$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft File: 4-snntAeg57yRYBuBFH8FVAJJqI.mft (raw, json) Hash identifier: 9yMF6Pl42n8WwcHEK4FseMnXnvMtvPG+Yy8K7HDJoYA= Subject key identifier: C3:EB:32:9A:6F:55:DE:51:65:1C:60:68:CD:4B:11:48:84:9A:39:63 Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2 Certificate issuer: /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2 Certificate serial: 07EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft Manifest number: 07E4 Signing time: Thu 18 Sep 2025 21:22:52 +0000 Manifest this update: Thu 18 Sep 2025 21:22:51 +0000 Manifest next update: Thu 25 Sep 2025 21:22:51 +0000 Files and hashes: 1: 4-snntAeg57yRYBuBFH8FVAJJqI.crl (hash: aHqQwHLa2A+dvb3me614f99XeWaFywe4teL0jzUnI/k=) 2: EBD94A14049A11EBB73A8663C4F9AE02.roa (hash: ZknxYLcseYgQHA8GKWCkWbIGR6Obm6R2RGgZoA7El3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C53, serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2 Validity Not Before: Sep 18 21:22:51 2025 GMT Not After : Sep 25 21:22:51 2025 GMT Subject: CN=68cc782b-68e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:7e:2f:f4:49:70:0f:61:1c:58:53:86:fc: 32:c7:e3:4b:ad:35:76:17:f9:01:73:eb:df:a3:20: b8:fb:c9:e0:aa:e5:fd:61:ae:af:3a:0b:93:0a:89: b9:e7:bd:a2:36:56:78:ec:ed:cb:a4:27:b3:cd:00: 11:ab:8e:b4:bc:d5:fe:0a:6c:9d:5b:d1:1f:b6:4d: bc:c7:02:26:16:b5:9c:a5:93:0b:1f:25:1f:18:72: fe:3e:2d:ae:fe:ad:ef:af:07:ea:46:89:3e:d7:8a: c7:ec:2b:fa:8d:49:e3:76:be:18:25:a0:2c:e4:64: 59:ff:dd:30:36:e2:66:89:52:fa:47:3f:f2:52:dd: 7d:27:be:09:1f:4b:4c:75:fd:e1:22:7a:e1:77:b4: 45:eb:41:f6:30:cc:c5:c5:20:91:fa:83:3f:03:97: 94:f8:25:7a:bc:fc:ea:99:fa:b9:c1:b3:e0:2b:f1: 94:ed:1e:42:96:0a:6b:da:89:20:3f:7e:8c:53:df: 38:c5:e7:77:f4:40:f0:f5:54:64:9e:8d:d6:ad:35: fc:0e:88:90:53:cf:4b:dc:03:d9:49:2a:fc:50:68: fd:5e:ed:08:8d:73:d4:2c:07:13:16:7b:45:76:27: 38:de:93:a6:35:f0:54:c1:fc:a1:2f:a3:1f:9d:ea: bf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EB:32:9A:6F:55:DE:51:65:1C:60:68:CD:4B:11:48:84:9A:39:63 X509v3 Authority Key Identifier: keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:07:a9:c5:21:c8:31:bd:70:4c:0a:45:c7:a5:56:8c:32:1e: 21:9f:44:41:3b:98:c3:5a:1b:df:47:68:e2:9d:25:3f:23:48: b6:ef:1c:43:ec:f0:36:25:3b:32:b7:b8:22:2c:17:58:46:dd: b1:2c:04:f8:8a:19:e9:eb:2d:1f:a9:3b:ef:7d:02:5a:b8:25: 22:82:63:85:d2:cf:3a:5f:48:ba:d2:89:33:96:2f:a4:2a:30: 44:8e:4b:ee:84:e8:9f:f1:a0:7c:32:d3:83:e9:26:74:c6:33: b8:25:48:96:a7:07:b3:a7:9d:c8:65:2d:0d:eb:9e:c1:0c:f7: 04:91:a0:13:ba:5f:f8:a7:a4:ce:38:66:fd:16:89:b2:57:22: b0:ad:dd:24:61:b1:f6:b2:ee:98:a6:1f:57:df:35:d1:33:0a: 4e:12:7b:31:25:ed:7a:d0:02:b6:29:10:42:f4:96:1b:88:60: f6:66:0f:f3:96:2e:75:85:b7:d5:02:81:3d:b3:95:a1:3b:a4: b9:ab:a2:b1:21:33:e9:e0:09:0f:56:dc:43:67:79:55:1b:bd: 03:e0:11:52:9f:c3:b5:de:cf:2c:fb:cc:fa:f8:0b:7c:75:e9: c0:4f:5d:54:da:78:23:83:1c:55:82:7a:41:50:08:8a:0e:e8: b8:1b:92:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNTMxMTAvBgNVBAUTKEUzRUIyNzlFRDAxRTgzOUVGMjQ1ODA2RTA0NTFGQzE1 NTAwOTI2QTIwHhcNMjUwOTE4MjEyMjUxWhcNMjUwOTI1MjEyMjUxWjAYMRYwFAYD VQQDEw02OGNjNzgyYi02OGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHh+L/RJcA9hHFhThvwyx+NLrTV2F/kBc+vfoyC4+8ngquX9Ya6vOguTCom5 572iNlZ47O3LpCezzQARq460vNX+CmydW9Eftk28xwImFrWcpZMLHyUfGHL+Pi2u /q3vrwfqRok+14rH7Cv6jUnjdr4YJaAs5GRZ/90wNuJmiVL6Rz/yUt19J74JH0tM df3hInrhd7RF60H2MMzFxSCR+oM/A5eU+CV6vPzqmfq5wbPgK/GU7R5Clgpr2okg P36MU984xed39EDw9VRkno3WrTX8DoiQU89L3APZSSr8UGj9Xu0IjXPULAcTFntF dic43pOmNfBUwfyhL6Mfneq/pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPrMppv Vd5RZRxgaM1LEUiEmjljMB8GA1UdIwQYMBaAFOPrJ57QHoOe8kWAbgRR/BVQCSai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM1My9FNzhFNDE2RTA0 OTgxMUVCQjFGRUU4NURDNEY5QUUwMi80LXNubnRBZWc1N3lSWUJ1QkZIOEZWQUpK cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtc25udEFlZzU3eVJZQnVCRkg4RlZBSkpxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM1My9FNzhFNDE2RTA0OTgxMUVCQjFGRUU4NURDNEY5QUUwMi80LXNubnRBZWc1 N3lSWUJ1QkZIOEZWQUpKcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUB6nFIcgxvXBMCkXHpVaMMh4hn0RBO5jDWhvfR2jinSU/I0i27xxD 7PA2JTsyt7giLBdYRt2xLAT4ihnp6y0fqTvvfQJauCUigmOF0s86X0i60okzli+k KjBEjkvuhOif8aB8MtOD6SZ0xjO4JUiWpwezp53IZS0N657BDPcEkaATul/4p6TO OGb9FomyVyKwrd0kYbH2su6Yph9X3zXRMwpOEnsxJe160AK2KRBC9JYbiGD2Zg/z li51hbfVAoE9s5WhO6S5q6KxITPp4AkPVtxDZ3lVG70D4BFSn8O13s8s+8z6+At8 denAT11U2ngjgxxVgnpBUAiKDui4G5LS -----END CERTIFICATE-----Generated at Fri Sep 19 02:31:15 2025 by rpki-client