$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft File: sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json) Hash identifier: 4AC5rM652tuTl3STXxPL8VfhQlJtfpo3OO9Wa91j8LI= Subject key identifier: F8:4F:F3:5F:06:FC:8B:AC:7B:51:18:FE:C7:38:51:56:24:98:E1:AB Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 Certificate issuer: /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Certificate serial: 08A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft Manifest number: 08A1 Signing time: Thu 18 Sep 2025 20:47:34 +0000 Manifest this update: Thu 18 Sep 2025 20:47:33 +0000 Manifest next update: Thu 25 Sep 2025 20:47:33 +0000 Files and hashes: 1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: OlcxNsCD2u7WrFsgGvvHr+3peRKfcWFY88GWBXO6JPQ=) 2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: nVx5Y0jzC9bHhMI0JsTAXXHXSiIymADxDx7MlszHZYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Validity Not Before: Sep 18 20:47:33 2025 GMT Not After : Sep 25 20:47:33 2025 GMT Subject: CN=68cc6fe5-aa1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:3f:08:b6:4e:c0:0c:aa:64:dc:a0:db:f6: 7c:c1:d8:9c:c1:f0:88:7a:ef:49:47:76:da:18:59: 05:4c:f7:72:4a:6b:9a:10:44:75:09:e1:40:e5:5c: d9:4b:8a:ef:58:28:c9:06:f2:74:a7:cc:bb:f5:98: 08:0a:6c:77:a6:dd:6c:ed:12:d7:60:7c:54:92:ae: 33:2d:7b:10:65:0e:17:7b:57:a1:b2:56:a8:c2:da: b4:ac:77:f4:5f:64:4e:b6:94:59:f5:e8:9f:c9:ee: 57:01:45:dc:82:94:ed:43:5a:b6:80:f9:d6:6f:8e: 74:2f:70:58:29:4e:d2:cf:96:c2:1b:3b:ed:a3:27: 79:4d:59:15:63:91:5d:47:59:f4:b3:88:09:75:4b: c9:03:ff:da:b7:6f:f2:ef:2d:3a:53:db:df:c9:32: d1:07:0b:c2:c3:81:b8:44:bb:f0:87:44:50:ab:56: fd:99:11:91:af:8d:3b:f2:b8:78:29:31:5a:cb:bc: 93:9d:d1:78:78:41:5d:83:58:39:f8:f5:92:85:15: 15:75:9e:83:6d:72:ee:46:c6:93:f8:5a:a6:8d:b1: 5a:43:07:a3:a4:ef:ef:98:d3:56:50:8d:ab:27:ba: 24:22:d8:0d:0e:c0:58:5f:40:b8:ef:23:d2:4c:c2: 13:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4F:F3:5F:06:FC:8B:AC:7B:51:18:FE:C7:38:51:56:24:98:E1:AB X509v3 Authority Key Identifier: keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:94:90:76:64:94:3e:81:65:91:9b:f9:8d:bb:f7:6d:f1:63: 65:fd:f4:df:1b:99:ef:e9:a3:98:41:44:77:bd:f6:50:0d:70: f1:4e:2c:8f:36:78:41:1c:a9:d5:aa:5f:ca:b7:e5:86:2c:05: 09:01:ff:4f:68:2a:a7:0a:1f:b4:40:22:ad:ba:50:4c:ba:f9: 08:df:ef:c9:6d:45:70:51:cb:96:32:38:53:dd:37:72:48:a4: 9e:ba:b4:d9:af:94:cd:3b:c6:35:a8:5f:ab:51:7c:26:82:82: 09:4f:c5:50:48:2e:b1:7e:c8:3a:85:7e:e2:3c:bd:e5:15:2a: 0b:1b:f4:46:85:b2:48:0d:e9:45:a1:97:6c:69:dc:5f:b1:6f: bb:f6:03:5b:be:e8:a4:a2:86:05:ee:b5:7d:e4:b1:9c:86:d8: 46:ad:47:5f:78:33:5a:c0:37:1c:79:19:bd:e2:c0:8f:8e:60: 87:62:0a:1d:9e:75:47:ff:25:fe:cb:11:04:c7:36:fe:b4:5c: 23:d4:88:06:56:53:b9:d6:63:7d:d6:d8:a0:a6:f3:62:27:e6: 16:3c:4c:9a:f7:e1:66:fd:74:67:9c:76:4e:6e:31:85:af:4b: 4f:a0:6e:b5:99:d4:86:fd:6f:10:60:52:88:72:35:60:0c:1f: d7:b3:c0:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwRjMxMTAvBgNVBAUTKEIwQjQwMDc2NTJGQjNEMTQzMjg4MTNCM0U1N0VFRkYx Nzc1OUNGRjIwHhcNMjUwOTE4MjA0NzMzWhcNMjUwOTI1MjA0NzMzWjAYMRYwFAYD VQQDEw02OGNjNmZlNS1hYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsI/CLZOwAyqZNyg2/Z8wdicwfCIeu9JR3baGFkFTPdySmuaEER1CeFA5VzZ S4rvWCjJBvJ0p8y79ZgICmx3pt1s7RLXYHxUkq4zLXsQZQ4Xe1ehslaowtq0rHf0 X2ROtpRZ9eifye5XAUXcgpTtQ1q2gPnWb450L3BYKU7Sz5bCGzvtoyd5TVkVY5Fd R1n0s4gJdUvJA//at2/y7y06U9vfyTLRBwvCw4G4RLvwh0RQq1b9mRGRr4078rh4 KTFay7yTndF4eEFdg1g5+PWShRUVdZ6DbXLuRsaT+FqmjbFaQwejpO/vmNNWUI2r J7okItgNDsBYX0C47yPSTMITLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhP818G /Iuse1EY/sc4UVYkmOGrMB8GA1UdIwQYMBaAFLC0AHZS+z0UMogTs+V+7/F3Wc/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTBGMy84RTFDMUU3NkM1 NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BSUXlpQk96NVg3djhYZFp6 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMUUFkbEw3UFJReWlCT3o1WDd2OFhkWnpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTBGMy84RTFDMUU3NkM1NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BS UXlpQk96NVg3djhYZFp6X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYlJB2ZJQ+gWWRm/mNu/dt8WNl/fTfG5nv6aOYQUR3vfZQDXDxTiyP NnhBHKnVql/Kt+WGLAUJAf9PaCqnCh+0QCKtulBMuvkI3+/JbUVwUcuWMjhT3Tdy SKSeurTZr5TNO8Y1qF+rUXwmgoIJT8VQSC6xfsg6hX7iPL3lFSoLG/RGhbJIDelF oZdsadxfsW+79gNbvuikooYF7rV95LGchthGrUdfeDNawDcceRm94sCPjmCHYgod nnVH/yX+yxEExzb+tFwj1IgGVlO51mN91tigpvNiJ+YWPEya9+Fm/XRnnHZObjGF r0tPoG61mdSG/W8QYFKIcjVgDB/Xs8Cp -----END CERTIFICATE-----Generated at Fri Sep 19 02:52:34 2025 by rpki-client