$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft File: M1EvnGdsMJ4181WPA7muZBm_dBU.mft (raw, json) Hash identifier: 7g1a8jYEnVG+N13ukVkS4d6dncT7Eab3Gt8a2EIbfqc= Subject key identifier: 84:A0:92:68:7E:C7:B6:68:B2:6B:E9:C6:EE:A6:13:D0:CE:D7:C1:7C Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15 Certificate issuer: /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft Manifest number: 01BB Signing time: Tue 09 Sep 2025 03:05:33 +0000 Manifest this update: Tue 09 Sep 2025 03:05:33 +0000 Manifest next update: Tue 16 Sep 2025 03:05:33 +0000 Files and hashes: 1: M1EvnGdsMJ4181WPA7muZBm_dBU.crl (hash: wgSoOIQEV5ql8vKIFBU4hFjeWI2/5Uj2MTsehOlddhA=) 2: 1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (hash: oCS3tdZ6gguGFimJ8+AyVEXE/8R/Gcn35NJsKRSfeUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB763, serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415 Validity Not Before: Sep 9 03:05:33 2025 GMT Not After : Sep 16 03:05:33 2025 GMT Subject: CN=68bf997d-01bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:67:0c:76:63:10:7d:1c:bc:6b:b8:54:b1:12: 9c:56:9c:f3:f4:8d:1d:6b:54:74:1c:c1:4e:d7:89: 90:78:23:ab:e9:a8:3f:b5:b8:43:98:38:e6:65:77: 3b:21:32:77:dd:a1:51:3c:c7:0f:93:45:38:68:7b: 53:ea:47:a6:87:24:12:3d:7e:dd:9f:c4:a7:24:63: de:23:bb:57:19:cd:aa:2e:21:c7:9c:88:43:52:67: b4:45:a3:62:cb:0c:d3:cb:fe:ae:5e:88:09:8a:4c: 90:07:4f:fa:58:55:f0:f3:74:13:85:32:56:54:93: d3:a9:3f:fa:2e:96:30:d0:b3:5f:c6:fd:38:91:63: 3e:0d:fe:37:56:14:ea:54:01:ed:7f:eb:5d:a2:c9: 81:ba:33:c5:cc:f7:2e:88:ba:fa:70:f9:56:0e:2d: a4:6a:03:e1:82:f8:a3:14:8b:c8:90:91:9e:87:50: 24:5b:f1:f0:5d:d8:84:c1:05:cf:26:03:f7:2a:3e: 5d:f3:97:8e:27:c6:be:7d:3d:9d:e4:f1:42:fe:a5: 2a:7f:77:ec:d7:54:c3:02:a0:4b:26:0d:46:cb:a0: ee:db:34:e6:01:2a:a7:18:74:8a:73:ef:bb:2d:db: 9c:7d:28:cc:57:51:60:b6:78:96:f2:d6:54:d0:56: db:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A0:92:68:7E:C7:B6:68:B2:6B:E9:C6:EE:A6:13:D0:CE:D7:C1:7C X509v3 Authority Key Identifier: keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f7:1f:6c:84:11:9b:95:02:b3:73:b9:23:f2:1e:be:4c:47: 6a:73:c7:90:91:d0:6d:0c:92:ad:ca:84:a5:e2:10:25:e0:09: cc:4c:46:af:19:9e:4e:56:f1:03:fd:8c:70:0b:6a:21:d7:7d: c2:64:5e:6f:a1:fd:01:ce:b8:21:2f:7c:e9:21:07:21:89:4e: 09:3d:fa:a8:e4:b0:af:0e:a2:8b:7a:8c:19:de:98:0f:3f:0d: f9:01:80:3e:2a:02:c4:02:72:bf:91:fa:d6:6f:91:b5:af:55: 96:77:da:8e:49:9b:10:4c:c3:68:5e:a0:fa:8c:5e:2a:41:4c: 62:cb:ec:41:fe:d5:4e:95:d6:c9:f1:a5:dc:f3:a6:82:df:40: 61:6d:b1:bd:c9:a5:c2:84:b4:e3:10:1d:da:8f:7b:e7:f0:a5: 97:8e:1e:f8:92:4e:cb:5e:1d:bb:99:e8:9d:c8:76:3a:d8:8d: ff:94:b2:5d:a8:89:0b:65:4a:22:1a:1a:13:09:67:ed:0b:c8: 14:d3:76:26:88:bc:e1:c5:81:d0:77:cd:24:0b:58:3b:e5:7f: e9:57:4f:98:04:d3:16:ad:6e:db:3e:fa:53:3b:04:6a:a1:41: 11:d1:05:36:54:d9:d5:46:8f:c3:27:1c:c6:34:cf:5e:a5:1d: 96:d8:bc:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjMxMTAvBgNVBAUTKDMzNTEyRjlDNjc2QzMwOUUzNUYzNTU4RjAzQjlBRTY0 MTlCRjc0MTUwHhcNMjUwOTA5MDMwNTMzWhcNMjUwOTE2MDMwNTMzWjAYMRYwFAYD VQQDEw02OGJmOTk3ZC0wMWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WcMdmMQfRy8a7hUsRKcVpzz9I0da1R0HMFO14mQeCOr6ag/tbhDmDjmZXc7 ITJ33aFRPMcPk0U4aHtT6kemhyQSPX7dn8SnJGPeI7tXGc2qLiHHnIhDUme0RaNi ywzTy/6uXogJikyQB0/6WFXw83QThTJWVJPTqT/6LpYw0LNfxv04kWM+Df43VhTq VAHtf+tdosmBujPFzPcuiLr6cPlWDi2kagPhgvijFIvIkJGeh1AkW/HwXdiEwQXP JgP3Kj5d85eOJ8a+fT2d5PFC/qUqf3fs11TDAqBLJg1Gy6Du2zTmASqnGHSKc++7 LducfSjMV1FgtniW8tZU0FbbIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISgkmh+ x7Zosmvpxu6mE9DO18F8MB8GA1UdIwQYMBaAFDNRL5xnbDCeNfNVjwO5rmQZv3QV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2My84RjAyMUY4OEU5 QTcxMUVEQjFDNkIxNDFDNEY5QUUwMi9NMUV2bkdkc01KNDE4MVdQQTdtdVpCbV9k QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xRXZuR2RzTUo0MTgxV1BBN211WkJtX2RCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2My84RjAyMUY4OEU5QTcxMUVEQjFDNkIxNDFDNEY5QUUwMi9NMUV2bkdkc01K NDE4MVdQQTdtdVpCbV9kQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB69x9shBGblQKzc7kj8h6+TEdqc8eQkdBtDJKtyoSl4hAl4AnMTEav GZ5OVvED/YxwC2oh133CZF5vof0BzrghL3zpIQchiU4JPfqo5LCvDqKLeowZ3pgP Pw35AYA+KgLEAnK/kfrWb5G1r1WWd9qOSZsQTMNoXqD6jF4qQUxiy+xB/tVOldbJ 8aXc86aC30BhbbG9yaXChLTjEB3aj3vn8KWXjh74kk7LXh27meidyHY62I3/lLJd qIkLZUoiGhoTCWftC8gU03YmiLzhxYHQd80kC1g75X/pV0+YBNMWrW7bPvpTOwRq oUER0QU2VNnVRo/DJxzGNM9epR2W2LzY -----END CERTIFICATE-----Generated at Tue Sep 9 13:36:53 2025 by rpki-client