb:e3:1d:70:24:84:fa:7e:a5:a1: db:a8:c7:45:ce:7b:01:b0:c1:1b:62:d3:bc:6a:f6: 42:28:ed:49:8f:0a:c0:29:6a:cf:9b:f9:00:d9:32: 51:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:45:0D:41:27:E0:57:AB:8A:F9:4C:D0:92:37:FD:4D:84:EB:41:8E X509v3 Authority Key Identifier: keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:60:e8:48:34:19:9e:68:70:0c:f8:c8:eb:01:7f:64:31:f3: 44:80:35:e3:92:62:c6:07:e3:f2:b1:5c:f9:6f:f9:d6:bc:b5: 26:f9:34:0a:30:82:76:87:48:96:0c:bc:4b:e2:3a:da:09:33: 6f:2b:17:ec:e4:44:d7:40:ee:d3:0c:f9:c0:9c:09:da:85:ae: 6b:2f:b3:3c:f3:36:03:4e:31:3c:1a:3a:ba:ae:ec:89:53:a7: e1:ce:76:49:62:c8:c7:8d:32:36:d0:a1:91:58:fa:94:a0:0a: d0:64:ed:be:36:7f:32:20:59:35:e6:b9:49:4e:23:06:d0:7e: c0:ca:0f:25:a5:04:c8:ea:4c:7c:00:2b:1f:1a:84:43:ae:bc: a7:2f:38:dd:12:63:db:6b:6d:5c:88:82:33:68:76:22:28:db: 82:78:0a:bf:84:03:66:b3:49:b0:46:50:ef:d5:0d:19:ce:7c: 9b:e9:5f:51:78:b8:e4:a7:b7:d0:6c:f0:f5:ba:b5:ee:f2:a2: 1f:33:0d:79:67:8c:bf:29:85:54:ee:89:17:b0:2a:e1:46:d5: e9:3a:c7:85:c6:60:fe:dd:b4:94:7f:a7:37:40:41:2b:6d:b2: a2:d3:3a:8e:10:27:43:09:e1:56:9a:41:33:f9:07:9a:e9:84: 49:e8:1c:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUZDRjExMC8GA1UEBRMoOThBRTk1NkQ0MjZFMTYwMkNFRDhCQjcyNTg4RjYyQTNE QTEyQTk1NTAeFw0yNTA5MTcwODAyNTFaFw0yNTA5MjQwODAyNTFaMBgxFjAUBgNV BAMTDTY4Y2E2YjJiLWY2NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNMFBOZFz9DpY+fUtXF6cZ8iUhuJ7mA9lymRvvpmOOnrBwqTY3VDYtM36Gbo6d myifJkOLuT/r/BhkCseGFBi3b2RGs+6clwl7NkOCW8p14zkndEsbKE5uoVP0ThTR BgxA9s8laRLT6o6HJry+Ss+Thz/ph+jW68BqNX/sCyjjjGaYzL16BdaKcvHbKgsG jxX6Rll4oFtZZVTWLVcKruXO5Wusm+092Esw8TuvL5VkTpSGTqtIlxZPgYrj36h4 aCngo/fl1ua7wf6qofSZYCNZvqvQB+Vo6+MdcCSE+n6loduox0XOewGwwRti07xq 9kIo7UmPCsApas+b+QDZMlEfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKkUNQSfg V6uK+UzQkjf9TYTrQY4wHwYDVR0jBBgwFoAUmK6VbUJuFgLO2LtyWI9io9oSqVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RkNGL0I4NEM2MDNBMUU1 RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdMTzJMdHlXSTlpbzlvU3FW VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUs2VmJVSnVGZ0xPMkx0eVdJOWlvOW9TcVZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RkNGL0I4NEM2MDNBMUU1RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdM TzJMdHlXSTlpbzlvU3FWVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH1g6Eg0GZ5ocAz4yOsBf2Qx80SANeOSYsYH4/KxXPlv+da8tSb5NAow gnaHSJYMvEviOtoJM28rF+zkRNdA7tMM+cCcCdqFrmsvszzzNgNOMTwaOrqu7IlT p+HOdkliyMeNMjbQoZFY+pSgCtBk7b42fzIgWTXmuUlOIwbQfsDKDyWlBMjqTHwA Kx8ahEOuvKcvON0SY9trbVyIgjNodiIo24J4Cr+EA2azSbBGUO/VDRnOfJvpX1F4 uOSnt9Bs8PW6te7yoh8zDXlnjL8phVTuiRewKuFG1ek6x4XGYP7dtJR/pzdAQStt sqLTOo4QJ0MJ4VaaQTP5B5rphEnoHOA= -----END CERTIFICATE-----Generated at Fri Sep 19 00:47:47 2025 by rpki-client