$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: v288xmpgJDCj76eU9ryrOeYGL0Us09/klREdvzhyvRA= Subject key identifier: 8C:3A:CE:EE:86:BD:6A:3E:F9:BF:FE:E4:37:6F:73:F8:58:70:C4:A2 Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 08A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 08A1 Signing time: Thu 18 Sep 2025 20:47:11 +0000 Manifest this update: Thu 18 Sep 2025 20:47:11 +0000 Manifest next update: Thu 25 Sep 2025 20:47:11 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: 6ALr1XDpHBOfbG+Hi4WumkhIMCsjAmwi9AGXfxKvLGc=) 2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: aGXCfIMMPiIdkB1VXV5Wr23hUeKQclg0bIflcTFqVx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2215 (0x8a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Sep 18 20:47:11 2025 GMT Not After : Sep 25 20:47:11 2025 GMT Subject: CN=68cc6fcf-d8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:c8:16:b7:97:ea:55:e1:21:85:f9:fd:b7: f5:3c:77:03:46:96:3f:f7:92:89:ba:95:7a:82:72: 8f:39:dc:70:8a:d1:ef:6e:9d:a7:cf:26:0a:ce:9e: 6d:88:5c:6a:b5:e3:88:0e:c7:60:c9:41:8f:f0:0e: 93:ad:6c:5d:4c:f7:6e:c4:05:d3:1a:a1:5d:be:e4: 51:df:00:58:4f:82:c4:38:dd:5d:be:d2:22:26:e0: 8f:58:91:be:d9:a2:c7:5a:c9:61:64:d5:73:5c:57: a2:9c:c5:4e:71:af:73:5d:20:71:9e:74:ed:35:c3: 50:f9:4e:a3:1f:7a:01:7e:cf:25:17:6d:81:55:fe: aa:1a:d5:be:7b:b2:ed:0d:7e:58:cb:57:c9:6c:3b: 59:91:be:8c:23:09:48:05:d4:ad:07:6c:a4:55:0b: bf:87:a1:73:60:19:a2:58:62:77:cc:3f:07:62:7d: 04:d1:38:6d:6b:af:d2:d1:71:34:39:75:e3:cf:ab: b7:71:15:83:fe:f1:6c:0b:3d:36:d4:68:dd:a5:a5: ff:88:01:11:00:89:9b:01:d1:24:58:6c:10:9a:c8: cd:65:67:e7:55:77:e5:7d:9d:b4:2a:ea:39:3b:0d: 61:1a:4d:c8:93:5a:6e:ab:c4:49:3b:58:cc:8b:a1: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3A:CE:EE:86:BD:6A:3E:F9:BF:FE:E4:37:6F:73:F8:58:70:C4:A2 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ae:3b:a4:84:27:4d:d0:db:17:f7:21:41:38:d9:80:90:01: ba:d5:0a:ce:a2:d0:ae:20:2d:a8:65:ab:ae:c1:bc:2c:da:44: 7b:ca:44:86:15:24:de:e5:1c:fc:74:77:68:f9:b8:30:fb:75: 58:2e:7e:88:57:c4:ab:76:94:d6:72:86:69:b5:00:c3:d1:05: 52:89:58:1e:00:1e:79:f8:e4:94:3a:52:6e:e2:b2:b5:fb:5f: 92:c8:c7:fe:ad:41:49:ed:18:01:09:27:9a:ae:8f:cd:fd:e5: 10:7e:1b:d0:2d:7d:43:be:24:14:81:68:40:84:20:27:f9:ca: ec:c3:9a:3e:ed:fe:75:82:ca:d7:c4:64:be:0f:36:6c:f6:9d: 41:17:e7:64:ad:6b:e6:c0:21:ba:be:c1:5c:4b:ec:b0:f4:5b: 5b:e2:c3:d9:b9:4a:35:0a:ac:14:4e:73:c5:2b:20:3c:41:7d: 9a:10:92:32:5d:92:70:3e:22:0a:c1:db:63:74:4c:f4:15:b6: a2:7b:1c:94:e2:8d:3f:4b:59:87:9b:ca:8c:b3:80:d0:06:4a: d5:48:5d:b5:b0:89:60:35:d2:80:21:5e:21:2a:6b:58:04:e7: 19:f3:cd:aa:cf:6c:7c:e0:61:99:bf:ed:bd:a0:0d:f8:44:71: c5:21:8e:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjUwOTE4MjA0NzExWhcNMjUwOTI1MjA0NzExWjAYMRYwFAYD VQQDEw02OGNjNmZjZi1kOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpTIFreX6lXhIYX5/bf1PHcDRpY/95KJupV6gnKPOdxwitHvbp2nzyYKzp5t iFxqteOIDsdgyUGP8A6TrWxdTPduxAXTGqFdvuRR3wBYT4LEON1dvtIiJuCPWJG+ 2aLHWslhZNVzXFeinMVOca9zXSBxnnTtNcNQ+U6jH3oBfs8lF22BVf6qGtW+e7Lt DX5Yy1fJbDtZkb6MIwlIBdStB2ykVQu/h6FzYBmiWGJ3zD8HYn0E0Thta6/S0XE0 OXXjz6u3cRWD/vFsCz021GjdpaX/iAERAImbAdEkWGwQmsjNZWfnVXflfZ20Kuo5 Ow1hGk3Ik1puq8RJO1jMi6E0ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIw6zu6G vWo++b/+5Ddvc/hYcMSiMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqrjukhCdN0NsX9yFBONmAkAG61QrOotCuIC2oZauuwbws2kR7ykSG FSTe5Rz8dHdo+bgw+3VYLn6IV8SrdpTWcoZptQDD0QVSiVgeAB55+OSUOlJu4rK1 +1+SyMf+rUFJ7RgBCSearo/N/eUQfhvQLX1DviQUgWhAhCAn+crsw5o+7f51gsrX xGS+DzZs9p1BF+dkrWvmwCG6vsFcS+yw9Ftb4sPZuUo1CqwUTnPFKyA8QX2aEJIy XZJwPiIKwdtjdEz0FbaiexyU4o0/S1mHm8qMs4DQBkrVSF21sIlgNdKAIV4hKmtY BOcZ882qz2x84GGZv+29oA34RHHFIY63 -----END CERTIFICATE-----Generated at Fri Sep 19 03:13:22 2025 by rpki-client