$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft File: R0p7MwbAohZ8ys_PgzaUALWjduE.mft (raw, json) Hash identifier: tOzOZV/OpTcgp1/wtkQkllLo3dJh1M3o4sHhqT8foQc= Subject key identifier: FC:EF:89:E4:05:24:CB:A9:FC:5A:E5:98:63:8B:B8:91:FA:D8:88:51 Authority key identifier: 47:4A:7B:33:06:C0:A2:16:7C:CA:CF:CF:83:36:94:00:B5:A3:76:E1 Certificate issuer: /CN=A91BBA31/serialNumber=474A7B3306C0A2167CCACFCF83369400B5A376E1 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft Manifest number: 09 Signing time: Wed 17 Sep 2025 08:52:37 +0000 Manifest this update: Wed 17 Sep 2025 08:52:37 +0000 Manifest next update: Wed 24 Sep 2025 08:52:37 +0000 Files and hashes: 1: R0p7MwbAohZ8ys_PgzaUALWjduE.crl (hash: BdB5pOvdYGC1v54FsIcjvpQOmCAfP405H932HiJWcPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.crl rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA31, serialNumber=474A7B3306C0A2167CCACFCF83369400B5A376E1 Validity Not Before: Sep 17 08:52:37 2025 GMT Not After : Sep 24 08:52:37 2025 GMT Subject: CN=68ca76d5-c952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:a0:63:8a:0f:b0:6e:27:a1:ee:5c:2c:9b: be:dc:04:55:4a:bb:cb:40:17:88:86:25:1c:1b:26: 7f:67:57:74:67:93:8c:47:a1:62:3e:a0:37:88:19: 6c:2c:2f:e7:c0:06:72:47:07:10:2a:03:c7:b4:d4: 12:0c:5c:70:9d:44:8c:03:a6:4b:f3:7b:8b:00:cc: c5:55:5c:0f:b0:a8:de:f9:02:c4:5b:53:d7:33:4f: 25:bc:14:2f:f5:a6:88:9a:4f:99:7f:7b:59:64:a3: de:07:52:de:26:37:08:38:6e:8b:fe:a8:b8:c6:c4: 04:55:4d:be:3e:48:b9:d2:c6:70:bb:08:5c:7c:73: 2a:05:a8:b0:58:d5:2f:a7:e9:87:0b:44:93:50:fd: 83:10:2d:4c:be:d2:b8:81:25:7f:69:f0:23:aa:1a: 2a:52:41:1d:e2:1c:6e:3c:f5:39:cd:25:bb:8c:76: 4e:96:ca:fc:a1:cb:0f:69:43:64:59:73:c2:ca:95: 68:09:2c:73:c6:84:88:c2:81:f9:e0:87:1b:9d:e5: 02:37:88:12:6c:e6:4e:d3:b5:37:ec:43:c8:6f:d5: e9:49:2e:b8:f3:bd:82:91:08:74:c3:14:c8:17:4f: 0c:1d:d0:2b:36:6c:02:62:7e:b6:0c:a2:e9:d9:62: 28:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EF:89:E4:05:24:CB:A9:FC:5A:E5:98:63:8B:B8:91:FA:D8:88:51 X509v3 Authority Key Identifier: keyid:47:4A:7B:33:06:C0:A2:16:7C:CA:CF:CF:83:36:94:00:B5:A3:76:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:38:83:9c:6a:ab:43:dd:59:cf:78:d5:9a:f7:8f:46:c6:44: 1c:c7:1e:c8:dc:f0:0d:9f:36:53:ab:ba:7b:4c:4d:11:88:ed: 87:ff:2e:43:de:6f:32:84:15:7c:38:93:ef:cd:9b:e1:cf:99: 65:8a:c2:d4:af:b9:75:a3:b5:cb:e0:01:43:3b:1f:d6:39:2d: 78:c8:25:1a:f5:46:49:7e:20:5f:47:55:8b:8e:d1:f6:2b:08: 2b:8f:93:d5:84:11:7c:91:04:58:d5:05:27:fe:e2:82:1d:23: a6:c2:2a:9b:5e:29:44:02:c6:fb:89:77:a6:f1:b8:9e:69:f6: 4c:13:ed:7f:bc:77:b0:c9:8b:28:a7:fe:ad:0b:27:4d:b3:67: 7a:14:69:df:f9:da:79:9f:42:59:5c:ba:d2:03:3a:23:67:18: ee:14:6a:bb:b6:9d:0f:07:8c:69:e2:03:7d:a3:8e:9b:d7:13: cc:43:be:00:4a:4d:02:50:a6:8c:7b:8f:d7:fa:10:0f:80:27: 27:02:79:03:d5:59:2d:1c:e3:57:11:42:73:79:3d:12:60:ea: f5:d4:be:e0:82:8d:45:b8:e7:6a:f9:db:a5:3b:f0:4c:7e:eb: 35:36:3e:42:4a:a5:69:6f:e6:e2:f8:9d:33:13:77:5d:86:e6: 7c:c2:c5:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkEzMTExMC8GA1UEBRMoNDc0QTdCMzMwNkMwQTIxNjdDQ0FDRkNGODMzNjk0MDBC NUEzNzZFMTAeFw0yNTA5MTcwODUyMzdaFw0yNTA5MjQwODUyMzdaMBgxFjAUBgNV BAMTDTY4Y2E3NmQ1LWM5NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZk6Bjig+wbieh7lwsm77cBFVKu8tAF4iGJRwbJn9nV3Rnk4xHoWI+oDeIGWws L+fABnJHBxAqA8e01BIMXHCdRIwDpkvze4sAzMVVXA+wqN75AsRbU9czTyW8FC/1 poiaT5l/e1lko94HUt4mNwg4bov+qLjGxARVTb4+SLnSxnC7CFx8cyoFqLBY1S+n 6YcLRJNQ/YMQLUy+0riBJX9p8COqGipSQR3iHG489TnNJbuMdk6Wyvyhyw9pQ2RZ c8LKlWgJLHPGhIjCgfnghxud5QI3iBJs5k7TtTfsQ8hv1elJLrjzvYKRCHTDFMgX Twwd0Cs2bAJifrYMounZYigrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/O+J5AUk y6n8WuWYY4u4kfrYiFEwHwYDVR0jBBgwFoAUR0p7MwbAohZ8ys/PgzaUALWjduEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTMxLzgyMkZERjdFODkz RDExRjBCQ0U3QTcyMEM0RjlBRTAyL1IwcDdNd2JBb2haOHlzX1BnemFVQUxXamR1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjBwN013YkFvaFo4eXNfUGd6YVVBTFdqZHVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTMxLzgyMkZERjdFODkzRDExRjBCQ0U3QTcyMEM0RjlBRTAyL1IwcDdNd2JBb2ha OHlzX1BnemFVQUxXamR1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALs4g5xqq0PdWc941Zr3j0bGRBzHHsjc8A2fNlOruntMTRGI7Yf/LkPe bzKEFXw4k+/Nm+HPmWWKwtSvuXWjtcvgAUM7H9Y5LXjIJRr1Rkl+IF9HVYuO0fYr CCuPk9WEEXyRBFjVBSf+4oIdI6bCKpteKUQCxvuJd6bxuJ5p9kwT7X+8d7DJiyin /q0LJ02zZ3oUad/52nmfQllcutIDOiNnGO4Uaru2nQ8HjGniA32jjpvXE8xDvgBK TQJQpox7j9f6EA+AJycCeQPVWS0c41cRQnN5PRJg6vXUvuCCjUW452r526U78Ex+ 6zU2PkJKpWlv5uL4nTMTd12G5nzCxco= -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:08 2025 by rpki-client