$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft File: fLBjBy0uSJJZhhStW6tT4d6v9wE.mft (raw, json) Hash identifier: Vmeqhd96A2gjPbi64K+qUJGTfHcXGJZRKFD1kXO0GRI= Subject key identifier: 91:60:DE:4C:B2:2F:69:9C:1B:33:C3:BA:27:13:B5:7B:B5:BD:F6:34 Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 Certificate issuer: /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Certificate serial: 083A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft Manifest number: 0830 Signing time: Thu 18 Sep 2025 21:03:23 +0000 Manifest this update: Thu 18 Sep 2025 21:03:22 +0000 Manifest next update: Thu 25 Sep 2025 21:03:22 +0000 Files and hashes: 1: fLBjBy0uSJJZhhStW6tT4d6v9wE.crl (hash: u0RvE2c/ED9Dt+VzO5bWG2j8iBIVdOxmIwAHQvPTGiA=) 2: 2B24D5DC854511EB9B57240FC4F9AE02.roa (hash: Gbqi/30snlG70x9ANTB06c1PKeyR99Ii/Ej/rBkuNcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2106 (0x83a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B994F, serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Validity Not Before: Sep 18 21:03:22 2025 GMT Not After : Sep 25 21:03:22 2025 GMT Subject: CN=68cc739a-ae72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:36:81:cf:b1:19:49:36:5a:0c:95:f4:bf: 22:e9:02:2a:54:28:06:af:5c:e3:c3:38:88:bc:86: 8c:e4:78:b4:ac:44:11:4e:c6:b2:a5:67:5e:c0:0e: 0d:11:a1:8b:2c:55:36:af:2f:a2:16:dc:f1:9e:42: 19:37:93:7d:0c:e0:4b:6d:29:3a:ea:2f:7e:ac:20: 7d:d5:aa:36:99:f2:b5:03:c5:fb:a9:90:52:89:5f: 42:e6:27:cb:8d:c6:dd:24:8f:0c:37:9b:63:c6:fe: c6:02:e7:4e:e9:ff:ac:b2:89:82:f3:5f:9f:89:bb: 15:d6:1b:ce:46:88:5c:6f:b4:f1:5d:40:37:06:00: 77:bc:50:4f:ee:a8:3e:2e:28:7d:99:19:a7:e4:e2: 0a:8a:45:b6:e4:be:f5:57:8a:ea:55:9b:6e:d1:f2: 2f:47:ea:3a:16:49:f2:6e:47:c0:73:ff:b8:7e:fe: 48:3a:a9:90:24:d8:4a:d7:ec:df:31:b3:8a:65:aa: 8e:d3:62:f6:a8:ae:cd:96:b4:41:96:c1:e1:1b:fe: fe:fd:b0:67:10:2a:f8:02:c8:96:5a:a9:13:31:0c: 4c:6c:74:7f:b3:a4:08:10:85:a9:d1:1a:d1:f0:64: ac:8b:14:31:4c:e6:85:46:21:7a:79:23:5b:49:e1: 19:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:60:DE:4C:B2:2F:69:9C:1B:33:C3:BA:27:13:B5:7B:B5:BD:F6:34 X509v3 Authority Key Identifier: keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:e1:b9:c8:de:42:e3:24:5c:28:ec:cd:e2:c3:c1:86:85:6f: 6a:2c:f8:2f:75:c2:4c:5b:ba:6f:e3:49:c1:6f:45:03:34:59: 5d:de:ad:bb:51:36:94:23:5f:ab:cc:f6:1d:85:fc:71:6f:79: 28:14:c7:65:47:c9:41:ec:68:c9:89:8a:04:2d:0b:03:cc:82: c0:37:4e:75:e9:d0:36:01:fa:20:7c:77:02:58:48:6e:c9:c2: f5:e5:24:5e:84:db:4c:ae:b7:cb:02:32:c4:03:51:0d:69:2d: 00:c1:6b:02:0b:e0:fe:80:e0:cb:3b:7d:2d:a0:ea:b9:b0:64: de:6b:80:11:0c:b6:2d:69:b7:31:70:c0:c5:ad:bd:1b:e8:8c: 0a:34:91:a6:4c:ad:90:2f:e5:09:8a:98:a8:6f:da:d6:ae:5c: 6a:66:30:05:af:99:e1:a5:a7:df:88:0d:8c:17:8e:20:d6:7d: c4:2b:ab:4c:b0:02:b4:bb:cb:15:8d:6e:d4:9a:85:0a:fd:94: 49:5b:11:83:c7:7f:55:d6:01:d0:af:50:04:1e:59:bb:94:cb: 52:9a:ed:2e:94:69:bc:3a:e1:86:23:13:47:52:35:f6:a6:84: 53:8d:86:14:83:b4:cc:91:78:d2:24:ee:02:f3:f3:52:34:89: c9:3b:a0:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk5NEYxMTAvBgNVBAUTKDdDQjA2MzA3MkQyRTQ4OTI1OTg2MTRBRDVCQUI1M0Ux REVBRkY3MDEwHhcNMjUwOTE4MjEwMzIyWhcNMjUwOTI1MjEwMzIyWjAYMRYwFAYD VQQDEw02OGNjNzM5YS1hZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdE2gc+xGUk2WgyV9L8i6QIqVCgGr1zjwziIvIaM5Hi0rEQRTsaypWdewA4N EaGLLFU2ry+iFtzxnkIZN5N9DOBLbSk66i9+rCB91ao2mfK1A8X7qZBSiV9C5ifL jcbdJI8MN5tjxv7GAudO6f+ssomC81+fibsV1hvORohcb7TxXUA3BgB3vFBP7qg+ Lih9mRmn5OIKikW25L71V4rqVZtu0fIvR+o6FknybkfAc/+4fv5IOqmQJNhK1+zf MbOKZaqO02L2qK7NlrRBlsHhG/7+/bBnECr4AsiWWqkTMQxMbHR/s6QIEIWp0RrR 8GSsixQxTOaFRiF6eSNbSeEZKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFg3kyy L2mcGzPDuicTtXu1vfY0MB8GA1UdIwQYMBaAFHywYwctLkiSWYYUrVurU+Her/cB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTk0Ri9BQUZEMTRFQ0U1 QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNKSlpoaFN0VzZ0VDRkNnY5 d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMQmpCeTB1U0pKWmhoU3RXNnRUNGQ2djl3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTk0Ri9BQUZEMTRFQ0U1QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNK SlpoaFN0VzZ0VDRkNnY5d0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY4bnI3kLjJFwo7M3iw8GGhW9qLPgvdcJMW7pv40nBb0UDNFld3q27 UTaUI1+rzPYdhfxxb3koFMdlR8lB7GjJiYoELQsDzILAN0516dA2AfogfHcCWEhu ycL15SRehNtMrrfLAjLEA1ENaS0AwWsCC+D+gODLO30toOq5sGTea4ARDLYtabcx cMDFrb0b6IwKNJGmTK2QL+UJipiob9rWrlxqZjAFr5nhpaffiA2MF44g1n3EK6tM sAK0u8sVjW7UmoUK/ZRJWxGDx39V1gHQr1AEHlm7lMtSmu0ulGm8OuGGIxNHUjX2 poRTjYYUg7TMkXjSJO4C8/NSNInJO6AT -----END CERTIFICATE-----Generated at Fri Sep 19 08:30:31 2025 by rpki-client