$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft File: dgeNNhm3wq-92jOrU2PuX-16hg0.mft (raw, json) Hash identifier: 7Rrc3pXou34DITdpAVTHEAhPUEVq3Q3nZzld29ptTTo= Subject key identifier: F0:A7:F9:4D:20:BA:68:90:22:75:BD:B0:9D:2C:6D:AE:D2:AB:2F:CB Authority key identifier: 76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D Certificate issuer: /CN=A91C5E1C/serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft Manifest number: 0B Signing time: Fri 19 Sep 2025 08:49:52 +0000 Manifest this update: Fri 19 Sep 2025 08:49:51 +0000 Manifest next update: Fri 26 Sep 2025 08:49:51 +0000 Files and hashes: 1: dgeNNhm3wq-92jOrU2PuX-16hg0.crl (hash: GjLdP1rRoWIKoZq74gTjWDZHJlKj3SLB1ev/dVptUpQ=) 2: 2A3F7C6A879F11F09F9FAD48C4F9AE02.roa (hash: Axxx6+J8twN5fIfKmfOOFMg3aNjqRhz53eFIdguiEt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 08:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5E1C, serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D Validity Not Before: Sep 19 08:49:51 2025 GMT Not After : Sep 26 08:49:51 2025 GMT Subject: CN=68cd1930-61dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:b9:2b:f6:c5:18:77:ac:ba:99:5f:bf:ae: 49:1b:04:10:3e:5d:20:cb:9a:f8:f2:b6:51:6a:1c: e6:e6:2a:fb:89:f5:a3:fc:b7:0e:f6:9f:f5:52:f5: 3d:c1:0a:d7:69:d7:2a:dd:05:3b:d9:44:c7:6b:be: 25:ee:26:fd:4b:d9:90:d8:ff:26:33:c8:9a:92:ec: 90:a0:40:5d:57:66:6f:3a:e6:07:0b:94:d4:b6:81: 9f:ac:cd:57:83:9c:8a:14:13:ca:b7:ca:61:43:78: 58:55:5e:9b:79:88:2e:bd:f4:f5:d7:87:6b:df:b2: 7a:44:d6:f4:b9:2e:0e:c0:67:08:ca:68:4c:02:d7: 63:8e:9b:de:b1:57:22:21:3b:e3:2a:6c:5c:e1:a0: 81:4a:b3:ef:0f:ac:4c:1e:bf:1d:ec:c7:72:82:d5: 81:9c:ee:e4:8a:75:fb:b9:c2:a6:82:38:c2:b1:b0: 0b:ee:58:ec:30:18:3c:e0:95:78:c8:1d:83:8c:d8: 2e:3f:83:88:ca:2e:90:c5:db:2d:e3:c0:cd:82:f7: c2:78:f2:ea:49:c2:f0:55:56:07:35:f8:11:ef:f1: ed:92:b0:62:6f:22:6c:68:ce:af:44:9e:06:13:ad: 5f:7f:55:1c:3b:78:0d:a5:01:3a:3b:24:5e:79:19: 47:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A7:F9:4D:20:BA:68:90:22:75:BD:B0:9D:2C:6D:AE:D2:AB:2F:CB X509v3 Authority Key Identifier: keyid:76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:1b:7e:1a:6d:1f:8e:f9:81:9e:b0:aa:e2:99:00:98:54:35: 7e:2e:15:2b:71:da:3b:75:22:41:fd:78:1f:a1:b9:08:8a:1e: 98:2b:79:11:dc:2d:ab:bb:c1:23:eb:14:75:6a:e9:d4:d9:a9: 73:59:f4:0b:cc:73:bd:55:17:a8:97:b4:68:50:b4:88:d5:e4: 57:8f:47:83:47:d7:2f:eb:60:39:0e:64:20:de:fd:45:8f:18: 2f:f8:c5:2d:9e:1a:98:36:63:48:91:85:74:ea:1f:6f:ea:f0: 10:23:9b:ea:cb:65:a7:e2:5b:4d:7a:33:78:4f:bf:c6:70:06: 81:a3:db:df:6b:99:ea:9b:21:3e:0c:67:9c:6e:f2:aa:44:1f: 33:99:92:e1:e8:90:86:be:d6:9d:60:a5:58:29:0e:87:5c:ad: 4e:30:b7:57:af:61:1d:9c:dc:b4:95:b3:39:2b:5d:7e:34:3c: 42:6b:be:d9:18:83:79:ca:c2:d3:91:69:be:4b:c2:b1:9a:1e: d9:00:97:96:75:97:c2:bd:8d:c9:29:f3:fb:ca:af:66:52:c4: 46:0c:85:05:61:dc:89:b0:35:db:64:12:35:fe:63:83:ee:94: df:53:a4:30:ab:ae:00:d9:2c:1f:ef:f3:fd:56:8c:ff:9b:97: af:30:48:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUUxQzExMC8GA1UEBRMoNzYwNzhEMzYxOUI3QzJBRkJEREEzM0FCNTM2M0VFNUZF RDdBODYwRDAeFw0yNTA5MTkwODQ5NTFaFw0yNTA5MjYwODQ5NTFaMBgxFjAUBgNV BAMTDTY4Y2QxOTMwLTYxZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA0bkr9sUYd6y6mV+/rkkbBBA+XSDLmvjytlFqHObmKvuJ9aP8tw72n/VS9T3B Ctdp1yrdBTvZRMdrviXuJv1L2ZDY/yYzyJqS7JCgQF1XZm865gcLlNS2gZ+szVeD nIoUE8q3ymFDeFhVXpt5iC699PXXh2vfsnpE1vS5Lg7AZwjKaEwC12OOm96xVyIh O+MqbFzhoIFKs+8PrEwevx3sx3KC1YGc7uSKdfu5wqaCOMKxsAvuWOwwGDzglXjI HYOM2C4/g4jKLpDF2y3jwM2C98J48upJwvBVVgc1+BHv8e2SsGJvImxozq9EngYT rV9/VRw7eA2lATo7JF55GUfzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8Kf5TSC6 aJAidb2wnSxtrtKrL8swHwYDVR0jBBgwFoAUdgeNNhm3wq+92jOrU2PuX+16hg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1RTFDLzY0NzU4OTNBODc5 MzExRjBCNTc4NjM0NkM0RjlBRTAyL2RnZU5OaG0zd3EtOTJqT3JVMlB1WC0xNmhn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGdlTk5obTN3cS05MmpPclUyUHVYLTE2aGcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 RTFDLzY0NzU4OTNBODc5MzExRjBCNTc4NjM0NkM0RjlBRTAyL2RnZU5OaG0zd3Et OTJqT3JVMlB1WC0xNmhnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACEbfhptH475gZ6wquKZAJhUNX4uFStx2jt1IkH9eB+huQiKHpgreRHc Lau7wSPrFHVq6dTZqXNZ9AvMc71VF6iXtGhQtIjV5FePR4NH1y/rYDkOZCDe/UWP GC/4xS2eGpg2Y0iRhXTqH2/q8BAjm+rLZafiW016M3hPv8ZwBoGj299rmeqbIT4M Z5xu8qpEHzOZkuHokIa+1p1gpVgpDodcrU4wt1evYR2c3LSVszkrXX40PEJrvtkY g3nKwtORab5LwrGaHtkAl5Z1l8K9jckp8/vKr2ZSxEYMhQVh3ImwNdtkEjX+Y4Pu lN9TpDCrrgDZLB/v8/1WjP+bl68wSL4= -----END CERTIFICATE-----Generated at Fri Sep 19 16:57:56 2025 by rpki-client