$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft File: pLh_nflqIHJhuXtMnjjIO1yA1m4.mft (raw, json) Hash identifier: hklCWo6lHXDBoGDue3/ItFtkHehkXqaFlK4SHdir3us= Subject key identifier: 9F:D1:A2:1F:AE:26:22:94:7D:5F:57:E1:0C:C0:6D:29:F3:CC:87:7F Authority key identifier: A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E Certificate issuer: /CN=A91BC6A6/serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft Manifest number: CB Signing time: Wed 17 Sep 2025 06:23:38 +0000 Manifest this update: Wed 17 Sep 2025 06:23:37 +0000 Manifest next update: Wed 24 Sep 2025 06:23:37 +0000 Files and hashes: 1: pLh_nflqIHJhuXtMnjjIO1yA1m4.crl (hash: b5LTO/+DMuvutVNYsniP4BKXeWqM4BDpGumQuuDF1XM=) 2: E2FE5F1C5F3911EF9C33492EC4F9AE02.roa (hash: w7XAoEqzOUn2fN+Z5QNERvhpDDcLRxuYcXrspPvLSME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6A6, serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E Validity Not Before: Sep 17 06:23:37 2025 GMT Not After : Sep 24 06:23:37 2025 GMT Subject: CN=68ca53ea-720c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:36:10:f5:c9:2d:11:c9:b1:24:25:b7:4f: ed:46:a9:96:a0:b0:b6:53:28:68:85:0b:67:17:0e: ef:c3:c6:36:26:a0:20:59:e1:3b:d4:ae:4f:ec:a6: b7:60:a6:db:36:8c:a5:4f:e1:e0:45:9e:94:7e:56: ee:df:2f:a6:b3:89:7b:91:41:cd:f7:a0:29:8c:03: 27:ad:9f:4d:5b:b7:c7:18:5a:62:2c:11:4c:23:11: 34:0d:6b:16:ef:87:8f:d4:56:f1:5b:5d:87:a2:e6: 53:eb:98:4c:7d:12:33:76:ef:b7:b5:b3:8f:cb:1d: 09:4b:d5:7a:86:04:a3:27:30:a5:16:52:84:dc:b0: a6:e8:62:d0:a5:03:78:40:7f:e1:af:d9:12:3a:d0: 5d:60:ec:59:6d:56:0f:67:b2:bc:33:34:a4:43:26: 6c:95:13:02:43:71:e5:bf:ac:34:a5:83:da:38:fc: 8f:3f:ce:a4:e7:c8:61:cf:d6:49:24:50:14:a7:8a: 49:7b:ae:3d:c3:2b:a9:e5:88:8f:c7:35:4c:30:03: 3e:c7:fa:a3:09:14:21:d5:c9:ce:00:c3:6d:53:9c: 7f:50:a2:08:e7:9a:19:cd:33:b6:28:1e:39:b4:15: d1:94:cc:30:eb:7d:59:37:58:99:0b:82:9c:06:84: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D1:A2:1F:AE:26:22:94:7D:5F:57:E1:0C:C0:6D:29:F3:CC:87:7F X509v3 Authority Key Identifier: keyid:A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0e:57:79:35:0d:0a:bd:c9:15:a2:c5:8a:64:ca:a8:c2:2c: 3e:dd:85:19:cf:d2:a1:f0:01:9d:74:a2:07:95:d3:c7:19:a8: 5f:fd:6e:c7:47:02:66:cc:c6:c5:3f:70:d0:c4:f7:7f:82:9e: ef:6a:83:b3:2a:af:84:50:ba:fd:b7:56:20:b4:03:ec:3b:45: 68:c2:f1:9a:06:f7:77:bf:a6:f7:9f:c5:3d:0e:ac:37:22:31: c4:3b:76:09:18:72:d2:46:05:e7:07:91:57:7d:13:26:c7:e6: 69:1b:05:8b:db:21:bf:5f:6d:88:cb:f5:5d:80:f8:c3:3a:75: 19:66:66:6d:18:c4:d3:c0:f6:ed:8d:15:4a:ae:3e:69:3f:f7: 36:48:de:39:7c:a9:f1:64:6e:44:e7:72:18:54:4c:64:82:d9: a8:ea:d4:ae:8f:04:57:1e:b3:db:e1:00:6d:fa:49:f5:cc:06: ea:94:90:d6:c9:af:1b:ff:d3:09:dd:8f:c6:1f:4f:15:1d:a6: ef:a9:b7:8b:8d:3d:e1:db:e7:d8:79:72:e8:dc:e5:10:df:b8: f2:99:3b:0d:34:8e:83:b1:b8:18:77:bf:54:fb:e8:26:97:bb: 50:f1:89:96:3b:ad:12:8a:be:67:1f:89:82:4e:4a:ce:73:61: b9:74:3b:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2QTYxMTAvBgNVBAUTKEE0Qjg3RjlERjk2QTIwNzI2MUI5N0I0QzlFMzhDODNC NUM4MEQ2NkUwHhcNMjUwOTE3MDYyMzM3WhcNMjUwOTI0MDYyMzM3WjAYMRYwFAYD VQQDEw02OGNhNTNlYS03MjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsW82EPXJLRHJsSQlt0/tRqmWoLC2UyhohQtnFw7vw8Y2JqAgWeE71K5P7Ka3 YKbbNoylT+HgRZ6Uflbu3y+ms4l7kUHN96ApjAMnrZ9NW7fHGFpiLBFMIxE0DWsW 74eP1FbxW12HouZT65hMfRIzdu+3tbOPyx0JS9V6hgSjJzClFlKE3LCm6GLQpQN4 QH/hr9kSOtBdYOxZbVYPZ7K8MzSkQyZslRMCQ3Hlv6w0pYPaOPyPP86k58hhz9ZJ JFAUp4pJe649wyup5YiPxzVMMAM+x/qjCRQh1cnOAMNtU5x/UKII55oZzTO2KB45 tBXRlMww631ZN1iZC4KcBoQ2RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/Roh+u JiKUfV9X4QzAbSnzzId/MB8GA1UdIwQYMBaAFKS4f535aiByYbl7TJ44yDtcgNZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZBNi9BMkM2MjFBMDVG MzkxMUVGODVEQzhFMkRDNEY5QUUwMi9wTGhfbmZscUlISmh1WHRNbmpqSU8xeUEx bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMaF9uZmxxSUhKaHVYdE1uampJTzF5QTFtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZBNi9BMkM2MjFBMDVGMzkxMUVGODVEQzhFMkRDNEY5QUUwMi9wTGhfbmZscUlI Smh1WHRNbmpqSU8xeUExbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuDld5NQ0KvckVosWKZMqowiw+3YUZz9Kh8AGddKIHldPHGahf/W7H RwJmzMbFP3DQxPd/gp7vaoOzKq+EULr9t1YgtAPsO0VowvGaBvd3v6b3n8U9Dqw3 IjHEO3YJGHLSRgXnB5FXfRMmx+ZpGwWL2yG/X22Iy/VdgPjDOnUZZmZtGMTTwPbt jRVKrj5pP/c2SN45fKnxZG5E53IYVExkgtmo6tSujwRXHrPb4QBt+kn1zAbqlJDW ya8b/9MJ3Y/GH08VHabvqbeLjT3h2+fYeXLo3OUQ37jymTsNNI6DsbgYd79U++gm l7tQ8YmWO60Sir5nH4mCTkrOc2G5dDvV -----END CERTIFICATE-----Generated at Fri Sep 19 02:59:53 2025 by rpki-client