$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft File: tPvjSrdmEqnSCuUrCttB_PgKEv8.mft (raw, json) Hash identifier: DTPmnDY9TqKNyv5quC8TdBAHSASPDNyAoLWkj/en+OM= Subject key identifier: 58:B4:79:62:B0:88:D3:3F:CC:32:BE:07:ED:38:21:E6:54:45:C9:94 Authority key identifier: B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF Certificate issuer: /CN=A91BF6CD/serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft Manifest number: 09 Signing time: Sun 07 Sep 2025 08:37:52 +0000 Manifest this update: Sun 07 Sep 2025 08:37:52 +0000 Manifest next update: Sun 14 Sep 2025 08:37:52 +0000 Files and hashes: 1: tPvjSrdmEqnSCuUrCttB_PgKEv8.crl (hash: eqwh0iyVwrQCDAVbwHOeNqaQJBIT71+eTx034STPIcg=) 2: 3E1ABB8C816E11F0A5992F28C4F9AE02.roa (hash: 4bcnfZJKTPDDeyNdHgj7RafzwnOWjUaA8+FGoC8oOtU=) 3: 3E99E81C816E11F0A5992F28C4F9AE02.roa (hash: l8LhCuq+T1sKUB7SQKQReUgSY0Aj/z/i1GPpIkc0AeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 08:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF6CD, serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF Validity Not Before: Sep 7 08:37:52 2025 GMT Not After : Sep 14 08:37:52 2025 GMT Subject: CN=68bd4460-d0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a3:c3:16:ac:f6:30:83:01:08:c1:17:f9:29: 80:bf:06:75:62:d5:e1:ee:e1:62:84:cb:6d:01:91: 13:a3:d5:dd:8a:a3:b1:ab:fe:b7:13:2b:f1:cc:55: 5c:27:a5:ad:b0:e4:d9:74:c1:7b:0b:94:2d:b6:e1: 6c:f9:a5:5e:03:7e:f9:36:01:92:63:fc:1b:0c:8a: e1:b2:d7:f8:2c:48:6a:e3:6d:7f:48:8e:a2:96:a9: 46:49:63:41:94:95:15:9a:da:78:bb:3f:36:c9:80: d1:a7:c3:91:7c:74:5b:ff:e5:a5:84:06:cb:0a:13: 22:16:d5:4e:81:8b:3c:90:92:92:0c:73:8a:8c:f1: a9:a5:11:cc:eb:ef:37:3f:62:6e:eb:a9:62:91:ba: f3:07:38:55:63:3d:69:58:f1:23:c8:f3:77:14:30: cc:0e:59:5b:ba:1b:db:f4:d4:4b:04:6c:0f:75:be: 4e:40:08:42:e1:ca:79:3b:7d:91:e0:9b:15:ab:09: d7:e0:1e:bc:7c:c7:9e:6b:c2:ad:9e:57:df:a6:d0: 82:db:18:b3:42:fd:be:7b:0d:3b:39:aa:b4:00:d7: 46:1a:c6:a6:5c:4e:53:2f:01:98:aa:84:bc:18:3c: e6:6d:4e:4e:98:61:98:4c:49:96:c3:1d:96:25:10: 5b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B4:79:62:B0:88:D3:3F:CC:32:BE:07:ED:38:21:E6:54:45:C9:94 X509v3 Authority Key Identifier: keyid:B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:fe:1d:04:da:6f:d7:4b:46:48:77:07:29:01:64:8f:1c:a1: ee:ca:6a:40:cf:3a:a7:33:5c:8d:04:f4:f7:4a:e3:71:10:a6: c3:3a:d2:0f:af:0a:33:a3:c1:73:34:16:45:5d:62:d2:68:bc: 13:29:8c:e8:af:96:d4:d4:20:41:c5:63:1c:d1:06:54:ba:0b: f7:be:8c:9e:e6:62:96:98:eb:4e:5c:a8:5a:2d:b7:e7:d3:de: 1a:d3:0e:cf:5f:b9:b7:92:dc:c8:48:f2:51:5e:f9:d2:27:72: 18:da:61:6f:1c:db:74:51:39:08:6e:bb:38:52:a3:2e:a7:6a: 75:1d:58:c1:f8:5c:3d:56:a4:e1:4a:5e:37:e7:1d:51:05:21: f4:65:75:81:99:a3:86:b1:ac:77:0a:ba:a9:dc:a1:da:07:37: 09:c7:26:e6:4c:c1:82:2a:ab:ac:57:25:23:41:96:ba:ae:6c: e2:7b:7e:4e:b2:b6:2c:39:d8:5c:45:6b:98:f8:e7:16:9d:5b: b9:79:ff:c8:ce:d0:ec:60:6d:69:e8:e8:df:04:69:62:54:c2: 69:27:1a:f3:e7:70:f5:b7:62:32:16:6a:6d:9d:9b:4e:51:79: eb:b7:99:d9:93:e1:f3:c7:81:fa:51:f3:6e:29:34:17:3c:1d: 03:3d:10:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjZDRDExMC8GA1UEBRMoQjRGQkUzNEFCNzY2MTJBOUQyMEFFNTJCMEFEQjQxRkNG ODBBMTJGRjAeFw0yNTA5MDcwODM3NTJaFw0yNTA5MTQwODM3NTJaMBgxFjAUBgNV BAMTDTY4YmQ0NDYwLWQwYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOo8MWrPYwgwEIwRf5KYC/BnVi1eHu4WKEy20BkROj1d2Ko7Gr/rcTK/HMVVwn pa2w5Nl0wXsLlC224Wz5pV4Dfvk2AZJj/BsMiuGy1/gsSGrjbX9IjqKWqUZJY0GU lRWa2ni7PzbJgNGnw5F8dFv/5aWEBssKEyIW1U6BizyQkpIMc4qM8amlEczr7zc/ Ym7rqWKRuvMHOFVjPWlY8SPI83cUMMwOWVu6G9v01EsEbA91vk5ACELhynk7fZHg mxWrCdfgHrx8x55rwq2eV9+m0ILbGLNC/b57DTs5qrQA10YaxqZcTlMvAZiqhLwY POZtTk6YYZhMSZbDHZYlEFtnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWLR5YrCI 0z/MMr4H7Tgh5lRFyZQwHwYDVR0jBBgwFoAUtPvjSrdmEqnSCuUrCttB/PgKEv8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGNkNELzMzM0JDNjA4ODE2 RDExRjBBOTA2NkQyNUM0RjlBRTAyL3RQdmpTcmRtRXFuU0N1VXJDdHRCX1BnS0V2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFB2alNyZG1FcW5TQ3VVckN0dEJfUGdLRXY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG NkNELzMzM0JDNjA4ODE2RDExRjBBOTA2NkQyNUM0RjlBRTAyL3RQdmpTcmRtRXFu U0N1VXJDdHRCX1BnS0V2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHX+HQTab9dLRkh3BykBZI8coe7KakDPOqczXI0E9PdK43EQpsM60g+v CjOjwXM0FkVdYtJovBMpjOivltTUIEHFYxzRBlS6C/e+jJ7mYpaY605cqFott+fT 3hrTDs9fubeS3MhI8lFe+dInchjaYW8c23RROQhuuzhSoy6nanUdWMH4XD1WpOFK XjfnHVEFIfRldYGZo4axrHcKuqncodoHNwnHJuZMwYIqq6xXJSNBlrqubOJ7fk6y tiw52FxFa5j45xadW7l5/8jO0OxgbWno6N8EaWJUwmknGvPncPW3YjIWam2dm05R eeu3mdmT4fPHgfpR824pNBc8HQM9EIs= -----END CERTIFICATE-----Generated at Sun Sep 7 14:22:35 2025 by rpki-client