$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft File: rRUq9u8CmWIL-fd_1gzYsxQEF68.mft (raw, json) Hash identifier: dGtCF1WnCCkPQ+Tsz3pJ/jSTqMuuS/W4mnk4uQ6Csa8= Subject key identifier: 8F:BF:1D:3A:24:A7:32:59:70:7F:71:04:5E:B4:CE:8B:9D:14:51:1E Authority key identifier: AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF Certificate issuer: /CN=A91CB92A/serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft Manifest number: 08 Signing time: Tue 09 Sep 2025 08:15:55 +0000 Manifest this update: Tue 09 Sep 2025 08:15:54 +0000 Manifest next update: Tue 16 Sep 2025 08:15:54 +0000 Files and hashes: 1: rRUq9u8CmWIL-fd_1gzYsxQEF68.crl (hash: LZ4Q3X5gnHkn6zGdpAJ2ZtwYxFew22QqZaAC1mtRChU=) 2: 8CAFF0E884AF11F0A1FF182BC4F9AE02.roa (hash: SWZOIIyqYqeKGjNImIfW9J7E02rh/5URfQeoSZwvbmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 08:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB92A, serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF Validity Not Before: Sep 9 08:15:54 2025 GMT Not After : Sep 16 08:15:54 2025 GMT Subject: CN=68bfe23b-bd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:53:d0:de:30:9e:f6:5b:1b:0d:8f:f4:de: 46:36:8e:ea:d3:28:d3:e6:c6:50:9a:5f:e4:06:ce: 7b:be:6f:f7:69:f7:41:b8:49:21:0c:dc:be:57:fa: 7e:b2:1a:77:f2:fa:05:01:f6:b6:e5:a1:52:b2:46: 24:15:53:14:ed:59:a7:34:26:64:78:d7:b8:a0:2d: e7:bd:aa:c8:b8:cb:44:96:88:a3:a2:40:91:7f:bb: bd:e9:55:8b:df:fa:31:f8:94:b4:88:0a:a4:a0:61: 35:aa:42:2c:62:05:fa:91:62:ee:84:6c:3f:60:36: 1a:a5:52:52:15:59:7e:0c:08:e9:08:7f:6a:5f:17: 30:23:d4:e0:4e:94:89:6f:5d:ae:2c:b3:ae:40:66: 95:77:19:66:5c:a8:cb:3d:8b:ec:ff:4a:b6:e2:29: 31:89:37:43:fe:dc:1d:92:8d:68:2d:8b:14:51:ac: 82:47:bc:77:04:f1:dd:a9:94:b4:fd:73:ba:03:8b: 3f:50:10:43:fb:7a:25:84:39:e0:66:a8:f0:79:96: f3:1c:61:25:7a:d1:8c:cd:10:99:4f:8b:fa:0e:a4: 43:be:bf:c7:f7:f6:37:32:99:1d:d4:3a:cd:4f:23: b0:70:65:92:8f:c7:ca:ea:60:17:40:e0:89:30:a2: 19:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BF:1D:3A:24:A7:32:59:70:7F:71:04:5E:B4:CE:8B:9D:14:51:1E X509v3 Authority Key Identifier: keyid:AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:f1:b3:62:0d:50:79:14:e6:24:97:ac:62:a3:42:e7:43:2a: 2d:2f:8b:11:17:d1:1b:20:5a:00:da:a9:15:c8:c6:2c:3b:1a: 80:ff:a8:83:bd:f3:4c:9e:56:66:ab:df:66:1f:8c:49:7c:a8: a9:17:b6:30:fd:32:8e:25:24:33:53:9a:52:4f:47:fe:4f:87: 18:a2:65:d0:d6:74:0b:63:b8:68:b1:99:75:7c:df:e1:2f:63: 2e:df:93:79:8b:15:27:55:1b:50:eb:09:d9:07:c1:de:b4:02: 7a:81:36:40:05:ca:16:c6:1b:f9:a5:6d:c0:49:89:53:5d:06: 6d:e3:1e:e6:a9:fe:d4:45:a4:d7:e0:5a:27:8a:da:06:12:ae: a2:10:d2:f4:73:1e:a4:8e:71:d4:19:0d:c7:5d:7a:a3:f8:a7: 18:b4:f2:55:49:a0:1f:5a:18:6b:93:f4:58:c8:4d:8b:7f:1f: 98:87:cb:9b:39:35:63:ed:b8:13:62:45:4b:79:fe:9e:75:ed: 8f:3e:bf:01:9a:c7:db:32:09:23:ee:c9:2d:d6:db:65:7b:ce: 7a:aa:76:12:c1:68:41:6d:42:e2:3e:c4:f1:1d:49:52:dd:fd: 82:f3:f5:1d:59:41:40:0f:66:1c:99:0d:e3:93:d1:a8:51:a2: b0:e2:4b:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjkyQTExMC8GA1UEBRMoQUQxNTJBRjZFRjAyOTk2MjBCRjlGNzdGRDYwQ0Q4QjMx NDA0MTdBRjAeFw0yNTA5MDkwODE1NTRaFw0yNTA5MTYwODE1NTRaMBgxFjAUBgNV BAMTDTY4YmZlMjNiLWJkMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIplPQ3jCe9lsbDY/03kY2jurTKNPmxlCaX+QGznu+b/dp90G4SSEM3L5X+n6y Gnfy+gUB9rbloVKyRiQVUxTtWac0JmR417igLee9qsi4y0SWiKOiQJF/u73pVYvf +jH4lLSICqSgYTWqQixiBfqRYu6EbD9gNhqlUlIVWX4MCOkIf2pfFzAj1OBOlIlv Xa4ss65AZpV3GWZcqMs9i+z/SrbiKTGJN0P+3B2SjWgtixRRrIJHvHcE8d2plLT9 c7oDiz9QEEP7eiWEOeBmqPB5lvMcYSV60YzNEJlPi/oOpEO+v8f39jcymR3UOs1P I7BwZZKPx8rqYBdA4IkwohljAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj78dOiSn Mllwf3EEXrTOi50UUR4wHwYDVR0jBBgwFoAUrRUq9u8CmWIL+fd/1gzYsxQEF68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCOTJBL0ZDMTJFMzEwODRB RTExRjA5NkMwOUQyOUM0RjlBRTAyL3JSVXE5dThDbVdJTC1mZF8xZ3pZc3hRRUY2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclJVcTl1OENtV0lMLWZkXzFnellzeFFFRjY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC OTJBL0ZDMTJFMzEwODRBRTExRjA5NkMwOUQyOUM0RjlBRTAyL3JSVXE5dThDbVdJ TC1mZF8xZ3pZc3hRRUY2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGfxs2INUHkU5iSXrGKjQudDKi0vixEX0RsgWgDaqRXIxiw7GoD/qIO9 80yeVmar32YfjEl8qKkXtjD9Mo4lJDNTmlJPR/5PhxiiZdDWdAtjuGixmXV83+Ev Yy7fk3mLFSdVG1DrCdkHwd60AnqBNkAFyhbGG/mlbcBJiVNdBm3jHuap/tRFpNfg WieK2gYSrqIQ0vRzHqSOcdQZDcddeqP4pxi08lVJoB9aGGuT9FjITYt/H5iHy5s5 NWPtuBNiRUt5/p517Y8+vwGax9syCSPuyS3W22V7znqqdhLBaEFtQuI+xPEdSVLd /YLz9R1ZQUAPZhyZDeOT0ahRorDiS8I= -----END CERTIFICATE-----Generated at Tue Sep 9 13:33:58 2025 by rpki-client