$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: r7W4L3S8ruflfja0lQ10+Bj6SW8VzAV5pwTpgCjGIB4= Subject key identifier: 87:18:32:B5:36:F5:76:AB:DD:42:CA:40:9E:A3:F6:89:D5:1D:B1:0F Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 017B Signing time: Wed 17 Sep 2025 04:22:18 +0000 Manifest this update: Wed 17 Sep 2025 04:22:17 +0000 Manifest next update: Wed 24 Sep 2025 04:22:17 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: xM0YVevH6Ma80XoyrCgDEge8DTka1woGM5CXULHkKYc=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: 8DzejS8W4fMDZxY9d0U5Ub0yW6L6q7unUQ1/+VEKpFE=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: M7N4nEDh5dyTQv8ASFX1wDCT+UJFNgGAfP+B+anOP+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Sep 17 04:22:17 2025 GMT Not After : Sep 24 04:22:17 2025 GMT Subject: CN=68ca3779-d711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:20:66:18:22:63:94:63:4c:7d:73:7c:01: b0:d1:6e:3f:1e:9b:eb:83:e0:2a:a1:d4:15:30:87: ac:19:72:93:23:b6:4d:4a:c6:28:05:ac:4e:b3:d5: ab:61:3b:52:9b:ae:9b:77:68:ed:c7:0e:5f:37:c6: 9d:7d:03:eb:af:2c:ff:e3:d1:6a:ab:61:3c:d2:be: 94:b2:37:5e:d2:d3:de:29:eb:d5:92:87:be:1e:c8: 23:5f:7d:07:d1:2e:50:d1:26:2d:b9:be:a4:8f:71: 3e:f6:cc:1e:db:1a:6f:49:77:58:9a:47:71:13:d2: 10:5d:be:6e:ae:c7:ac:10:9a:49:43:9b:bd:46:ce: 11:72:a3:1c:5e:af:49:47:40:5d:4b:84:70:55:7f: f7:15:02:f8:0b:d0:6a:4d:80:5e:4f:11:d2:cd:1e: 08:0b:66:23:6d:0d:94:01:26:bb:03:8a:b6:1b:1b: 2b:88:21:dd:dc:f9:1b:14:38:29:f3:d5:bc:8e:60: 34:37:d2:79:48:d0:1d:be:54:21:d9:ed:54:63:6d: ad:b6:01:5b:ef:46:f2:50:e8:d6:11:e0:c6:de:7b: 9e:7f:91:6d:1b:47:fa:c4:c3:6b:60:c7:8f:d0:05: 70:f9:76:f5:38:1a:45:85:62:4d:96:07:04:14:65: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:18:32:B5:36:F5:76:AB:DD:42:CA:40:9E:A3:F6:89:D5:1D:B1:0F X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b4:bb:f4:37:2e:54:7e:1a:1c:9d:0e:e9:b7:66:a6:e8:9d: 55:8e:78:e5:1c:98:ff:5a:20:cc:79:61:1b:cd:bc:a8:fd:eb: 35:89:58:63:d3:44:4a:bd:6a:e1:6c:aa:ad:9d:14:9e:c0:b1: 2b:5b:e0:81:ed:7a:34:dd:f1:80:25:60:53:af:11:d0:aa:64: 83:9f:b6:90:4f:f3:4c:bb:9f:93:61:2a:43:2c:e6:66:0f:f0: 26:e3:c0:f5:85:35:16:9a:9b:2b:6f:ce:55:da:1a:16:8a:9a: bf:05:44:9f:2e:a1:66:2a:b7:f4:1f:92:81:4e:5d:ec:f4:db: ea:f1:1c:c5:9a:42:8d:79:9c:44:f5:68:1e:7f:02:9e:8e:73: 32:a5:11:57:7a:24:7f:c4:68:38:a0:50:4e:ba:74:07:00:a2: ac:53:9f:05:32:25:e5:10:84:76:c1:96:d1:12:b2:b7:8e:90: 89:d4:c4:2f:94:46:21:27:66:06:10:5f:88:ab:27:d3:c2:4e: 0e:76:2c:15:59:83:f7:c2:e2:b4:be:e1:61:1a:e3:3f:c5:54: c3:0f:8b:76:82:3b:bb:82:c8:11:3e:8d:eb:c2:88:81:b1:8e: 93:64:d8:74:f7:ab:b7:7c:b8:b8:d5:fe:c8:0b:fe:fc:77:78: ae:30:ab:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjUwOTE3MDQyMjE3WhcNMjUwOTI0MDQyMjE3WjAYMRYwFAYD VQQDEw02OGNhMzc3OS1kNzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJYgZhgiY5RjTH1zfAGw0W4/Hpvrg+AqodQVMIesGXKTI7ZNSsYoBaxOs9Wr YTtSm66bd2jtxw5fN8adfQPrryz/49Fqq2E80r6Usjde0tPeKevVkoe+HsgjX30H 0S5Q0SYtub6kj3E+9swe2xpvSXdYmkdxE9IQXb5ursesEJpJQ5u9Rs4RcqMcXq9J R0BdS4RwVX/3FQL4C9BqTYBeTxHSzR4IC2YjbQ2UASa7A4q2GxsriCHd3PkbFDgp 89W8jmA0N9J5SNAdvlQh2e1UY22ttgFb70byUOjWEeDG3nuef5FtG0f6xMNrYMeP 0AVw+Xb1OBpFhWJNlgcEFGULSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcYMrU2 9Xar3ULKQJ6j9onVHbEPMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTtLv0Ny5UfhocnQ7pt2am6J1VjnjlHJj/WiDMeWEbzbyo/es1iVhj 00RKvWrhbKqtnRSewLErW+CB7Xo03fGAJWBTrxHQqmSDn7aQT/NMu5+TYSpDLOZm D/Am48D1hTUWmpsrb85V2hoWipq/BUSfLqFmKrf0H5KBTl3s9Nvq8RzFmkKNeZxE 9WgefwKejnMypRFXeiR/xGg4oFBOunQHAKKsU58FMiXlEIR2wZbRErK3jpCJ1MQv lEYhJ2YGEF+IqyfTwk4OdiwVWYP3wuK0vuFhGuM/xVTDD4t2gju7gsgRPo3rwoiB sY6TZNh096u3fLi41f7IC/78d3iuMKvD -----END CERTIFICATE-----Generated at Fri Sep 19 02:50:29 2025 by rpki-client