$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json) Hash identifier: d3NThEqzrFMKiUd0n6WWWYzUTtfeUOpmJZ+plIx6WfA= Subject key identifier: 53:46:92:4F:FF:80:28:05:4B:8E:94:9F:D1:D8:B2:8F:67:9D:FA:20 Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft Manifest number: 41 Signing time: Wed 17 Sep 2025 08:10:39 +0000 Manifest this update: Wed 17 Sep 2025 08:10:38 +0000 Manifest next update: Wed 24 Sep 2025 08:10:38 +0000 Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: Hu0IWiGqYPJ5OO3CKybB7MZgBfMPwWwJZW0IM31MaLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Validity Not Before: Sep 17 08:10:38 2025 GMT Not After : Sep 24 08:10:38 2025 GMT Subject: CN=68ca6cfe-a80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:90:5f:7c:b6:53:91:83:5a:d5:6f:bb:0e:34: 73:8c:4a:72:51:88:f1:b5:09:20:7c:f6:d9:6f:b0: 14:ec:d8:45:cd:7f:a2:7b:af:c1:63:86:37:d2:11: 65:ea:51:f1:e5:93:f1:9c:89:31:0d:31:8f:49:a4: 65:e3:7f:6b:85:e2:0f:e3:53:35:a9:71:d7:aa:5c: 47:cc:51:36:f9:bb:ce:c6:c2:f5:c1:95:fb:98:5e: f0:a6:15:53:f4:c9:2c:de:5b:d1:82:83:71:b1:3c: 4b:e4:ab:44:2a:61:60:6e:fa:98:0d:e5:44:32:ed: 6a:89:17:0a:18:21:d0:d4:16:c6:23:42:ea:43:93: 5c:f2:4b:4a:c8:f4:a0:2e:aa:82:67:29:55:04:b7: aa:96:ee:30:cb:57:32:4e:a3:3c:eb:c9:8c:86:21: 3d:19:26:34:78:84:b1:8e:03:35:7a:2c:51:a3:ab: 95:3e:37:39:a3:bf:74:b2:88:6d:20:17:62:e2:23: 85:c6:ed:f7:8c:d0:ec:e7:fb:ad:a4:a2:dd:cd:69: 02:f4:a3:e2:6a:e9:e5:c7:46:69:ff:31:e8:6c:47: bf:f2:53:9f:a0:89:41:cd:84:69:bb:38:75:ce:f4: d6:c0:d2:3d:73:5c:0c:aa:3f:c0:80:b4:8d:1b:60: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:46:92:4F:FF:80:28:05:4B:8E:94:9F:D1:D8:B2:8F:67:9D:FA:20 X509v3 Authority Key Identifier: keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d0:4e:82:1d:40:8e:17:e1:b7:3c:dd:d4:51:2f:cf:4c:36: 89:92:b3:41:a0:6f:ad:13:9b:6f:15:86:f9:68:11:bb:8a:fa: f4:5c:6c:20:6f:8c:5b:3f:aa:b8:31:d3:1a:28:d9:8f:ac:a6: 81:e1:99:2e:93:eb:52:62:4a:6f:1c:fe:3b:9e:9e:3b:92:45: 1d:09:67:90:d2:71:f4:5c:ac:15:2d:f3:19:0d:28:c9:eb:4e: 54:46:45:1a:27:e6:2d:21:0c:96:0a:b9:bc:01:ad:5c:50:5b: 90:5a:5c:63:3c:e5:98:8b:5e:2a:25:5c:ff:62:ec:b5:37:19: f8:d9:d3:a3:69:2c:6f:6b:96:ca:1c:7b:8f:f6:5a:10:0b:3b: 13:b9:62:18:67:0c:4b:72:86:e8:fb:ae:97:47:2a:f1:3a:c7: 2f:97:01:fc:92:be:98:73:36:13:d8:fd:88:0c:85:65:c5:de: 31:5f:97:97:aa:76:98:05:5c:5e:3b:cd:8a:28:5a:a0:96:35: d2:05:2e:a4:98:b4:cd:0c:b3:ca:ac:2a:3e:e6:74:f4:56:33: 58:4f:ec:9a:9d:88:ad:e6:bc:67:17:a6:e1:18:c9:67:85:0e: 9e:4e:39:ae:d4:d5:b5:79:24:4a:d1:05:0d:81:dd:c0:2c:5c: d2:ca:17:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDIwNDExMC8GA1UEBRMoRkFDNDU1NUZCRTMxQTM4MDk2OTBFRTE4Nzg1RDdBQkJF MkE3MjdBMzAeFw0yNTA5MTcwODEwMzhaFw0yNTA5MjQwODEwMzhaMBgxFjAUBgNV BAMTDTY4Y2E2Y2ZlLWE4MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJkF98tlORg1rVb7sONHOMSnJRiPG1CSB89tlvsBTs2EXNf6J7r8FjhjfSEWXq UfHlk/GciTENMY9JpGXjf2uF4g/jUzWpcdeqXEfMUTb5u87GwvXBlfuYXvCmFVP0 ySzeW9GCg3GxPEvkq0QqYWBu+pgN5UQy7WqJFwoYIdDUFsYjQupDk1zyS0rI9KAu qoJnKVUEt6qW7jDLVzJOozzryYyGIT0ZJjR4hLGOAzV6LFGjq5U+Nzmjv3SyiG0g F2LiI4XG7feM0Ozn+62kot3NaQL0o+Jq6eXHRmn/MehsR7/yU5+giUHNhGm7OHXO 9NbA0j1zXAyqP8CAtI0bYNitAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU0aST/+A KAVLjpSf0diyj2ed+iAwHwYDVR0jBBgwFoAU+sRVX74xo4CWkO4YeF16u+KnJ6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MjA0LzRDNUQyRURFMzAw OTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRDV2tPNFllRjE2dS1Lbko2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXNSVlg3NHhvNENXa080WWVGMTZ1LUtuSjZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MjA0LzRDNUQyRURFMzAwOTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRD V2tPNFllRjE2dS1Lbko2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE7QToIdQI4X4bc83dRRL89MNomSs0Ggb60Tm28VhvloEbuK+vRcbCBv jFs/qrgx0xoo2Y+spoHhmS6T61JiSm8c/juenjuSRR0JZ5DScfRcrBUt8xkNKMnr TlRGRRon5i0hDJYKubwBrVxQW5BaXGM85ZiLXiolXP9i7LU3GfjZ06NpLG9rlsoc e4/2WhALOxO5YhhnDEtyhuj7rpdHKvE6xy+XAfySvphzNhPY/YgMhWXF3jFfl5eq dpgFXF47zYooWqCWNdIFLqSYtM0Ms8qsKj7mdPRWM1hP7JqdiK3mvGcXpuEYyWeF Dp5OOa7U1bV5JErRBQ2B3cAsXNLKF1s= -----END CERTIFICATE-----Generated at Fri Sep 19 02:34:37 2025 by rpki-client