$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json) Hash identifier: pM8EI5wIlB30FHgWKovqWKqZbIG1v3PKJ7L/dRA2Vl4= Subject key identifier: 75:78:59:D3:D6:B0:C8:8F:96:00:3B:0B:19:9C:9F:DD:09:96:0D:89 Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0CDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft Manifest number: 0CD6 Signing time: Thu 18 Sep 2025 18:18:26 +0000 Manifest this update: Thu 18 Sep 2025 18:18:26 +0000 Manifest next update: Thu 25 Sep 2025 18:18:26 +0000 Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: eYSM3OVkZ/1yvJ2tO4IcFd0FzojDukXfrvlJbl1w4Sg=) 2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: ubWolQt+8+l24CDrG/8jAKrnFMju79IVwrQ7ghSshi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: Sep 18 18:18:26 2025 GMT Not After : Sep 25 18:18:26 2025 GMT Subject: CN=68cc4cf2-0226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:c7:4b:cd:16:d7:be:f2:7c:d4:71:37:1a: c4:8b:88:77:3d:dd:f7:31:42:60:62:2e:1b:ca:b1: 4f:0c:7d:5a:25:19:17:af:93:28:c3:14:5f:84:8b: 13:d8:eb:cf:52:bd:93:a2:3a:b8:2e:b8:62:fc:29: 6b:97:5b:b1:0a:3e:74:db:bd:0e:4b:98:60:7b:b4: d7:20:42:7a:d2:f3:f5:71:e2:89:d9:63:e9:a7:fc: 40:da:2b:bc:cf:a7:8f:a6:b4:af:12:23:30:f9:f0: c3:7b:b4:69:87:92:00:bd:bc:85:74:53:a7:92:3f: 45:ce:c4:c9:ed:d0:25:fa:b1:bb:7e:06:a2:63:02: 5d:c9:d6:36:60:f7:65:e9:06:a4:51:b9:8c:34:a7: 41:8b:75:a9:42:80:cc:ea:af:43:7e:a6:a2:58:d1: 98:22:e0:78:25:f6:95:c1:18:cf:42:90:79:24:6b: 78:59:03:34:5d:89:c8:16:96:f6:a5:90:c0:ed:d6: 94:a3:5c:b8:14:d1:82:eb:2e:7c:ca:89:b6:85:4a: a1:c2:53:d6:8d:10:c7:8d:ed:90:eb:63:df:b9:2f: 21:22:0c:f5:5d:bb:6f:04:01:a3:59:d7:9b:82:2f: 46:c2:95:55:ec:74:32:be:75:81:68:1a:61:61:c8: 34:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:78:59:D3:D6:B0:C8:8F:96:00:3B:0B:19:9C:9F:DD:09:96:0D:89 X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:aa:b9:cd:c9:12:b7:15:b3:dd:76:01:9c:69:c1:90:34:cb: b1:e8:aa:02:31:eb:6a:1d:16:7d:7b:5a:49:c3:87:14:62:0d: 76:30:bf:c4:03:4e:dd:ab:6c:88:64:ab:40:03:53:bd:74:5a: 32:ed:32:1a:29:2a:07:cc:c1:ac:08:87:de:d1:4b:3d:f1:78: 12:b5:4f:ed:2c:bb:47:97:06:27:0b:e9:36:8f:b1:2a:43:ef: ee:f3:95:2e:95:17:66:b9:33:99:25:e9:c8:f7:2d:6d:91:80: e2:3e:39:5b:75:a6:13:7d:0b:23:02:05:53:43:8a:fd:ea:df: 05:b4:e4:73:0f:85:4c:e0:b3:68:9c:b5:0d:ff:02:db:6d:c0: e2:34:44:9f:58:ed:25:0a:2c:7e:28:82:8e:dc:01:df:a5:53: 20:4d:ef:76:7f:a4:dc:8b:2c:21:1b:fd:dc:e5:db:b1:83:eb: 7d:1c:f0:b8:7d:37:32:6b:42:c8:c4:1d:53:49:69:13:e2:4a: df:b1:d6:e8:3e:fe:5b:2c:49:cc:26:bb:8c:36:0d:0b:b1:13: 85:c1:5e:c4:b0:43:af:28:16:6e:9e:e8:df:82:71:68:5c:17: 69:5b:88:11:3e:33:2a:6b:0c:7d:61:80:93:0a:8d:36:2b:91: 84:f3:79:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjUwOTE4MTgxODI2WhcNMjUwOTI1MTgxODI2WjAYMRYwFAYD VQQDEw02OGNjNGNmMi0wMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2PHS80W177yfNRxNxrEi4h3Pd33MUJgYi4byrFPDH1aJRkXr5MowxRfhIsT 2OvPUr2Tojq4Lrhi/Clrl1uxCj50270OS5hge7TXIEJ60vP1ceKJ2WPpp/xA2iu8 z6ePprSvEiMw+fDDe7Rph5IAvbyFdFOnkj9FzsTJ7dAl+rG7fgaiYwJdydY2YPdl 6QakUbmMNKdBi3WpQoDM6q9DfqaiWNGYIuB4JfaVwRjPQpB5JGt4WQM0XYnIFpb2 pZDA7daUo1y4FNGC6y58yom2hUqhwlPWjRDHje2Q62PfuS8hIgz1XbtvBAGjWdeb gi9GwpVV7HQyvnWBaBphYcg0mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHV4WdPW sMiPlgA7Cxmcn90Jlg2JMB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5 WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7qrnNyRK3FbPddgGcacGQNMux6KoCMetqHRZ9e1pJw4cUYg12ML/E A07dq2yIZKtAA1O9dFoy7TIaKSoHzMGsCIfe0Us98XgStU/tLLtHlwYnC+k2j7Eq Q+/u85UulRdmuTOZJenI9y1tkYDiPjlbdaYTfQsjAgVTQ4r96t8FtORzD4VM4LNo nLUN/wLbbcDiNESfWO0lCix+KIKO3AHfpVMgTe92f6TciywhG/3c5duxg+t9HPC4 fTcya0LIxB1TSWkT4krfsdboPv5bLEnMJruMNg0LsROFwV7EsEOvKBZunujfgnFo XBdpW4gRPjMqawx9YYCTCo02K5GE83n0 -----END CERTIFICATE-----Generated at Fri Sep 19 05:51:38 2025 by rpki-client