$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft File: 8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json) Hash identifier: tu/GDx/4CNEMDqCjMpDeeyY/nIc4dsISgrPrQ1lkXtw= Subject key identifier: D5:84:46:E8:84:BE:DF:A5:99:CB:54:2A:F0:EE:38:18:C1:94:8B:BE Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft Manifest number: 0149 Signing time: Wed 17 Sep 2025 04:53:11 +0000 Manifest this update: Wed 17 Sep 2025 04:53:11 +0000 Manifest next update: Wed 24 Sep 2025 04:53:11 +0000 Files and hashes: 1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: lRLpqOY+DAgF0bsX0NDx9twfv39Q0IykJ2yj/bbsvpE=) 2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: fBtaOlMCOFGQQtGdBagxQGnrYFNg/qX3d4dMpzhuZnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Validity Not Before: Sep 17 04:53:11 2025 GMT Not After : Sep 24 04:53:11 2025 GMT Subject: CN=68ca3eb7-597e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:2a:b1:48:65:49:4c:8e:26:39:39:26:d1: 07:c8:9b:90:af:c4:5e:58:10:da:cf:b4:fb:45:b1: 80:70:50:ed:9a:6d:3b:01:ae:ea:fe:14:d1:f5:56: df:fa:a4:9f:77:4e:2c:f5:78:6f:2b:ce:62:1b:b2: 21:92:00:4f:fd:08:60:a8:6e:e2:48:75:fe:d0:bb: fa:c6:31:81:71:aa:f9:f5:ff:cc:08:07:6e:f5:e5: 45:a9:fa:a7:94:9f:b3:b5:6a:58:b1:ff:a1:cf:bc: 4e:9d:99:87:80:73:5b:bd:d4:1b:26:2a:51:a7:c4: 17:b0:ab:76:99:d6:77:6b:a2:3c:67:5e:7e:e8:f4: 14:e4:de:ef:ab:6e:34:2a:ba:cc:f1:bd:17:34:38: 54:ee:62:f8:ea:bc:cf:11:4b:3c:90:42:4d:3f:7b: bf:16:bf:7f:4d:71:0f:97:c2:6c:75:56:dd:85:5f: c3:a0:d7:dc:b9:ab:9f:e7:06:ed:e7:86:b3:a5:3e: 79:23:b3:5b:df:70:22:d1:b2:11:88:84:02:bc:db: 71:6a:70:05:3e:3f:51:a4:c5:e9:1d:b3:41:38:58: e8:f4:a9:02:3f:26:d3:2c:54:dd:bc:dc:b7:82:c7: 81:4f:ce:a8:20:f7:87:1b:63:0f:2a:2e:24:fb:03: 89:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:84:46:E8:84:BE:DF:A5:99:CB:54:2A:F0:EE:38:18:C1:94:8B:BE X509v3 Authority Key Identifier: keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:1e:74:63:59:e9:fd:10:ee:48:aa:95:fa:01:c5:2b:0d:f1: 03:5e:7d:a9:a0:6b:2e:db:1f:fd:17:0a:5a:5c:22:2a:13:d6: 47:d4:a7:56:dc:fd:5c:92:05:0f:8c:17:f6:fe:0c:c9:1b:53: 01:50:24:eb:5a:91:b3:10:ea:9f:ac:5c:5f:bc:6d:92:a1:6f: 47:c2:c9:e5:99:b6:8b:e3:d2:93:99:32:1f:33:a3:03:5d:c6: 83:75:7f:2f:01:3e:8a:d4:54:b3:2e:4a:2f:af:c2:7b:c8:29: 8e:43:1e:ff:64:57:6f:d8:d3:43:8f:3d:ef:4c:27:08:56:cd: 40:54:eb:e5:c8:11:38:b3:92:5e:4c:c4:2f:64:ee:ca:22:e4: 61:33:b6:88:7b:cd:05:c7:f5:38:3d:e8:35:30:7b:1f:61:43: e3:06:b4:df:25:87:26:62:66:a3:12:5c:9c:1e:f2:4a:8d:b3: 85:d6:f3:19:c8:df:fc:27:18:a6:02:ee:c9:d1:74:90:c4:36: 2e:d2:b4:2c:47:42:97:cd:eb:e2:13:41:d5:31:dc:36:21:5c: a2:c3:94:86:e2:09:ff:14:6e:be:52:60:0f:76:2c:da:c4:3b: 96:6b:06:c8:12:1d:c4:3c:89:ac:94:ac:75:c6:a3:fe:6d:2d: c4:73:6e:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAzNzIxMTAvBgNVBAUTKEYyOUIyM0VBNEUxMTRDREM5Q0E2RDM3RjVFRjc5RUY0 QzM1QzcyODIwHhcNMjUwOTE3MDQ1MzExWhcNMjUwOTI0MDQ1MzExWjAYMRYwFAYD VQQDEw02OGNhM2ViNy01OTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5QqsUhlSUyOJjk5JtEHyJuQr8ReWBDaz7T7RbGAcFDtmm07Aa7q/hTR9Vbf +qSfd04s9XhvK85iG7IhkgBP/QhgqG7iSHX+0Lv6xjGBcar59f/MCAdu9eVFqfqn lJ+ztWpYsf+hz7xOnZmHgHNbvdQbJipRp8QXsKt2mdZ3a6I8Z15+6PQU5N7vq240 KrrM8b0XNDhU7mL46rzPEUs8kEJNP3u/Fr9/TXEPl8JsdVbdhV/DoNfcuauf5wbt 54azpT55I7Nb33Ai0bIRiIQCvNtxanAFPj9RpMXpHbNBOFjo9KkCPybTLFTdvNy3 gseBT86oIPeHG2MPKi4k+wOJDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWERuiE vt+lmctUKvDuOBjBlIu+MB8GA1UdIwQYMBaAFPKbI+pOEUzcnKbTf173nvTDXHKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDM3Mi8yMEE1NEZDODlE ODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlROeWNwdE5fWHZlZTlNTmNj b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhwc2o2azRSVE55Y3B0Tl9YdmVlOU1OY2NvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDM3Mi8yMEE1NEZDODlEODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlRO eWNwdE5fWHZlZTlNTmNjb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxHnRjWen9EO5IqpX6AcUrDfEDXn2poGsu2x/9FwpaXCIqE9ZH1KdW 3P1ckgUPjBf2/gzJG1MBUCTrWpGzEOqfrFxfvG2SoW9HwsnlmbaL49KTmTIfM6MD XcaDdX8vAT6K1FSzLkovr8J7yCmOQx7/ZFdv2NNDjz3vTCcIVs1AVOvlyBE4s5Je TMQvZO7KIuRhM7aIe80Fx/U4Peg1MHsfYUPjBrTfJYcmYmajElycHvJKjbOF1vMZ yN/8JximAu7J0XSQxDYu0rQsR0KXzeviE0HVMdw2IVyiw5SG4gn/FG6+UmAPdiza xDuWawbIEh3EPImslKx1xqP+bS3Ec25H -----END CERTIFICATE-----Generated at Fri Sep 19 02:28:44 2025 by rpki-client