$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft File: m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json) Hash identifier: dh1oQjiMm26AnV2oCMWmBY7Xn6d1sGgfnlnbJFc3XDY= Subject key identifier: D5:1F:65:01:A2:DF:70:F5:5A:BD:A9:CE:8D:45:B1:4A:B0:BF:31:1B Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft Manifest number: 1C Signing time: Fri 05 Sep 2025 08:26:57 +0000 Manifest this update: Fri 05 Sep 2025 08:26:56 +0000 Manifest next update: Fri 12 Sep 2025 08:26:56 +0000 Files and hashes: 1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: MqBxQ4a69r6FWCV9t1lH+CV68V6qhPDD+WpnaX/+Xtk=) 2: D24370A6638211F087594469C4F9AE02.roa (hash: BC9hUQT1LjynnO8EIFYzWbutVI812gfFy3AK+b9ATvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA Validity Not Before: Sep 5 08:26:56 2025 GMT Not After : Sep 12 08:26:56 2025 GMT Subject: CN=68ba9ed1-c275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:dd:0b:02:01:8d:87:5c:c2:2a:7f:33:c7: 2b:25:34:60:63:69:22:e4:6c:08:47:bb:a0:71:4f: 12:8d:e3:84:4c:55:f3:06:3a:66:a1:b6:7c:2a:a9: 67:45:72:7b:7f:5c:0b:21:6e:bf:e5:12:08:70:ce: 0d:05:1d:fb:4b:5c:8c:a6:71:8d:db:ba:15:d4:e4: 15:29:17:50:d0:67:11:f0:9c:6c:68:51:f0:76:56: 71:3c:12:5d:16:22:a7:ec:9d:20:94:ef:bf:3a:0a: e0:98:60:fa:df:d9:21:a6:55:3b:13:b1:ea:82:df: 44:90:3f:83:d3:52:2c:d2:d0:d0:98:b2:9d:17:3a: d1:da:10:31:14:49:98:e8:fe:a5:c8:2f:69:68:f3: 62:fa:84:43:a4:3c:52:5b:2f:04:2c:8e:5a:41:00: 05:11:3b:41:43:06:5e:1c:59:32:2b:72:9d:f0:23: 8b:50:91:da:72:1b:30:a9:2a:6d:a8:bd:59:5f:f6: 3f:ea:35:2d:c4:42:b5:9d:49:c1:f6:04:ee:d5:d8: f0:fc:6a:bf:3d:70:5e:18:8e:13:6f:52:9b:f9:dd: 49:fa:ce:c3:9f:2c:ca:bc:5c:b0:63:cc:71:68:ce: 73:48:5e:57:b9:85:7f:67:b5:dd:32:16:06:f1:c5: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1F:65:01:A2:DF:70:F5:5A:BD:A9:CE:8D:45:B1:4A:B0:BF:31:1B X509v3 Authority Key Identifier: keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1f:3b:6d:18:dc:9f:76:6f:56:9b:70:1d:bb:1c:c5:18:21: 41:a0:6a:a8:18:27:08:3b:00:94:25:e9:3b:d3:d8:e4:1d:73: 38:f7:ef:7a:f2:d8:d9:08:a6:94:47:72:9c:87:8d:b8:85:72: c9:93:ab:46:15:cf:5d:f1:e0:7d:34:8a:80:c4:d7:aa:f6:d1: b9:b5:4b:c9:b6:4b:84:05:8d:07:8d:27:d7:57:bf:2d:13:d9: 89:31:81:31:05:47:fe:f1:86:8a:18:0f:cc:fe:af:2c:ab:24: b8:96:90:18:9c:52:dc:85:26:8c:cc:b7:52:7f:79:71:51:b3: e6:69:3a:b2:69:0c:cd:5d:da:69:fb:a9:c8:cd:8d:01:f5:f5: ea:67:f2:50:f3:e9:5a:09:a3:7d:31:1a:f0:93:91:dc:e6:91: 10:77:f3:ef:fe:d8:ff:19:3e:0a:57:44:3d:50:78:5a:0f:45: 0c:80:b7:a7:d4:0c:5a:88:c3:e0:a1:4f:46:23:fa:bd:68:d5: 14:4f:c7:3a:c0:82:2b:6b:b8:95:26:d8:3b:2d:1f:ca:60:f2: b5:ff:3f:5b:44:27:b9:54:35:2d:dc:df:b0:64:10:e3:f8:00: 08:19:05:7e:8d:d8:93:1a:fd:60:09:40:36:fa:ad:71:71:b0: 09:60:c8:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoOUI5RDM5NzI1QjI3RDQyMDI4MTM4NTE2MzQ5MkZGNzVG MTUxMTNEQTAeFw0yNTA5MDUwODI2NTZaFw0yNTA5MTIwODI2NTZaMBgxFjAUBgNV BAMTDTY4YmE5ZWQxLWMyNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQJd0LAgGNh1zCKn8zxyslNGBjaSLkbAhHu6BxTxKN44RMVfMGOmahtnwqqWdF cnt/XAshbr/lEghwzg0FHftLXIymcY3buhXU5BUpF1DQZxHwnGxoUfB2VnE8El0W IqfsnSCU7786CuCYYPrf2SGmVTsTseqC30SQP4PTUizS0NCYsp0XOtHaEDEUSZjo /qXIL2lo82L6hEOkPFJbLwQsjlpBAAURO0FDBl4cWTIrcp3wI4tQkdpyGzCpKm2o vVlf9j/qNS3EQrWdScH2BO7V2PD8ar89cF4YjhNvUpv53Un6zsOfLMq8XLBjzHFo znNIXle5hX9ntd0yFgbxxRPpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1R9lAaLf cPVavanOjUWxSrC/MRswHwYDVR0jBBgwFoAUm505clsn1CAoE4UWNJL/dfFRE9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzYyMjZDOTM2NjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbTUwNWNsc24xQ0FvRTRVV05KTF9kZkZSRTlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzYyMjZDOTM2NjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNB b0U0VVdOSkxfZGZGUkU5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC8fO20Y3J92b1abcB27HMUYIUGgaqgYJwg7AJQl6TvT2OQdczj373ry 2NkIppRHcpyHjbiFcsmTq0YVz13x4H00ioDE16r20bm1S8m2S4QFjQeNJ9dXvy0T 2YkxgTEFR/7xhooYD8z+ryyrJLiWkBicUtyFJozMt1J/eXFRs+ZpOrJpDM1d2mn7 qcjNjQH19epn8lDz6VoJo30xGvCTkdzmkRB38+/+2P8ZPgpXRD1QeFoPRQyAt6fU DFqIw+ChT0Yj+r1o1RRPxzrAgitruJUm2DstH8pg8rX/P1tEJ7lUNS3c37BkEOP4 AAgZBX6N2JMa/WAJQDb6rXFxsAlgyAI= -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:20 2025 by rpki-client