$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json) Hash identifier: +3r+YjVF+SZbhxRPObjgjRZJQ+G+CjEttU3MQu5VDL0= Subject key identifier: 61:D0:1A:22:F2:F6:CE:EE:2A:16:B8:A7:0A:39:91:39:00:C0:F5:8E Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 12C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft Manifest number: 129B Signing time: Mon 08 Sep 2025 17:06:45 +0000 Manifest this update: Mon 08 Sep 2025 17:06:44 +0000 Manifest next update: Mon 15 Sep 2025 17:06:44 +0000 Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: Ej9qdZhMbZWij8jklcOP2n7OpHbFIlb3s6f1jSYVF1w=) 2: 36AFB016FC6111EEAFBE4719C4F9AE02.roa (hash: 8Neml3oC6KcoFUvC+s8BLmWMEpSAAtUFs6SqBjTSq9o=) 3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: gcGbaS+C10OxA3/sWZJEHnaLaEauoh+9kGT7bNc0D6Q=) 4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: IgiJhZRqcSbgHymfJ2UkdTHsUcRz7FOMB1+md3krEv8=) 5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: 3BEJ1gCiaz/4ZdrE3qzkDJ5+ojL/iMHnMesKRyA+c6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4800 (0x12c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: Sep 8 17:06:44 2025 GMT Not After : Sep 15 17:06:44 2025 GMT Subject: CN=68bf0d25-40e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:d3:0f:ae:99:a4:3a:32:09:16:7d:fa:9b: b8:a0:fc:ef:64:49:82:5c:f4:fa:79:41:5b:74:34: ae:54:0b:fe:41:23:c3:77:0e:31:06:ff:dc:67:d8: 0b:5b:3a:c0:69:23:57:60:7f:b4:ee:1b:e9:09:ea: 30:f9:b1:c6:40:bf:6e:56:a3:be:96:b4:53:59:c1: 21:ec:c8:fe:8c:77:38:d5:9a:52:a6:0d:b2:0a:1e: d6:c4:fa:dd:8c:1e:dc:c0:1a:cf:ba:5a:fa:73:b0: 05:7e:7e:e1:22:6e:0a:53:5e:77:33:25:7e:60:eb: b4:3e:2c:ab:27:c0:24:35:94:5b:e6:2c:6c:13:2b: b0:05:5b:6b:4e:0e:12:f3:31:d1:2b:d5:c1:6b:8c: e4:35:51:6e:9a:a3:08:aa:64:0d:27:0a:c1:03:98: 86:29:cc:58:97:8b:90:73:d5:1a:11:23:e0:ed:e7: 47:ab:6f:03:8a:41:39:a9:64:8b:81:93:48:37:3a: 74:30:59:a6:6f:6d:66:fc:28:87:67:24:71:d4:dc: b1:28:d4:8f:b9:32:bb:23:a1:e5:cf:b7:9c:0e:2b: a3:40:45:93:86:79:41:31:98:00:b6:40:e8:ac:6f: 2d:4c:29:02:20:34:8f:3c:75:e7:fb:4a:00:dc:0f: 39:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D0:1A:22:F2:F6:CE:EE:2A:16:B8:A7:0A:39:91:39:00:C0:F5:8E X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b4:44:12:67:d5:79:ef:67:92:7a:1b:45:7a:83:d0:cd:8a: a1:93:e1:ed:58:17:df:fc:30:00:e9:17:fb:97:a7:63:a5:c5: 6d:35:8b:c4:bb:23:e6:30:1a:30:0c:93:0b:1b:06:6e:67:62: f2:e0:dd:95:f0:74:8b:94:cd:2c:b7:4f:5e:ac:91:12:6b:e2: aa:d8:63:2a:d9:03:fc:87:ec:b0:70:13:6c:83:9e:24:64:91: 91:f4:46:4b:0a:e8:ae:cc:64:1f:66:b3:1a:df:fb:0f:85:d2: 00:85:21:7b:66:69:c9:b8:15:ff:51:5b:9e:84:f5:7c:60:dd: 73:b2:10:f6:7d:eb:c3:8e:23:1e:a3:ad:c7:da:21:c0:ac:b1: 51:6a:d7:70:b5:0a:77:3e:bb:6d:3f:8e:42:34:df:d0:ad:1e: 5a:92:1d:da:03:f3:1f:c5:27:50:7d:65:a6:d2:e3:e7:7a:1c: 91:61:8b:a1:f9:aa:c3:45:f9:a3:83:32:44:4f:92:88:dd:94: ea:0b:0b:0c:6d:6b:3b:09:b5:73:39:cc:e4:a9:18:4f:89:74: 2e:7f:1b:96:aa:7b:c1:80:24:2e:4a:cf:53:6e:61:37:aa:16: 91:58:9b:5f:77:6a:5a:05:37:53:2b:9d:39:6d:83:bf:e8:01: c3:cf:f1:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjUwOTA4MTcwNjQ0WhcNMjUwOTE1MTcwNjQ0WjAYMRYwFAYD VQQDEw02OGJmMGQyNS00MGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPvTD66ZpDoyCRZ9+pu4oPzvZEmCXPT6eUFbdDSuVAv+QSPDdw4xBv/cZ9gL WzrAaSNXYH+07hvpCeow+bHGQL9uVqO+lrRTWcEh7Mj+jHc41ZpSpg2yCh7WxPrd jB7cwBrPulr6c7AFfn7hIm4KU153MyV+YOu0PiyrJ8AkNZRb5ixsEyuwBVtrTg4S 8zHRK9XBa4zkNVFumqMIqmQNJwrBA5iGKcxYl4uQc9UaESPg7edHq28DikE5qWSL gZNINzp0MFmmb21m/CiHZyRx1NyxKNSPuTK7I6Hlz7ecDiujQEWThnlBMZgAtkDo rG8tTCkCIDSPPHXn+0oA3A85RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHQGiLy 9s7uKha4pwo5kTkAwPWOMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBytEQSZ9V572eSehtFeoPQzYqhk+HtWBff/DAA6Rf7l6djpcVtNYvE uyPmMBowDJMLGwZuZ2Ly4N2V8HSLlM0st09erJESa+Kq2GMq2QP8h+ywcBNsg54k ZJGR9EZLCuiuzGQfZrMa3/sPhdIAhSF7ZmnJuBX/UVuehPV8YN1zshD2fevDjiMe o63H2iHArLFRatdwtQp3PrttP45CNN/QrR5akh3aA/MfxSdQfWWm0uPnehyRYYuh +arDRfmjgzJET5KI3ZTqCwsMbWs7CbVzOczkqRhPiXQufxuWqnvBgCQuSs9TbmE3 qhaRWJtfd2paBTdTK505bYO/6AHDz/GA -----END CERTIFICATE-----Generated at Tue Sep 9 13:20:50 2025 by rpki-client