$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: oNbs2Y/bGp91VuPOnv01o5YI3sN0PIbdwXIesBRfvHs= Subject key identifier: FA:02:39:55:D2:C0:7B:92:44:44:2F:E8:D6:DC:2C:20:08:94:DC:19 Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: BA Signing time: Fri 05 Sep 2025 06:22:44 +0000 Manifest this update: Fri 05 Sep 2025 06:22:44 +0000 Manifest next update: Fri 12 Sep 2025 06:22:44 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: HEnognZk8dCn3FHykqz4l1++WPn+FUA0B5K4qYkzPrw=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: SORlAdQ9FssMHlMIfPwfvKAJ6kXMG+aUvNMZPsDTNq4=) 3: 758FF4327EA411F0A9758120C4F9AE02.roa (hash: ZZxl6tncFLbJYoFiNESnSNUh3zuF/WuZgnB/SPpwjU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: Sep 5 06:22:44 2025 GMT Not After : Sep 12 06:22:44 2025 GMT Subject: CN=68ba81b4-b142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2a:36:58:06:39:3e:5b:50:da:3e:9e:03:a5: e4:9b:41:74:b6:d6:83:10:8d:85:7c:df:1c:ed:34: 32:f0:9f:17:a5:57:b7:6b:eb:b0:0d:90:99:fb:5d: fe:4f:53:11:ca:04:31:da:75:5b:82:3a:d9:21:cb: ff:a9:db:1b:44:0a:48:00:87:99:78:ab:82:25:eb: 30:02:cf:d8:98:bc:64:2a:b6:70:fb:49:d0:9c:0c: 93:e4:68:38:53:7a:68:98:5b:97:87:28:3e:31:9f: ff:31:27:77:b3:95:f2:00:1e:01:10:fd:e9:f8:0e: 10:a1:97:ae:74:6f:42:02:4b:f5:9e:41:d0:b5:f2: 69:19:98:9a:34:69:45:a1:1b:43:04:1f:8c:89:8a: fc:4d:51:7a:45:3c:56:3a:7d:c4:8d:fd:4b:37:94: c4:e0:6b:3d:f4:30:7c:0e:32:16:02:6a:bf:17:3a: 63:31:c9:12:8a:3b:51:34:10:fb:83:5e:b5:1c:5f: 60:65:bf:5f:eb:85:d9:54:c8:74:25:61:2b:8d:70: 82:37:ea:bd:9b:bd:ee:34:70:1c:69:30:fc:ef:cd: 5a:9e:30:ba:03:44:cc:01:ca:d8:fd:38:ca:57:01: 2c:32:4b:d5:4f:6a:4b:d7:1d:f7:86:e4:25:ed:66: 1a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:02:39:55:D2:C0:7B:92:44:44:2F:E8:D6:DC:2C:20:08:94:DC:19 X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8d:a7:08:09:a7:d2:d3:e7:bd:e7:df:30:07:1f:6e:8a:a8: b0:9c:55:69:26:00:19:7e:ba:cf:55:8f:44:95:cb:50:18:a4: 1c:10:cc:3c:f4:ca:aa:a3:bd:0f:64:cd:b5:c6:22:87:34:13: ca:e2:22:4e:53:ee:74:38:4d:3f:86:59:7a:1e:31:6e:49:c3: e2:0f:f8:d9:50:d5:6a:ba:05:b6:bc:25:63:23:8c:c5:26:9a: d8:dd:48:c2:7f:f8:41:89:0f:11:53:fe:07:44:8e:e7:9f:0a: 27:a5:d3:1c:bb:3a:b4:d4:6f:dd:ff:00:82:7d:49:90:d0:21: ed:4f:16:e2:48:da:64:f9:fe:d6:5f:b2:24:e0:7d:27:b5:af: 5a:7d:60:68:a4:3d:54:2f:76:d3:70:78:72:e8:5e:63:e4:38: 24:a6:62:e5:d2:dc:f0:2a:04:fb:6f:86:a5:89:d7:c8:50:87: 4f:cb:bc:d7:a6:e9:cc:ad:1b:99:e8:30:45:5e:e0:36:65:fe: 82:d4:7b:58:05:d7:35:0c:92:fe:96:a8:fd:00:4c:a5:97:e2: fe:26:6e:44:46:1c:e1:89:2f:20:44:6b:b2:9b:99:72:fa:e2: 28:9c:ab:02:5e:4b:0e:90:1d:bf:2c:cd:ae:0e:ad:d2:a1:37: a8:01:77:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKEY5Q0Q3MEU3NjJCRTY5NUY0QkE0OTAyQUEyMEI5NDBG NzcwQTA2MzgwHhcNMjUwOTA1MDYyMjQ0WhcNMjUwOTEyMDYyMjQ0WjAYMRYwFAYD VQQDEw02OGJhODFiNC1iMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCo2WAY5PltQ2j6eA6Xkm0F0ttaDEI2FfN8c7TQy8J8XpVe3a+uwDZCZ+13+ T1MRygQx2nVbgjrZIcv/qdsbRApIAIeZeKuCJeswAs/YmLxkKrZw+0nQnAyT5Gg4 U3pomFuXhyg+MZ//MSd3s5XyAB4BEP3p+A4QoZeudG9CAkv1nkHQtfJpGZiaNGlF oRtDBB+MiYr8TVF6RTxWOn3Ejf1LN5TE4Gs99DB8DjIWAmq/FzpjMckSijtRNBD7 g161HF9gZb9f64XZVMh0JWErjXCCN+q9m73uNHAcaTD8781anjC6A0TMAcrY/TjK VwEsMkvVT2pL1x33huQl7WYavQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoCOVXS wHuSREQv6NbcLCAIlNwZMB8GA1UdIwQYMBaAFPnNcOdivmlfS6SQKqILlA93CgY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9DNzZGOTJDMDZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFWOUxwSkFxb2d1VUQzY0tC amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0JqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9DNzZGOTJDMDZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFW OUxwSkFxb2d1VUQzY0tCamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/jacICafS0+e9598wBx9uiqiwnFVpJgAZfrrPVY9ElctQGKQcEMw8 9Mqqo70PZM21xiKHNBPK4iJOU+50OE0/hll6HjFuScPiD/jZUNVqugW2vCVjI4zF JprY3UjCf/hBiQ8RU/4HRI7nnwonpdMcuzq01G/d/wCCfUmQ0CHtTxbiSNpk+f7W X7Ik4H0nta9afWBopD1UL3bTcHhy6F5j5DgkpmLl0tzwKgT7b4alidfIUIdPy7zX punMrRuZ6DBFXuA2Zf6C1HtYBdc1DJL+lqj9AEyll+L+Jm5ERhzhiS8gRGuym5ly +uIonKsCXksOkB2/LM2uDq3SoTeoAXdi -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:16 2025 by rpki-client