$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: ttnu/4G96PFdLMKP4ogOq8PqR1br52669EHyQ0NRyLI= Subject key identifier: 00:AF:65:47:1D:80:05:BA:A7:C9:B4:57:83:23:95:42:D0:25:9A:65 Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: 016C Signing time: Tue 09 Sep 2025 03:59:13 +0000 Manifest this update: Tue 09 Sep 2025 03:59:13 +0000 Manifest next update: Tue 16 Sep 2025 03:59:13 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: MBYZADKgEJL3uxjl0KbNE4EYTtmTkilqu9jNEtTnmlU=) 2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: zgC2BukFvqF6vF8m1zT1OqU7vAyEsCa9SdkeX8vwSl0=) 3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: sUPjSnVrnjmDdoMwCFJp2zuEZdscR4LvuhmHJ1v7ZYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: Sep 9 03:59:13 2025 GMT Not After : Sep 16 03:59:13 2025 GMT Subject: CN=68bfa611-1b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:66:eb:4e:ae:c2:6b:56:c0:d5:44:37:38:1e: 38:7d:d0:68:88:f5:c7:47:e9:73:d6:ac:78:1e:e7: b3:a8:f3:97:7f:21:a3:5a:ef:8a:18:d1:02:97:99: 04:7e:37:bb:e3:9e:98:88:42:46:3f:7f:ef:cc:ed: a3:1c:9d:63:b6:e5:ec:67:37:57:c1:2d:d2:8d:15: 32:86:b7:32:be:ca:5e:77:2e:75:9c:04:9a:d4:81: 5d:ed:e7:eb:37:8b:90:64:9f:05:bd:b6:5b:2a:b5: c8:9d:70:a3:c7:60:6e:b5:d4:ed:c5:e7:a3:1b:db: 4e:29:4f:3c:4a:bb:85:e8:37:7a:56:e7:24:8e:03: 5d:50:34:cf:7d:1f:52:57:00:42:c3:ca:0f:3e:1f: 72:2a:ad:f6:67:4f:06:8f:9f:23:e8:ad:5b:e4:d8: 9d:3a:d1:cf:1b:08:a5:a0:f7:8c:d3:8e:a8:18:03: 80:d8:66:3a:74:b0:02:07:79:11:b9:14:94:59:a0: 20:3d:16:60:94:a3:4c:9b:08:55:de:da:b4:74:a9: 0a:62:80:6a:6b:ed:92:c9:75:88:bd:61:0e:82:21: cf:77:93:57:39:6e:a8:7c:a7:b4:83:8d:c0:91:7f: 0d:62:82:7e:53:9e:96:75:b2:13:d2:16:95:13:5d: fa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AF:65:47:1D:80:05:BA:A7:C9:B4:57:83:23:95:42:D0:25:9A:65 X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b4:df:48:60:53:76:20:0b:3b:ec:4c:b1:8d:42:5c:62:a9: 4e:f9:63:e2:e4:33:e0:ce:bf:16:9c:0b:78:22:91:5a:33:01: 78:5a:31:ce:f6:31:a5:72:b3:9f:16:d2:11:33:75:10:9b:dc: 18:6c:5f:65:ba:f4:13:4b:5d:a3:f7:0c:e0:91:f8:7b:f2:39: 30:d3:97:76:0d:b3:8f:8f:ec:6f:64:e5:a9:a4:12:a8:94:c8: 72:bb:ab:d0:5c:9f:d3:ed:c4:09:f0:1c:9d:95:be:1b:8e:c6: 63:b7:ed:05:03:0b:ce:a7:1b:09:56:7b:ec:0b:b7:c9:c1:43: 23:d0:bd:85:64:2f:b5:3b:fa:ba:05:b4:17:7d:68:23:d6:11: 3d:e0:cc:35:5a:32:8b:12:8f:a8:7a:c1:ea:a0:79:7f:55:5d: e7:1e:e7:02:d7:4e:46:de:a4:4b:82:32:22:9e:88:af:8f:3e: ae:01:e6:8d:12:c8:f6:d0:e9:f8:26:36:9d:74:19:dc:1a:3b: 16:58:06:4e:b2:eb:8b:6c:a3:6b:36:2f:28:48:bc:15:95:fd: db:bd:a1:b9:4c:d9:44:51:f3:57:8d:ae:38:95:19:ce:26:b1: b5:84:c5:52:02:0c:d7:6f:de:a5:de:a8:5c:43:7b:66:5e:ba: 9e:f6:d4:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjUwOTA5MDM1OTEzWhcNMjUwOTE2MDM1OTEzWjAYMRYwFAYD VQQDEw02OGJmYTYxMS0xYjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42brTq7Ca1bA1UQ3OB44fdBoiPXHR+lz1qx4HuezqPOXfyGjWu+KGNECl5kE fje7456YiEJGP3/vzO2jHJ1jtuXsZzdXwS3SjRUyhrcyvspedy51nASa1IFd7efr N4uQZJ8FvbZbKrXInXCjx2ButdTtxeejG9tOKU88SruF6Dd6VuckjgNdUDTPfR9S VwBCw8oPPh9yKq32Z08Gj58j6K1b5NidOtHPGwiloPeM046oGAOA2GY6dLACB3kR uRSUWaAgPRZglKNMmwhV3tq0dKkKYoBqa+2SyXWIvWEOgiHPd5NXOW6ofKe0g43A kX8NYoJ+U56WdbIT0haVE136/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACvZUcd gAW6p8m0V4MjlULQJZplMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu NUVWVWswbGJScnBhZEVDWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJtN9IYFN2IAs77EyxjUJcYqlO+WPi5DPgzr8WnAt4IpFaMwF4WjHO 9jGlcrOfFtIRM3UQm9wYbF9luvQTS12j9wzgkfh78jkw05d2DbOPj+xvZOWppBKo lMhyu6vQXJ/T7cQJ8Bydlb4bjsZjt+0FAwvOpxsJVnvsC7fJwUMj0L2FZC+1O/q6 BbQXfWgj1hE94Mw1WjKLEo+oesHqoHl/VV3nHucC105G3qRLgjIinoivjz6uAeaN Esj20On4JjaddBncGjsWWAZOsuuLbKNrNi8oSLwVlf3bvaG5TNlEUfNXja44lRnO JrG1hMVSAgzXb96l3qhcQ3tmXrqe9tR7 -----END CERTIFICATE-----Generated at Tue Sep 9 14:08:07 2025 by rpki-client