$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft File: CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json) Hash identifier: FKswwOtdwSC5KWrLacmJpBjTw7YnEupZFciNV0enD5w= Subject key identifier: 40:70:26:45:D7:B0:48:75:E6:8E:CA:1E:27:1C:C0:22:04:DC:04:9A Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Certificate serial: 09AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft Manifest number: 09A1 Signing time: Thu 18 Sep 2025 20:18:05 +0000 Manifest this update: Thu 18 Sep 2025 20:18:05 +0000 Manifest next update: Thu 25 Sep 2025 20:18:05 +0000 Files and hashes: 1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: nFO3KTy7GhzctRsXdg+Aq76evPiKTMKTM6YZrFZc4aE=) 2: 59675AB20A4011F0AC302962C4F9AE02.roa (hash: fiBakfl0c7PhMdoRRAbYSKMEPuxbVJY/KVuQO5mDKMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2476 (0x9ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1F6, serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Validity Not Before: Sep 18 20:18:05 2025 GMT Not After : Sep 25 20:18:05 2025 GMT Subject: CN=68cc68fd-fec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9e:da:88:72:0b:c2:07:50:17:0d:8a:33:e6: e8:1a:b2:f3:ea:07:18:fc:f7:35:73:f7:4e:ee:9f: 4c:ea:07:db:a3:bd:0a:48:36:eb:93:df:e4:1e:21: 28:7c:88:bb:98:0c:5a:89:c2:86:75:0d:a9:0e:56: 59:67:e9:ec:c8:83:1d:7b:15:1c:37:5f:15:b1:09: bb:19:ab:a1:1c:64:fd:df:d3:b1:c6:5f:f1:ee:55: 20:16:ee:70:a4:fc:7f:96:7d:9b:4a:52:4d:f3:b7: 0b:4b:ba:b3:f9:ab:57:be:0a:c9:6b:ca:41:34:00: 49:15:c8:0d:9a:5d:d7:33:5c:c8:29:1f:40:f8:15: 00:15:53:16:4a:60:3a:d5:d8:73:d5:52:b0:c7:e8: 6d:1b:c7:17:60:cf:3c:b5:2a:06:5b:a5:58:bd:46: 1b:a0:eb:46:7a:29:16:17:12:86:58:ff:aa:7d:34: a8:0f:2e:6c:6d:51:42:8d:34:b0:99:05:c0:13:92: 4f:b3:cb:9d:cf:4e:15:7f:66:9e:fb:af:6d:2c:65: d1:e8:31:45:b5:4d:de:e0:9f:21:f1:69:d9:aa:b4: 41:69:b6:c1:15:4c:27:54:0e:c0:01:8f:d5:c0:c8: cc:bb:fd:f9:43:82:d5:35:fb:30:44:d8:1c:43:4d: 04:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:70:26:45:D7:B0:48:75:E6:8E:CA:1E:27:1C:C0:22:04:DC:04:9A X509v3 Authority Key Identifier: keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:62:f7:19:a7:a7:d1:f4:b6:03:e9:e5:8a:4a:f1:01:50:cc: b9:7d:cd:66:f6:b1:dc:ec:dc:0c:fe:b7:d3:35:80:2a:62:04: 09:3d:4c:9a:b1:1a:e3:d9:bf:83:ff:2f:76:73:92:27:f1:a5: 14:cb:e5:19:ee:42:90:d8:a2:95:77:5f:1f:db:91:25:99:58: 0c:29:41:45:86:83:e1:bf:75:d7:c3:33:d6:18:53:bd:18:7a: 5b:e2:ef:73:a7:93:4d:c8:e9:be:51:3d:f9:e2:7c:87:6e:9c: d4:6d:c7:7e:9c:1d:64:cb:65:84:69:c3:45:57:b0:47:6a:30: fe:4d:bd:e4:17:42:9f:5e:80:42:2b:33:f5:5e:11:a4:4e:f5: c2:d0:47:2b:a7:56:f1:27:a5:8c:12:f0:90:00:6d:79:58:e6: 20:12:fd:31:5a:d4:97:bc:f4:dd:24:63:a2:9a:ef:bc:3d:ab: 1a:60:f3:75:a1:d1:8c:23:67:70:9f:0d:24:2d:49:dd:fc:aa: 3a:0a:75:ce:8e:e2:82:87:68:4e:9b:ad:5a:ee:61:04:e3:a9: ef:e4:49:67:f3:eb:01:af:7a:cf:81:89:ff:2f:ee:e4:24:1c: dd:17:71:2a:d0:17:18:8f:3f:7e:1b:01:a4:1c:52:c6:e7:6d: dd:20:c2:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxRjYxMTAvBgNVBAUTKDA4MUNFNUE2NzAzNkVGODU0Njk5MEJGNTk0Q0NENjMy ODA3NDA1MUQwHhcNMjUwOTE4MjAxODA1WhcNMjUwOTI1MjAxODA1WjAYMRYwFAYD VQQDEw02OGNjNjhmZC1mZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7J7aiHILwgdQFw2KM+boGrLz6gcY/Pc1c/dO7p9M6gfbo70KSDbrk9/kHiEo fIi7mAxaicKGdQ2pDlZZZ+nsyIMdexUcN18VsQm7GauhHGT939Oxxl/x7lUgFu5w pPx/ln2bSlJN87cLS7qz+atXvgrJa8pBNABJFcgNml3XM1zIKR9A+BUAFVMWSmA6 1dhz1VKwx+htG8cXYM88tSoGW6VYvUYboOtGeikWFxKGWP+qfTSoDy5sbVFCjTSw mQXAE5JPs8udz04Vf2ae+69tLGXR6DFFtU3e4J8h8WnZqrRBabbBFUwnVA7AAY/V wMjMu/35Q4LVNfswRNgcQ00ErwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBwJkXX sEh15o7KHiccwCIE3ASaMB8GA1UdIwQYMBaAFAgc5aZwNu+FRpkL9ZTM1jKAdAUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFGNi8wRjE0MDE1MDk0 QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0VkdtUXYxbE16V01vQjBC UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCemxwbkEyNzRWR21RdjFsTXpXTW9CMEJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFGNi8wRjE0MDE1MDk0QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0 VkdtUXYxbE16V01vQjBCUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMYvcZp6fR9LYD6eWKSvEBUMy5fc1m9rHc7NwM/rfTNYAqYgQJPUya sRrj2b+D/y92c5In8aUUy+UZ7kKQ2KKVd18f25ElmVgMKUFFhoPhv3XXwzPWGFO9 GHpb4u9zp5NNyOm+UT354nyHbpzUbcd+nB1ky2WEacNFV7BHajD+Tb3kF0KfXoBC KzP1XhGkTvXC0Ecrp1bxJ6WMEvCQAG15WOYgEv0xWtSXvPTdJGOimu+8PasaYPN1 odGMI2dwnw0kLUnd/Ko6CnXOjuKCh2hOm61a7mEE46nv5Eln8+sBr3rPgYn/L+7k JBzdF3Eq0BcYjz9+GwGkHFLG523dIMJ9 -----END CERTIFICATE-----Generated at Fri Sep 19 13:59:41 2025 by rpki-client