$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: MZECMrvFMXyPGD3mYYoFj3hdstETHnufK1G/9yRKdlA= Subject key identifier: DB:E3:97:E9:2C:27:F7:32:41:DD:76:3D:DD:BC:54:C9:55:FC:BE:39 Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 34ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 34D6 Signing time: Sat 06 Sep 2025 14:16:14 +0000 Manifest this update: Sat 06 Sep 2025 14:16:14 +0000 Manifest next update: Sat 13 Sep 2025 14:16:14 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: QbA1XEca2/wbcQX0+eaFzf541ej/1BKBtTse6Aus0wQ=) 2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: zbmIG6CT7ypIn3HcTtsDFC7ihfXsVyZlUb242ctePDw=) 3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: V6xVQh9iUu5NDnwtI8z/zA2tAozAKTEZViih6UdSdQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13549 (0x34ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: Sep 6 14:16:14 2025 GMT Not After : Sep 13 14:16:14 2025 GMT Subject: CN=68bc422e-bf15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:60:a6:c2:59:b9:9a:e7:d3:c6:cc:57:99: 87:ac:d8:53:24:d3:ec:3f:f0:88:bc:cc:b1:a0:17: 43:84:92:89:8f:2d:c3:49:b7:fc:69:64:df:eb:16: de:86:24:63:54:54:a6:3c:e7:6c:a8:17:a5:e1:3c: 0e:c8:02:4d:77:27:5e:ad:ac:a5:66:c3:75:f9:41: c2:cb:24:17:59:a9:f1:3f:b1:e1:9b:ed:20:8b:ac: 49:fa:6a:76:dd:c1:47:55:72:a9:d4:43:79:b9:d5: ec:30:f0:91:26:cd:a5:a6:35:cd:4e:34:2f:5f:05: 20:a5:e5:1b:52:5d:60:52:bb:2f:4d:fa:ec:7e:9b: 4c:26:bd:59:c6:c0:35:0e:15:f4:34:01:22:55:ef: 92:e2:63:62:d2:a5:b9:7c:33:1d:fd:59:13:f7:fc: 37:48:66:b2:fd:ad:d1:a5:7d:ab:cb:13:e3:aa:4c: f2:b7:23:ef:ec:cc:bf:ab:a2:6c:7c:f3:80:61:b2: 85:11:7a:48:eb:7f:c1:0a:b4:aa:6f:b9:ff:61:72: c6:5f:73:f0:a6:8a:7c:c8:5c:95:bd:71:0a:5d:7e: 35:64:a4:e3:0f:31:60:90:6d:94:6a:91:dc:be:1a: 24:e3:ff:35:28:0b:35:c6:c9:68:86:8e:bc:46:df: 80:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E3:97:E9:2C:27:F7:32:41:DD:76:3D:DD:BC:54:C9:55:FC:BE:39 X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:c1:03:70:ae:d9:22:d0:8d:81:c4:ef:70:3c:8f:0e:7e:9c: 4b:92:f5:03:49:c1:0a:1e:4e:d1:8c:53:a6:3d:e7:61:7d:67: c6:df:fb:5a:e6:cd:a7:8b:46:21:4b:5e:77:81:7b:dd:f2:9b: 7d:52:a3:02:62:c1:7d:f8:9e:2c:d7:33:2a:90:cf:1a:a0:54: fb:5c:f7:98:55:1f:94:6b:82:d0:b7:ec:83:09:fc:30:e1:ef: 42:b5:52:3e:e9:4d:75:02:3d:b8:fd:b7:3f:8c:f5:cf:40:aa: 4a:c3:17:39:5e:15:54:b9:8f:5d:85:7a:af:52:26:0f:eb:3d: b6:17:59:ff:0f:f4:c4:a7:cf:d0:48:df:d6:62:cb:5a:51:89: 03:1c:82:da:c2:c6:2c:19:c6:f0:f5:40:de:50:38:59:fc:4a: 5e:23:4c:ed:01:03:8c:56:22:72:b6:b7:28:a9:7a:a1:5d:bb: 4e:03:32:8c:f3:27:c4:ef:81:c3:3f:90:7c:07:d5:56:92:4c: ef:5e:b2:da:52:b4:11:7d:63:1f:4b:f9:a5:bf:64:ab:2c:16: 50:f1:c2:c7:e4:35:f7:d7:dd:bc:32:76:c7:ee:94:ae:6c:b4: c8:0a:9a:94:a2:e7:76:26:0d:dd:7c:08:d3:65:4c:8a:3e:21: 95:cf:79:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjUwOTA2MTQxNjE0WhcNMjUwOTEzMTQxNjE0WjAYMRYwFAYD VQQDEw02OGJjNDIyZS1iZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwlgpsJZuZrn08bMV5mHrNhTJNPsP/CIvMyxoBdDhJKJjy3DSbf8aWTf6xbe hiRjVFSmPOdsqBel4TwOyAJNdyderaylZsN1+UHCyyQXWanxP7Hhm+0gi6xJ+mp2 3cFHVXKp1EN5udXsMPCRJs2lpjXNTjQvXwUgpeUbUl1gUrsvTfrsfptMJr1ZxsA1 DhX0NAEiVe+S4mNi0qW5fDMd/VkT9/w3SGay/a3RpX2ryxPjqkzytyPv7My/q6Js fPOAYbKFEXpI63/BCrSqb7n/YXLGX3Pwpop8yFyVvXEKXX41ZKTjDzFgkG2UapHc vhok4/81KAs1xsloho68Rt+APwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvjl+ks J/cyQd12Pd28VMlV/L45MB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqwQNwrtki0I2BxO9wPI8OfpxLkvUDScEKHk7RjFOmPedhfWfG3/ta 5s2ni0YhS153gXvd8pt9UqMCYsF9+J4s1zMqkM8aoFT7XPeYVR+Ua4LQt+yDCfww 4e9CtVI+6U11Aj24/bc/jPXPQKpKwxc5XhVUuY9dhXqvUiYP6z22F1n/D/TEp8/Q SN/WYstaUYkDHILawsYsGcbw9UDeUDhZ/EpeI0ztAQOMViJytrcoqXqhXbtOAzKM 8yfE74HDP5B8B9VWkkzvXrLaUrQRfWMfS/mlv2SrLBZQ8cLH5DX31928MnbH7pSu bLTICpqUoud2Jg3dfAjTZUyKPiGVz3nX -----END CERTIFICATE-----Generated at Sat Sep 6 16:59:54 2025 by rpki-client