$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json) Hash identifier: k4tm3nmWG24ZtOj3eINWbkW3kJ/K/Z+F2M78e9sHM6I= Subject key identifier: C8:0E:A1:39:78:54:62:05:CB:3F:A6:FB:F0:B7:4B:F7:09:9D:8D:A0 Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Certificate serial: 0621 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft Manifest number: 0618 Signing time: Tue 16 Sep 2025 23:09:08 +0000 Manifest this update: Tue 16 Sep 2025 23:09:07 +0000 Manifest next update: Tue 23 Sep 2025 23:09:07 +0000 Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: yzB8tuLzfS5LCGlHowHarDIIVCyWSnueGwxoPs1eEaI=) 2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: ClA7TsoBf9is9kiaEyUF4SSCiNxpgXXELAtT3dKemLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 23:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Validity Not Before: Sep 16 23:09:07 2025 GMT Not After : Sep 23 23:09:07 2025 GMT Subject: CN=68c9ee14-d3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e4:0b:cc:97:3c:06:cf:72:17:83:8f:8d:14: 5a:62:2c:4f:1c:60:f7:e8:a1:f7:d3:78:99:ab:1f: 98:8a:e5:e0:ae:ac:ba:a2:a9:d7:13:21:26:ca:fe: 00:c6:3d:ea:fc:4f:02:03:4a:a6:f4:f1:b4:82:b5: f3:9c:08:82:1b:db:1e:03:63:d0:ef:2c:4c:17:67: 09:da:6e:6c:e9:72:8e:28:c2:2a:7d:2d:e9:af:84: 32:6f:76:47:03:7c:5a:23:71:d6:2b:70:1d:2b:55: 97:42:63:28:63:f7:e5:44:78:31:77:aa:a1:eb:4b: 31:a2:ce:da:85:12:ef:b2:48:10:31:39:38:8e:2c: ff:fe:44:81:22:13:3c:47:6a:62:cf:6d:64:d3:ba: b1:40:fa:ac:7c:72:e4:f6:70:06:44:af:83:d2:3d: 6c:90:27:de:44:47:98:20:8d:20:ef:2a:24:b8:87: 27:15:a5:c2:14:de:a4:dd:fa:c6:d7:a5:9d:9e:b1: 71:13:d1:8e:45:a6:70:b6:d7:16:3e:0f:b6:ba:9e: f6:79:fa:1d:2e:e7:90:76:72:3a:76:25:94:98:50: 03:c0:b7:f3:05:30:3d:97:d2:d7:b5:0c:db:87:a1: 42:3e:d2:07:71:da:b3:2d:c7:15:cd:d5:83:50:8f: dc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0E:A1:39:78:54:62:05:CB:3F:A6:FB:F0:B7:4B:F7:09:9D:8D:A0 X509v3 Authority Key Identifier: keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b8:44:33:ac:d8:be:6f:8e:4a:23:44:be:a6:b9:c8:95:64: 05:7a:19:8b:af:bc:06:78:2d:18:52:81:86:9b:79:8b:fe:77: 09:c0:3c:85:d1:4a:d5:5a:cc:57:42:1d:16:59:30:fa:e0:a9: e0:99:fe:b1:8a:0d:f8:9d:5d:d6:11:5f:3a:f4:03:ee:4b:63: a9:54:67:b8:d2:c5:73:3b:81:d5:18:40:92:25:7d:35:74:18: 44:bb:26:34:43:d9:89:fa:87:3d:9d:6c:33:a4:65:71:18:3e: d8:da:d2:bb:c4:ef:66:c9:1d:d8:59:34:f4:44:0d:77:b6:8f: dc:88:15:73:96:69:23:00:b3:2b:01:1f:41:1e:fa:5d:39:66: d3:ba:22:71:6f:b2:be:7b:5a:16:23:ae:09:16:a8:c9:b6:6d: 74:78:79:20:4c:eb:66:13:51:a5:7d:58:d3:e0:56:e5:a5:5d: ff:6f:14:97:95:38:a8:ec:c6:45:12:ab:fb:2e:54:aa:64:0b: 1b:d6:7f:e4:a2:00:9f:70:bb:c5:9b:71:e1:14:3a:a4:ce:4d: 1f:8f:3f:44:d1:52:3a:b8:30:48:0e:24:ad:f7:9a:6e:4b:dd: 9a:c2:89:c5:e5:70:48:15:a0:a4:ab:64:a6:ba:81:4f:57:55: ab:ae:98:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJDQzkxMTAvBgNVBAUTKEFERTc2MzM0OEQwMjU5QUQxMkNEODhCNzY0RDM5OENC OEFDNzQwQzkwHhcNMjUwOTE2MjMwOTA3WhcNMjUwOTIzMjMwOTA3WjAYMRYwFAYD VQQDEw02OGM5ZWUxNC1kM2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+QLzJc8Bs9yF4OPjRRaYixPHGD36KH303iZqx+YiuXgrqy6oqnXEyEmyv4A xj3q/E8CA0qm9PG0grXznAiCG9seA2PQ7yxMF2cJ2m5s6XKOKMIqfS3pr4Qyb3ZH A3xaI3HWK3AdK1WXQmMoY/flRHgxd6qh60sxos7ahRLvskgQMTk4jiz//kSBIhM8 R2piz21k07qxQPqsfHLk9nAGRK+D0j1skCfeREeYII0g7yokuIcnFaXCFN6k3frG 16WdnrFxE9GORaZwttcWPg+2up72efodLueQdnI6diWUmFADwLfzBTA9l9LXtQzb h6FCPtIHcdqzLccVzdWDUI/clwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgOoTl4 VGIFyz+m+/C3S/cJnY2gMB8GA1UdIwQYMBaAFK3nYzSNAlmtEs2It2TTmMuKx0DJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNDOS9EMzBCMTVDMEI2 Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dhMFN6WWkzWk5PWXk0ckhR TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlZGpOSTBDV2EwU3pZaTNaTk9ZeTRySFFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkNDOS9EMzBCMTVDMEI2Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dh MFN6WWkzWk5PWXk0ckhRTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0uEQzrNi+b45KI0S+prnIlWQFehmLr7wGeC0YUoGGm3mL/ncJwDyF 0UrVWsxXQh0WWTD64Kngmf6xig34nV3WEV869APuS2OpVGe40sVzO4HVGECSJX01 dBhEuyY0Q9mJ+oc9nWwzpGVxGD7Y2tK7xO9myR3YWTT0RA13to/ciBVzlmkjALMr AR9BHvpdOWbTuiJxb7K+e1oWI64JFqjJtm10eHkgTOtmE1GlfVjT4FblpV3/bxSX lTio7MZFEqv7LlSqZAsb1n/kogCfcLvFm3HhFDqkzk0fjz9E0VI6uDBIDiSt95pu S92awonF5XBIFaCkq2SmuoFPV1WrrpiV -----END CERTIFICATE-----Generated at Thu Sep 18 23:26:56 2025 by rpki-client