$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json) Hash identifier: 0w8bS9O0mJqaqYsZ3sX4TWUTUARMk9ZvLw2TRNYA2lI= Subject key identifier: 70:E6:FF:B1:9A:64:FF:17:DC:47:1B:CB:CC:9C:F8:1D:06:87:EF:EC Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Certificate serial: 0680 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft Manifest number: 0670 Signing time: Mon 08 Sep 2025 22:35:16 +0000 Manifest this update: Mon 08 Sep 2025 22:35:15 +0000 Manifest next update: Mon 15 Sep 2025 22:35:15 +0000 Files and hashes: 1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: vIj20lgcjbck8GyGtRsXbVdVWuheJVKu9l0fufqisgQ=) 2: 91F7C78A7F1711F089227832C4F9AE02.roa (hash: FY5Gy5Y1iXEZUxEVUrYPbqyjzId5K+fC2igE4uNXrvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1664 (0x680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Validity Not Before: Sep 8 22:35:15 2025 GMT Not After : Sep 15 22:35:15 2025 GMT Subject: CN=68bf5a24-0c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ed:d5:a8:c9:06:7c:fb:f4:93:98:bd:5a:19: 8e:9f:94:29:0f:82:80:aa:ed:dd:b6:94:7a:ca:73: fd:a1:06:13:83:99:a6:aa:d4:58:36:e5:7b:d5:06: c9:91:e5:29:0d:e1:c5:6c:ed:25:77:2a:ca:d0:eb: 10:ef:15:2f:bc:7c:35:a0:20:8c:76:cd:ab:44:44: f5:f9:fa:a2:00:b5:eb:5a:8d:5f:af:43:63:d7:70: cd:1c:20:c4:fe:4b:7d:df:42:2d:88:d1:41:fb:26: e7:50:67:f0:65:9a:17:02:f2:11:af:38:66:cf:32: 12:e8:25:5a:07:b7:12:c4:c3:b8:47:e8:48:3d:ce: 78:af:dc:24:0e:36:70:f1:88:3a:9a:df:4d:5f:fa: 86:01:a9:5f:18:3c:f6:26:49:4f:20:b3:d2:a5:dc: 85:ac:8a:0f:88:d9:6c:bb:8d:2f:41:6f:93:65:1d: b7:a3:aa:e2:04:69:f7:66:ab:3f:8a:9a:f1:fc:f2: c5:68:6e:7a:c0:8b:05:24:57:fa:1e:07:91:4e:98: dd:94:14:de:98:f8:a8:2e:54:4c:5d:59:2d:8f:2e: fb:11:b5:94:6a:30:fa:e2:9f:1e:7d:10:00:c2:33: 9b:38:0c:bf:e8:db:b5:dd:ad:03:83:64:08:2c:05: f8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E6:FF:B1:9A:64:FF:17:DC:47:1B:CB:CC:9C:F8:1D:06:87:EF:EC X509v3 Authority Key Identifier: keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:5c:d0:4c:9a:5a:a3:f2:a9:33:0c:41:eb:b5:f0:83:26:a7: 95:c0:38:4b:77:e1:1b:45:ca:93:06:5c:8d:fd:ed:61:b9:8c: 25:ca:95:83:d5:b2:cb:68:b6:de:42:37:c1:2e:ac:c2:09:7b: a0:c4:98:a0:91:70:28:d5:88:dc:b4:8c:da:84:f0:be:33:db: b5:ad:43:87:0d:bc:4f:17:c7:d8:5f:73:30:3e:c3:16:21:fd: 72:d3:ea:1a:01:de:01:31:48:d9:a9:c8:45:9a:bb:cb:a2:f1: 0f:fe:c6:ac:c8:13:79:6a:67:28:63:af:f1:8a:b2:de:7e:c7: 9d:2f:66:5c:c8:97:3c:71:2d:6e:17:3a:6b:19:8a:03:99:40: b4:d8:9a:d9:dc:8f:f6:22:8a:52:36:a9:14:07:7f:04:66:bf: c7:6d:7c:80:77:7a:62:20:09:44:00:ea:12:a5:74:c8:f9:e2: c9:e5:2b:53:b6:bd:19:63:c6:f7:d3:39:f6:a1:f8:e7:26:66: 90:cf:4f:1d:dd:8d:35:03:06:16:d5:cd:ae:08:79:bb:d9:32: ac:28:69:39:53:43:c6:e6:7a:aa:bf:fe:55:a0:43:8d:c4:da: bf:ea:d6:f6:5d:a9:b6:4f:0b:fb:96:1c:6d:bf:b5:98:ea:70: ac:b6:9a:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5 NEU5RjUwOTUwHhcNMjUwOTA4MjIzNTE1WhcNMjUwOTE1MjIzNTE1WjAYMRYwFAYD VQQDEw02OGJmNWEyNC0wYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+3VqMkGfPv0k5i9WhmOn5QpD4KAqu3dtpR6ynP9oQYTg5mmqtRYNuV71QbJ keUpDeHFbO0ldyrK0OsQ7xUvvHw1oCCMds2rRET1+fqiALXrWo1fr0Nj13DNHCDE /kt930ItiNFB+ybnUGfwZZoXAvIRrzhmzzIS6CVaB7cSxMO4R+hIPc54r9wkDjZw 8Yg6mt9NX/qGAalfGDz2JklPILPSpdyFrIoPiNlsu40vQW+TZR23o6riBGn3Zqs/ iprx/PLFaG56wIsFJFf6HgeRTpjdlBTemPioLlRMXVktjy77EbWUajD64p8efRAA wjObOAy/6Nu13a0Dg2QILAX4hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDm/7Ga ZP8X3Ecby8yc+B0Gh+/sMB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1 QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTg5Ny9FMUQxMTc3MDk1QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4 VHhTUzBHTGJEWkdVNmZVSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1XNBMmlqj8qkzDEHrtfCDJqeVwDhLd+EbRcqTBlyN/e1huYwlypWD 1bLLaLbeQjfBLqzCCXugxJigkXAo1YjctIzahPC+M9u1rUOHDbxPF8fYX3MwPsMW If1y0+oaAd4BMUjZqchFmrvLovEP/sasyBN5amcoY6/xirLefsedL2ZcyJc8cS1u FzprGYoDmUC02JrZ3I/2IopSNqkUB38EZr/HbXyAd3piIAlEAOoSpXTI+eLJ5StT tr0ZY8b30zn2ofjnJmaQz08d3Y01AwYW1c2uCHm72TKsKGk5U0PG5nqqv/5VoEON xNq/6tb2Xam2Twv7lhxtv7WY6nCstppH -----END CERTIFICATE-----Generated at Tue Sep 9 09:19:44 2025 by rpki-client