$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: MymXH8zDN0DNYG9YRFlD55QJ1aIQcKhe1VqAlP3F9Ak= Subject key identifier: 08:9D:B3:02:28:85:09:21:96:D4:93:0B:A5:47:21:3B:52:99:6C:94 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 4F Signing time: Sun 07 Sep 2025 07:50:17 +0000 Manifest this update: Sun 07 Sep 2025 07:50:16 +0000 Manifest next update: Sun 14 Sep 2025 07:50:16 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: vMq3kcyxhj+OycCPXikWCm6S+4ZCnPqpOZJfBzPC2+8=) 2: 947AB09E459C11F0BF881335C4F9AE02.roa (hash: ZL0Aa2llI8aydVHlIy2x+gVqsBcKLbop2xFjrlC+Qtw=) 3: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: pkFF5f+Vaat+aJOayMibpTMU9Wp7Q864DQvUc24s624=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Sep 7 07:50:16 2025 GMT Not After : Sep 14 07:50:16 2025 GMT Subject: CN=68bd3938-aa13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:1a:b9:f7:2d:ea:f5:0b:67:83:ba:03:08: 60:09:39:f7:3e:29:dd:f2:21:e7:cb:dd:57:2d:1a: 6a:de:40:d1:6b:b2:c5:83:e0:93:71:cd:1c:28:e4: 25:a4:47:d0:bb:07:b8:d8:76:4c:5b:ce:c1:62:43: a6:04:a9:e2:9e:2f:94:fb:ef:f5:96:81:59:85:27: 57:f3:72:a4:46:c9:5c:4c:6c:e8:24:0c:09:d9:e7: d2:8f:13:f2:fc:89:11:29:9f:a8:e7:d0:b3:35:b7: 79:15:15:19:25:56:25:f4:a0:e6:6b:5b:d5:31:04: 75:b6:bb:1e:47:b2:af:0a:4a:86:99:8a:aa:f7:68: 76:03:9e:36:f7:c8:09:54:30:50:40:5f:cc:53:b2: b2:47:dc:b2:b8:cf:af:f0:c8:79:2d:e9:2b:8c:1e: 4d:81:d0:f2:73:da:6b:2e:af:77:d9:0f:04:f4:f8: 9f:45:1e:fe:14:74:a0:ad:6e:61:a0:85:ec:c3:f5: 11:4e:d8:27:a8:10:f6:ab:6c:61:f1:69:bb:b4:d9: 51:18:00:d8:b9:d3:1f:8b:ac:a7:49:4b:a8:0c:b2: 72:fd:55:a5:ed:a3:1a:99:bb:c9:f6:29:d8:fd:e3: e5:b5:3d:2e:f3:3b:b1:43:5d:11:72:54:0d:88:79: b8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9D:B3:02:28:85:09:21:96:D4:93:0B:A5:47:21:3B:52:99:6C:94 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:40:06:fe:cd:1d:0d:c5:7a:d7:88:2f:49:c4:2c:23:e5:4d: 3b:51:3d:6a:0c:51:09:41:37:71:12:e0:16:0a:aa:12:89:c0: 37:3c:96:a1:7a:e6:3b:7d:42:cc:92:85:76:62:50:d3:00:7d: 53:d1:16:34:4a:ad:27:2e:54:99:5e:26:25:49:ca:86:84:50: 84:4c:49:7c:e2:1c:ec:44:45:0a:4f:c8:df:bf:01:52:81:eb: 36:79:d5:79:b2:29:f8:93:b3:6a:1e:a2:ac:2f:0f:bb:e3:c3: aa:3a:0d:f1:da:f4:9f:93:45:aa:f5:c6:a5:6a:95:6f:f2:20: f2:08:16:23:be:aa:60:ba:0b:16:90:11:fc:24:aa:df:9d:9e: 1c:33:85:00:92:fe:79:98:dc:b4:2c:a5:d8:39:56:71:55:a6: c2:7e:be:c3:ea:a4:d2:1b:5a:c7:cd:84:b3:e7:a0:9d:65:df: 95:11:2a:21:f8:34:2c:c5:a8:de:4f:3b:0a:cc:1b:7c:b0:3a: 93:d9:ba:b7:41:67:45:cb:7a:52:1d:d4:cb:e6:22:90:1c:86: b1:1a:d4:b9:5e:ff:8c:03:a5:4a:ae:97:2e:18:7c:ad:b9:95: 8c:e1:25:d8:5c:9b:d0:97:db:30:be:d3:6e:bd:b8:36:05:b6: 9a:28:77:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNCQjExMC8GA1UEBRMoRkMyNEY1MzkwNzQ3ODdFQ0VBQjAwQzI0MjYwNkMyQkQ2 ODgxOUEwRDAeFw0yNTA5MDcwNzUwMTZaFw0yNTA5MTQwNzUwMTZaMBgxFjAUBgNV BAMTDTY4YmQzOTM4LWFhMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOshq59y3q9Qtng7oDCGAJOfc+Kd3yIefL3VctGmreQNFrssWD4JNxzRwo5CWk R9C7B7jYdkxbzsFiQ6YEqeKeL5T77/WWgVmFJ1fzcqRGyVxMbOgkDAnZ59KPE/L8 iREpn6jn0LM1t3kVFRklViX0oOZrW9UxBHW2ux5Hsq8KSoaZiqr3aHYDnjb3yAlU MFBAX8xTsrJH3LK4z6/wyHkt6SuMHk2B0PJz2msur3fZDwT0+J9FHv4UdKCtbmGg hezD9RFO2CeoEParbGHxabu02VEYANi50x+LrKdJS6gMsnL9VaXtoxqZu8n2Kdj9 4+W1PS7zO7FDXRFyVA2IebjlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCJ2zAiiF CSGW1JMLpUchO1KZbJQwHwYDVR0jBBgwFoAU/CT1OQdHh+zqsAwkJgbCvWiBmg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0JCL0Q1M0JEMTQ2MTVC MTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1n MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0NUMU9RZEhoLXpxc0F3a0pnYkN2V2lCbWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0JCL0Q1M0JEMTQ2MTVCMTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16 cXNBd2tKZ2JDdldpQm1nMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFVABv7NHQ3FeteIL0nELCPlTTtRPWoMUQlBN3ES4BYKqhKJwDc8lqF6 5jt9QsyShXZiUNMAfVPRFjRKrScuVJleJiVJyoaEUIRMSXziHOxERQpPyN+/AVKB 6zZ51XmyKfiTs2oeoqwvD7vjw6o6DfHa9J+TRar1xqVqlW/yIPIIFiO+qmC6CxaQ Efwkqt+dnhwzhQCS/nmY3LQspdg5VnFVpsJ+vsPqpNIbWsfNhLPnoJ1l35URKiH4 NCzFqN5POwrMG3ywOpPZurdBZ0XLelId1MvmIpAchrEa1Lle/4wDpUquly4YfK25 lYzhJdhcm9CX2zC+0269uDYFtpood5w= -----END CERTIFICATE-----Generated at Sun Sep 7 15:21:12 2025 by rpki-client