$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft File: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft (raw, json) Hash identifier: lQ4h8ioIjCSDiKJDruKI7c/wCNCl59iRMIMDUUUuXkE= Subject key identifier: 04:5C:9A:83:83:2A:68:8B:2B:18:C6:72:26:C0:BB:31:47:2D:7F:02 Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75 Certificate issuer: /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75 Certificate serial: 03C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft Manifest number: 03BD Signing time: Fri 19 Sep 2025 01:06:26 +0000 Manifest this update: Fri 19 Sep 2025 01:06:25 +0000 Manifest next update: Fri 26 Sep 2025 01:06:25 +0000 Files and hashes: 1: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl (hash: YFT6JrpD4TGRwu8ilJxBR8cvMDKK1GCnVfI7KNbdzGs=) 2: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (hash: t9Ue3iuOWPGeL64kpqjEgMmW4d4g4YPsvh4Erz4xwRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3DC1, serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75 Validity Not Before: Sep 19 01:06:25 2025 GMT Not After : Sep 26 01:06:25 2025 GMT Subject: CN=68ccac92-379e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4b:38:31:97:42:81:ee:df:38:86:9a:28:57: f1:65:c7:80:53:99:8a:81:42:c0:a8:cf:73:2b:aa: 3b:09:85:40:4d:d2:b4:66:79:fa:19:27:83:a9:7d: 3b:36:c0:40:d9:8e:33:ec:c9:8a:45:f1:92:43:5d: fb:6b:90:74:c8:70:c8:25:b7:a9:77:1e:e9:4c:8f: 9c:b4:c3:88:93:3a:b9:a6:79:2b:84:fa:0f:4f:c1: ca:6c:8b:7b:66:30:e0:f1:1d:26:59:74:51:e1:e4: f9:4f:dd:58:3c:04:f4:44:1d:85:a2:3f:83:68:22: 1e:c7:25:ac:3f:99:e3:63:37:2e:8d:d5:06:4f:8b: 90:e3:d7:ea:82:94:d5:72:9c:e0:06:3a:aa:1b:97: ac:19:b3:d2:63:dd:05:b8:77:cc:9d:ed:86:ce:bd: a2:a6:17:a3:5f:03:ec:01:a8:53:10:57:ae:4f:85: 82:69:27:57:68:18:38:92:bd:b9:f2:0a:9d:d8:33: 02:60:42:13:76:b5:b7:ec:9d:c9:a5:b0:b6:ca:d7: 8c:02:32:32:f8:cc:b6:d7:f6:25:51:91:90:dc:67: 5d:e8:14:92:1b:06:ab:cd:57:04:b2:d4:1e:8d:b3: a1:6c:74:c1:3e:b5:7c:26:bb:97:ea:b5:a9:fd:e3: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5C:9A:83:83:2A:68:8B:2B:18:C6:72:26:C0:BB:31:47:2D:7F:02 X509v3 Authority Key Identifier: keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d1:b5:ba:84:2b:f1:14:5f:38:75:57:86:d4:5f:21:a9:08: 92:02:b4:20:85:5a:ca:45:e1:35:c6:60:0d:a3:ec:60:3c:01: 82:d0:ac:81:4b:dd:32:19:2b:c4:47:da:b0:42:e3:53:92:72: f5:3c:1a:36:57:47:ae:df:5c:32:fb:84:a1:00:1f:90:ba:c7: a2:51:d8:59:67:56:6d:cf:01:1f:38:ba:c0:05:d3:e1:2c:5c: f0:7a:af:aa:c5:d2:e6:d1:b6:a4:fa:1f:40:64:33:c6:05:0d: cc:23:74:21:c0:8a:13:21:55:48:6d:ed:bc:05:21:0d:3d:5f: 84:4f:69:50:59:94:c4:70:2a:6f:4f:36:27:aa:4e:6f:9c:ac: ed:22:9e:e1:5e:54:a3:35:00:55:0d:6e:34:4c:a3:be:8e:92: e6:d0:1e:ab:c1:3e:c0:90:d9:a7:29:e9:0e:8b:14:8b:0d:06: 34:d1:a8:2a:11:f4:81:25:44:b0:95:01:56:96:3a:25:70:47: 5f:a1:40:c7:ce:8f:1f:c9:0b:80:28:e8:1f:72:89:1c:a9:e6: 29:a2:92:cb:95:7e:65:d1:fa:83:b8:ac:3d:40:5b:4d:36:76: 37:54:e0:58:b3:af:55:30:19:01:e9:5e:05:32:96:fa:3d:d8: 66:0b:4c:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEQzExMTAvBgNVBAUTKEUxNDRDQ0Y0MURBMTA1QUY2Q0Q0NUJDM0Y4ODY2MjM0 RDM4RjdDNzUwHhcNMjUwOTE5MDEwNjI1WhcNMjUwOTI2MDEwNjI1WjAYMRYwFAYD VQQDEw02OGNjYWM5Mi0zNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEs4MZdCge7fOIaaKFfxZceAU5mKgULAqM9zK6o7CYVATdK0Znn6GSeDqX07 NsBA2Y4z7MmKRfGSQ137a5B0yHDIJbepdx7pTI+ctMOIkzq5pnkrhPoPT8HKbIt7 ZjDg8R0mWXRR4eT5T91YPAT0RB2Foj+DaCIexyWsP5njYzcujdUGT4uQ49fqgpTV cpzgBjqqG5esGbPSY90FuHfMne2Gzr2iphejXwPsAahTEFeuT4WCaSdXaBg4kr25 8gqd2DMCYEITdrW37J3JpbC2yteMAjIy+My21/YlUZGQ3Gdd6BSSGwarzVcEstQe jbOhbHTBPrV8JruX6rWp/eMU6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARcmoOD KmiLKxjGcibAuzFHLX8CMB8GA1UdIwQYMBaAFOFEzPQdoQWvbNRbw/iGYjTTj3x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0RDMS81MEM2MDI3QUE1 MDYxMUVDODJBMjQzN0RDNEY5QUUwMi80VVRNOUIyaEJhOXMxRnZELUlaaU5OT1Bm SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVVE05QjJoQmE5czFGdkQtSVppTk5PUGZIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0RDMS81MEM2MDI3QUE1MDYxMUVDODJBMjQzN0RDNEY5QUUwMi80VVRNOUIyaEJh OXMxRnZELUlaaU5OT1BmSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP0bW6hCvxFF84dVeG1F8hqQiSArQghVrKReE1xmANo+xgPAGC0KyB S90yGSvER9qwQuNTknL1PBo2V0eu31wy+4ShAB+QuseiUdhZZ1ZtzwEfOLrABdPh LFzweq+qxdLm0bak+h9AZDPGBQ3MI3QhwIoTIVVIbe28BSENPV+ET2lQWZTEcCpv TzYnqk5vnKztIp7hXlSjNQBVDW40TKO+jpLm0B6rwT7AkNmnKekOixSLDQY00agq EfSBJUSwlQFWljolcEdfoUDHzo8fyQuAKOgfcokcqeYpopLLlX5l0fqDuKw9QFtN NnY3VOBYs69VMBkB6V4FMpb6PdhmC0yF -----END CERTIFICATE-----Generated at Fri Sep 19 09:05:53 2025 by rpki-client