$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: E5C3A54b1P/wqYBu1tgbXaQDW7k2EX8mcURNmbPO2q0= Subject key identifier: 49:2E:C8:F3:7B:B3:6A:CC:D8:68:F1:BC:02:A9:91:E9:74:F0:55:54 Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 02A2 Signing time: Fri 19 Sep 2025 02:00:25 +0000 Manifest this update: Fri 19 Sep 2025 02:00:24 +0000 Manifest next update: Fri 26 Sep 2025 02:00:24 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: oV6mTjP1vnB4O6NZfm4GXcQqjFrq409VsMoFVrazSVI=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: J9pQDV5DOJjkhb+4B/qx3A8bnj3R3w4sok+Lo0s4MxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 02:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: Sep 19 02:00:24 2025 GMT Not After : Sep 26 02:00:24 2025 GMT Subject: CN=68ccb939-e295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:92:93:57:f1:ae:95:ab:54:bb:8e:fd:30:59: 73:ad:8d:11:ef:a0:2c:32:91:22:6a:f8:7c:a8:9c: 4c:4b:c1:76:55:31:11:fa:67:c2:6e:49:ec:4f:4e: 81:83:e0:30:cc:20:a7:9b:32:fc:c7:bf:01:44:fa: 8a:d6:3f:a4:f8:8d:f8:4e:68:ad:fb:f7:ec:e3:04: b9:fb:1b:bb:ca:95:63:79:00:d0:10:1b:eb:5b:9b: 89:b4:78:1a:7f:b2:bb:c7:95:07:be:73:3b:63:bb: b1:50:e2:1e:2e:d7:f5:ed:98:3c:a8:84:c8:e2:ab: 1a:e7:5f:ab:a4:2c:55:13:34:9a:4c:08:50:2f:c4: f0:eb:e3:0b:a3:8e:e5:69:c3:c5:f0:fb:6c:75:de: 5e:48:bd:8e:85:61:49:79:84:f7:cd:ba:20:0b:99: 57:4e:ef:08:7e:8e:6d:c4:f3:67:43:ae:a4:3b:e0: e7:83:f7:e5:2a:17:ee:c3:e7:7a:1d:0b:d6:5c:d5: 4e:f4:92:a8:ed:23:dd:9f:1e:6d:22:89:e8:b3:2b: ca:ff:1e:04:f6:a8:cd:8a:7e:1e:f8:c2:dd:b5:05: 88:c1:56:58:b8:42:8f:a0:11:e0:9a:10:af:ca:e6: 59:c9:1e:4e:da:8b:00:ad:fb:39:9a:de:f7:9c:e4: a9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2E:C8:F3:7B:B3:6A:CC:D8:68:F1:BC:02:A9:91:E9:74:F0:55:54 X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f5:41:9c:f2:62:8b:ac:ef:05:a3:55:85:cf:4b:7e:5e:d7: 30:81:26:b8:84:4a:53:e3:ef:e4:e2:5d:1a:16:c6:d9:75:21: b5:94:e0:3b:75:d3:87:38:67:3d:c4:37:7a:4b:bb:ba:51:4e: f0:da:70:2e:59:85:05:7f:c3:ef:92:11:1f:d1:08:e7:24:1b: d2:c7:bd:60:37:92:27:e3:91:b1:a9:1d:b4:25:76:c1:50:62: 39:a8:22:6d:56:0e:ac:63:bd:76:de:ea:eb:95:6d:54:ca:0b: 28:20:2c:07:5a:84:3e:fe:aa:a0:5d:99:d8:a4:98:d1:0a:79: dd:51:97:d5:eb:76:a4:77:fd:67:58:c3:04:c1:bb:0e:e8:e6: 2a:6d:37:be:8f:29:2d:a6:7f:d0:92:13:34:b6:69:4b:f6:8b: d2:0d:70:f5:42:20:6b:5b:28:8f:46:e4:db:4b:33:53:c3:db: 8d:f9:f3:c1:13:0b:89:65:22:73:72:40:a4:36:85:b2:05:7b: cf:8f:9b:76:f1:d6:fe:e0:39:29:08:90:8d:96:62:58:e5:20: be:51:b3:8a:4f:9b:a8:ca:68:3a:d1:6d:03:e7:8e:14:80:98: ee:cb:47:86:c7:54:45:a0:af:95:76:af:ef:77:61:37:8c:a8: e6:8b:53:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjUwOTE5MDIwMDI0WhcNMjUwOTI2MDIwMDI0WjAYMRYwFAYD VQQDEw02OGNjYjkzOS1lMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJKTV/GulatUu479MFlzrY0R76AsMpEiavh8qJxMS8F2VTER+mfCbknsT06B g+AwzCCnmzL8x78BRPqK1j+k+I34Tmit+/fs4wS5+xu7ypVjeQDQEBvrW5uJtHga f7K7x5UHvnM7Y7uxUOIeLtf17Zg8qITI4qsa51+rpCxVEzSaTAhQL8Tw6+MLo47l acPF8Ptsdd5eSL2OhWFJeYT3zbogC5lXTu8Ifo5txPNnQ66kO+Dng/flKhfuw+d6 HQvWXNVO9JKo7SPdnx5tIonosyvK/x4E9qjNin4e+MLdtQWIwVZYuEKPoBHgmhCv yuZZyR5O2osArfs5mt73nOSpZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkuyPN7 s2rM2GjxvAKpkel08FVUMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC59UGc8mKLrO8Fo1WFz0t+XtcwgSa4hEpT4+/k4l0aFsbZdSG1lOA7 ddOHOGc9xDd6S7u6UU7w2nAuWYUFf8PvkhEf0QjnJBvSx71gN5In45GxqR20JXbB UGI5qCJtVg6sY7123urrlW1UygsoICwHWoQ+/qqgXZnYpJjRCnndUZfV63akd/1n WMMEwbsO6OYqbTe+jyktpn/QkhM0tmlL9ovSDXD1QiBrWyiPRuTbSzNTw9uN+fPB EwuJZSJzckCkNoWyBXvPj5t28db+4DkpCJCNlmJY5SC+UbOKT5uoymg60W0D544U gJjuy0eGx1RFoK+Vdq/vd2E3jKjmi1P4 -----END CERTIFICATE-----Generated at Fri Sep 19 08:49:31 2025 by rpki-client