$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: 6WUYgDZ2XVn02SdLaw5Zxpcd5AHpLCSeHTtWrZxWw4w= Subject key identifier: C7:E4:23:48:87:2A:35:A5:F7:77:71:28:72:16:BB:49:9A:AA:3A:BE Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0FAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0FA5 Signing time: Thu 18 Sep 2025 17:41:23 +0000 Manifest this update: Thu 18 Sep 2025 17:41:22 +0000 Manifest next update: Thu 25 Sep 2025 17:41:22 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: eRgmfFTopVfSfTWTMivvuhgpIRpz2Ru2PbSVtlTqkA0=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 090bVc+Qwt8YDuc/RlwXjl9kZ0cXU70VKlUww1lp6Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4012 (0xfac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: Sep 18 17:41:22 2025 GMT Not After : Sep 25 17:41:22 2025 GMT Subject: CN=68cc4442-128e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ee:5c:45:c8:09:f6:f6:b3:17:07:4e:12:1f: a9:f3:03:fb:13:6f:75:51:e4:09:ba:68:53:f5:4d: d7:54:47:eb:45:de:10:0e:c4:17:84:14:31:61:3c: 25:06:48:c6:6c:2e:20:ae:37:84:35:0c:c4:ba:d4: a1:e3:6e:ee:73:da:b2:de:25:f9:2a:0a:c3:00:a7: 55:b4:d3:94:db:a0:64:c1:96:43:8d:59:16:b7:83: 17:0b:43:bc:c6:c7:b6:42:01:ba:0e:02:f3:6e:e7: 34:89:aa:68:73:06:f0:b9:4a:70:f2:56:34:fe:22: 7d:d9:7b:a8:a8:83:24:d3:6d:81:1e:3d:0a:fa:18: d0:51:f1:27:ce:9e:ce:93:76:22:6d:31:f2:8a:0f: cb:68:d9:c6:59:8a:27:39:63:38:99:21:21:fb:34: 8b:7e:9c:d3:a8:ca:93:6c:7b:12:d8:28:42:33:87: 5c:9d:5f:a8:b6:ae:8e:6a:48:7d:76:f3:43:ed:f6: e0:d4:69:43:92:42:8e:1f:43:1f:41:dd:b0:9c:e9: 37:a6:65:db:d9:59:4b:f5:14:40:a2:fb:ce:4c:48: 7d:6d:73:70:e6:02:a3:40:42:33:55:00:57:62:f5: c9:ce:8a:ae:a5:6d:fa:ea:07:f7:1a:c2:6e:94:e1: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E4:23:48:87:2A:35:A5:F7:77:71:28:72:16:BB:49:9A:AA:3A:BE X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:39:4e:9e:be:b0:21:9f:12:f3:2b:be:17:49:09:df:07:ef: d0:57:16:16:1e:74:6e:d4:2b:5e:8c:17:59:d7:3c:b2:20:b4: ed:f4:68:41:45:9f:62:f5:3f:1b:e8:99:11:9c:6e:b3:c2:5b: 72:49:48:ba:95:6d:18:2b:d6:b5:97:cb:a5:62:d2:99:61:bd: c1:17:3a:0e:e0:0a:da:70:71:ae:41:76:e6:f1:4f:32:6f:1b: 35:57:1c:d9:fb:5c:7b:02:4b:b6:ad:09:a9:67:02:fe:7b:b5: 71:15:f2:c9:c0:59:4e:b4:a3:bb:ca:31:3b:56:8e:f8:84:11: 93:33:20:7f:83:80:7c:d9:37:91:42:cd:95:31:e4:a4:be:5f: 4e:23:ce:50:91:78:92:f1:3b:a0:d5:43:9e:df:97:68:58:66: d0:ab:57:36:73:86:16:a5:c6:2d:ef:2a:c2:37:e3:ce:a3:e8: 78:c3:e4:60:b5:7e:2c:b1:d8:eb:da:fa:a2:8c:8f:6d:97:5e: 81:b0:76:27:7c:2d:10:30:3d:c3:35:1b:b7:83:5a:5e:88:3a: 1f:df:98:0a:5b:7d:b7:ed:65:4b:4c:81:1a:08:a7:da:a2:ae: 10:6c:34:7c:89:5d:62:44:fa:ab:70:a4:ac:38:94:1e:da:46: 0a:90:ea:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjUwOTE4MTc0MTIyWhcNMjUwOTI1MTc0MTIyWjAYMRYwFAYD VQQDEw02OGNjNDQ0Mi0xMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5u5cRcgJ9vazFwdOEh+p8wP7E291UeQJumhT9U3XVEfrRd4QDsQXhBQxYTwl BkjGbC4grjeENQzEutSh427uc9qy3iX5KgrDAKdVtNOU26BkwZZDjVkWt4MXC0O8 xse2QgG6DgLzbuc0iapocwbwuUpw8lY0/iJ92XuoqIMk022BHj0K+hjQUfEnzp7O k3YibTHyig/LaNnGWYonOWM4mSEh+zSLfpzTqMqTbHsS2ChCM4dcnV+otq6Oakh9 dvND7fbg1GlDkkKOH0MfQd2wnOk3pmXb2VlL9RRAovvOTEh9bXNw5gKjQEIzVQBX YvXJzoqupW366gf3GsJulOFBdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfkI0iH KjWl93dxKHIWu0maqjq+MB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIOU6evrAhnxLzK74XSQnfB+/QVxYWHnRu1CtejBdZ1zyyILTt9GhB RZ9i9T8b6JkRnG6zwltySUi6lW0YK9a1l8ulYtKZYb3BFzoO4AracHGuQXbm8U8y bxs1VxzZ+1x7Aku2rQmpZwL+e7VxFfLJwFlOtKO7yjE7Vo74hBGTMyB/g4B82TeR Qs2VMeSkvl9OI85QkXiS8Tug1UOe35doWGbQq1c2c4YWpcYt7yrCN+POo+h4w+Rg tX4ssdjr2vqijI9tl16BsHYnfC0QMD3DNRu3g1peiDof35gKW3237WVLTIEaCKfa oq4QbDR8iV1iRPqrcKSsOJQe2kYKkOpG -----END CERTIFICATE-----Generated at Sat Sep 20 03:02:22 2025 by rpki-client