$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json) Hash identifier: q2ZHB+QMKj8o1rfCw2V0w3QMH6VgetYPAU2i8NP3DG0= Subject key identifier: 7C:38:47:78:23:82:ED:17:26:2D:EE:02:96:79:21:4A:2D:B9:C4:78 Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 1AA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft Manifest number: 1A96 Signing time: Mon 08 Sep 2025 16:19:31 +0000 Manifest this update: Mon 08 Sep 2025 16:19:31 +0000 Manifest next update: Mon 15 Sep 2025 16:19:31 +0000 Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: +08iVPiKR78rwENopjreAhuL0L3lTm/Ltk3+A2Ptk2w=) 2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: 1daEoei36geA2L+OhDw4+YDumwBLUAs+Z5wiCTxRQ6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6818 (0x1aa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: Sep 8 16:19:31 2025 GMT Not After : Sep 15 16:19:31 2025 GMT Subject: CN=68bf0213-413d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:17:24:a6:e9:84:d0:cb:c4:53:6f:79:04: df:f7:12:bb:02:9c:cc:10:6c:79:5a:92:21:0c:23: 4f:ec:0c:11:b7:60:b6:76:6c:bc:c1:a8:3d:a3:30: 1b:b6:8a:a6:ea:6c:76:35:a7:ec:11:c0:dd:17:0d: 0e:a0:63:9e:bc:5b:00:6b:d7:f8:bb:d1:a5:97:ce: 03:1f:f4:99:32:c3:6e:39:26:ca:cc:e8:4a:e1:23: a2:b4:95:8f:5b:cc:84:84:d9:2e:c5:bc:8e:63:bb: 22:49:9d:c4:9e:54:17:1b:a9:d9:5d:aa:56:b5:bb: bd:7e:9f:52:19:cf:14:3c:15:d2:8c:8d:77:7b:c2: 3d:b0:f6:2b:f1:e5:44:b3:22:c2:c8:33:47:a4:1c: ae:b9:4e:c0:31:8a:90:78:f0:68:54:e1:59:35:8c: fe:e7:49:b5:a4:ff:fb:7b:f3:ca:d0:0b:cb:71:15: 2b:70:74:d2:63:c0:ce:83:d3:d1:18:cf:7d:b7:8e: 6f:d8:c0:58:6a:fb:c5:34:e9:0b:ab:dc:95:cb:c2: 11:20:f7:2b:a7:8c:05:04:8a:3b:ca:24:1b:9a:85: e6:16:ef:a8:5a:3c:a6:8c:f2:3f:93:a8:e9:a7:ca: c2:71:ee:64:bc:a0:4b:72:ce:44:ab:19:89:98:6b: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:38:47:78:23:82:ED:17:26:2D:EE:02:96:79:21:4A:2D:B9:C4:78 X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b6:38:69:fd:06:c5:1c:49:4c:36:ea:44:c8:87:56:74:0a: e6:f2:7d:e9:bb:9f:eb:76:cf:7f:af:29:dc:8e:0a:06:a8:8a: 5e:1e:3d:87:c8:31:30:63:26:61:97:a3:cc:15:2a:5d:41:68: cf:8a:ca:d9:d2:dd:b2:69:e1:57:80:3f:92:bd:2b:ba:28:b3: 27:44:51:a6:81:a9:40:aa:bb:30:05:86:2f:90:de:36:f1:7f: fd:6f:ef:c9:43:af:e0:61:9d:08:b4:79:10:02:23:ba:36:05: 4b:60:d2:ae:43:28:ab:bf:f6:7e:8a:09:db:e0:34:6d:b4:c1: cb:2b:42:1b:92:a7:20:55:15:73:fb:ca:72:d1:1d:6d:dc:ab: 9c:ac:18:aa:a2:9b:9e:ab:b9:f6:6f:74:e2:d3:04:e1:29:30: 0d:06:b5:e2:ea:01:47:db:2d:43:15:0f:c1:3e:7c:6a:8c:e0: 4d:f6:54:5b:93:9b:13:60:25:8d:fe:e6:5d:89:d9:43:29:c7: eb:ef:df:0b:4e:6b:fd:ac:95:98:90:a3:34:ad:b7:c6:62:15: 60:d5:4f:7d:41:b9:30:22:9e:e9:71:5e:04:4f:9b:2c:59:44: c2:78:c5:3d:6f:f8:97:d5:d8:4b:45:ad:b9:7a:ee:63:d4:f4: 02:1d:28:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjUwOTA4MTYxOTMxWhcNMjUwOTE1MTYxOTMxWjAYMRYwFAYD VQQDEw02OGJmMDIxMy00MTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvkXJKbphNDLxFNveQTf9xK7ApzMEGx5WpIhDCNP7AwRt2C2dmy8wag9ozAb toqm6mx2NafsEcDdFw0OoGOevFsAa9f4u9Gll84DH/SZMsNuOSbKzOhK4SOitJWP W8yEhNkuxbyOY7siSZ3EnlQXG6nZXapWtbu9fp9SGc8UPBXSjI13e8I9sPYr8eVE syLCyDNHpByuuU7AMYqQePBoVOFZNYz+50m1pP/7e/PK0AvLcRUrcHTSY8DOg9PR GM99t45v2MBYavvFNOkLq9yVy8IRIPcrp4wFBIo7yiQbmoXmFu+oWjymjPI/k6jp p8rCce5kvKBLcs5EqxmJmGtDGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHw4R3gj gu0XJi3uApZ5IUotucR4MB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP VUhBbS1mTDFUMHNtY01ZaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbtjhp/QbFHElMNupEyIdWdArm8n3pu5/rds9/ryncjgoGqIpeHj2H yDEwYyZhl6PMFSpdQWjPisrZ0t2yaeFXgD+SvSu6KLMnRFGmgalAqrswBYYvkN42 8X/9b+/JQ6/gYZ0ItHkQAiO6NgVLYNKuQyirv/Z+ignb4DRttMHLK0IbkqcgVRVz +8py0R1t3KucrBiqopueq7n2b3Ti0wThKTANBrXi6gFH2y1DFQ/BPnxqjOBN9lRb k5sTYCWN/uZdidlDKcfr798LTmv9rJWYkKM0rbfGYhVg1U99QbkwIp7pcV4ET5ss WUTCeMU9b/iX1dhLRa25eu5j1PQCHSiq -----END CERTIFICATE-----Generated at Tue Sep 9 09:11:38 2025 by rpki-client