$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: k56qg0Udm8z2kYDmLUIcwhmpRqoH3M2RVYDTGg7zn7I= Subject key identifier: 3F:CE:60:64:85:71:F7:1A:39:5C:71:23:93:DF:0C:8D:CE:26:7D:3D Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 1015 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 1009 Signing time: Thu 18 Sep 2025 17:37:22 +0000 Manifest this update: Thu 18 Sep 2025 17:37:22 +0000 Manifest next update: Thu 25 Sep 2025 17:37:22 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: edXUR+p9uAWEWbZ3iJVekC3yMcDZxwGEgjIJRWmv6Zo=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: jZa47LQUiVvIxoLDSyE/2t1CJaYFtRO42+/jeT3MONo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4117 (0x1015) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: Sep 18 17:37:22 2025 GMT Not After : Sep 25 17:37:22 2025 GMT Subject: CN=68cc4352-bcb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:c4:48:c7:20:d8:18:99:ec:8a:85:ae:1a: fd:0f:dd:86:ff:7c:53:5d:ae:91:12:2e:8a:76:c5: 04:c8:94:a1:34:4a:79:03:85:6e:c5:35:0c:a3:4d: ab:8b:3c:27:d2:c5:a8:49:c0:d3:82:ef:6e:9d:60: ac:2f:84:79:18:41:1a:a1:0d:cf:24:60:6d:99:92: a7:ab:49:f4:3c:57:0e:90:a1:6f:49:8d:4f:7e:18: 66:31:6e:6c:31:5d:42:c6:6a:b5:a4:e4:70:d2:38: d0:41:aa:08:0a:e6:a2:0b:02:7a:ac:8d:79:cd:4d: 71:32:35:b4:ca:37:85:ea:99:03:71:c1:cc:71:94: a4:2a:00:ab:28:cf:69:13:25:81:14:ed:2f:9c:7d: c3:14:c7:e2:99:0b:a6:86:7c:f1:60:1b:a6:e8:3c: 56:b6:5a:1e:78:0a:25:86:7d:b4:e3:b5:78:b6:84: bc:38:7e:2e:cc:98:5d:04:2b:c1:48:de:fe:ee:a0: 1a:8e:cd:22:d6:a6:c3:94:74:93:c5:83:ba:98:13: 43:89:07:70:bc:04:c9:b0:22:e9:0c:bc:8c:ef:bf: 55:f5:5d:52:83:72:29:fe:ef:bc:e7:77:d2:d4:4f: 78:2b:53:09:6d:35:2b:e5:9e:f7:da:c2:bd:16:a9: cb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CE:60:64:85:71:F7:1A:39:5C:71:23:93:DF:0C:8D:CE:26:7D:3D X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:38:70:5d:2f:2e:82:e1:c1:68:26:da:10:29:10:bc:a3:af: 67:00:6b:fc:14:d9:0e:a8:99:08:0a:16:14:64:70:a7:12:09: f3:00:c2:96:af:cf:c3:9b:f0:cb:c1:43:5f:72:36:37:12:0e: d1:30:81:59:32:59:57:d1:3b:70:65:04:38:72:ef:17:5b:be: 58:ca:cf:98:99:d3:7a:5a:2e:7a:c5:52:a8:96:c6:c6:3d:48: 32:34:98:54:5f:42:28:57:49:76:36:32:01:19:db:51:50:49: 26:db:5f:5a:43:d3:82:0f:32:d7:fb:26:77:e4:7a:ea:e4:99: a9:87:44:4d:9e:98:df:2c:78:14:b0:cb:f2:43:5c:b0:e1:1e: 1d:2d:7d:a2:ee:0a:44:6b:6f:4d:e0:5a:3c:8e:1e:a6:5d:b9: 93:35:3b:77:ab:6a:72:f1:84:8b:64:5e:bb:74:e8:d5:c2:53: 8c:96:93:25:2a:f9:8f:16:71:88:15:6b:6d:da:95:50:14:77: d9:1d:95:42:dc:6d:80:6d:58:91:3e:7c:11:31:fd:44:49:d3: d8:dd:71:77:d4:0d:49:21:03:9b:c7:29:b4:09:ca:fb:da:08: e2:67:05:57:bb:d9:58:85:75:d2:d6:38:3a:21:b2:04:19:c9: 5a:e6:57:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjUwOTE4MTczNzIyWhcNMjUwOTI1MTczNzIyWjAYMRYwFAYD VQQDEw02OGNjNDM1Mi1iY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspTESMcg2BiZ7IqFrhr9D92G/3xTXa6REi6KdsUEyJShNEp5A4VuxTUMo02r izwn0sWoScDTgu9unWCsL4R5GEEaoQ3PJGBtmZKnq0n0PFcOkKFvSY1PfhhmMW5s MV1Cxmq1pORw0jjQQaoICuaiCwJ6rI15zU1xMjW0yjeF6pkDccHMcZSkKgCrKM9p EyWBFO0vnH3DFMfimQumhnzxYBum6DxWtloeeAolhn2047V4toS8OH4uzJhdBCvB SN7+7qAajs0i1qbDlHSTxYO6mBNDiQdwvATJsCLpDLyM779V9V1Sg3Ip/u+853fS 1E94K1MJbTUr5Z732sK9FqnLPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/OYGSF cfcaOVxxI5PfDI3OJn09MB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXOHBdLy6C4cFoJtoQKRC8o69nAGv8FNkOqJkIChYUZHCnEgnzAMKW r8/Dm/DLwUNfcjY3Eg7RMIFZMllX0TtwZQQ4cu8XW75Yys+YmdN6Wi56xVKolsbG PUgyNJhUX0IoV0l2NjIBGdtRUEkm219aQ9OCDzLX+yZ35Hrq5Jmph0RNnpjfLHgU sMvyQ1yw4R4dLX2i7gpEa29N4Fo8jh6mXbmTNTt3q2py8YSLZF67dOjVwlOMlpMl KvmPFnGIFWtt2pVQFHfZHZVC3G2AbViRPnwRMf1ESdPY3XF31A1JIQObxym0Ccr7 2gjiZwVXu9lYhXXS1jg6IbIEGcla5lfG -----END CERTIFICATE-----Generated at Fri Sep 19 08:49:45 2025 by rpki-client