$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json) Hash identifier: vfos+4O3dLxEuY/Qx5g/kptT+bbpJwLdri3l4fa8+dI= Subject key identifier: D1:4F:DC:4D:B2:9A:AD:D2:2C:67:CF:CF:B8:73:0B:E8:6A:84:7D:FD Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Certificate serial: 0791 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft Manifest number: 078C Signing time: Tue 16 Sep 2025 21:43:57 +0000 Manifest this update: Tue 16 Sep 2025 21:43:57 +0000 Manifest next update: Tue 23 Sep 2025 21:43:57 +0000 Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: tMODUvl1+tinALYbO6fgRlk9y646tLysFtOMmy2geNM=) 2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: +l+y88slcd8CMQ9n/dTzp3oShT4cTaRVlDNuVo8APSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 21:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1937 (0x791) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7DC6, serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Validity Not Before: Sep 16 21:43:57 2025 GMT Not After : Sep 23 21:43:57 2025 GMT Subject: CN=68c9da1d-d40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:8a:d8:ef:0d:1f:86:12:7e:09:63:83:88: 44:f7:97:85:14:c4:08:fd:3d:12:6c:42:44:ae:e6: 28:63:51:82:99:31:a1:a0:3f:d8:8b:59:d9:6a:e0: 54:16:15:e6:6c:59:e2:e0:1f:5e:66:c6:4c:fa:04: 2f:10:78:1d:99:cd:b0:66:c4:61:6e:ec:dd:59:72: 28:84:cf:5c:d8:dc:80:5a:06:93:4d:a3:f1:d6:cc: bc:24:5e:77:ee:a8:1c:81:37:9f:c3:f9:2d:d1:4a: 8d:1e:3c:af:ae:6b:8c:b0:f4:8e:86:4d:f8:70:c1: 57:3e:29:44:42:af:5b:7c:a0:32:a7:73:e0:27:be: 85:cc:d1:9e:f8:d3:22:a5:f4:e3:8e:d3:67:b1:c0: 1c:c5:ab:5b:76:5d:14:e7:9e:e6:d4:50:d6:e6:72: 61:c8:f5:4d:64:b3:bc:db:3e:a6:94:e4:15:c8:26: 30:43:fe:19:8f:bf:e9:5e:8b:a9:cb:ef:64:e8:83: 4f:0e:f1:76:77:b1:9b:22:34:e4:c5:73:fb:34:71: 84:b2:d0:c6:47:2f:de:9e:0c:6a:08:82:4e:2d:02: 53:d8:50:e1:14:f1:2d:2e:f5:81:31:a1:87:3e:23: 1e:e5:e3:c1:6a:1b:53:36:11:cd:64:57:b4:c0:16: 04:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4F:DC:4D:B2:9A:AD:D2:2C:67:CF:CF:B8:73:0B:E8:6A:84:7D:FD X509v3 Authority Key Identifier: keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b9:aa:9f:97:3a:93:82:a1:36:58:47:13:0f:2c:1b:34:07: 88:11:03:3a:7e:23:ae:f8:06:fb:98:4b:a7:a2:98:c0:df:e0: b6:0d:a5:23:ca:89:34:49:57:27:3c:d5:39:e0:9c:4f:95:08: 24:ce:00:58:fa:df:e4:cb:fc:07:aa:63:ad:56:04:14:3d:d8: 49:de:17:4a:3d:63:f3:62:20:ba:c8:56:31:a2:c8:4f:d0:1d: 6a:59:48:61:fc:da:db:c8:a8:90:e0:b4:56:03:4c:59:93:f2: 14:c1:56:1d:55:4a:6b:f8:9f:87:7f:aa:c8:86:5c:a7:25:14: 59:4e:12:37:66:18:fa:0b:f4:48:ae:36:f1:6b:10:ba:31:61: df:c8:d1:23:76:10:0f:fc:31:d3:0d:17:1c:b5:e2:d7:14:16: 55:25:51:9c:c6:3f:c4:c0:b5:95:43:83:2e:8b:04:5b:40:9f: 62:8e:7c:b6:4c:31:33:1d:33:ee:b3:2d:6b:09:e0:8f:43:d5: 5a:6f:c1:b5:d9:e7:26:76:6e:7c:51:48:aa:39:a2:e0:5d:51: 5c:db:f0:c4:4a:84:1d:a1:d1:c8:2b:2d:08:e9:5d:a8:36:a3: 56:4f:99:c4:fc:cd:46:43:37:dd:e2:41:2b:d3:af:46:03:44: b4:dc:8a:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkExRkJDOEEwQjU1 Qjg4MDk4RDEwHhcNMjUwOTE2MjE0MzU3WhcNMjUwOTIzMjE0MzU3WjAYMRYwFAYD VQQDEw02OGM5ZGExZC1kNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLmK2O8NH4YSfgljg4hE95eFFMQI/T0SbEJEruYoY1GCmTGhoD/Yi1nZauBU FhXmbFni4B9eZsZM+gQvEHgdmc2wZsRhbuzdWXIohM9c2NyAWgaTTaPx1sy8JF53 7qgcgTefw/kt0UqNHjyvrmuMsPSOhk34cMFXPilEQq9bfKAyp3PgJ76FzNGe+NMi pfTjjtNnscAcxatbdl0U557m1FDW5nJhyPVNZLO82z6mlOQVyCYwQ/4Zj7/pXoup y+9k6INPDvF2d7GbIjTkxXP7NHGEstDGRy/engxqCIJOLQJT2FDhFPEtLvWBMaGH PiMe5ePBahtTNhHNZFe0wBYEOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFP3E2y mq3SLGfPz7hzC+hqhH39MB8GA1UdIwQYMBaAFEiYyqN8u9EYrtIqH7yKC1W4gJjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0RDNi81Q0E4NERFNDIy NkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBSaXUwaW9mdklvTFZiaUFt TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NKaktvM3k3MFJpdTBpb2Z2SW9MVmJpQW1ORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBS aXUwaW9mdklvTFZiaUFtTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCduaqflzqTgqE2WEcTDywbNAeIEQM6fiOu+Ab7mEunopjA3+C2DaUj yok0SVcnPNU54JxPlQgkzgBY+t/ky/wHqmOtVgQUPdhJ3hdKPWPzYiC6yFYxoshP 0B1qWUhh/NrbyKiQ4LRWA0xZk/IUwVYdVUpr+J+Hf6rIhlynJRRZThI3Zhj6C/RI rjbxaxC6MWHfyNEjdhAP/DHTDRccteLXFBZVJVGcxj/EwLWVQ4MuiwRbQJ9ijny2 TDEzHTPusy1rCeCPQ9Vab8G12ecmdm58UUiqOaLgXVFc2/DESoQdodHIKy0I6V2o NqNWT5nE/M1GQzfd4kEr069GA0S03IpK -----END CERTIFICATE-----Generated at Thu Sep 18 21:42:13 2025 by rpki-client