$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json) Hash identifier: TkllnL68QKuidOmDwFP8OLGv2dTnnEE3R/kYeInI2x0= Subject key identifier: 65:65:82:6A:B0:62:FF:B4:1C:DE:8B:1F:4D:20:61:44:BD:2E:D7:B0 Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft Manifest number: 0A57 Signing time: Thu 18 Sep 2025 20:33:33 +0000 Manifest this update: Thu 18 Sep 2025 20:33:32 +0000 Manifest next update: Thu 25 Sep 2025 20:33:32 +0000 Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: UNFTpwLohFWngdwBG/GBKdpdHrYw3nJc9G8bXuRNZ7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Validity Not Before: Sep 18 20:33:32 2025 GMT Not After : Sep 25 20:33:32 2025 GMT Subject: CN=68cc6c9d-9cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:d7:e6:78:1b:54:8f:ca:6d:ef:12:75:1a: 9b:b3:02:7d:b0:44:f6:d5:14:2b:97:a2:a4:3f:f1: f0:e9:d5:f1:48:b6:bf:c8:77:7e:97:4a:a4:e8:61: 29:be:9f:22:32:a2:9e:8c:fb:c0:da:aa:29:d2:58: 16:c8:fe:b5:41:8b:7d:3d:65:ff:47:8b:9f:9f:7b: 24:ad:53:32:d0:d5:55:62:f1:d9:2d:20:7d:78:1e: 09:e5:ad:32:04:d8:1e:6c:02:c5:40:8e:37:53:ca: 94:d0:5b:97:78:11:ac:50:1d:d5:4b:f1:89:94:83: 72:89:da:09:9d:f0:b9:98:8a:96:14:5a:a0:6a:04: 2c:e5:99:5a:d1:f6:89:fe:c6:09:fa:5a:98:b0:df: 1b:b0:ff:c6:5b:be:5f:99:54:09:46:b1:08:c3:1d: dc:c1:83:d7:13:7f:4d:ce:ba:0b:fe:37:75:7d:f8: fc:84:d2:1f:af:6a:d1:3b:74:81:0d:79:47:ea:8f: ad:2b:d9:bd:21:e5:65:9d:e4:e2:4b:c8:10:47:54: 81:2c:81:fc:27:97:f7:87:db:9c:24:35:dc:d9:73: c3:a6:21:51:a9:ac:93:0d:9c:f1:2b:6d:69:66:d7: 20:b1:69:6e:05:4b:d6:42:90:74:11:42:81:a7:d3: 04:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:65:82:6A:B0:62:FF:B4:1C:DE:8B:1F:4D:20:61:44:BD:2E:D7:B0 X509v3 Authority Key Identifier: keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:2f:87:76:41:8f:8a:10:a8:ab:5c:8d:74:a5:3a:90:59:0c: 81:26:a3:f9:1d:a6:9a:26:e6:e4:fd:e5:eb:a6:5e:db:9a:db: 4d:a4:d4:af:e6:65:20:97:24:0b:83:e8:3d:a3:61:d4:64:37: 3b:ae:62:24:9a:b7:bb:ee:dc:4b:0b:db:85:7c:93:12:f9:85: c2:25:fe:fc:55:52:ea:14:0e:ce:9c:e4:5a:9c:1c:dd:49:14: c0:f5:d6:9c:52:dd:ee:af:50:00:5f:b0:62:17:1a:52:0f:66: 85:bd:76:f1:0b:b6:4d:6c:c1:0b:e8:6f:dd:cd:46:9d:cd:f4: 11:0e:26:5e:a7:55:7d:b9:eb:fd:41:61:7d:5e:c5:1e:26:e9: 1d:8d:42:3f:87:3f:89:d5:06:fd:48:87:7a:04:b7:21:15:5b: b7:de:1f:08:f9:4e:ce:3c:e9:64:d2:29:22:de:6f:cf:8a:12: 6e:81:fc:36:7c:e7:af:86:cf:f1:b8:8a:ae:2c:ce:c3:73:d4: b3:e8:30:6d:35:72:e1:07:4f:d7:72:ee:ba:f7:25:a5:41:6c: b1:9f:75:7b:84:c1:13:68:8f:93:1a:78:68:db:c4:90:89:9d: 86:ea:74:57:cb:a7:50:4e:22:d1:ee:45:aa:b2:10:e2:53:66: 0c:7a:34:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKDlBQ0I4MDY2NjNGQjBGQ0Y2RUJDNDNDMDEwQjkzNUUw NTIxNEZDOUYwHhcNMjUwOTE4MjAzMzMyWhcNMjUwOTI1MjAzMzMyWjAYMRYwFAYD VQQDEw02OGNjNmM5ZC05Y2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDfX5ngbVI/Kbe8SdRqbswJ9sET21RQrl6KkP/Hw6dXxSLa/yHd+l0qk6GEp vp8iMqKejPvA2qop0lgWyP61QYt9PWX/R4ufn3skrVMy0NVVYvHZLSB9eB4J5a0y BNgebALFQI43U8qU0FuXeBGsUB3VS/GJlINyidoJnfC5mIqWFFqgagQs5Zla0faJ /sYJ+lqYsN8bsP/GW75fmVQJRrEIwx3cwYPXE39NzroL/jd1ffj8hNIfr2rRO3SB DXlH6o+tK9m9IeVlneTiS8gQR1SBLIH8J5f3h9ucJDXc2XPDpiFRqayTDZzxK21p ZtcgsWluBUvWQpB0EUKBp9MEbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVlgmqw Yv+0HN6LH00gYUS9LtewMB8GA1UdIwQYMBaAFJrLgGZj+w/PbrxDwBC5NeBSFPyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4OXV2RVBBRUxrMTRGSVVf SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4 OXV2RVBBRUxrMTRGSVVfSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIL4d2QY+KEKirXI10pTqQWQyBJqP5HaaaJubk/eXrpl7bmttNpNSv 5mUglyQLg+g9o2HUZDc7rmIkmre77txLC9uFfJMS+YXCJf78VVLqFA7OnORanBzd SRTA9dacUt3ur1AAX7BiFxpSD2aFvXbxC7ZNbMEL6G/dzUadzfQRDiZep1V9uev9 QWF9XsUeJukdjUI/hz+J1Qb9SId6BLchFVu33h8I+U7OPOlk0iki3m/PihJugfw2 fOevhs/xuIquLM7Dc9Sz6DBtNXLhB0/Xcu669yWlQWyxn3V7hMETaI+TGnho28SQ iZ2G6nRXy6dQTiLR7kWqshDiU2YMejRt -----END CERTIFICATE-----Generated at Fri Sep 19 16:47:23 2025 by rpki-client