$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft File: MEsColZqFjrazh-lIaMKfmJqwR4.mft (raw, json) Hash identifier: BgjnpAFBiqrh0hqFOWyqeIfMCwms4uRYJ2WG29CQMkc= Subject key identifier: E8:9F:9C:5B:4B:AD:F4:5B:2A:C4:E3:4A:14:AF:54:E0:62:6A:EE:3B Authority key identifier: 30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E Certificate issuer: /CN=A91CAECE/serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft Manifest number: 53 Signing time: Wed 17 Sep 2025 07:57:44 +0000 Manifest this update: Wed 17 Sep 2025 07:57:44 +0000 Manifest next update: Wed 24 Sep 2025 07:57:44 +0000 Files and hashes: 1: MEsColZqFjrazh-lIaMKfmJqwR4.crl (hash: 4+HteqxL/zYaLwzlgE37Dt+CP0dMyaQK4VZps/b2k+Q=) 2: 07063FA4134B11F0B48EFA0AC4F9AE02.roa (hash: WNVrInNAUMIDrW85MacHTXC8HeXu1LqrkLU97EbnyxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAECE, serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E Validity Not Before: Sep 17 07:57:44 2025 GMT Not After : Sep 24 07:57:44 2025 GMT Subject: CN=68ca69f8-67c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:81:76:8a:90:af:4c:fb:58:96:b1:6e:a0: 34:b1:2d:31:65:87:3c:0b:c5:28:9d:82:bb:4e:8c: c5:fa:cd:4d:66:83:b2:03:20:8e:e7:55:f0:6b:38: 91:bc:f5:1e:fa:12:56:1f:42:e2:db:cf:5d:f3:ec: d3:04:20:99:4f:e2:90:6d:62:05:90:2c:83:39:49: 25:9d:44:c3:88:36:8a:39:98:18:c9:99:99:00:e7: 97:3c:f7:98:02:e9:5d:e3:ca:59:2f:87:a8:28:41: cf:f5:b6:29:9f:5a:15:64:c2:2e:7b:c4:2f:b5:2e: 6b:7c:5d:ca:37:cd:a4:85:17:6f:34:46:71:d8:01: 5d:f8:e6:8a:b0:1b:5b:2b:68:84:27:d8:ed:9a:e4: 71:29:09:75:2f:c9:ed:66:99:33:5c:f9:dc:94:aa: bf:32:01:41:d1:5e:8a:f3:db:88:ee:9d:f0:ee:70: 80:99:06:a1:46:dc:32:31:dc:56:60:3a:35:a2:20: db:a7:10:9f:22:80:39:0e:08:f7:58:fb:2b:27:5b: e7:5e:99:a4:93:dd:3d:5f:5a:2d:60:cd:af:ef:0a: 03:fc:3c:50:d5:5d:df:4b:54:a6:21:ae:35:ac:a6: 91:39:d1:a4:f9:3d:be:1c:00:ff:77:b2:f3:60:e0: 31:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9F:9C:5B:4B:AD:F4:5B:2A:C4:E3:4A:14:AF:54:E0:62:6A:EE:3B X509v3 Authority Key Identifier: keyid:30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7e:73:8f:3a:d5:2f:63:21:b9:f3:b9:b5:64:56:ce:11:57: 2a:47:1f:15:43:be:c8:d9:53:3f:4a:d3:bc:31:f2:75:b2:83: 64:ea:07:73:61:ed:10:b2:a7:84:4c:26:5e:f7:28:e3:2b:22: f1:c0:97:79:38:8c:61:33:fb:79:f0:0d:56:db:dc:4f:fc:92: 2d:0a:47:d8:c2:ee:87:d3:b6:59:f1:10:9e:00:43:ab:ed:14: df:d3:67:b6:a5:0f:f8:5a:9e:7f:95:08:ed:52:7c:58:cb:a6: fe:aa:8c:4d:6e:ba:f8:05:7f:74:c5:33:3e:32:fe:73:46:86: 4c:6a:93:6d:46:ba:5d:16:fc:34:91:1f:1a:14:41:ca:a6:8f: ba:88:b0:e1:fe:d4:2c:b3:6b:c7:3f:50:56:6b:5a:a3:28:c8: 20:fe:94:7b:ff:8d:30:4d:d2:ec:14:4a:b0:2c:b1:50:3e:1f: bf:36:87:a2:2d:14:f3:7b:9d:6c:1c:28:5a:17:f8:1c:ec:75: 7b:0e:0a:bb:dd:8a:a4:94:6a:b0:13:bd:5e:e9:8c:49:83:b6: 68:b8:2c:65:f2:c0:5c:cf:2d:16:e7:86:35:56:d1:69:c7:87: cb:dd:32:55:84:c9:2e:f6:fd:64:49:17:57:59:de:b1:59:dd: f4:d0:d9:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QUVDRTExMC8GA1UEBRMoMzA0QjAyQTI1NjZBMTYzQURBQ0UxRkE1MjFBMzBBN0U2 MjZBQzExRTAeFw0yNTA5MTcwNzU3NDRaFw0yNTA5MjQwNzU3NDRaMBgxFjAUBgNV BAMTDTY4Y2E2OWY4LTY3YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjvIF2ipCvTPtYlrFuoDSxLTFlhzwLxSidgrtOjMX6zU1mg7IDII7nVfBrOJG8 9R76ElYfQuLbz13z7NMEIJlP4pBtYgWQLIM5SSWdRMOINoo5mBjJmZkA55c895gC 6V3jylkvh6goQc/1timfWhVkwi57xC+1Lmt8Xco3zaSFF280RnHYAV345oqwG1sr aIQn2O2a5HEpCXUvye1mmTNc+dyUqr8yAUHRXorz24junfDucICZBqFG3DIx3FZg OjWiINunEJ8igDkOCPdY+ysnW+demaST3T1fWi1gza/vCgP8PFDVXd9LVKYhrjWs ppE50aT5Pb4cAP93svNg4DFBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6J+cW0ut 9FsqxONKFK9U4GJq7jswHwYDVR0jBBgwFoAUMEsColZqFjrazh+lIaMKfmJqwR4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBRUNFLzNERjREQzkyMTM0 QTExRjBBNjk2ODQ4N0M0RjlBRTAyL01Fc0NvbFpxRmpyYXpoLWxJYU1LZm1KcXdS NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUVzQ29sWnFGanJhemgtbElhTUtmbUpxd1I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB RUNFLzNERjREQzkyMTM0QTExRjBBNjk2ODQ4N0M0RjlBRTAyL01Fc0NvbFpxRmpy YXpoLWxJYU1LZm1KcXdSNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAp+c4861S9jIbnzubVkVs4RVypHHxVDvsjZUz9K07wx8nWyg2TqB3Nh 7RCyp4RMJl73KOMrIvHAl3k4jGEz+3nwDVbb3E/8ki0KR9jC7ofTtlnxEJ4AQ6vt FN/TZ7alD/hann+VCO1SfFjLpv6qjE1uuvgFf3TFMz4y/nNGhkxqk21Gul0W/DSR HxoUQcqmj7qIsOH+1Cyza8c/UFZrWqMoyCD+lHv/jTBN0uwUSrAssVA+H782h6It FPN7nWwcKFoX+BzsdXsOCrvdiqSUarATvV7pjEmDtmi4LGXywFzPLRbnhjVW0WnH h8vdMlWEyS72/WRJF1dZ3rFZ3fTQ2RI= -----END CERTIFICATE-----Generated at Thu Sep 18 19:05:25 2025 by rpki-client