$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft File: PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json) Hash identifier: 0EGVUCAJHI8xsA7cslJw5JfQb+mRShg3Ar+29zgJ7gk= Subject key identifier: A7:F6:6F:ED:33:06:52:CD:05:C9:EB:CC:42:BB:77:D6:AD:F4:EE:F2 Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Certificate serial: 0C37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft Manifest number: 0C2F Signing time: Thu 18 Sep 2025 18:51:02 +0000 Manifest this update: Thu 18 Sep 2025 18:51:01 +0000 Manifest next update: Thu 25 Sep 2025 18:51:01 +0000 Files and hashes: 1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: vFZpbWo/7pphonCDKCIMnZ3kA2sBEf9syNiJ6rckB44=) 2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: RpJ/3A2zXQw9C0hNB2vN4upiPschgzxuaxvOtctAWMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3127 (0xc37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Validity Not Before: Sep 18 18:51:01 2025 GMT Not After : Sep 25 18:51:01 2025 GMT Subject: CN=68cc5495-e0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d1:dd:e0:5b:3b:68:e3:90:3d:ac:3c:5c:7d: d4:d3:b7:bf:aa:d7:58:ac:d2:4c:f6:f5:7d:35:1a: 42:ec:b8:dd:18:20:4d:84:cd:7a:97:65:1d:96:22: a1:f0:9e:cc:71:cd:f1:24:6a:8c:10:f6:4c:35:72: ca:95:97:0d:83:8a:45:45:80:06:8c:06:45:55:f5: f2:e1:e3:ed:a3:2e:8d:2a:36:64:63:41:4b:46:15: 32:3c:9d:eb:9a:f6:1e:6a:20:5b:02:bb:02:75:77: 0d:00:96:00:80:fb:c6:e0:43:7c:90:bb:61:ef:33: ee:3c:d2:1b:f1:cd:a7:74:33:80:ed:41:1a:1a:6f: f5:85:a5:42:85:41:1b:10:df:95:4b:bd:01:b3:04: ac:30:82:ac:71:61:94:f8:44:cf:38:2d:0f:27:d2: 72:da:a7:48:33:df:ba:ff:37:d0:15:04:78:62:fe: 74:a1:1c:6c:4f:e1:5a:d8:90:f2:11:95:59:32:b2: f5:58:d9:73:e6:26:b3:1a:a2:60:0b:57:22:93:a9: c6:e7:6b:11:ea:55:8c:d5:51:a8:6b:f0:5b:8e:8d: 94:04:fb:7b:a5:c9:0b:a6:27:ff:10:02:da:c2:16: 2c:f0:73:b7:a9:d5:70:ab:2b:b6:d1:6a:7c:14:c9: 57:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F6:6F:ED:33:06:52:CD:05:C9:EB:CC:42:BB:77:D6:AD:F4:EE:F2 X509v3 Authority Key Identifier: keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:30:c2:c9:81:c9:b9:cc:d2:c4:c7:31:cd:e7:58:ee:4b:0f: 79:08:3c:ee:3c:be:d3:6c:f3:ef:8e:e3:57:f2:f1:d9:9b:65: 57:d6:a7:4b:af:22:7f:da:b5:1c:97:00:a2:00:21:e0:90:78: 24:a6:8a:92:0f:ab:f8:8b:a3:c0:6a:0e:3e:d0:e6:94:3b:8f: f5:fb:24:6c:fb:ce:6c:39:8b:04:3d:f2:44:24:a7:11:9e:a7: c0:bc:0b:01:75:8d:11:04:ff:01:6d:cb:7a:6a:94:59:30:58: 1d:65:8e:94:3c:68:ff:eb:a1:d3:38:61:8d:d0:6b:dd:16:62: 04:f7:27:53:25:7e:07:2e:6b:a1:5a:fc:07:85:ae:90:04:09: 7f:b7:09:99:8b:f4:d4:67:58:08:3f:0b:ad:54:9d:72:bb:18: 09:0a:f3:ea:e9:0f:7d:68:ab:b0:26:ec:c6:d9:7f:27:e3:c8: c6:5e:4f:e6:e4:db:d6:73:68:20:33:c3:40:5e:95:67:80:ca: 00:a7:f2:a8:49:fd:e0:cf:5e:7f:36:ec:1c:44:22:19:55:af: c0:cd:49:6e:4b:d2:07:27:47:8d:c8:30:13:2b:f5:7d:3d:bd: 4f:e6:9f:cb:93:e2:4d:71:f8:49:93:72:e4:9e:06:81:f2:79: 0f:1f:f2:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5 OEExMjExM0YwHhcNMjUwOTE4MTg1MTAxWhcNMjUwOTI1MTg1MTAxWjAYMRYwFAYD VQQDEw02OGNjNTQ5NS1lMGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59Hd4Fs7aOOQPaw8XH3U07e/qtdYrNJM9vV9NRpC7LjdGCBNhM16l2UdliKh 8J7Mcc3xJGqMEPZMNXLKlZcNg4pFRYAGjAZFVfXy4ePtoy6NKjZkY0FLRhUyPJ3r mvYeaiBbArsCdXcNAJYAgPvG4EN8kLth7zPuPNIb8c2ndDOA7UEaGm/1haVChUEb EN+VS70BswSsMIKscWGU+ETPOC0PJ9Jy2qdIM9+6/zfQFQR4Yv50oRxsT+Fa2JDy EZVZMrL1WNlz5iazGqJgC1cik6nG52sR6lWM1VGoa/Bbjo2UBPt7pckLpif/EALa whYs8HO3qdVwqyu20Wp8FMlXDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKf2b+0z BlLNBcnrzEK7d9at9O7yMB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkJGNS85RDBCNDIyMjEzRjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3 dkNvUVlUQ0plZmVZb1NFVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZMMLJgcm5zNLExzHN51juSw95CDzuPL7TbPPvjuNX8vHZm2VX1qdL ryJ/2rUclwCiACHgkHgkpoqSD6v4i6PAag4+0OaUO4/1+yRs+85sOYsEPfJEJKcR nqfAvAsBdY0RBP8Bbct6apRZMFgdZY6UPGj/66HTOGGN0GvdFmIE9ydTJX4HLmuh WvwHha6QBAl/twmZi/TUZ1gIPwutVJ1yuxgJCvPq6Q99aKuwJuzG2X8n48jGXk/m 5NvWc2ggM8NAXpVngMoAp/KoSf3gz15/NuwcRCIZVa/AzUluS9IHJ0eNyDATK/V9 Pb1P5p/Lk+JNcfhJk3LkngaB8nkPH/Lv -----END CERTIFICATE-----Generated at Fri Sep 19 06:52:32 2025 by rpki-client