$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft File: -E-7QV2aRUM2Lt9yZfU34s_5-CA.mft (raw, json) Hash identifier: GfGmEG08gMrxQAj8vwV2n0Kg/iSd1qpJo7ukS1TbUVw= Subject key identifier: 97:FF:F1:A6:F5:EF:D4:E5:56:E0:EF:46:C6:C3:A6:57:7B:B9:33:58 Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 Certificate issuer: /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft Manifest number: 015F Signing time: Wed 17 Sep 2025 04:36:28 +0000 Manifest this update: Wed 17 Sep 2025 04:36:28 +0000 Manifest next update: Wed 24 Sep 2025 04:36:28 +0000 Files and hashes: 1: -E-7QV2aRUM2Lt9yZfU34s_5-CA.crl (hash: Dia4Urrv6EcoELWLv4eUT7vV5Q4LFp9PizaN7UuTMSw=) 2: 254E9F807D4A11EEABBD1328C4F9AE02.roa (hash: hnS/7fWHcgQGaSQ+vZ3janDkqxS9WCXJZybSi7r9Su0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCDC6, serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Validity Not Before: Sep 17 04:36:28 2025 GMT Not After : Sep 24 04:36:28 2025 GMT Subject: CN=68ca3acc-2017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:5e:87:fb:dd:81:9f:de:43:c9:d7:34:69: e9:0b:bf:e9:e9:3b:f5:9b:19:e4:9b:3c:36:35:dc: 33:b3:df:37:eb:f6:f4:8b:3f:23:cc:52:c5:9b:40: a8:4e:69:62:70:ee:3f:e1:17:ad:b9:73:14:0c:49: a7:e9:fe:96:f3:c8:ba:23:9f:b4:15:6a:0b:af:c2: 51:23:02:4f:ef:ee:85:cc:6e:30:19:b9:1d:83:ab: 72:34:22:b9:97:4e:d1:86:fc:f9:ca:8e:7d:ff:40: e8:8b:ea:a6:5e:dd:0c:52:e0:26:de:ec:d0:16:d2: 29:8e:35:28:bd:5d:2a:b2:d1:5f:c0:b3:a0:5d:77: be:65:5c:a1:c1:7a:f2:59:58:02:0d:44:a6:b2:e4: d8:43:5a:60:98:35:f5:38:b0:5f:c3:10:f5:90:60: 9a:c0:28:05:4d:50:65:0a:d0:8b:6d:f6:16:e9:05: 6b:68:8c:bf:35:c2:37:b7:c4:e5:47:ce:5e:ca:8a: 8b:3f:c1:3a:03:2e:7c:71:d9:84:9e:a1:19:fe:63: 30:c8:ee:e6:39:1b:31:3a:75:87:4c:88:38:1c:24: 04:02:f5:0f:ca:39:08:c0:a4:bc:36:cc:ea:3e:f8: b5:ba:73:28:7a:6c:df:a9:52:22:1e:9d:00:98:03: 63:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FF:F1:A6:F5:EF:D4:E5:56:E0:EF:46:C6:C3:A6:57:7B:B9:33:58 X509v3 Authority Key Identifier: keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ec:e6:e2:9b:ec:4d:b8:48:d4:4d:e9:e6:b8:45:dd:d4:8c: 8d:38:81:16:5e:05:13:17:67:5e:53:95:75:47:8a:e5:13:81: 15:01:27:1c:29:24:f8:10:44:06:92:f9:70:cd:f4:c1:ab:a0: 72:0b:92:b5:2e:67:e3:2c:28:01:94:ad:fe:2a:7b:2a:45:09: 52:6b:8a:6e:ee:19:f9:87:9e:e3:1b:75:16:2c:e5:e1:b1:ff: 7a:5e:be:9f:91:f1:99:a6:05:ec:83:d2:8a:48:2d:92:f7:b5: fc:08:8b:48:16:b5:3a:02:74:5a:50:e9:f6:80:49:ef:f7:d2: 70:a3:cd:d9:b6:36:46:64:88:e3:fe:a0:73:bb:a1:38:9f:c6: d9:8d:e0:60:a0:a8:52:89:05:e7:ea:9b:65:27:cd:75:01:8a: bb:a3:c9:98:1f:90:f9:f5:b6:09:0d:8b:a4:90:40:79:29:02: 88:e6:9f:91:0f:9d:42:e8:16:45:98:3c:b0:f3:ee:79:e5:40: ac:f5:d4:85:1b:c1:a2:85:bb:f8:a6:33:75:b4:57:50:44:e8: e1:34:f2:de:c2:5d:18:a6:c9:95:b0:5e:c3:e5:4c:13:5e:1a: 13:57:6d:33:77:14:a7:6e:3a:94:72:f1:50:83:8e:96:64:22: d2:ee:fb:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNEQzYxMTAvBgNVBAUTKEY4NEZCQjQxNUQ5QTQ1NDMzNjJFREY3MjY1RjUzN0Uy Q0ZGOUY4MjAwHhcNMjUwOTE3MDQzNjI4WhcNMjUwOTI0MDQzNjI4WjAYMRYwFAYD VQQDEw02OGNhM2FjYy0yMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvr9eh/vdgZ/eQ8nXNGnpC7/p6Tv1mxnkmzw2Ndwzs9836/b0iz8jzFLFm0Co TmlicO4/4RetuXMUDEmn6f6W88i6I5+0FWoLr8JRIwJP7+6FzG4wGbkdg6tyNCK5 l07Rhvz5yo59/0Doi+qmXt0MUuAm3uzQFtIpjjUovV0qstFfwLOgXXe+ZVyhwXry WVgCDUSmsuTYQ1pgmDX1OLBfwxD1kGCawCgFTVBlCtCLbfYW6QVraIy/NcI3t8Tl R85eyoqLP8E6Ay58cdmEnqEZ/mMwyO7mORsxOnWHTIg4HCQEAvUPyjkIwKS8Nszq Pvi1unMoemzfqVIiHp0AmANjmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJf/8ab1 79TlVuDvRsbDpld7uTNYMB8GA1UdIwQYMBaAFPhPu0FdmkVDNi7fcmX1N+LP+fgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0RDNi84MDEyOEVDODdE NDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJVTTJMdDl5WmZVMzRzXzUt Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1FLTdRVjJhUlVNMkx0OXlaZlUzNHNfNS1DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0RDNi84MDEyOEVDODdENDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJV TTJMdDl5WmZVMzRzXzUtQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD7Obim+xNuEjUTenmuEXd1IyNOIEWXgUTF2deU5V1R4rlE4EVAScc KST4EEQGkvlwzfTBq6ByC5K1LmfjLCgBlK3+KnsqRQlSa4pu7hn5h57jG3UWLOXh sf96Xr6fkfGZpgXsg9KKSC2S97X8CItIFrU6AnRaUOn2gEnv99Jwo83ZtjZGZIjj /qBzu6E4n8bZjeBgoKhSiQXn6ptlJ811AYq7o8mYH5D59bYJDYukkEB5KQKI5p+R D51C6BZFmDyw8+555UCs9dSFG8Gihbv4pjN1tFdQROjhNPLewl0YpsmVsF7D5UwT XhoTV20zdxSnbjqUcvFQg46WZCLS7vuq -----END CERTIFICATE-----Generated at Fri Sep 19 03:39:27 2025 by rpki-client