$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json) Hash identifier: SJB/MfR3Q2N+DeJ3g3WA7A8IjS5mexO03L7eadC3xfo= Subject key identifier: 77:FA:AE:57:61:C0:0B:A2:36:F9:3E:D6:E6:94:D3:AA:DF:92:71:BA Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft Manifest number: 0223 Signing time: Wed 17 Sep 2025 02:27:24 +0000 Manifest this update: Wed 17 Sep 2025 02:27:24 +0000 Manifest next update: Wed 24 Sep 2025 02:27:24 +0000 Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: gN2dDISMQ9qXN/BHW6AtAR3RNwLVVbV50iSOvUfV4CQ=) 2: 237306724C5611ED8D5DDD70C4F9AE02.roa (hash: M5APD5jLzCTS+EqF5L/kaW7FUXSVgVVwOlYb/pQ9rq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Validity Not Before: Sep 17 02:27:24 2025 GMT Not After : Sep 24 02:27:24 2025 GMT Subject: CN=68ca1c8c-3112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9e:d7:65:11:ad:6f:0d:a4:d4:d6:ff:11:c8: 72:24:6e:de:03:41:8c:f0:f0:33:39:aa:14:08:f4: 7a:57:43:3c:dc:2f:5c:aa:3d:a7:46:25:b7:25:ad: 6f:44:a6:29:9e:59:57:59:c9:01:91:81:b1:ce:c4: 58:f3:9b:0c:71:d0:19:7d:31:50:ff:0c:83:38:1d: fc:de:fd:5d:e7:79:fc:c0:30:b5:49:45:32:db:df: b6:0f:a4:bf:42:6e:7a:65:3b:ec:f9:9f:14:63:c5: 2e:5c:5e:e9:8c:7f:0a:64:98:db:a6:6b:2b:46:ad: 22:7c:58:42:3f:c0:0e:f7:33:06:40:49:fc:ed:b8: fb:61:a9:5a:c9:9d:6e:d8:2f:a4:1f:5a:e4:6c:29: ec:cc:e6:ef:fc:30:1d:10:9c:c7:96:9e:82:a8:eb: 0e:f9:13:0d:46:ae:0c:ac:c0:73:a7:e2:c7:63:ba: 77:5c:cf:42:d0:2f:fe:96:1c:87:6f:98:a4:47:fd: dc:32:23:06:e4:d8:db:f3:65:bf:e6:2d:13:e1:51: e4:3b:23:27:d3:bc:ab:49:b0:02:02:fe:7b:50:48: a2:fc:6c:21:d6:06:34:9e:f6:a0:9a:c7:bf:7f:ba: 16:f3:93:df:06:44:e7:99:43:5e:0c:90:4e:69:7e: f7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FA:AE:57:61:C0:0B:A2:36:F9:3E:D6:E6:94:D3:AA:DF:92:71:BA X509v3 Authority Key Identifier: keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:77:50:ba:3e:30:58:3b:99:15:73:9a:d4:f2:c1:22:18:fe: ff:e9:dd:41:ac:57:bb:35:ac:e9:df:0d:c9:07:eb:3f:14:9f: 6c:2e:a8:a8:90:0b:71:49:96:30:ab:0a:b6:bf:53:8f:c7:3a: 0d:43:0e:b6:e9:a3:90:06:9b:55:12:2f:32:21:27:19:04:2e: de:d2:07:5a:87:f0:e9:87:59:58:ba:6a:b7:52:32:50:fd:8e: ee:dd:23:c3:7a:c3:a1:31:14:0f:d8:8c:b2:45:22:5a:5f:fe: cd:ca:33:4d:d2:d6:8f:1d:d3:b5:a8:4d:82:ee:fd:eb:a9:5f: a7:6e:4a:93:24:8b:8a:0e:f9:59:da:29:0f:a5:bb:5c:05:51: db:b6:1b:28:ee:96:e6:d0:9e:0d:4d:d9:1c:8e:15:05:28:26: a6:5d:62:37:f4:ac:67:51:0a:a7:e8:af:eb:dd:4a:37:a4:54: 93:a9:88:0a:04:c0:7d:56:2e:50:ce:8a:8c:d4:c2:36:f2:b5: 7d:ff:55:1a:9f:48:69:ff:c3:d4:d0:55:f0:f7:da:90:9e:bc: 69:86:fb:cc:7b:de:44:52:21:60:2c:35:33:4d:cc:de:57:19: 3a:71:cf:f6:e5:37:df:ee:c2:3f:a1:92:75:3a:06:64:91:55: 70:aa:c7:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIyNTNGNDA2QzA0 RTQ2Nzc2RjYwHhcNMjUwOTE3MDIyNzI0WhcNMjUwOTI0MDIyNzI0WjAYMRYwFAYD VQQDEw02OGNhMWM4Yy0zMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn57XZRGtbw2k1Nb/EchyJG7eA0GM8PAzOaoUCPR6V0M83C9cqj2nRiW3Ja1v RKYpnllXWckBkYGxzsRY85sMcdAZfTFQ/wyDOB383v1d53n8wDC1SUUy29+2D6S/ Qm56ZTvs+Z8UY8UuXF7pjH8KZJjbpmsrRq0ifFhCP8AO9zMGQEn87bj7YalayZ1u 2C+kH1rkbCnszObv/DAdEJzHlp6CqOsO+RMNRq4MrMBzp+LHY7p3XM9C0C/+lhyH b5ikR/3cMiMG5Njb82W/5i0T4VHkOyMn07yrSbACAv57UEii/Gwh1gY0nvagmse/ f7oW85PfBkTnmUNeDJBOaX73yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHf6rldh wAuiNvk+1uaU06rfknG6MB8GA1UdIwQYMBaAFIJSNAQHaT+Lx8EyJT9AbATkZ3b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDUxNC9FRjBBMzUyRTRD NTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0dkh3VElsUDBCc0JPUm5k dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dsSTBCQWRwUDR2SHdUSWxQMEJzQk9SbmR2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDUxNC9FRjBBMzUyRTRDNTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0 dkh3VElsUDBCc0JPUm5kdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApd1C6PjBYO5kVc5rU8sEiGP7/6d1BrFe7Nazp3w3JB+s/FJ9sLqio kAtxSZYwqwq2v1OPxzoNQw626aOQBptVEi8yIScZBC7e0gdah/Dph1lYumq3UjJQ /Y7u3SPDesOhMRQP2IyyRSJaX/7NyjNN0taPHdO1qE2C7v3rqV+nbkqTJIuKDvlZ 2ikPpbtcBVHbthso7pbm0J4NTdkcjhUFKCamXWI39KxnUQqn6K/r3Uo3pFSTqYgK BMB9Vi5QzoqM1MI28rV9/1Uan0hp/8PU0FXw99qQnrxphvvMe95EUiFgLDUzTcze Vxk6cc/25Tff7sI/oZJ1OgZkkVVwqseQ -----END CERTIFICATE-----Generated at Thu Sep 18 23:26:54 2025 by rpki-client