$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json) Hash identifier: p9qYTcABat3xWC0dx9KyFhS8QN9ovSpvOMrRyYn0zEw= Subject key identifier: 2B:15:93:69:8E:78:3B:41:A0:B1:1B:01:F0:44:61:25:EE:7C:20:5F Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft Manifest number: 03F1 Signing time: Sun 07 Sep 2025 00:55:34 +0000 Manifest this update: Sun 07 Sep 2025 00:55:33 +0000 Manifest next update: Sun 14 Sep 2025 00:55:33 +0000 Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: /NPKplpMS8hpP4LpAhMnz4XA8S5zIgt5dj5j351jXoo=) 2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: 9DfUOxvFR13SpwnP9dE6JJ+qwtWuEZ4XB8tC3ndW1gI=) 3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: dBKzmRV5kLqxEgnT/9vEMvol4LmNVdPd79i3sVZVmJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Validity Not Before: Sep 7 00:55:33 2025 GMT Not After : Sep 14 00:55:33 2025 GMT Subject: CN=68bcd806-3b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:3d:fe:d4:e7:81:21:c9:d7:ef:fb:6e:3c: 42:60:fe:3e:bb:88:1e:2e:09:ee:b6:74:00:c2:94: a6:eb:b6:31:5e:18:02:12:fa:b6:8c:62:d8:7b:91: 04:46:fe:e5:52:36:c8:8d:73:38:16:6a:26:02:f2: 61:b1:5e:9e:60:4c:46:e3:ba:db:34:a0:62:75:37: 15:34:d4:2d:14:33:e5:5e:5d:dc:80:1d:31:c7:5e: 73:63:60:95:3f:95:19:6a:fc:f1:e1:e0:71:ed:d3: 40:89:7f:21:1c:99:47:56:9e:00:e1:bb:49:cb:1e: 4b:c4:79:8d:cc:d1:2a:b2:36:45:c2:20:6b:b4:15: 4f:04:3e:7d:ee:db:44:59:e1:40:5b:33:d7:46:09: 24:3b:e3:0c:c2:9d:ef:88:e3:2a:4d:e1:22:77:89: 17:b6:7c:f8:a0:63:92:21:93:6c:3a:7e:6a:d9:25: f3:29:4f:da:16:52:7d:cb:47:4b:8f:aa:e9:ec:2d: c1:ab:a3:95:21:c7:42:c4:44:95:c6:09:d5:fd:48: f1:a2:78:64:73:69:79:c7:af:df:e9:ff:2b:f3:8c: 07:8f:7b:03:ac:08:0e:de:b6:6e:0d:05:b8:7e:aa: 54:5f:55:4a:4c:7a:32:0c:75:b1:8d:55:9e:fd:f2: ea:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:15:93:69:8E:78:3B:41:A0:B1:1B:01:F0:44:61:25:EE:7C:20:5F X509v3 Authority Key Identifier: keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:0b:31:4d:5d:8b:f6:35:fa:02:52:55:12:ab:c6:2f:06:11: 47:de:ea:65:f0:47:14:24:f7:59:f1:90:3a:b2:3c:ff:1c:63: a3:c8:39:1a:95:7a:c4:3f:f6:de:8a:8f:9d:5f:82:9b:d6:b1: f5:42:cb:82:ac:5d:13:be:ef:60:0a:ce:91:18:25:0d:b0:e3: 6e:1d:14:e6:cf:b4:b6:7f:ad:bb:a5:a3:2d:e5:9f:36:f4:9a: 37:6c:0d:a7:3f:dd:68:c4:c5:d1:05:7a:ca:6c:aa:76:c8:a8: e8:9a:f6:9d:c6:a0:13:18:fe:71:2c:6e:69:8f:ab:d7:bf:82: 44:26:8a:e3:71:35:a1:fa:f2:7e:5e:0d:3d:82:93:62:ec:1d: 2b:d1:bf:28:47:54:28:ba:0c:52:30:54:d5:59:a4:7e:33:c8: 87:74:80:2d:62:f6:c1:e5:7b:ca:dc:ec:15:da:b8:71:c6:d0: 87:a9:eb:c9:c2:98:6c:35:6e:35:b8:6e:d1:40:86:4e:c2:90: 65:cb:46:be:7b:18:a9:51:20:b7:36:ab:01:e9:c5:96:bb:9c: 17:91:09:75:08:bf:71:9f:c4:f9:8f:9d:a1:ea:2c:c7:77:b0: a8:fb:bb:7b:b8:e4:d0:4c:da:1b:0c:0f:62:55:18:ac:70:ed: c3:79:00:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU1NjcxMTAvBgNVBAUTKEZCNEFCNUE5QTREQzM3QkJENjVFNjFFNDJBNDI1NkNG OTUxQjhDNzMwHhcNMjUwOTA3MDA1NTMzWhcNMjUwOTE0MDA1NTMzWjAYMRYwFAYD VQQDEw02OGJjZDgwNi0zYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrM9/tTngSHJ1+/7bjxCYP4+u4geLgnutnQAwpSm67YxXhgCEvq2jGLYe5EE Rv7lUjbIjXM4FmomAvJhsV6eYExG47rbNKBidTcVNNQtFDPlXl3cgB0xx15zY2CV P5UZavzx4eBx7dNAiX8hHJlHVp4A4btJyx5LxHmNzNEqsjZFwiBrtBVPBD597ttE WeFAWzPXRgkkO+MMwp3viOMqTeEid4kXtnz4oGOSIZNsOn5q2SXzKU/aFlJ9y0dL j6rp7C3Bq6OVIcdCxESVxgnV/Ujxonhkc2l5x6/f6f8r84wHj3sDrAgO3rZuDQW4 fqpUX1VKTHoyDHWxjVWe/fLqWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsVk2mO eDtBoLEbAfBEYSXufCBfMB8GA1UdIwQYMBaAFPtKtamk3De71l5h5CpCVs+VG4xz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTU2Ny9FNjc5OTRERThG RjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043dldYbUhrS2tKV3o1VWJq SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wcTFxYVRjTjd2V1htSGtLa0pXejVVYmpITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTU2Ny9FNjc5OTRERThGRjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043 dldYbUhrS2tKV3o1VWJqSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjCzFNXYv2NfoCUlUSq8YvBhFH3upl8EcUJPdZ8ZA6sjz/HGOjyDka lXrEP/beio+dX4Kb1rH1QsuCrF0Tvu9gCs6RGCUNsONuHRTmz7S2f627paMt5Z82 9Jo3bA2nP91oxMXRBXrKbKp2yKjomvadxqATGP5xLG5pj6vXv4JEJorjcTWh+vJ+ Xg09gpNi7B0r0b8oR1QougxSMFTVWaR+M8iHdIAtYvbB5XvK3OwV2rhxxtCHqevJ wphsNW41uG7RQIZOwpBly0a+exipUSC3NqsB6cWWu5wXkQl1CL9xn8T5j52h6izH d7Co+7t7uOTQTNobDA9iVRiscO3DeQDP -----END CERTIFICATE-----Generated at Mon Sep 8 02:19:09 2025 by rpki-client