$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft File: P3JyYLCUlEIN1npzBNggXUL_P_E.mft (raw, json) Hash identifier: noh6k5YHLfcPev8OovzGsfn3dOrpI+uZZD9Z4mX/Qx0= Subject key identifier: 81:32:C2:44:E6:BE:03:9C:3B:A8:78:F2:AC:7C:0D:59:89:FD:45:B6 Authority key identifier: 3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1 Certificate issuer: /CN=A91CA58E/serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft Manifest number: 07 Signing time: Wed 17 Sep 2025 08:53:00 +0000 Manifest this update: Wed 17 Sep 2025 08:53:00 +0000 Manifest next update: Wed 24 Sep 2025 08:53:00 +0000 Files and hashes: 1: P3JyYLCUlEIN1npzBNggXUL_P_E.crl (hash: BI+cZFnumrvgPCgFm10TwcjxIOSUDw1KSoRvGra3ywk=) 2: 3DC1FF148C6911F08611A235C4F9AE02.roa (hash: fLngag0jvcUXsL/3ScrJd5vhIuo9JacsTzQUqtZ8EUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA58E, serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1 Validity Not Before: Sep 17 08:53:00 2025 GMT Not After : Sep 24 08:53:00 2025 GMT Subject: CN=68ca76ec-9c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:93:d4:3b:55:af:8a:55:9e:dd:44:97:15: cc:f2:ba:02:1f:e8:23:83:84:59:d0:de:d4:a2:99: 96:5d:d5:8a:9d:fb:fd:e0:9a:2f:46:be:86:eb:91: 7f:2e:f9:f5:1a:47:a3:ed:bb:e9:6d:85:21:27:f5: 4c:e8:24:84:9b:79:30:4a:ac:a9:26:e1:75:37:3e: 88:5c:26:f3:96:7d:a4:20:fe:d7:53:86:d8:4b:b0: 50:01:2b:22:60:71:d1:ef:ae:4a:6b:41:54:6d:30: f3:c3:bf:07:a3:9f:8e:42:0e:b0:d8:44:d0:00:cd: 51:28:91:c7:1a:5d:66:f7:4e:5f:4c:47:b1:f2:06: 33:6e:28:1f:f9:ba:51:89:3e:75:cd:70:12:fe:6b: ba:8c:7d:6c:8b:63:2a:8c:31:7c:13:51:d8:be:3b: ca:61:e9:a7:61:42:61:48:fb:cf:62:f0:0e:6e:56: 39:e3:db:59:8a:44:d7:7e:0e:b8:28:a4:0b:51:ae: 48:82:7f:3a:df:1d:a9:fb:f3:89:89:e8:fb:09:9d: 24:eb:0e:39:7e:20:f3:d1:21:d9:8c:3a:eb:f8:83: 58:71:83:de:ca:d5:6e:89:80:eb:47:c9:bc:a4:ee: c2:6c:01:51:1e:ae:2d:87:71:6a:17:ce:4c:6b:a3: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:32:C2:44:E6:BE:03:9C:3B:A8:78:F2:AC:7C:0D:59:89:FD:45:B6 X509v3 Authority Key Identifier: keyid:3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:a3:a8:39:b4:36:d5:a4:7d:26:e2:28:2c:af:d6:fd:12:6c: 02:6e:66:6a:66:7a:c0:34:8b:17:4b:d2:18:b2:46:d4:29:43: 2b:9a:da:6b:db:dd:ff:d5:e7:07:ef:b1:1f:e3:c5:6a:04:38: 8f:81:11:03:0e:0d:13:5c:a8:2a:f8:39:12:84:4b:6e:4d:e9: 37:5f:e8:25:63:98:f1:e6:7d:82:9e:b8:51:7b:4a:c2:ff:f2: 19:4e:2c:38:be:d6:1a:95:b8:4e:fc:e0:c9:51:2a:e2:d7:42: 7d:d2:cb:d3:9c:a9:04:a5:e3:f0:5d:a5:68:7a:a7:31:69:94: 9f:93:45:da:82:40:c6:d1:0b:3a:aa:d2:f4:89:79:09:ab:ca: 6e:b1:32:0f:eb:60:73:7f:f6:81:c2:93:22:6c:24:33:05:ff: 1a:ec:6b:02:5b:e6:ad:54:12:0a:65:aa:a3:d4:7e:d1:d8:30: 13:d7:8c:15:6c:4c:38:98:5a:0c:29:4d:be:f8:8c:91:3b:f9: 44:4b:d3:6f:6c:97:ce:e2:a6:2f:ce:d3:72:11:88:0c:f9:55: 24:d9:35:d5:6c:38:3a:25:94:9e:f7:3d:62:1d:99:b5:57:43: 75:cb:0a:b0:02:25:df:77:6e:40:a9:9d:cc:23:15:02:ab:91: 96:99:05:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTU4RTExMC8GA1UEBRMoM0Y3MjcyNjBCMDk0OTQ0MjBERDY3QTczMDREODIwNUQ0 MkZGM0ZGMTAeFw0yNTA5MTcwODUzMDBaFw0yNTA5MjQwODUzMDBaMBgxFjAUBgNV BAMTDTY4Y2E3NmVjLTljMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8C5PUO1WvilWe3USXFczyugIf6CODhFnQ3tSimZZd1Yqd+/3gmi9GvobrkX8u +fUaR6Ptu+lthSEn9UzoJISbeTBKrKkm4XU3PohcJvOWfaQg/tdThthLsFABKyJg cdHvrkprQVRtMPPDvwejn45CDrDYRNAAzVEokccaXWb3Tl9MR7HyBjNuKB/5ulGJ PnXNcBL+a7qMfWyLYyqMMXwTUdi+O8ph6adhQmFI+89i8A5uVjnj21mKRNd+Drgo pAtRrkiCfzrfHan784mJ6PsJnSTrDjl+IPPRIdmMOuv4g1hxg97K1W6JgOtHybyk 7sJsAVEeri2HcWoXzkxroy2lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgTLCROa+ A5w7qHjyrHwNWYn9RbYwHwYDVR0jBBgwFoAUP3JyYLCUlEIN1npzBNggXUL/P/Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNThFLzkwOERCNEM4OEM2 ODExRjBCQ0VFQjE3MUM0RjlBRTAyL1AzSnlZTENVbEVJTjFucHpCTmdnWFVMX1Bf RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDNKeVlMQ1VsRUlOMW5wekJOZ2dYVUxfUF9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB NThFLzkwOERCNEM4OEM2ODExRjBCQ0VFQjE3MUM0RjlBRTAyL1AzSnlZTENVbEVJ TjFucHpCTmdnWFVMX1BfRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALyjqDm0NtWkfSbiKCyv1v0SbAJuZmpmesA0ixdL0hiyRtQpQyua2mvb 3f/V5wfvsR/jxWoEOI+BEQMODRNcqCr4ORKES25N6Tdf6CVjmPHmfYKeuFF7SsL/ 8hlOLDi+1hqVuE784MlRKuLXQn3Sy9OcqQSl4/BdpWh6pzFplJ+TRdqCQMbRCzqq 0vSJeQmrym6xMg/rYHN/9oHCkyJsJDMF/xrsawJb5q1UEgplqqPUftHYMBPXjBVs TDiYWgwpTb74jJE7+URL029sl87ipi/O03IRiAz5VSTZNdVsODollJ73PWIdmbVX Q3XLCrACJd93bkCpncwjFQKrkZaZBS0= -----END CERTIFICATE-----Generated at Fri Sep 19 02:30:03 2025 by rpki-client