$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft File: cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json) Hash identifier: ZOi6XLoMxL0On6x62O7wtzZvQQ/ZnFznnKXrB29vph8= Subject key identifier: 1A:0E:BD:15:75:2A:56:FB:0F:B0:37:6B:91:69:13:8B:89:FA:C5:AB Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB Certificate issuer: /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Certificate serial: 03D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft Manifest number: 03CC Signing time: Wed 17 Sep 2025 01:04:08 +0000 Manifest this update: Wed 17 Sep 2025 01:04:08 +0000 Manifest next update: Wed 24 Sep 2025 01:04:08 +0000 Files and hashes: 1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: DChuItmcmGqTZKJpMks9QuJgvqZwsB7Om8AuxyBeX80=) 2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: IKsBlPoiBaV1Y/8FMivKysodYXv24LUe7kGHbrSaUFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 976 (0x3d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Validity Not Before: Sep 17 01:04:08 2025 GMT Not After : Sep 24 01:04:08 2025 GMT Subject: CN=68ca0908-6064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:be:ed:6f:85:ca:1e:7e:4b:d4:b9:24:99: 3f:90:a0:85:06:07:98:5a:cc:01:53:30:91:98:2d: 5f:dc:ca:2a:be:2d:46:30:a3:22:70:77:69:a2:d6: ae:d9:a9:bb:78:7f:da:aa:b3:ae:3d:8a:82:1e:82: 01:c8:f5:7f:5e:d1:21:c4:23:19:c3:ad:34:11:2d: 37:84:ae:17:dd:b0:ec:1b:b0:31:5d:3e:ae:e3:c9: 3b:7e:2e:cd:9d:d7:8f:22:e5:52:9b:2f:bc:3c:15: 30:41:a7:85:1d:4a:d8:d6:a6:22:3b:f9:d7:a9:58: c2:fe:05:0e:c2:54:b9:8c:12:bb:70:7c:62:9b:7d: c8:f4:46:80:10:c4:a3:84:bf:72:30:f5:58:ec:22: 13:32:c9:9d:9d:77:a4:da:66:35:94:cc:8b:24:67: 83:e8:6f:4e:0b:ed:ba:4d:ef:bb:6f:a0:58:5b:1c: 02:19:c7:b8:89:7a:a6:54:15:4c:fd:40:58:d8:22: b3:36:25:f3:e8:76:54:ca:20:3b:d1:7d:9c:d0:61: 15:3c:7f:ba:c2:a9:56:d5:76:7a:f8:a5:7a:27:72: 83:1d:92:2d:c5:dc:a2:fa:ab:de:3a:b6:11:81:cd: 55:25:42:43:74:f8:e6:86:b8:f6:82:48:62:5d:e9: 24:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0E:BD:15:75:2A:56:FB:0F:B0:37:6B:91:69:13:8B:89:FA:C5:AB X509v3 Authority Key Identifier: keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c2:9b:c9:70:d4:74:ae:c4:d4:24:ab:19:03:7a:3c:be:7e: 54:15:a9:44:9f:e8:35:d2:d5:82:8c:74:d2:4e:21:ad:fe:01: 35:dc:af:2d:09:66:fb:f4:06:7e:36:3c:68:2a:1d:8a:3a:5c: bb:a2:3b:af:7a:8b:53:59:54:da:82:18:7c:07:79:d1:59:11: c6:0b:fa:47:da:a3:4d:18:d6:fc:3d:cc:c2:35:77:3a:e9:1f: aa:28:f7:92:9f:ae:15:82:d4:e9:aa:e5:c1:78:eb:5a:97:bb: b9:5e:db:28:06:34:fa:5d:79:7a:8e:85:d0:b7:f9:ab:f8:0b: 5a:15:a2:41:f9:46:76:f5:13:fd:47:f2:63:79:32:78:d7:db: a6:20:e7:00:fc:a1:fa:4b:21:f1:bd:6f:84:ca:b9:14:00:3f: f9:ed:1a:10:d3:b7:b6:de:38:99:63:4a:0c:60:a3:e5:10:ff: 2b:b9:53:20:02:b5:71:87:16:5e:df:0f:bd:0a:1c:88:ef:9a: 92:86:db:30:b4:ec:7c:9d:d2:ab:1f:25:17:02:ff:00:90:f7: 2e:33:73:21:59:93:d2:55:23:17:06:93:27:6c:c0:45:c1:e8: 69:2e:a7:e5:33:eb:b5:9c:64:92:0b:55:2f:0f:7f:dd:b9:b7: 33:36:fd:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx QTQzMkY0REIwHhcNMjUwOTE3MDEwNDA4WhcNMjUwOTI0MDEwNDA4WjAYMRYwFAYD VQQDEw02OGNhMDkwOC02MDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8q+7W+Fyh5+S9S5JJk/kKCFBgeYWswBUzCRmC1f3Moqvi1GMKMicHdpotau 2am7eH/aqrOuPYqCHoIByPV/XtEhxCMZw600ES03hK4X3bDsG7AxXT6u48k7fi7N ndePIuVSmy+8PBUwQaeFHUrY1qYiO/nXqVjC/gUOwlS5jBK7cHxim33I9EaAEMSj hL9yMPVY7CITMsmdnXek2mY1lMyLJGeD6G9OC+26Te+7b6BYWxwCGce4iXqmVBVM /UBY2CKzNiXz6HZUyiA70X2c0GEVPH+6wqlW1XZ6+KV6J3KDHZItxdyi+qveOrYR gc1VJUJDdPjmhrj2gkhiXekkawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoOvRV1 Klb7D7A3a5FpE4uJ+sWrMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEY4QS83MjE5NUFENDlFMTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1E UTU2YUhrc0RnWWdhUXk5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJwpvJcNR0rsTUJKsZA3o8vn5UFalEn+g10tWCjHTSTiGt/gE13K8t CWb79AZ+NjxoKh2KOly7ojuveotTWVTaghh8B3nRWRHGC/pH2qNNGNb8PczCNXc6 6R+qKPeSn64VgtTpquXBeOtal7u5XtsoBjT6XXl6joXQt/mr+AtaFaJB+UZ29RP9 R/JjeTJ419umIOcA/KH6SyHxvW+EyrkUAD/57RoQ07e23jiZY0oMYKPlEP8ruVMg ArVxhxZe3w+9ChyI75qShtswtOx8ndKrHyUXAv8AkPcuM3MhWZPSVSMXBpMnbMBF wehpLqflM+u1nGSSC1UvD3/dubczNv0r -----END CERTIFICATE-----Generated at Fri Sep 19 00:58:51 2025 by rpki-client