$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json) Hash identifier: ZJGDz88bIebVW2dG15R0e0d75xCYzf8x/5C3YnnsMXc= Subject key identifier: 85:06:F5:65:2F:B4:74:33:D9:C6:06:A6:03:45:42:03:07:D9:4C:D3 Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Certificate serial: 042F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft Manifest number: 0420 Signing time: Tue 09 Sep 2025 00:29:55 +0000 Manifest this update: Tue 09 Sep 2025 00:29:54 +0000 Manifest next update: Tue 16 Sep 2025 00:29:54 +0000 Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: PY3+3T0SSOSOdDW4COR7oTLhR9LIBbYxly/yTGD/cLo=) 2: E37002DA5EEC11F08928266FC4F9AE02.roa (hash: bP8QoLrN2cG+x9Zk4VLIpDMpINAZs4gBK6D1Lhe10Us=) 3: 2E82E686569E11F08015BC34C4F9AE02.roa (hash: lvLXESJcuRjSmTnSzTV0gfJc2SXdXizZz5eloJwhEZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1071 (0x42f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Validity Not Before: Sep 9 00:29:54 2025 GMT Not After : Sep 16 00:29:54 2025 GMT Subject: CN=68bf7502-58d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:07:a0:d2:d6:ff:20:16:ea:00:03:31:f7: 16:05:90:43:0a:d3:4f:9f:d0:96:18:3a:b0:db:e3: 8a:d5:ee:bf:63:c8:c9:a1:0e:4c:74:08:11:6c:d8: 83:d7:fb:64:b4:07:0c:5b:1a:64:46:dd:36:0d:70: 04:a6:b5:74:c9:0b:dd:5f:6b:6f:89:70:bc:8b:48: 00:fc:d0:ec:89:f0:19:c3:6a:05:7d:38:cf:f6:28: b9:ce:d6:56:42:78:84:cd:fe:69:32:6f:0b:a4:d1: 3d:84:18:13:e2:2f:37:f2:b3:16:8a:cb:c6:7e:64: 7e:b3:bd:3f:99:4a:0d:5b:38:84:76:6e:dc:73:fd: d4:13:92:5f:69:a5:5f:65:19:b1:70:f1:f1:9f:ff: dd:6e:b2:a8:06:22:3f:12:d9:4a:b1:94:13:f0:61: 57:66:84:68:0b:1c:c4:89:ef:83:d0:64:c4:f1:6a: b6:19:10:a5:05:98:57:55:12:dd:28:9e:a0:c1:fd: f2:d9:ea:bb:27:36:96:51:e7:f1:db:95:2b:a5:33: 68:c7:9f:5c:91:00:9e:c5:53:40:c3:92:7f:84:ca: de:4e:d5:98:bf:cd:86:49:13:af:9a:04:08:29:97: 60:44:40:06:5c:3b:4d:ac:d9:6c:a6:a0:8b:8d:55: f6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:06:F5:65:2F:B4:74:33:D9:C6:06:A6:03:45:42:03:07:D9:4C:D3 X509v3 Authority Key Identifier: keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:d7:7c:fb:fc:18:c1:72:5f:79:11:56:30:92:b3:a3:a3:68: bc:a4:9c:78:0b:f1:b6:6f:c5:cd:ab:20:66:9a:25:86:d5:e5: d9:77:7a:2a:1c:5c:e3:11:8f:c8:16:91:4d:f0:30:44:a2:26: 07:a3:a0:1b:95:19:2d:b4:0f:d2:e8:d6:4e:4a:53:4b:0e:2e: fc:7e:18:c5:26:f3:7d:64:0a:21:c9:97:6e:ee:b3:54:97:16: de:44:94:88:a0:ba:43:73:98:3f:6e:10:33:76:a5:50:a7:b4: 1a:85:de:cc:78:e0:27:b0:06:f4:ce:5e:c8:12:a7:94:8f:3e: d0:18:61:f7:17:c1:ee:30:31:2d:86:b3:d3:7f:cb:86:a2:86: e5:63:79:11:48:dc:35:31:c2:d9:89:35:d5:b4:89:54:79:f5: 29:1b:63:0b:b3:78:a8:a6:9a:ef:89:d6:11:b8:e7:18:74:60: 8c:46:ac:78:ec:ff:c5:71:32:fc:eb:e0:98:78:47:1a:e4:59: 8f:8e:9d:4f:f2:0c:ae:1c:43:1e:f8:ce:7c:e4:fa:8d:25:20: bc:e8:f1:9e:2d:c3:cb:7d:29:b5:88:b1:11:64:e2:b0:15:8e: 5d:7e:3b:bd:9b:3c:d2:a3:96:f0:5f:11:42:df:46:91:29:07: 19:12:0d:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzQjQxMTAvBgNVBAUTKEFFQjgzOUNDQkZBRDVCRDk4QTdBMERBOTA1M0JDMjcy NkYyNjkwNEYwHhcNMjUwOTA5MDAyOTU0WhcNMjUwOTE2MDAyOTU0WjAYMRYwFAYD VQQDEw02OGJmNzUwMi01OGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHQHoNLW/yAW6gADMfcWBZBDCtNPn9CWGDqw2+OK1e6/Y8jJoQ5MdAgRbNiD 1/tktAcMWxpkRt02DXAEprV0yQvdX2tviXC8i0gA/NDsifAZw2oFfTjP9ii5ztZW QniEzf5pMm8LpNE9hBgT4i838rMWisvGfmR+s70/mUoNWziEdm7cc/3UE5JfaaVf ZRmxcPHxn//dbrKoBiI/EtlKsZQT8GFXZoRoCxzEie+D0GTE8Wq2GRClBZhXVRLd KJ6gwf3y2eq7JzaWUefx25UrpTNox59ckQCexVNAw5J/hMreTtWYv82GSROvmgQI KZdgREAGXDtNrNlspqCLjVX2SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUG9WUv tHQz2cYGpgNFQgMH2UzTMB8GA1UdIwQYMBaAFK64Ocy/rVvZinoNqQU7wnJvJpBP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODNCNC9FNzlFRDQ5MDgz RjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5bUtlZzJwQlR2Q2NtOG1r RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyZzV6TC10VzltS2VnMnBCVHZDY204bWtFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODNCNC9FNzlFRDQ5MDgzRjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5 bUtlZzJwQlR2Q2NtOG1rRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZ13z7/BjBcl95EVYwkrOjo2i8pJx4C/G2b8XNqyBmmiWG1eXZd3oq HFzjEY/IFpFN8DBEoiYHo6AblRkttA/S6NZOSlNLDi78fhjFJvN9ZAohyZdu7rNU lxbeRJSIoLpDc5g/bhAzdqVQp7Qahd7MeOAnsAb0zl7IEqeUjz7QGGH3F8HuMDEt hrPTf8uGooblY3kRSNw1McLZiTXVtIlUefUpG2MLs3iopprvidYRuOcYdGCMRqx4 7P/FcTL86+CYeEca5FmPjp1P8gyuHEMe+M585PqNJSC86PGeLcPLfSm1iLERZOKw FY5dfju9mzzSo5bwXxFC30aRKQcZEg2B -----END CERTIFICATE-----Generated at Tue Sep 9 09:21:02 2025 by rpki-client