$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft File: P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json) Hash identifier: pCKN4YeTAPCFPLXEigYIuekHYH9TruWyXOIznErvXiI= Subject key identifier: EC:4A:EF:07:64:DF:2C:76:2B:1A:0A:F9:98:B8:6E:5D:6E:85:58:2D Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Certificate serial: 0C84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft Manifest number: 0C7B Signing time: Thu 18 Sep 2025 18:35:19 +0000 Manifest this update: Thu 18 Sep 2025 18:35:18 +0000 Manifest next update: Thu 25 Sep 2025 18:35:18 +0000 Files and hashes: 1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: 9rkpI/ZGTay2WLbSIq3qroQgg3qiSXQPPzGQPQnLgkM=) 2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: 78Vf6/fB7sknA1Wt2VtN9AZj7sBbXgPyMuxI8cL1zlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3204 (0xc84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Validity Not Before: Sep 18 18:35:18 2025 GMT Not After : Sep 25 18:35:18 2025 GMT Subject: CN=68cc50e7-07d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:9a:fc:3a:fa:c9:40:90:ad:9f:6c:c8:2f: 42:42:5d:e8:3f:5c:e8:bb:36:0b:ce:45:e5:90:62: 23:f1:ea:6f:56:80:e1:bf:76:2f:52:a4:14:3e:c0: d2:0b:8a:73:34:e3:a3:b7:a4:a7:43:b8:80:32:cc: f3:17:ed:d3:a0:33:8d:6f:6c:09:2f:dc:4c:b2:dd: e4:c5:59:0c:55:45:96:91:ac:da:eb:fd:2f:58:da: 84:67:48:f5:f4:66:4f:ec:8a:42:d4:9c:e2:a9:09: 1a:0a:78:36:d4:e4:ac:9e:89:d4:7a:60:48:13:56: 86:d4:94:0f:f6:c7:bc:d7:74:7b:f4:a4:03:f4:9c: dc:e0:57:4e:ff:ce:6c:5d:40:9d:59:14:a4:23:70: ff:cd:81:e4:b6:89:87:46:78:a1:44:0e:79:99:de: 47:c0:21:2d:3c:31:2e:30:b8:18:c0:93:77:c0:cd: cb:63:cb:59:bf:d0:86:78:fd:c7:13:01:63:38:fc: c0:d9:47:41:be:8d:f8:3c:bc:c3:fe:0c:de:77:2a: 5b:d3:5f:21:be:a1:1b:57:a6:a1:ed:9a:06:61:60: 5d:19:d8:d7:78:36:ec:68:b5:ee:29:88:0e:b2:f0: d1:2e:f0:98:ec:03:b5:04:00:9b:d5:e3:16:31:eb: d0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4A:EF:07:64:DF:2C:76:2B:1A:0A:F9:98:B8:6E:5D:6E:85:58:2D X509v3 Authority Key Identifier: keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b9:28:e0:97:62:cc:a9:e5:64:99:36:19:78:4c:73:59:13: 04:a5:3a:a4:70:68:74:59:91:61:dc:8c:92:5c:1d:60:42:87: 0b:21:bf:16:82:40:20:7c:29:b8:64:94:ac:b4:3f:d6:c1:ad: 35:fe:ce:16:49:fc:d8:35:40:5a:00:56:f0:78:b2:02:9a:4a: a6:27:27:90:fb:26:23:df:fa:e3:b9:16:cf:b2:45:d9:9e:86: b2:3e:4e:f5:09:84:0b:20:8a:c6:a1:da:cb:8d:42:b6:16:10: d8:68:78:64:a0:41:f4:11:4c:36:a8:ed:9a:9a:0b:82:ee:8b: 24:f5:d3:d8:41:3f:3f:bf:fd:87:1d:0b:fb:0f:97:2e:15:1c: 98:b6:99:47:65:c4:95:78:de:c9:bf:9a:94:3a:82:a7:cc:12: 7f:c7:11:2e:eb:33:c4:1b:c0:d4:0a:67:b8:ba:30:14:9c:6a: 4e:73:9c:d1:04:24:32:1b:1c:5f:b4:3e:61:41:7f:f3:50:00: 2f:b4:0e:65:df:e0:c3:b2:45:62:3e:ec:30:44:05:e9:01:af: 08:ef:4a:cc:5d:36:ce:69:fd:12:d2:76:4d:49:a9:6d:b3:5c: 75:df:8b:00:af:c4:ed:d9:cb:71:89:c8:05:ec:9a:b1:81:19: c3:15:45:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREOEUxMTAvBgNVBAUTKDNGN0Q5QkJBRUQ3QzVCRkRCQkEzQTM0OUFCRTk2QjIx QUQyN0RBNjcwHhcNMjUwOTE4MTgzNTE4WhcNMjUwOTI1MTgzNTE4WjAYMRYwFAYD VQQDEw02OGNjNTBlNy0wN2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl6a/Dr6yUCQrZ9syC9CQl3oP1zouzYLzkXlkGIj8epvVoDhv3YvUqQUPsDS C4pzNOOjt6SnQ7iAMszzF+3ToDONb2wJL9xMst3kxVkMVUWWkaza6/0vWNqEZ0j1 9GZP7IpC1JziqQkaCng21OSsnonUemBIE1aG1JQP9se813R79KQD9Jzc4FdO/85s XUCdWRSkI3D/zYHktomHRnihRA55md5HwCEtPDEuMLgYwJN3wM3LY8tZv9CGeP3H EwFjOPzA2UdBvo34PLzD/gzedypb018hvqEbV6ah7ZoGYWBdGdjXeDbsaLXuKYgO svDRLvCY7AO1BACb1eMWMevQbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxK7wdk 3yx2KxoK+Zi4bl1uhVgtMB8GA1UdIwQYMBaAFD99m7rtfFv9u6OjSavpayGtJ9pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQ4RS81ODlCOTMzQzA2 QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdfMjdvNk5KcS1scklhMG4y bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzMmJ1dTE4V18yN282TkpxLWxySWEwbjJtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQ4RS81ODlCOTMzQzA2QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdf MjdvNk5KcS1scklhMG4ybWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7uSjgl2LMqeVkmTYZeExzWRMEpTqkcGh0WZFh3IySXB1gQocLIb8W gkAgfCm4ZJSstD/Wwa01/s4WSfzYNUBaAFbweLICmkqmJyeQ+yYj3/rjuRbPskXZ noayPk71CYQLIIrGodrLjUK2FhDYaHhkoEH0EUw2qO2amguC7osk9dPYQT8/v/2H HQv7D5cuFRyYtplHZcSVeN7Jv5qUOoKnzBJ/xxEu6zPEG8DUCme4ujAUnGpOc5zR BCQyGxxftD5hQX/zUAAvtA5l3+DDskViPuwwRAXpAa8I70rMXTbOaf0S0nZNSalt s1x134sAr8Tt2ctxicgF7JqxgRnDFUWn -----END CERTIFICATE-----Generated at Fri Sep 19 19:27:03 2025 by rpki-client