$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: gQrKgxyVwALzDRUzIGVY/QYNv5zw+pbFnBqoEPIi2bA= Subject key identifier: A5:14:0F:CE:A7:A2:40:07:0C:B2:28:AC:59:AA:B3:CE:B7:FA:65:DD Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 01DD Signing time: Tue 09 Sep 2025 02:44:16 +0000 Manifest this update: Tue 09 Sep 2025 02:44:15 +0000 Manifest next update: Tue 16 Sep 2025 02:44:15 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: clcBfbDHq9dGLHHADh0eLaCUyO22Vij0wluwO3X2l/I=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: RFveBx12nYjQL7C6dI7Z0G+EUk4Kgzyh1OTU3yziD98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: Sep 9 02:44:15 2025 GMT Not After : Sep 16 02:44:15 2025 GMT Subject: CN=68bf947f-99e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:2a:01:09:42:52:00:50:ed:68:d5:7e:f1: 8b:d9:d2:8a:b1:d9:a7:15:f4:59:f6:c0:30:8a:bb: d7:62:04:96:86:e8:f7:1c:c7:a4:87:32:f8:79:c2: 4c:61:84:dd:5b:98:22:b9:79:c2:55:4c:65:5f:b4: db:d7:28:db:f7:82:72:6e:85:38:81:d6:29:cd:ca: c9:c3:06:91:50:94:12:e7:27:c7:72:e8:aa:4a:41: d4:27:71:df:23:5b:27:fe:99:ec:87:af:57:16:6e: 29:dd:2d:72:1d:f8:54:c9:24:0b:7c:d2:c1:2a:e8: e0:e1:98:38:e7:99:e5:0a:04:49:25:06:d8:67:44: e9:10:c3:a5:0b:2b:47:51:d6:5e:07:ff:72:9b:39: dd:b6:76:88:6f:4a:36:af:51:34:fe:c5:78:04:06: 6c:a5:92:34:f6:3c:7d:49:14:92:31:7e:89:ab:ec: bf:45:70:2e:e5:9e:8b:57:d6:f3:b0:17:32:3a:3a: 2b:9b:80:46:31:e5:3f:cb:0b:18:0c:d5:6a:30:52: 86:cc:55:66:87:e2:de:a2:3d:5d:a0:5d:4b:74:a5: e8:83:08:5b:24:41:90:e6:90:9b:e2:5b:18:25:82: d4:7c:30:d6:f1:f4:3d:a0:41:8e:61:bd:99:e4:92: 0f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:14:0F:CE:A7:A2:40:07:0C:B2:28:AC:59:AA:B3:CE:B7:FA:65:DD X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:36:58:b4:3d:80:43:f0:12:a1:6d:2e:32:4c:91:61:d8:83: 03:2a:ea:7c:c2:63:f5:2b:85:8a:ea:9b:53:c0:32:ee:fb:86: 79:69:20:97:23:ba:2c:9c:62:2e:c5:a8:f9:4b:87:74:2b:69: c4:7f:5d:f0:f0:2b:f8:5b:1c:5c:78:39:fc:1e:f9:d7:f9:52: a8:61:5c:d2:7f:5b:e2:b2:f9:7a:5a:22:d9:51:c1:15:b9:78: 73:62:41:40:ea:83:15:ae:c7:f8:95:5c:36:d7:3c:4e:8b:4d: 7f:cf:d1:ed:b6:e8:84:a7:b8:20:06:19:c4:9d:4a:63:19:e0: 06:f4:83:c9:4c:e8:60:c7:0e:ad:d1:eb:68:66:b0:8e:4c:ef: 12:64:00:e8:f9:76:3c:4e:32:8c:51:46:b9:78:01:41:a6:98: ee:77:56:36:1e:67:e1:35:6c:e7:f5:c3:5f:a1:6c:bc:34:a0: a3:19:de:ce:8b:54:37:90:75:43:83:06:55:64:38:25:ca:e1: c2:20:a3:31:12:01:14:36:1c:15:f4:64:5d:d8:f3:fb:86:db: 7f:fe:86:93:a9:4e:b9:fd:c2:7b:75:7c:0e:f5:bd:1d:cd:0a: a3:74:1a:b5:76:fd:97:43:f7:66:22:bb:9f:27:15:21:75:00: cf:9f:ee:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjUwOTA5MDI0NDE1WhcNMjUwOTE2MDI0NDE1WjAYMRYwFAYD VQQDEw02OGJmOTQ3Zi05OWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXEqAQlCUgBQ7WjVfvGL2dKKsdmnFfRZ9sAwirvXYgSWhuj3HMekhzL4ecJM YYTdW5giuXnCVUxlX7Tb1yjb94JyboU4gdYpzcrJwwaRUJQS5yfHcuiqSkHUJ3Hf I1sn/pnsh69XFm4p3S1yHfhUySQLfNLBKujg4Zg455nlCgRJJQbYZ0TpEMOlCytH UdZeB/9ymzndtnaIb0o2r1E0/sV4BAZspZI09jx9SRSSMX6Jq+y/RXAu5Z6LV9bz sBcyOjorm4BGMeU/ywsYDNVqMFKGzFVmh+Leoj1doF1LdKXogwhbJEGQ5pCb4lsY JYLUfDDW8fQ9oEGOYb2Z5JIPBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUUD86n okAHDLIorFmqs863+mXdMB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfNli0PYBD8BKhbS4yTJFh2IMDKup8wmP1K4WK6ptTwDLu+4Z5aSCX I7osnGIuxaj5S4d0K2nEf13w8Cv4WxxceDn8HvnX+VKoYVzSf1visvl6WiLZUcEV uXhzYkFA6oMVrsf4lVw21zxOi01/z9HttuiEp7ggBhnEnUpjGeAG9IPJTOhgxw6t 0etoZrCOTO8SZADo+XY8TjKMUUa5eAFBppjud1Y2HmfhNWzn9cNfoWy8NKCjGd7O i1Q3kHVDgwZVZDglyuHCIKMxEgEUNhwV9GRd2PP7htt//oaTqU65/cJ7dXwO9b0d zQqjdBq1dv2XQ/dmIrufJxUhdQDPn+7k -----END CERTIFICATE-----Generated at Tue Sep 9 13:50:11 2025 by rpki-client