$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: F4GBfCYhSFqiB/Yd0QBYdABp2LhihvGmvJdYAF22BsU= Subject key identifier: 2C:CC:46:CD:1D:0D:0B:EE:A6:9F:23:5E:09:9E:E0:2A:27:E7:D6:D7 Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: B1 Signing time: Wed 17 Sep 2025 06:44:45 +0000 Manifest this update: Wed 17 Sep 2025 06:44:44 +0000 Manifest next update: Wed 24 Sep 2025 06:44:44 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: kjyJdUJfk01b6wSwfwGco8Ux80UX4T2vWg/CW7u7Wkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: Sep 17 06:44:44 2025 GMT Not After : Sep 24 06:44:44 2025 GMT Subject: CN=68ca58dd-a299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:45:4d:ad:2f:f2:12:e0:1c:79:ea:41:7e:01: ef:90:f3:8f:0c:e9:41:bd:09:50:ff:b9:be:d9:c4: 8e:0c:e8:a3:e7:b9:54:a5:bb:66:5e:3c:34:7a:49: 97:48:8c:cd:53:0a:f8:85:88:9d:12:eb:d2:63:30: da:b0:c2:d1:aa:25:1d:d3:fc:3b:9c:a8:11:02:7c: 85:c6:9c:12:1e:36:6c:86:30:5f:97:a6:f5:69:10: e5:3d:cf:4c:b4:2a:34:43:39:ef:bc:9c:bf:99:ae: 21:29:12:eb:07:c9:67:f3:aa:80:4d:50:e9:fb:8a: 59:84:48:f2:f8:01:f7:b4:28:3c:2b:18:d7:76:1f: 34:03:ac:46:c9:06:d5:d8:d2:62:75:08:0a:d2:0d: c5:12:0e:de:4d:8c:83:06:b8:d6:22:a5:c7:8a:57: 83:36:56:ae:c1:59:87:72:33:1a:a7:00:7a:d6:07: be:42:6e:6f:d1:ad:dd:60:f4:74:b0:8f:d1:f5:fd: 08:e9:46:09:1c:b0:3e:63:df:b2:2e:47:06:cc:48: 18:58:57:12:a9:07:52:58:0c:ab:aa:87:32:70:a3: be:20:d2:c5:15:13:3f:93:a1:4d:68:88:92:d8:af: 21:89:cf:f9:3b:7c:b9:9c:c2:54:5f:4f:07:fc:fb: b7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CC:46:CD:1D:0D:0B:EE:A6:9F:23:5E:09:9E:E0:2A:27:E7:D6:D7 X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3e:d9:51:ca:48:23:4e:70:20:a1:93:5c:f0:b3:60:1d:6a: 5c:10:2c:8e:77:20:b9:e5:a6:07:ec:93:0c:2f:b1:20:65:77: 17:12:96:19:df:f7:6e:4d:b1:80:02:f3:f5:9c:ae:0b:35:b5: 83:54:10:44:9c:6d:12:82:d9:61:8e:02:d9:b9:54:af:e0:33: 58:2d:3b:6a:92:9e:21:76:d9:59:15:fe:32:d5:39:cc:44:c0: 31:1a:31:96:ff:16:da:aa:8d:9f:b5:3c:e3:96:9d:d7:ab:da: c7:69:58:59:67:00:4c:f6:5f:2b:d9:36:82:f8:d9:41:47:1f: 93:5e:aa:22:6b:98:df:5c:07:1a:31:21:dd:13:58:a6:4e:22: 6e:c0:e7:e4:c6:d3:06:c6:f9:f1:fa:0b:c6:46:68:10:3b:ec: e1:fb:8f:62:ff:11:64:72:0c:49:db:3a:93:22:e3:20:ab:eb: 7f:75:a9:13:14:51:80:30:b2:ae:60:89:7e:3f:c0:06:ed:60: 38:83:a6:a6:d3:6d:c8:8d:06:05:3a:f5:2f:69:d4:42:b8:e1: dc:fe:9d:ed:dd:df:d0:7c:c1:12:aa:2d:8b:fb:e8:ac:6b:8f: cc:c2:16:a0:2b:3d:e4:d7:b2:d5:dc:7f:5c:14:e0:58:43:05: 98:27:fb:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKEUwREM2Q0I3MDlFRUIxMUJDMjA3NUYzNTJFQjZFRDRF ODE4QUU3MDUwHhcNMjUwOTE3MDY0NDQ0WhcNMjUwOTI0MDY0NDQ0WjAYMRYwFAYD VQQDEw02OGNhNThkZC1hMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEVNrS/yEuAceepBfgHvkPOPDOlBvQlQ/7m+2cSODOij57lUpbtmXjw0ekmX SIzNUwr4hYidEuvSYzDasMLRqiUd0/w7nKgRAnyFxpwSHjZshjBfl6b1aRDlPc9M tCo0QznvvJy/ma4hKRLrB8ln86qATVDp+4pZhEjy+AH3tCg8KxjXdh80A6xGyQbV 2NJidQgK0g3FEg7eTYyDBrjWIqXHileDNlauwVmHcjMapwB61ge+Qm5v0a3dYPR0 sI/R9f0I6UYJHLA+Y9+yLkcGzEgYWFcSqQdSWAyrqocycKO+INLFFRM/k6FNaIiS 2K8hic/5O3y5nMJUX08H/Pu3YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzMRs0d DQvupp8jXgme4Con59bXMB8GA1UdIwQYMBaAFODcbLcJ7rEbwgdfNS627U6BiucF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy80MkE5QkI1NDg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNSdkNCMTgxTHJidFRvR0s1 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy80MkE5QkI1NDg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNS dkNCMTgxTHJidFRvR0s1d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdPtlRykgjTnAgoZNc8LNgHWpcECyOdyC55aYH7JMML7EgZXcXEpYZ 3/duTbGAAvP1nK4LNbWDVBBEnG0SgtlhjgLZuVSv4DNYLTtqkp4hdtlZFf4y1TnM RMAxGjGW/xbaqo2ftTzjlp3Xq9rHaVhZZwBM9l8r2TaC+NlBRx+TXqoia5jfXAca MSHdE1imTiJuwOfkxtMGxvnx+gvGRmgQO+zh+49i/xFkcgxJ2zqTIuMgq+t/dakT FFGAMLKuYIl+P8AG7WA4g6am023IjQYFOvUvadRCuOHc/p3t3d/QfMESqi2L++is a4/MwhagKz3k17LV3H9cFOBYQwWYJ/sM -----END CERTIFICATE-----Generated at Fri Sep 19 01:01:43 2025 by rpki-client