$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft File: 45Npup3YgJmHsja0d6144Vx1qxw.mft (raw, json) Hash identifier: 70fLsr7Pbwmk4PjLZ9RecUrrToPHv6ZAy/E2jq54R8E= Subject key identifier: 31:62:5E:50:04:A3:9B:DF:05:6F:5E:5B:C3:6F:5B:24:D1:D4:0D:45 Authority key identifier: E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C Certificate issuer: /CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft Manifest number: 0255 Signing time: Wed 17 Sep 2025 02:20:17 +0000 Manifest this update: Wed 17 Sep 2025 02:20:16 +0000 Manifest next update: Wed 24 Sep 2025 02:20:16 +0000 Files and hashes: 1: 45Npup3YgJmHsja0d6144Vx1qxw.crl (hash: ET+BVLbgERc6tpLb4dIrVIyNMKOk3yPLXkUiauMF6uE=) 2: 3728DA229A8611EFA824F73BC4F9AE02.roa (hash: s/TAy9epcEKTC12lHA/WIlwW4b4QaIyA/jvIAJ5W4eQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C73, serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C Validity Not Before: Sep 17 02:20:16 2025 GMT Not After : Sep 24 02:20:16 2025 GMT Subject: CN=68ca1ae1-e385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f6:15:7f:50:e3:3f:74:63:cb:3f:d4:54:80: 4b:eb:c6:81:6f:ef:7f:0d:2a:ff:b7:f6:7a:04:3f: aa:64:c5:01:ca:f6:c3:3c:ef:a3:cf:d4:59:fc:f0: 0f:00:b0:f3:b1:9b:f1:aa:7e:2d:3a:23:21:a6:82: a5:bf:b2:2e:09:1b:39:38:f5:5d:ee:e2:9c:33:71: 73:35:e7:0c:1e:98:fb:55:62:9e:2d:d2:df:8f:9f: 4d:94:5c:d1:6a:58:5e:6d:86:4c:d9:f8:88:a0:bf: 27:2a:6a:57:69:34:cc:67:1f:68:cb:15:8f:98:f1: 3c:ac:c0:aa:12:fa:94:27:56:c7:1b:cb:e8:5f:b3: 3f:44:8f:07:59:f8:a9:4f:c7:49:d2:14:f4:3e:5d: b9:92:e1:ec:56:d8:68:ee:88:bc:95:cd:68:3d:48: 69:83:7a:b9:d9:f0:08:7d:0c:74:bc:13:f6:20:b7: 15:14:07:f2:24:ff:7d:7e:91:81:76:d4:b0:66:11: 11:fd:e2:ca:43:f0:e5:bc:0a:7f:f5:7a:09:24:a0: 0a:88:50:49:a5:3f:1d:da:34:98:cd:2f:10:68:70: 06:d3:c5:45:38:60:b8:78:c8:87:d8:75:89:b9:de: d4:8b:3d:c9:f7:28:54:f8:4a:f7:e7:f0:9e:54:76: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:62:5E:50:04:A3:9B:DF:05:6F:5E:5B:C3:6F:5B:24:D1:D4:0D:45 X509v3 Authority Key Identifier: keyid:E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:29:d9:1e:ec:5a:75:6b:30:ca:ea:5e:ca:85:a8:ba:a7:8e: 29:93:4b:bd:e2:a6:c8:73:5a:ae:87:15:7b:08:40:db:71:a0: ee:e7:ee:4b:43:96:8c:84:3c:3c:cc:a2:7a:ce:04:4c:1a:e1: 67:bd:67:76:32:fb:af:16:a2:c0:51:63:74:98:77:7b:2d:aa: fb:12:ac:21:b8:d6:52:99:c8:83:89:10:9f:e6:d6:b9:10:b0: b1:3d:5b:19:0d:35:d6:05:05:03:d3:36:17:be:59:f8:75:58: 73:41:8f:40:f3:4c:f5:fa:5c:6e:28:e3:ea:0b:ad:60:46:cc: 95:fd:5a:04:af:5d:81:ab:d1:31:3c:f0:17:ef:4f:ae:80:ec: a0:be:79:7b:a2:37:64:11:53:1f:59:05:9b:94:53:46:91:f0: 94:a9:6e:1b:c2:ec:89:ed:e2:90:30:c7:c3:60:25:b8:3d:f1: 13:3e:37:09:24:0b:20:0f:8b:37:f7:05:00:34:2d:e1:e0:10: 3e:a4:9a:c7:80:ff:5d:1d:b1:82:d2:4c:cd:91:4d:46:db:ed: e3:d4:90:1a:37:f3:b8:3a:15:3f:f5:9d:d7:ce:06:ab:81:7f: 09:34:d9:5c:60:28:a4:ff:52:8d:b2:89:e1:f2:51:a3:6d:1b: da:2d:6e:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDNzMxMTAvBgNVBAUTKEUzOTM2OUJBOUREODgwOTk4N0IyMzZCNDc3QUQ3OEUx NUM3NUFCMUMwHhcNMjUwOTE3MDIyMDE2WhcNMjUwOTI0MDIyMDE2WjAYMRYwFAYD VQQDEw02OGNhMWFlMS1lMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/YVf1DjP3Rjyz/UVIBL68aBb+9/DSr/t/Z6BD+qZMUByvbDPO+jz9RZ/PAP ALDzsZvxqn4tOiMhpoKlv7IuCRs5OPVd7uKcM3FzNecMHpj7VWKeLdLfj59NlFzR alhebYZM2fiIoL8nKmpXaTTMZx9oyxWPmPE8rMCqEvqUJ1bHG8voX7M/RI8HWfip T8dJ0hT0Pl25kuHsVtho7oi8lc1oPUhpg3q52fAIfQx0vBP2ILcVFAfyJP99fpGB dtSwZhER/eLKQ/DlvAp/9XoJJKAKiFBJpT8d2jSYzS8QaHAG08VFOGC4eMiH2HWJ ud7Uiz3J9yhU+Er35/CeVHbX+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFiXlAE o5vfBW9eW8NvWyTR1A1FMB8GA1UdIwQYMBaAFOOTabqd2ICZh7I2tHeteOFcdasc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM3My8yMTVFNUQzQTM2 NUExMUVEQUQxMEJBN0FDNEY5QUUwMi80NU5wdXAzWWdKbUhzamEwZDYxNDRWeDFx eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1TnB1cDNZZ0ptSHNqYTBkNjE0NFZ4MXF4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM3My8yMTVFNUQzQTM2NUExMUVEQUQxMEJBN0FDNEY5QUUwMi80NU5wdXAzWWdK bUhzamEwZDYxNDRWeDFxeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvKdke7Fp1azDK6l7Khai6p44pk0u94qbIc1quhxV7CEDbcaDu5+5L Q5aMhDw8zKJ6zgRMGuFnvWd2MvuvFqLAUWN0mHd7Lar7EqwhuNZSmciDiRCf5ta5 ELCxPVsZDTXWBQUD0zYXvln4dVhzQY9A80z1+lxuKOPqC61gRsyV/VoEr12Bq9Ex PPAX70+ugOygvnl7ojdkEVMfWQWblFNGkfCUqW4bwuyJ7eKQMMfDYCW4PfETPjcJ JAsgD4s39wUANC3h4BA+pJrHgP9dHbGC0kzNkU1G2+3j1JAaN/O4OhU/9Z3Xzgar gX8JNNlcYCik/1KNsonh8lGjbRvaLW4p -----END CERTIFICATE-----Generated at Thu Sep 18 19:12:45 2025 by rpki-client