$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft File: 83-esXYeax0_fqbWxvyluZc5FKs.mft (raw, json) Hash identifier: PdmzBQzaocaWlAxo0YbisQurdCxamJeuKSuNVKTlp+o= Subject key identifier: 05:F8:46:B1:17:4A:88:B2:47:E0:A0:80:0B:D8:99:B6:CA:2A:82:38 Authority key identifier: F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB Certificate issuer: /CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft Manifest number: 0458 Signing time: Wed 17 Sep 2025 00:38:35 +0000 Manifest this update: Wed 17 Sep 2025 00:38:34 +0000 Manifest next update: Wed 24 Sep 2025 00:38:34 +0000 Files and hashes: 1: 83-esXYeax0_fqbWxvyluZc5FKs.crl (hash: IgjKZqKrfTULFilx5DCZC0hoLjO/icnGQQFbKO+kXxs=) 2: FEDE0F2066C611EC93A73A3DC4F9AE02.roa (hash: OrbaAoDN+OT8Q5oOwIoJmcxxZsgOvnH47cr4vwyZT3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8FA2, serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB Validity Not Before: Sep 17 00:38:34 2025 GMT Not After : Sep 24 00:38:34 2025 GMT Subject: CN=68ca030a-d2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:ac:dd:bc:9c:10:09:fb:3d:38:7c:23:65: 75:53:a8:83:1f:5c:6f:ec:4d:c9:8c:c2:be:55:9c: 1b:b3:ef:83:50:a3:2c:14:25:c1:fb:77:59:45:d9: 13:de:b8:8b:30:f6:24:bc:a8:0c:93:5c:f3:24:78: 2e:10:59:ed:ec:df:d6:e1:f4:2a:35:c7:3a:10:29: 4b:d1:1f:18:ca:fe:43:be:a1:f0:3e:ea:fe:b4:1d: e8:ec:c2:03:ae:c6:1f:fe:ce:e8:5a:2f:0b:46:dd: 9b:91:7f:21:b9:8e:7a:46:56:c6:ba:09:d0:48:d6: 6f:8a:ce:63:e3:b9:6b:70:72:30:a7:d3:cd:e4:39: c7:fb:4b:03:1c:83:b7:40:fb:04:e1:b0:71:93:5e: 1e:45:a1:89:80:48:b3:35:6a:7f:d0:26:a8:c2:a2: df:1b:e7:ca:3b:f3:c6:5d:0d:2c:da:a6:df:96:72: 08:c2:9a:7f:04:93:ac:ff:e0:ae:c9:e6:91:18:e8: b4:fc:35:dd:e2:e2:9f:e7:41:2b:96:b2:95:71:23: 27:7e:64:b5:d3:93:2a:ee:c4:b2:f7:d1:b6:71:0b: 04:6a:01:c8:3e:85:d4:1a:9f:2b:72:3b:f7:eb:4b: 0c:29:6c:cc:66:65:3f:6c:37:f9:2c:85:07:ca:6a: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F8:46:B1:17:4A:88:B2:47:E0:A0:80:0B:D8:99:B6:CA:2A:82:38 X509v3 Authority Key Identifier: keyid:F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:05:f3:8e:c3:fd:97:db:ba:52:c0:de:bd:c4:bc:4f:72:03: 35:45:3c:f9:4f:94:ff:01:e9:7d:93:1c:8c:0a:17:d7:35:d2: c4:5b:3a:59:d1:7c:89:a1:48:54:25:5f:72:5f:20:23:00:9e: 88:7d:fd:4a:2e:1d:73:49:76:0b:5a:0c:ce:b0:73:85:4f:87: 94:0d:73:75:e0:a5:9b:9e:e2:e2:e5:b7:43:11:ae:17:e9:49: 90:1e:e8:c1:82:a8:4d:0a:a5:5b:bf:d5:d6:d6:1e:b7:13:49: b3:57:24:b9:92:e2:d9:3c:1c:a1:44:e8:70:0b:a0:f8:e4:ad: 54:8b:f1:aa:dd:df:31:04:aa:be:98:43:79:06:12:ff:3b:ea: 6d:b1:82:e5:2c:2f:10:6f:03:77:57:ad:f0:e2:65:34:fc:6e: 5b:a6:44:37:80:ad:89:3e:fa:b6:32:0f:cc:ff:f8:e8:3f:8b: fe:2c:db:c7:2e:76:91:b9:22:e5:60:de:58:d9:0b:af:91:51: 70:40:92:9c:00:60:29:ac:13:25:a1:83:a9:5f:80:d7:bb:5d: 2a:18:4b:f0:0a:b1:d6:60:13:06:26:33:25:12:46:c1:4a:8b: 0f:c3:62:6c:b6:ee:2e:35:27:b8:b6:b5:09:ab:46:ba:cc:f3: 54:6d:36:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGQTIxMTAvBgNVBAUTKEYzN0Y5RUIxNzYxRTZCMUQzRjdFQTZENkM2RkNBNUI5 OTczOTE0QUIwHhcNMjUwOTE3MDAzODM0WhcNMjUwOTI0MDAzODM0WjAYMRYwFAYD VQQDEw02OGNhMDMwYS1kMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV6s3bycEAn7PTh8I2V1U6iDH1xv7E3JjMK+VZwbs++DUKMsFCXB+3dZRdkT 3riLMPYkvKgMk1zzJHguEFnt7N/W4fQqNcc6EClL0R8Yyv5DvqHwPur+tB3o7MID rsYf/s7oWi8LRt2bkX8huY56RlbGugnQSNZvis5j47lrcHIwp9PN5DnH+0sDHIO3 QPsE4bBxk14eRaGJgEizNWp/0CaowqLfG+fKO/PGXQ0s2qbflnIIwpp/BJOs/+Cu yeaRGOi0/DXd4uKf50ErlrKVcSMnfmS105Mq7sSy99G2cQsEagHIPoXUGp8rcjv3 60sMKWzMZmU/bDf5LIUHymoY2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAX4RrEX SoiyR+CggAvYmbbKKoI4MB8GA1UdIwQYMBaAFPN/nrF2HmsdP36m1sb8pbmXORSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEZBMi85MUI3REY0QzY2 QzIxMUVDQjU1QTlGMzFDNEY5QUUwMi84My1lc1hZZWF4MF9mcWJXeHZ5bHVaYzVG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzLWVzWFllYXgwX2ZxYld4dnlsdVpjNUZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEZBMi85MUI3REY0QzY2QzIxMUVDQjU1QTlGMzFDNEY5QUUwMi84My1lc1hZZWF4 MF9mcWJXeHZ5bHVaYzVGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKBfOOw/2X27pSwN69xLxPcgM1RTz5T5T/Ael9kxyMChfXNdLEWzpZ 0XyJoUhUJV9yXyAjAJ6Iff1KLh1zSXYLWgzOsHOFT4eUDXN14KWbnuLi5bdDEa4X 6UmQHujBgqhNCqVbv9XW1h63E0mzVyS5kuLZPByhROhwC6D45K1Ui/Gq3d8xBKq+ mEN5BhL/O+ptsYLlLC8QbwN3V63w4mU0/G5bpkQ3gK2JPvq2Mg/M//joP4v+LNvH LnaRuSLlYN5Y2QuvkVFwQJKcAGAprBMloYOpX4DXu10qGEvwCrHWYBMGJjMlEkbB SosPw2Jstu4uNSe4trUJq0a6zPNUbTZm -----END CERTIFICATE-----Generated at Thu Sep 18 20:45:34 2025 by rpki-client