$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft File: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json) Hash identifier: QEA0MMWgrCIn6KCsavhI7SRWYnmqFFMgBzP5pojCigc= Subject key identifier: 95:8C:71:39:FA:0B:A7:91:C1:BE:95:00:16:7D:5F:46:52:26:31:CF Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Certificate serial: 0303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft Manifest number: 02F8 Signing time: Wed 17 Sep 2025 01:43:59 +0000 Manifest this update: Wed 17 Sep 2025 01:43:59 +0000 Manifest next update: Wed 24 Sep 2025 01:43:59 +0000 Files and hashes: 1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: P6Hi7O1dNeN7hp4q5Qs2vHpfCl5mAQsl7xmzZ2vkirE=) 2: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: rCIHZh9wUruVRZk/2Wl+iO0bQmypaGymRp+P5pHJgrc=) 3: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: WLqs4EYDGZGhgsTcvZkB1qzpm9zeqwQq3iz4UzKMW3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 771 (0x303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Validity Not Before: Sep 17 01:43:59 2025 GMT Not After : Sep 24 01:43:59 2025 GMT Subject: CN=68ca125f-aef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:33:03:3f:7c:c7:77:ea:ea:39:e4:5a:56: e4:56:7b:ba:ae:5d:fb:62:09:02:05:5d:72:f4:73: 47:00:a9:74:1e:56:43:a1:3f:82:fc:78:0a:07:54: b8:c2:30:c4:4f:a4:43:13:1b:62:d3:91:09:b0:c4: fa:24:0f:7e:8f:35:8b:7c:af:b0:34:94:5c:f8:a3: 9b:27:62:58:cc:40:8d:2a:99:4b:3b:b6:bc:5a:04: 4c:5a:b5:fe:47:11:f1:f6:23:d1:fd:26:cf:79:9d: b1:cc:41:58:af:6b:b6:47:2b:3f:61:bc:3e:62:5a: 80:28:94:31:9c:94:52:99:a4:03:6b:46:32:32:fc: 23:d4:3d:c9:8a:44:c6:17:2d:c6:9c:56:3b:c7:3f: 16:5a:d3:62:c0:02:a3:43:55:d5:ba:af:bc:f1:2f: ac:1c:fe:40:3d:5e:39:d2:76:a8:77:1d:84:62:66: 31:01:3f:1c:74:0c:f0:ab:23:f0:92:aa:e0:88:1d: 15:57:86:de:d0:1d:c1:f4:87:d1:61:31:04:d9:36: 0b:64:04:09:bb:5f:e1:40:50:96:69:9e:45:1b:93: 89:b7:a9:6e:61:e1:f0:b9:57:e0:f4:98:11:d6:52: 0e:95:42:6e:4e:aa:a3:56:0e:48:dd:43:cc:ab:43: 9e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8C:71:39:FA:0B:A7:91:C1:BE:95:00:16:7D:5F:46:52:26:31:CF X509v3 Authority Key Identifier: keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6a:47:25:05:c2:35:f7:54:e6:a1:7b:a9:11:e3:1e:89:5a: c7:91:d0:8e:6d:f7:34:e8:09:84:ab:c2:0a:b7:3a:72:5f:26: 37:51:e9:df:6a:eb:47:d9:84:e0:85:22:17:4b:ce:c7:47:ea: 3a:15:cf:a1:45:88:6b:c1:d9:0c:c2:40:db:90:19:f9:96:b3: 6b:46:fd:46:6f:e4:b5:93:8f:7e:42:67:2e:1f:b1:7f:d1:12: 8f:76:60:b8:4a:9c:5a:89:f1:ab:fd:27:e6:0e:2f:b0:92:8e: 2a:e6:a9:73:e9:29:f5:1a:83:1b:10:ff:31:59:27:b1:18:ac: 19:c5:a0:48:fe:b2:34:9c:61:51:ab:49:4d:9d:a5:86:4f:45: 0e:9d:9c:ef:a9:26:bd:24:c5:25:a5:94:c0:1a:3f:04:9a:76: 90:b4:2f:75:bd:6b:bb:d3:e7:57:e2:bd:51:1f:83:f6:c5:08: 3c:e4:78:34:26:37:9f:04:17:a6:23:8b:c4:a8:03:04:78:c0: 28:3e:90:d0:0b:6a:c5:78:b2:cc:60:6a:40:70:90:1f:01:35: e0:fb:c4:cf:76:bc:cb:19:4f:55:91:2b:12:93:6c:d2:54:1b: 6e:01:bf:f7:c0:6e:6e:fe:c3:c5:ca:08:d1:d7:e4:06:7b:7f: 0b:c2:0f:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz N0RENkU2OTQwHhcNMjUwOTE3MDE0MzU5WhcNMjUwOTI0MDE0MzU5WjAYMRYwFAYD VQQDEw02OGNhMTI1Zi1hZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupMzAz98x3fq6jnkWlbkVnu6rl37YgkCBV1y9HNHAKl0HlZDoT+C/HgKB1S4 wjDET6RDExti05EJsMT6JA9+jzWLfK+wNJRc+KObJ2JYzECNKplLO7a8WgRMWrX+ RxHx9iPR/SbPeZ2xzEFYr2u2Rys/Ybw+YlqAKJQxnJRSmaQDa0YyMvwj1D3JikTG Fy3GnFY7xz8WWtNiwAKjQ1XVuq+88S+sHP5APV450naodx2EYmYxAT8cdAzwqyPw kqrgiB0VV4be0B3B9IfRYTEE2TYLZAQJu1/hQFCWaZ5FG5OJt6luYeHwuVfg9JgR 1lIOlUJuTqqjVg5I3UPMq0OekQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWMcTn6 C6eRwb6VABZ9X0ZSJjHPMB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjVDMC9CQ0JENEZCNkYxQzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1 OGNMX0xyeEVLWFEzM1c1cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMakclBcI191TmoXupEeMeiVrHkdCObfc06AmEq8IKtzpyXyY3Uenf autH2YTghSIXS87HR+o6Fc+hRYhrwdkMwkDbkBn5lrNrRv1Gb+S1k49+QmcuH7F/ 0RKPdmC4SpxaifGr/SfmDi+wko4q5qlz6Sn1GoMbEP8xWSexGKwZxaBI/rI0nGFR q0lNnaWGT0UOnZzvqSa9JMUlpZTAGj8EmnaQtC91vWu70+dX4r1RH4P2xQg85Hg0 JjefBBemI4vEqAMEeMAoPpDQC2rFeLLMYGpAcJAfATXg+8TPdrzLGU9VkSsSk2zS VBtuAb/3wG5u/sPFygjR1+QGe38Lwg8E -----END CERTIFICATE-----Generated at Fri Sep 19 00:38:45 2025 by rpki-client