$ rpki-client -vvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft File: McvtHUoCFwgxgH13RKxKr_JqBuY.mft (raw, json) Hash identifier: wImL55vm0UV9qdpGl0N9fJaTfepZi8YNg63RNB28VPA= Subject key identifier: E9:04:2E:7D:70:0F:8E:D0:47:5F:41:2E:45:39:C8:90:64:C7:1F:3B Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6 Certificate issuer: /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft Manifest number: 016D Signing time: Tue 09 Sep 2025 03:57:13 +0000 Manifest this update: Tue 09 Sep 2025 03:57:13 +0000 Manifest next update: Tue 16 Sep 2025 03:57:13 +0000 Files and hashes: 1: McvtHUoCFwgxgH13RKxKr_JqBuY.crl (hash: UgSxrdwWed2QZIcoIz7Kisjzobbusa+I1BAgH6Y9uvA=) 2: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (hash: 2icqnjOM7NhkNWNRK/vV/u0TPESMuw0eja9A3sbJDHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C607C, serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6 Validity Not Before: Sep 9 03:57:13 2025 GMT Not After : Sep 16 03:57:13 2025 GMT Subject: CN=68bfa599-1a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:61:f7:75:52:60:03:64:80:5d:e1:2a:0c: 91:ed:56:b4:1a:35:15:c6:d8:60:8a:71:fb:38:f8: e0:9f:28:d2:1c:a8:72:5f:2f:65:6d:cc:71:22:70: e1:52:ba:04:b2:b0:06:00:95:9f:69:4d:60:f5:61: 62:b4:a3:7b:53:70:b7:49:97:a9:0f:17:b8:44:20: a6:3c:52:99:63:78:5d:1f:03:56:75:bf:47:e1:24: 6f:e9:37:29:5a:5e:76:4d:c6:16:6b:dc:1d:a1:39: 7b:b3:d0:91:43:ac:eb:00:a0:97:af:aa:9f:79:84: dd:08:40:d3:8c:a4:1a:22:a2:37:10:63:b5:c2:ea: 6f:af:62:b3:34:50:42:0c:a9:79:de:f7:f6:da:0a: 85:70:2f:cc:ba:7b:31:2a:dd:86:c6:ae:24:bb:27: 9c:06:04:cb:ed:b7:c2:f1:31:52:da:ff:85:d5:0c: 29:6b:af:b2:bd:8f:a7:1e:69:aa:15:b6:2a:3f:da: 6e:1b:ea:c4:52:85:b7:7b:20:83:21:db:25:0a:55: 38:e8:35:33:8b:41:74:22:c2:dc:f4:05:ec:d2:e8: 52:df:db:04:27:36:cc:ec:03:b9:cf:17:56:d6:e6: 1a:1a:f9:b4:55:60:6d:91:e1:04:ec:2f:47:f7:20: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:04:2E:7D:70:0F:8E:D0:47:5F:41:2E:45:39:C8:90:64:C7:1F:3B X509v3 Authority Key Identifier: keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:e6:10:d8:b3:f4:8f:bd:ea:34:f4:8b:2e:29:eb:b0:bf:4d: 79:83:57:d0:28:2c:33:47:5b:5e:2a:a3:3b:98:fb:dc:d1:a5: 63:ca:89:79:0d:dc:ce:dd:a2:d7:98:01:03:af:ee:ae:86:df: d5:b2:38:e0:7b:c5:c1:6b:ae:d5:d1:a6:0d:f2:8e:9b:18:4e: 84:ea:3d:12:93:26:bf:98:cc:d5:2b:08:98:20:49:d3:d8:9d: 3e:4e:f6:8d:54:8b:63:cb:58:87:2d:bb:06:3f:71:0b:be:3c: 34:72:c1:46:45:c2:b2:d6:a2:3c:24:90:3c:81:da:e6:98:b0: 0b:ba:71:60:f0:9e:a5:99:76:69:fa:3f:dd:b8:a8:50:30:01: a8:ae:55:12:49:f5:79:f0:72:26:a1:d5:e1:de:46:a6:60:7e: 91:6e:01:6c:ba:b0:a3:27:10:ad:98:59:a4:fd:28:38:44:4f: 2d:c7:18:de:a2:27:b5:7d:22:b8:0c:34:da:9d:55:57:6a:2d: c2:ee:c4:83:0a:9c:67:32:00:9c:74:66:b3:94:89:c2:18:4e: 34:46:e3:2c:15:42:30:09:fc:93:2e:47:cd:1d:50:1f:59:02: b8:2f:7d:70:af:96:c3:e7:7b:2d:e9:c3:ba:81:3b:29:ea:f1: 9b:7d:be:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwN0MxMTAvBgNVBAUTKDMxQ0JFRDFENEEwMjE3MDgzMTgwN0Q3NzQ0QUM0QUFG RjI2QTA2RTYwHhcNMjUwOTA5MDM1NzEzWhcNMjUwOTE2MDM1NzEzWjAYMRYwFAYD VQQDEw02OGJmYTU5OS0xYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAni1h93VSYANkgF3hKgyR7Va0GjUVxthginH7OPjgnyjSHKhyXy9lbcxxInDh UroEsrAGAJWfaU1g9WFitKN7U3C3SZepDxe4RCCmPFKZY3hdHwNWdb9H4SRv6Tcp Wl52TcYWa9wdoTl7s9CRQ6zrAKCXr6qfeYTdCEDTjKQaIqI3EGO1wupvr2KzNFBC DKl53vf22gqFcC/MunsxKt2Gxq4kuyecBgTL7bfC8TFS2v+F1Qwpa6+yvY+nHmmq FbYqP9puG+rEUoW3eyCDIdslClU46DUzi0F0IsLc9AXs0uhS39sEJzbM7AO5zxdW 1uYaGvm0VWBtkeEE7C9H9yABmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkELn1w D47QR19BLkU5yJBkxx87MB8GA1UdIwQYMBaAFDHL7R1KAhcIMYB9d0SsSq/yagbm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA3Qy9ENEREM0E4ODYy ODgxMUVFOTY0NEE5MENDNEY5QUUwMi9NY3Z0SFVvQ0Z3Z3hnSDEzUkt4S3JfSnFC dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01jdnRIVW9DRndneGdIMTNSS3hLcl9KcUJ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA3Qy9ENEREM0E4ODYyODgxMUVFOTY0NEE5MENDNEY5QUUwMi9NY3Z0SFVvQ0Z3 Z3hnSDEzUkt4S3JfSnFCdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC05hDYs/SPveo09IsuKeuwv015g1fQKCwzR1teKqM7mPvc0aVjyol5 DdzO3aLXmAEDr+6uht/Vsjjge8XBa67V0aYN8o6bGE6E6j0Skya/mMzVKwiYIEnT 2J0+TvaNVItjy1iHLbsGP3ELvjw0csFGRcKy1qI8JJA8gdrmmLALunFg8J6lmXZp +j/duKhQMAGorlUSSfV58HImodXh3kamYH6RbgFsurCjJxCtmFmk/Sg4RE8txxje oie1fSK4DDTanVVXai3C7sSDCpxnMgCcdGazlInCGE40RuMsFUIwCfyTLkfNHVAf WQK4L31wr5bD53st6cO6gTsp6vGbfb7t -----END CERTIFICATE-----Generated at Tue Sep 9 13:36:52 2025 by rpki-client