$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json) Hash identifier: /wAHSKR+D7emErtIbRwBCLAzPgXhszBism2e5AMelRc= Subject key identifier: E7:80:56:2E:74:DB:45:BD:2B:23:33:F5:7C:D8:C5:1F:1B:8C:EE:FE Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Certificate serial: 09E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft Manifest number: 09DE Signing time: Thu 04 Sep 2025 20:10:58 +0000 Manifest this update: Thu 04 Sep 2025 20:10:57 +0000 Manifest next update: Thu 11 Sep 2025 20:10:57 +0000 Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: nHC55qoq1v05D9ekyR6jDYsBnoZZ7SrgsHHLajWaxm0=) 2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: j3TvpWzSPFDlAyo3sD7Pw75i2w5zEIxOHyTqJM4+nXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2533 (0x9e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Validity Not Before: Sep 4 20:10:57 2025 GMT Not After : Sep 11 20:10:57 2025 GMT Subject: CN=68b9f251-70f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:27:cc:31:58:9f:97:12:6f:db:33:0a:dd:77: d1:4d:a8:14:57:d2:fc:fb:8d:56:ac:9c:07:c9:11: 68:15:26:db:40:31:a7:23:c4:97:56:80:25:3c:bd: 4d:34:25:78:7e:29:d6:ae:56:12:d3:43:04:99:4f: 9e:43:a3:31:f1:af:47:7d:45:18:82:b6:5a:9e:ec: ae:42:d2:7a:fb:30:11:f7:18:0a:bf:a5:65:2f:9b: cd:01:63:c7:84:3e:80:aa:1a:4d:53:e3:f7:cf:77: 85:9f:83:f6:10:6e:cb:12:92:fb:78:b1:2b:b2:28: b7:a9:dc:61:9d:6a:af:a6:40:eb:00:0b:17:19:76: bd:a5:f9:19:2b:fc:45:c8:7a:06:48:da:43:0e:85: 52:e1:5c:88:da:98:38:45:ec:1a:44:ed:20:a5:2b: ec:10:01:d4:4d:96:f0:e5:d6:79:de:90:eb:06:a1: 52:51:bf:4c:87:5f:ee:b9:96:e3:73:32:55:1b:e5: 2d:3d:8c:80:0e:1c:0c:70:b5:63:6b:d2:f3:57:9b: 8c:00:da:e9:d4:9f:83:9a:49:78:4e:8c:04:12:d6: 9c:b5:b4:bc:42:76:41:b3:87:99:b0:99:b9:22:cb: 20:d1:05:1e:e1:a6:b6:56:f9:d5:5d:00:90:e7:cc: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:80:56:2E:74:DB:45:BD:2B:23:33:F5:7C:D8:C5:1F:1B:8C:EE:FE X509v3 Authority Key Identifier: keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:50:9f:52:3b:00:ea:52:2b:fa:c0:08:ff:6d:8b:31:ca:9e: 4a:fe:64:35:cb:ae:d1:8e:60:9b:31:02:9d:05:7b:e6:88:c2: 13:a3:d4:ba:fa:c4:bb:ec:d1:d3:04:e4:4a:ed:75:f3:46:7c: ac:b4:1f:cd:68:1e:23:d7:48:9a:e7:5e:29:87:98:a2:70:68: b8:d6:e4:bf:94:b9:fb:46:92:b9:14:b8:12:41:ee:a8:2e:b6: fc:1a:4a:a5:c7:9b:90:26:01:62:cd:9c:c8:83:8c:1a:b3:3e: c2:92:e6:df:3a:c3:74:cc:9e:e3:a8:2c:9f:3d:ab:db:94:09: 2b:94:66:9e:bb:0c:aa:bf:72:45:e3:58:df:66:1b:60:ec:a0: 42:da:e3:19:c4:5c:c7:f3:a5:d5:ee:af:c1:28:e4:36:84:a5: cb:c8:20:08:af:6a:3b:09:52:f3:a8:4b:d5:e7:ac:c6:fb:21: 25:d2:5b:a3:83:8b:ed:46:d8:24:e8:c4:bf:d6:f7:27:b3:1f: e8:35:d0:9a:c9:a6:55:95:e3:94:3d:7b:da:bd:f4:7e:35:6c: ef:cd:83:43:2d:59:e4:86:ac:77:9f:69:f3:33:fa:58:d9:d6: 47:91:45:d1:76:8e:64:6b:d2:7f:cc:b1:21:7c:df:bf:83:98: c6:c5:56:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0 Q0E3ODdENkYwHhcNMjUwOTA0MjAxMDU3WhcNMjUwOTExMjAxMDU3WjAYMRYwFAYD VQQDEw02OGI5ZjI1MS03MGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyfMMViflxJv2zMK3XfRTagUV9L8+41WrJwHyRFoFSbbQDGnI8SXVoAlPL1N NCV4finWrlYS00MEmU+eQ6Mx8a9HfUUYgrZanuyuQtJ6+zAR9xgKv6VlL5vNAWPH hD6AqhpNU+P3z3eFn4P2EG7LEpL7eLErsii3qdxhnWqvpkDrAAsXGXa9pfkZK/xF yHoGSNpDDoVS4VyI2pg4RewaRO0gpSvsEAHUTZbw5dZ53pDrBqFSUb9Mh1/uuZbj czJVG+UtPYyADhwMcLVja9LzV5uMANrp1J+Dmkl4TowEEtactbS8QnZBs4eZsJm5 Issg0QUe4aa2VvnVXQCQ58wi9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeAVi50 20W9KyMz9XzYxR8bjO7+MB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2 MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzVCQy8xM0VBQTQ3Qzg2MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZB OFdyc0VoS0c3RUZNcDRmVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2UJ9SOwDqUiv6wAj/bYsxyp5K/mQ1y67RjmCbMQKdBXvmiMITo9S6 +sS77NHTBORK7XXzRnystB/NaB4j10ia514ph5iicGi41uS/lLn7RpK5FLgSQe6o Lrb8Gkqlx5uQJgFizZzIg4wasz7CkubfOsN0zJ7jqCyfPavblAkrlGaeuwyqv3JF 41jfZhtg7KBC2uMZxFzH86XV7q/BKOQ2hKXLyCAIr2o7CVLzqEvV56zG+yEl0luj g4vtRtgk6MS/1vcnsx/oNdCayaZVleOUPXvavfR+NWzvzYNDLVnkhqx3n2nzM/pY 2dZHkUXRdo5ka9J/zLEhfN+/g5jGxVae -----END CERTIFICATE-----Generated at Sat Sep 6 11:49:59 2025 by rpki-client