$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft File: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft (raw, json) Hash identifier: ZpjOjejTSVsSOlSxgq6c0hS1XW/tHPpbOjtzHrDkEIw= Subject key identifier: 39:F6:99:E2:1A:20:23:5F:A1:41:5E:59:76:22:10:11:63:27:A6:AB Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5 Certificate issuer: /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft Manifest number: AE Signing time: Fri 05 Sep 2025 06:29:54 +0000 Manifest this update: Fri 05 Sep 2025 06:29:54 +0000 Manifest next update: Fri 12 Sep 2025 06:29:54 +0000 Files and hashes: 1: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl (hash: rxKerQLQpDZwQExi0Jg9a2oE6dmXB2d0a7lpmPYqvP0=) 2: D1E54D607FF211EFB2910061C4F9AE02.roa (hash: K3X3GoEdbp40UjZvhBO+XoTewllnOfMeBiUtz3yrvW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5, serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5 Validity Not Before: Sep 5 06:29:54 2025 GMT Not After : Sep 12 06:29:54 2025 GMT Subject: CN=68ba8362-7e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:7b:ba:68:31:2f:06:2c:ee:7d:51:73:f4: 63:15:38:aa:8e:bc:fe:a5:73:f6:88:54:bf:d8:8c: de:4b:ec:ce:ed:47:7a:e6:e2:8e:a7:a3:b8:a1:ad: e6:b0:05:94:20:33:03:e4:65:22:b2:36:6f:37:a7: c9:2b:6a:39:8a:4a:4a:9e:6a:79:9e:30:9b:4b:f5: 4f:27:2c:57:e1:50:cf:1f:63:ab:8e:3f:71:f5:4a: ca:85:e2:10:22:d2:44:3a:7c:3f:50:98:fa:52:80: 7c:d4:72:69:2a:44:04:9e:66:dd:35:9c:2c:eb:6c: 8d:d0:05:cb:ee:62:95:4c:48:3e:66:c7:5d:8e:b7: 98:00:b3:7e:8b:b9:11:d1:3f:ae:3a:8a:6a:0c:81: 59:8e:c2:7b:29:6e:81:0c:8a:74:44:e3:3f:e3:67: 9e:14:32:52:c8:55:e2:9f:0f:b7:77:af:92:5d:8b: 40:0a:97:94:fb:7b:4f:1d:ec:46:4c:ea:f6:18:16: d4:40:d9:e5:9f:5f:33:94:9e:44:2b:ea:5b:6a:59: ea:c3:05:7f:b9:43:26:71:a3:17:38:f9:b1:a0:fc: b1:57:93:4f:62:fc:1f:f2:3d:c9:4b:90:0a:48:79: 36:ad:30:c9:f4:f4:92:d1:48:65:6a:06:04:76:24: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F6:99:E2:1A:20:23:5F:A1:41:5E:59:76:22:10:11:63:27:A6:AB X509v3 Authority Key Identifier: keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:65:b9:3a:10:3d:75:be:10:c5:93:bd:c2:f6:c6:27:fe:a5: ae:87:5a:26:5d:66:d5:6f:dd:6b:90:89:9a:48:d8:c5:bc:aa: c4:4e:14:e0:60:80:7e:6d:95:3c:71:4e:45:6b:19:f5:02:3e: e5:56:30:69:61:da:ae:4b:f5:65:db:c2:38:52:ca:33:60:34: 6f:e1:f0:9f:7c:65:d1:52:2b:45:6e:fd:81:97:26:31:4b:50: c6:5e:3a:5c:d9:ae:de:34:8e:0b:c0:1f:60:5a:24:d4:83:81: 4f:b9:ed:6e:63:08:62:c2:9e:f6:9e:32:8e:45:c0:ac:ad:a6: 52:2a:b1:1d:73:5a:bb:a5:03:dd:18:c5:d6:24:4e:33:e3:c9: 9b:7e:28:36:cb:d3:41:f2:e4:45:b3:15:3c:1b:4d:96:46:dd: 30:73:b6:8a:0e:6e:cb:22:03:73:dc:ef:46:4b:b1:04:6a:d8: 70:bd:36:a4:29:88:fc:e1:5f:b1:05:6f:de:ce:cb:17:da:dd: 81:42:58:99:7d:24:9d:79:b4:03:e2:22:29:c3:df:09:2f:a5: 5e:bb:ee:0f:32:d1:1f:9b:b9:29:db:05:4b:00:f7:45:6e:10: af:d1:45:7a:01:ee:4b:1c:9e:e8:e5:16:34:90:80:fb:14:de: 0f:80:a1:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDRDUxMTAvBgNVBAUTKEQyNDFGNTcxQ0Q2Mzk3OTYzMERDMUYxNkFENDg5OUQ1 QkVENTY2RTUwHhcNMjUwOTA1MDYyOTU0WhcNMjUwOTEyMDYyOTU0WjAYMRYwFAYD VQQDEw02OGJhODM2Mi03ZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFB7umgxLwYs7n1Rc/RjFTiqjrz+pXP2iFS/2IzeS+zO7Ud65uKOp6O4oa3m sAWUIDMD5GUisjZvN6fJK2o5ikpKnmp5njCbS/VPJyxX4VDPH2Orjj9x9UrKheIQ ItJEOnw/UJj6UoB81HJpKkQEnmbdNZws62yN0AXL7mKVTEg+ZsddjreYALN+i7kR 0T+uOopqDIFZjsJ7KW6BDIp0ROM/42eeFDJSyFXinw+3d6+SXYtACpeU+3tPHexG TOr2GBbUQNnln18zlJ5EK+pbalnqwwV/uUMmcaMXOPmxoPyxV5NPYvwf8j3JS5AK SHk2rTDJ9PSS0UhlagYEdiTvzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDn2meIa ICNfoUFeWXYiEBFjJ6arMB8GA1UdIwQYMBaAFNJB9XHNY5eWMNwfFq1ImdW+1Wbl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83MTk5NUY0RTdG RUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1WXczQjhXclVpWjFiN1Za dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBrSDFjYzFqbDVZdzNCOFdyVWlaMWI3Vlp1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNENS83MTk5NUY0RTdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1 WXczQjhXclVpWjFiN1ZadVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIZbk6ED11vhDFk73C9sYn/qWuh1omXWbVb91rkImaSNjFvKrEThTg YIB+bZU8cU5Faxn1Aj7lVjBpYdquS/Vl28I4UsozYDRv4fCffGXRUitFbv2BlyYx S1DGXjpc2a7eNI4LwB9gWiTUg4FPue1uYwhiwp72njKORcCsraZSKrEdc1q7pQPd GMXWJE4z48mbfig2y9NB8uRFsxU8G02WRt0wc7aKDm7LIgNz3O9GS7EEathwvTak KYj84V+xBW/ezssX2t2BQliZfSSdebQD4iIpw98JL6Veu+4PMtEfm7kp2wVLAPdF bhCv0UV6Ae5LHJ7o5RY0kID7FN4PgKE7 -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:47 2025 by rpki-client