$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft File: r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json) Hash identifier: DrDGO8CeQq4CfrmECmr/qgu7pthSps89HEHQmvrfyTo= Subject key identifier: 08:50:0A:9A:4C:55:13:89:74:68:17:C2:19:6A:2E:41:53:81:FD:4C Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Certificate serial: 0426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft Manifest number: 0411 Signing time: Tue 09 Sep 2025 00:33:52 +0000 Manifest this update: Tue 09 Sep 2025 00:33:51 +0000 Manifest next update: Tue 16 Sep 2025 00:33:51 +0000 Files and hashes: 1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: gDVIdmpG08VCeNifDyV4sn967RarD4YvVpyVmtFXiQg=) 2: E69ABF78033911EFBE28FC1FC4F9AE02.roa (hash: Rg7/HWvbLuN8QkYRlBgqkedDJt7Lv8j0nbDNMsIVYIo=) 3: CB8AA43A4D9B11EFB201E984C4F9AE02.roa (hash: IBTL0V7J1tBYqG7NDXusQxEwJubmZUah6ZmQZ+9P3Us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1062 (0x426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Validity Not Before: Sep 9 00:33:51 2025 GMT Not After : Sep 16 00:33:51 2025 GMT Subject: CN=68bf75ef-6600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:0d:b2:42:77:53:aa:b7:ee:3d:b4:10:7e: 0a:ed:3d:fa:9a:f9:df:17:94:44:ca:21:fa:c6:d5: 8a:74:c9:3e:46:97:28:a3:32:4b:2e:d1:41:6e:3d: d0:74:a1:11:8d:91:45:c2:06:b3:07:ce:a4:29:ae: 54:21:b9:b7:f6:34:95:81:1a:ac:69:c5:4d:97:62: 0c:e8:cd:f3:02:c4:90:f3:85:70:6b:ac:96:ba:d9: 10:87:36:7d:9d:2d:b5:ae:b9:1b:16:d4:fe:96:a4: da:53:ed:73:80:fc:ea:80:d8:d3:d1:f6:a6:b1:cd: 76:27:de:18:22:b2:45:5d:00:07:66:d7:e1:e7:23: 6b:89:cb:c0:7a:8e:b4:02:19:4f:98:d5:da:e8:a6: 8f:7d:58:ae:f1:db:8e:08:9c:18:5c:5c:5f:e3:b1: 91:12:40:0a:de:22:b9:a8:4b:97:b5:43:78:43:60: 13:ce:57:68:0d:57:67:75:b5:ab:7d:a7:44:bc:02: 9b:ee:af:fd:42:35:86:05:d4:97:7a:89:81:0a:b1: 20:68:e0:e5:c9:2e:ad:de:4c:52:45:53:3b:be:01: 58:b9:7d:59:23:5a:43:71:6f:50:1c:f2:f7:33:b1: 08:40:9e:dc:6d:81:8a:9b:2c:4d:46:43:e1:52:40: dd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:50:0A:9A:4C:55:13:89:74:68:17:C2:19:6A:2E:41:53:81:FD:4C X509v3 Authority Key Identifier: keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:2a:48:62:41:33:58:02:b8:91:18:d9:f9:71:e8:f5:a8:95: df:5a:79:8d:a9:b3:76:0d:0f:80:4c:88:15:60:1d:fc:6c:1b: 9b:c2:bf:b3:05:a7:af:ed:fa:0f:84:9a:47:0d:d1:d0:e2:dc: 4f:9f:af:08:b8:b0:3a:cc:ae:03:e8:df:b8:85:57:17:17:2b: a3:e6:c2:78:d3:16:9e:d7:a4:bc:f2:b6:0f:51:94:25:1b:7b: 37:62:37:21:a0:b5:92:14:d9:76:ee:e5:a5:fc:54:58:2d:a1: 2f:6d:6d:5e:36:4f:9b:62:5c:82:dc:58:0b:b0:74:ac:29:fc: 01:a8:c2:b0:9a:3f:1c:7b:cb:e6:71:c6:53:b6:60:81:04:78: 90:a6:81:12:3e:93:28:d5:87:a7:79:24:99:37:48:c1:58:7b: 68:bc:e2:c0:0a:3f:2f:ab:cf:81:ac:0a:4f:dc:c0:c1:f9:76: a6:58:f0:49:cb:d3:ec:db:cf:bf:bc:ab:47:c5:28:d5:87:bf: 5b:6d:5c:bc:5f:f5:bb:a4:aa:2d:ab:be:91:d2:d8:be:49:fe: 08:31:88:4f:d4:33:fe:2a:c7:b4:c6:ae:1a:4e:5a:5b:0a:44: 3f:98:b6:3c:d8:8a:1c:79:98:47:e3:4c:82:19:9a:f3:22:77: 09:27:5f:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMTgxMTAvBgNVBAUTKEFGRDA5NTVBN0REN0Y5QjBFQzJBNDRBMTFEOTM3MjA3 QzI3NTRBNjMwHhcNMjUwOTA5MDAzMzUxWhcNMjUwOTE2MDAzMzUxWjAYMRYwFAYD VQQDEw02OGJmNzVlZi02NjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmUNskJ3U6q37j20EH4K7T36mvnfF5REyiH6xtWKdMk+RpcoozJLLtFBbj3Q dKERjZFFwgazB86kKa5UIbm39jSVgRqsacVNl2IM6M3zAsSQ84Vwa6yWutkQhzZ9 nS21rrkbFtT+lqTaU+1zgPzqgNjT0famsc12J94YIrJFXQAHZtfh5yNricvAeo60 AhlPmNXa6KaPfViu8duOCJwYXFxf47GREkAK3iK5qEuXtUN4Q2ATzldoDVdndbWr fadEvAKb7q/9QjWGBdSXeomBCrEgaODlyS6t3kxSRVM7vgFYuX1ZI1pDcW9QHPL3 M7EIQJ7cbYGKmyxNRkPhUkDdqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhQCppM VROJdGgXwhlqLkFTgf1MMB8GA1UdIwQYMBaAFK/QlVp91/mw7CpEoR2TcgfCdUpj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAxOC84ODM2RkE2MDhE NEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1iRHNLa1NoSFpOeUI4SjFT bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5Q1ZXbjNYLWJEc0trU2hIWk55QjhKMVNtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAxOC84ODM2RkE2MDhENEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1i RHNLa1NoSFpOeUI4SjFTbU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATKkhiQTNYAriRGNn5cej1qJXfWnmNqbN2DQ+ATIgVYB38bBubwr+z Baev7foPhJpHDdHQ4txPn68IuLA6zK4D6N+4hVcXFyuj5sJ40xae16S88rYPUZQl G3s3YjchoLWSFNl27uWl/FRYLaEvbW1eNk+bYlyC3FgLsHSsKfwBqMKwmj8ce8vm ccZTtmCBBHiQpoESPpMo1YeneSSZN0jBWHtovOLACj8vq8+BrApP3MDB+XamWPBJ y9Ps28+/vKtHxSjVh79bbVy8X/W7pKotq76R0ti+Sf4IMYhP1DP+Kse0xq4aTlpb CkQ/mLY82IoceZhH40yCGZrzIncJJ199 -----END CERTIFICATE-----Generated at Tue Sep 9 15:18:15 2025 by rpki-client