$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json) Hash identifier: fZ8+vL2JHHZk8zno4thpOoEfK9u6nA7NbSLGB9urNO8= Subject key identifier: FA:82:A7:6A:34:5F:34:BD:95:AB:23:9C:70:A0:78:44:37:F0:E6:6D Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Certificate serial: 16A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft Manifest number: 1672 Signing time: Mon 08 Sep 2025 16:43:22 +0000 Manifest this update: Mon 08 Sep 2025 16:43:21 +0000 Manifest next update: Mon 15 Sep 2025 16:43:21 +0000 Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: tttgj4qY1CbmGP+mLcVB7X3hOgLWYkPQmnSMgQxulxk=) 2: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: 4whCD3BefA16gco8GRXsiAdGqv5E31DbZxV0ybOWul8=) 3: 86BBD3DE994C11EC82BA3978C4F9AE02.roa (hash: 8Wwh2LGsfMleJz4kPXncR947wixaVvdi2YpWJ6WAnNA=) 4: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: /AMe5fWdVkNbiDNAX3rxonqHX2GWCAFeTm3WBDEgams=) 5: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: C40oyBiTxjQqMGzoY7zwrfSLtJR/TE6dpDn0DYUL1uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5794 (0x16a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Validity Not Before: Sep 8 16:43:21 2025 GMT Not After : Sep 15 16:43:21 2025 GMT Subject: CN=68bf07aa-222d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f6:e1:ba:7a:02:79:a3:9d:3b:39:47:dd:c2: 6b:94:8b:56:5d:26:af:f4:31:9f:cd:c1:81:81:8c: 5c:82:c6:d1:9c:98:0d:18:4e:e7:2b:30:ff:7c:1a: 15:4d:d6:fc:64:d6:e5:f7:aa:7a:f3:76:59:e4:1a: ba:7b:9a:fe:54:40:50:68:5e:50:99:42:e2:8e:ea: 65:54:d8:ae:43:d8:e0:4b:ed:b4:57:d4:9d:8f:82: 2a:6b:2e:63:10:f6:dc:cc:f8:ea:fd:da:ef:5d:94: de:25:00:e2:61:92:8b:3c:ad:bd:4d:6c:84:3f:9a: 7e:c0:3a:7b:74:ab:16:6b:39:48:a9:85:0c:22:47: 88:f3:02:16:a6:f1:0d:8c:69:ba:dd:af:d2:4d:a7: c7:0b:a5:0c:1d:9b:ba:cf:dd:3c:21:4c:86:ed:cf: 3f:95:45:7b:24:9a:16:03:0e:4f:fa:cf:37:cb:83: 3e:d7:3b:92:d0:77:a4:ce:1c:c9:eb:d4:03:30:b9: f2:ae:41:9d:3f:c2:2f:f8:48:1d:43:e4:85:90:dd: 2f:3b:06:74:58:0a:3d:ea:23:ba:1d:5d:61:dd:14: 2b:aa:86:0b:e7:fc:4e:f1:de:18:2d:cf:c7:c5:0c: f7:7f:02:65:f5:7c:b0:22:cc:4c:4d:2a:5a:fc:11: 6f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:82:A7:6A:34:5F:34:BD:95:AB:23:9C:70:A0:78:44:37:F0:E6:6D X509v3 Authority Key Identifier: keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:95:79:0f:b3:ba:37:7b:19:65:1c:ca:5b:97:a6:55:59:f4: ed:73:3c:23:fa:b3:c5:37:19:9a:9a:9d:70:a1:fa:aa:d2:91: 18:7a:82:05:ad:f4:b8:5b:3e:14:84:a4:24:62:a9:eb:01:1c: a2:23:b2:f1:1c:b7:08:cf:e3:45:93:0b:f5:e3:1e:6e:92:fc: a1:4f:a8:55:09:e5:49:ee:f4:81:f8:27:f2:cc:20:be:12:ac: 9f:f9:53:a6:2b:c0:16:cb:a9:ee:c0:e9:3b:77:ce:32:7b:a2: 05:cb:19:2d:d8:53:72:e2:db:d0:c0:62:a7:ed:98:47:36:b0: 27:b6:15:ac:68:17:60:ae:f7:a7:e3:9e:91:65:16:75:1b:7b: 3e:5f:6a:45:74:4e:7b:11:5d:e6:da:5f:8e:3f:18:aa:01:55: 75:6f:33:58:90:52:b4:6e:e7:8d:58:3c:1b:21:ba:eb:d5:89: 04:cb:da:f5:0c:d7:60:0e:f0:a7:58:89:24:d1:ab:49:43:06: 7b:43:9b:22:bc:53:f4:30:a7:9b:52:89:c3:a1:28:0b:83:46: 65:ac:0f:20:0a:f7:c1:82:67:4c:c7:78:17:72:7d:7f:4d:af: 51:cc:8c:1d:f6:6f:20:f6:79:df:76:6d:1d:88:95:f1:ef:50: 08:de:df:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3 RjEyMUYwNTMwHhcNMjUwOTA4MTY0MzIxWhcNMjUwOTE1MTY0MzIxWjAYMRYwFAYD VQQDEw02OGJmMDdhYS0yMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvbhunoCeaOdOzlH3cJrlItWXSav9DGfzcGBgYxcgsbRnJgNGE7nKzD/fBoV Tdb8ZNbl96p683ZZ5Bq6e5r+VEBQaF5QmULijuplVNiuQ9jgS+20V9Sdj4Iqay5j EPbczPjq/drvXZTeJQDiYZKLPK29TWyEP5p+wDp7dKsWazlIqYUMIkeI8wIWpvEN jGm63a/STafHC6UMHZu6z908IUyG7c8/lUV7JJoWAw5P+s83y4M+1zuS0HekzhzJ 69QDMLnyrkGdP8Iv+EgdQ+SFkN0vOwZ0WAo96iO6HV1h3RQrqoYL5/xO8d4YLc/H xQz3fwJl9XywIsxMTSpa/BFvbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqCp2o0 XzS9lasjnHCgeEQ38OZtMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2 MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4 Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTE4NS8zRUE5REQzQTE2MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09D TUh0UG5WXzlWLWxfRWg4Rk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmlXkPs7o3exllHMpbl6ZVWfTtczwj+rPFNxmamp1wofqq0pEYeoIF rfS4Wz4UhKQkYqnrARyiI7LxHLcIz+NFkwv14x5ukvyhT6hVCeVJ7vSB+CfyzCC+ Eqyf+VOmK8AWy6nuwOk7d84ye6IFyxkt2FNy4tvQwGKn7ZhHNrAnthWsaBdgrven 456RZRZ1G3s+X2pFdE57EV3m2l+OPxiqAVV1bzNYkFK0bueNWDwbIbrr1YkEy9r1 DNdgDvCnWIkk0atJQwZ7Q5sivFP0MKebUonDoSgLg0ZlrA8gCvfBgmdMx3gXcn1/ Ta9RzIwd9m8g9nnfdm0diJXx71AI3t+b -----END CERTIFICATE-----Generated at Tue Sep 9 20:11:42 2025 by rpki-client