$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: yTDlCYw0py3UYR7tMLXlKz+VX26qMmLehHhwux6YafY= Subject key identifier: 1D:2A:A7:9A:06:2D:67:E3:55:0D:1C:E9:F9:46:9E:88:A2:BA:A7:E6 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0CEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0CD8 Signing time: Wed 10 Sep 2025 18:18:31 +0000 Manifest this update: Wed 10 Sep 2025 18:18:31 +0000 Manifest next update: Wed 17 Sep 2025 18:18:31 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: +E2Q5B3Pdya5Rj4IpvAGMOSx8Z3vOrfxChxxOTJXeKs=) 2: 86B2C22287EF11F0BB972D77C4F9AE02.roa (hash: WwXl48vJNivZYV02F4DhTAdSziCXHjo0WT9hGEi74tE=) 3: 2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (hash: odtdAeT3uybzWOWQg7rEN3DZC1Lg8w9hAFA2d8d7ZGI=) 4: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: KypfxpsYSUZAZe6pLsx6D3j38tcpQYPu6XyVBPdIPY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 18:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3307 (0xceb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Sep 10 18:18:31 2025 GMT Not After : Sep 17 18:18:31 2025 GMT Subject: CN=68c1c0f7-78fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:ae:c3:0d:04:b6:a8:aa:05:90:8f:85:d1: 51:fd:02:c4:73:a9:26:fe:66:4c:c1:47:ad:13:a1: 5f:59:97:df:d4:ba:bf:a4:17:9a:23:6b:6b:35:00: e6:f6:96:3b:3d:91:c0:6c:3f:2e:67:25:f0:64:d0: 0d:9e:64:a5:bd:15:9d:33:07:1a:8f:c9:70:98:3e: e9:43:49:9c:be:c0:51:fd:56:82:9d:dd:5b:b4:ee: a3:c4:74:b7:dc:f8:81:9c:5a:76:29:9b:8c:cb:9a: ff:25:59:a8:35:a6:e2:45:8d:b9:a4:62:65:c1:26: ae:ed:5f:b4:2a:03:c9:6e:eb:a6:96:1d:5d:25:5e: 76:8c:37:79:3a:10:c2:b4:70:9d:5d:30:d5:55:ab: df:46:51:a7:27:ec:84:4a:17:43:8c:7c:f1:f3:91: c7:33:67:9b:d8:9e:43:75:f6:ce:8f:f7:e3:9e:66: ea:51:09:8c:70:6f:9a:ba:56:73:de:50:c3:8f:58: b6:86:66:57:91:7e:87:63:29:93:0a:4e:f4:02:c8: c4:c4:57:39:f4:45:59:65:93:38:cd:06:04:be:f0: 54:e5:4c:8d:4a:1f:67:13:8d:89:2e:14:ab:22:86: e8:92:d6:d7:3f:8d:09:8a:f8:09:02:f3:19:0c:20: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2A:A7:9A:06:2D:67:E3:55:0D:1C:E9:F9:46:9E:88:A2:BA:A7:E6 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a2:05:1f:ec:d3:59:e4:d3:f3:b9:3b:e4:e3:a8:ea:c7:6b: c3:07:56:90:07:a6:c6:1d:80:41:87:95:41:a7:c1:e5:3d:0d: 4b:16:40:07:a7:90:71:9f:8c:f3:1d:fe:fe:e7:3f:19:72:57: a4:34:d2:d7:9f:3d:98:e3:5d:35:21:b7:4d:8d:15:ca:8a:58: 68:a7:fb:4d:84:f2:0d:25:f7:2e:34:bc:ec:e1:91:a9:cf:0c: 8d:ed:d8:31:b3:09:3e:d7:3f:1f:b1:2a:e3:f4:e3:59:d7:58: 49:b1:29:80:71:78:48:35:ad:f5:69:1a:c3:72:00:79:25:78: db:e1:8e:c2:b6:02:f5:ef:35:66:65:3e:c2:03:d9:83:76:db: 41:f2:65:d4:ee:63:0b:5c:ab:66:bb:27:41:90:ed:71:f5:d2: 50:dc:a7:40:0c:31:10:18:12:e9:48:ab:04:8d:1d:f9:8b:22: bf:9c:d2:76:8d:7d:83:b4:51:7c:86:ab:84:ac:5a:a1:54:3c: 13:8c:c2:79:11:87:53:b4:9d:e0:09:b8:8c:5a:c9:b5:e4:44: 07:1e:cd:98:d1:c9:67:73:31:2e:e2:20:70:cb:b7:53:a4:ec: a3:be:ff:44:a7:e1:0d:cf:22:4c:5c:26:37:3f:1e:13:92:44: 54:95:6b:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUwOTEwMTgxODMxWhcNMjUwOTE3MTgxODMxWjAYMRYwFAYD VQQDEw02OGMxYzBmNy03OGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPKuww0EtqiqBZCPhdFR/QLEc6km/mZMwUetE6FfWZff1Lq/pBeaI2trNQDm 9pY7PZHAbD8uZyXwZNANnmSlvRWdMwcaj8lwmD7pQ0mcvsBR/VaCnd1btO6jxHS3 3PiBnFp2KZuMy5r/JVmoNabiRY25pGJlwSau7V+0KgPJbuumlh1dJV52jDd5OhDC tHCdXTDVVavfRlGnJ+yEShdDjHzx85HHM2eb2J5DdfbOj/fjnmbqUQmMcG+aulZz 3lDDj1i2hmZXkX6HYymTCk70AsjExFc59EVZZZM4zQYEvvBU5UyNSh9nE42JLhSr IoboktbXP40JivgJAvMZDCDl1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0qp5oG LWfjVQ0c6flGnoiiuqfmMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKogUf7NNZ5NPzuTvk46jqx2vDB1aQB6bGHYBBh5VBp8HlPQ1LFkAH p5Bxn4zzHf7+5z8ZclekNNLXnz2Y4101IbdNjRXKilhop/tNhPINJfcuNLzs4ZGp zwyN7dgxswk+1z8fsSrj9ONZ11hJsSmAcXhINa31aRrDcgB5JXjb4Y7CtgL17zVm ZT7CA9mDdttB8mXU7mMLXKtmuydBkO1x9dJQ3KdADDEQGBLpSKsEjR35iyK/nNJ2 jX2DtFF8hquErFqhVDwTjMJ5EYdTtJ3gCbiMWsm15EQHHs2Y0clnczEu4iBwy7dT pOyjvv9Ep+ENzyJMXCY3Px4TkkRUlWtW -----END CERTIFICATE-----Generated at Thu Sep 11 20:41:33 2025 by rpki-client