$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: 61r6Cj2HAY2anCFpDH+LauE11gk677t2yJ7bdwZR08g= Subject key identifier: 54:BD:70:29:1A:55:54:8A:A8:E4:A2:4E:B2:EF:2E:1D:46:91:3C:99 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 1479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 146F Signing time: Mon 08 Sep 2025 16:55:08 +0000 Manifest this update: Mon 08 Sep 2025 16:55:08 +0000 Manifest next update: Mon 15 Sep 2025 16:55:08 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: 9yGF2KQxpZx6VhbXVyvwK1FoQQJnKaa1H8LmzceQOvY=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: W5cx07cNyMaDMA4R0/MWrV4hAi09Yk83hfS7ozdwiBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5241 (0x1479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Sep 8 16:55:08 2025 GMT Not After : Sep 15 16:55:08 2025 GMT Subject: CN=68bf0a6c-04e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e0:24:fb:28:26:c2:e0:0c:07:dd:ef:4b:e6: df:be:2e:f8:c9:33:38:95:3f:74:90:87:fb:23:e5: e3:c5:95:7e:40:14:84:cb:40:de:1a:02:d7:5e:d9: e9:41:cf:f1:05:36:13:7a:02:22:f3:67:b3:f2:78: 15:9e:18:c8:02:1a:d8:ea:71:fd:28:9c:25:75:72: 7b:f1:6a:10:2b:91:f7:f4:3e:0c:5d:88:d0:c8:94: 89:44:1d:8b:92:1d:d7:5d:1f:e9:d8:38:c0:b9:1e: 18:cc:aa:aa:37:4d:0e:32:86:d0:41:db:7c:dc:73: ff:fa:21:f1:7b:90:3d:10:3e:d9:38:f8:1e:96:d3: 1e:9f:51:1a:9d:66:fc:29:e1:d5:5c:3e:1a:b4:5c: dd:e0:22:50:05:3a:90:33:54:eb:15:c6:d2:33:6e: c1:ac:0e:df:91:56:cc:5c:11:30:cf:79:15:bc:64: 33:ac:5a:40:84:34:0a:db:f7:5c:21:26:0d:1a:3c: 16:71:24:71:b5:4b:d8:6d:30:b5:e2:ce:71:63:62: e4:3e:b4:ce:a9:de:91:60:d5:a4:56:05:d4:43:4d: df:fe:bb:06:0b:34:f1:eb:5d:21:4b:b9:01:ed:ab: 60:ab:c5:94:c4:87:86:44:9d:12:de:87:f8:a8:53: f0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BD:70:29:1A:55:54:8A:A8:E4:A2:4E:B2:EF:2E:1D:46:91:3C:99 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e4:ad:2d:aa:26:75:19:4f:09:48:70:09:d1:6f:06:08:33: 6b:5a:2e:e3:4f:45:71:5e:ac:a0:d3:a9:20:98:91:02:d8:e6: 80:7f:a6:d9:77:95:3f:77:4e:fa:3c:a5:36:53:39:28:fc:fb: 8b:64:22:93:82:53:9f:2f:bf:27:f8:19:59:ba:db:4e:e5:81: 83:d0:29:ca:df:92:da:67:7a:a4:55:75:f4:f5:ea:0b:5f:67: 71:83:e8:97:87:cd:c0:d4:6f:ff:e5:d0:f7:7b:08:bc:6a:52: 16:74:ba:9d:35:30:ea:98:1a:25:03:f4:81:ce:b4:61:e1:ce: fd:10:5c:da:64:74:7f:81:7e:c2:dc:70:85:01:3f:61:a5:ac: f8:e9:64:f5:d1:bc:70:d5:9a:38:dc:3a:8e:dd:69:b6:be:d3: ca:56:9e:96:f3:82:8a:9b:09:ad:a1:3a:78:b2:f5:82:33:69: 6e:9a:9e:1d:92:ef:7d:f5:3b:1f:8f:47:68:c0:9a:59:a2:77: a7:25:e8:ed:be:82:b8:94:ae:d5:d3:fd:fb:5f:bc:0f:d4:87: 08:46:91:9b:94:84:e4:be:ad:06:89:24:e1:cd:2b:93:c4:e5: b1:e3:c3:b8:76:b2:32:85:79:0d:90:61:1c:9a:ea:1c:07:bc: 29:4f:97:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjUwOTA4MTY1NTA4WhcNMjUwOTE1MTY1NTA4WjAYMRYwFAYD VQQDEw02OGJmMGE2Yy0wNGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOAk+ygmwuAMB93vS+bfvi74yTM4lT90kIf7I+XjxZV+QBSEy0DeGgLXXtnp Qc/xBTYTegIi82ez8ngVnhjIAhrY6nH9KJwldXJ78WoQK5H39D4MXYjQyJSJRB2L kh3XXR/p2DjAuR4YzKqqN00OMobQQdt83HP/+iHxe5A9ED7ZOPgeltMen1EanWb8 KeHVXD4atFzd4CJQBTqQM1TrFcbSM27BrA7fkVbMXBEwz3kVvGQzrFpAhDQK2/dc ISYNGjwWcSRxtUvYbTC14s5xY2LkPrTOqd6RYNWkVgXUQ03f/rsGCzTx610hS7kB 7atgq8WUxIeGRJ0S3of4qFPwbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFS9cCka VVSKqOSiTrLvLh1GkTyZMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk5K0tqiZ1GU8JSHAJ0W8GCDNrWi7jT0VxXqyg06kgmJEC2OaAf6bZ d5U/d076PKU2Uzko/PuLZCKTglOfL78n+BlZuttO5YGD0CnK35LaZ3qkVXX09eoL X2dxg+iXh83A1G//5dD3ewi8alIWdLqdNTDqmBolA/SBzrRh4c79EFzaZHR/gX7C 3HCFAT9hpaz46WT10bxw1Zo43DqO3Wm2vtPKVp6W84KKmwmtoTp4svWCM2lump4d ku999Tsfj0dowJpZonenJejtvoK4lK7V0/37X7wP1IcIRpGblITkvq0GiSThzSuT xOWx48O4drIyhXkNkGEcmuocB7wpT5ey -----END CERTIFICATE-----Generated at Tue Sep 9 20:34:53 2025 by rpki-client