$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft File: dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json) Hash identifier: aEv0VHj4fesp/kLiAN/QLrWQtbmn9oSek464GhPbzYo= Subject key identifier: DA:C9:46:08:BD:26:10:05:A2:4D:AB:D3:78:9B:63:AB:6E:5D:2E:56 Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Certificate serial: 0886 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft Manifest number: 0880 Signing time: Thu 18 Sep 2025 20:50:50 +0000 Manifest this update: Thu 18 Sep 2025 20:50:49 +0000 Manifest next update: Thu 25 Sep 2025 20:50:49 +0000 Files and hashes: 1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: lRAgml7/LjvjLcSyMv3l5+8Y5eDg0wu/76B3L5svaBg=) 2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: Orts9nJAHIeXwpDUPuUMiOuSaf1VvGVbpuD8ge8k//4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2182 (0x886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB48, serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Validity Not Before: Sep 18 20:50:49 2025 GMT Not After : Sep 25 20:50:49 2025 GMT Subject: CN=68cc70a9-7565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:f2:8b:19:04:7f:08:91:4d:60:4b:07:99: 2d:6a:0f:12:a3:84:6e:73:04:98:23:7f:ae:bf:96: 2b:73:a9:36:66:54:7f:80:b1:7a:b5:fc:42:f7:ac: 68:72:c7:38:1e:bd:f6:98:db:6b:04:cb:b1:7c:41: 9c:7b:a2:60:32:c3:e5:71:b3:4a:49:1f:9e:cd:d0: 9f:07:c2:2d:06:1e:8a:02:ca:37:4a:54:c3:78:04: f7:1d:03:2a:12:93:3b:28:f2:a3:6f:9b:a7:0c:c7: d3:17:cd:9d:00:0b:2b:d5:05:be:39:70:7e:61:cc: 16:a6:67:ad:f3:13:96:97:1b:d8:3d:c8:e5:24:1e: 41:ee:1d:fb:38:10:1a:55:d5:81:f7:c1:36:1e:ed: 3c:f4:20:e3:a7:e0:d6:fb:21:ed:86:1e:19:b4:eb: 90:38:ac:00:75:d9:4b:a9:b9:a1:d5:53:30:0c:46: 85:38:3b:35:ff:6e:1a:45:93:b2:60:d7:46:7a:e9: 3d:ad:52:b8:6d:a0:29:97:ae:3f:23:a8:7e:e5:70: 5c:fb:01:75:cc:df:18:3c:27:9a:8f:36:22:26:42: b3:4e:18:09:4d:b1:53:47:ad:67:91:a9:3b:ba:d5: 3c:39:66:fe:f1:a2:b6:8f:37:de:8a:0f:54:ca:a7: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C9:46:08:BD:26:10:05:A2:4D:AB:D3:78:9B:63:AB:6E:5D:2E:56 X509v3 Authority Key Identifier: keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f6:65:09:cd:82:53:e0:10:c9:f4:43:cc:49:d3:81:63:8b: 12:f4:2b:e5:15:2f:ca:9b:6d:12:b4:5c:98:45:b7:4e:db:82: 78:9f:8f:92:08:2a:dd:d7:a6:01:e3:8f:63:9b:3f:99:f5:87: a1:2f:14:66:36:e4:b9:56:37:d7:81:22:2a:16:fa:cc:3f:73: 96:01:d3:f7:37:0e:5f:70:e8:b5:1a:03:4f:a4:11:59:11:75: 26:d8:96:56:46:72:a5:58:89:0e:a7:25:28:91:7e:f1:95:58: f8:09:89:04:ff:0e:c7:4c:85:c4:40:a4:46:a7:89:be:bd:25: ef:e2:77:22:28:40:de:f2:7c:6e:57:54:09:16:14:00:ca:97: 6b:1c:4c:8f:ff:a6:cc:71:fc:ba:8d:b9:40:fd:1f:1d:9f:bb: ae:a5:a6:40:bc:4b:5d:eb:2f:18:41:79:51:55:3b:91:a7:fd: 8c:81:f5:e9:4a:4d:22:1a:fb:b1:1d:52:be:b6:cb:a4:74:fe: 7c:f0:df:29:91:99:0d:8c:09:6f:3e:a9:00:0b:6a:a3:67:9e: 16:53:ec:8c:92:ba:63:9a:50:44:aa:99:f5:fb:67:50:53:72: 47:55:91:ce:49:04:74:1b:24:41:d2:6d:5c:37:2f:1a:e4:c0: ff:df:20:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCNDgxMTAvBgNVBAUTKDc1RDc1QkRBNTFCQ0EwMDYwRjcwODExMzIzNEM0MTQ1 RTQ0NDQyMUEwHhcNMjUwOTE4MjA1MDQ5WhcNMjUwOTI1MjA1MDQ5WjAYMRYwFAYD VQQDEw02OGNjNzBhOS03NTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGnyixkEfwiRTWBLB5ktag8So4RucwSYI3+uv5Yrc6k2ZlR/gLF6tfxC96xo csc4Hr32mNtrBMuxfEGce6JgMsPlcbNKSR+ezdCfB8ItBh6KAso3SlTDeAT3HQMq EpM7KPKjb5unDMfTF82dAAsr1QW+OXB+YcwWpmet8xOWlxvYPcjlJB5B7h37OBAa VdWB98E2Hu089CDjp+DW+yHthh4ZtOuQOKwAddlLqbmh1VMwDEaFODs1/24aRZOy YNdGeuk9rVK4baApl64/I6h+5XBc+wF1zN8YPCeajzYiJkKzThgJTbFTR61nkak7 utU8OWb+8aK2jzfeig9UyqdJ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrJRgi9 JhAFok2r03ibY6tuXS5WMB8GA1UdIwQYMBaAFHXXW9pRvKAGD3CBEyNMQUXkREIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkI0OC85MEM0NzkxQ0NC QjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9BWVBjSUVUSTB4QlJlUkVR aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkZGIybEc4b0FZUGNJRVRJMHhCUmVSRVFoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkI0OC85MEM0NzkxQ0NCQjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9B WVBjSUVUSTB4QlJlUkVRaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP9mUJzYJT4BDJ9EPMSdOBY4sS9CvlFS/Km20StFyYRbdO24J4n4+S CCrd16YB449jmz+Z9YehLxRmNuS5VjfXgSIqFvrMP3OWAdP3Nw5fcOi1GgNPpBFZ EXUm2JZWRnKlWIkOpyUokX7xlVj4CYkE/w7HTIXEQKRGp4m+vSXv4nciKEDe8nxu V1QJFhQAypdrHEyP/6bMcfy6jblA/R8dn7uupaZAvEtd6y8YQXlRVTuRp/2MgfXp Sk0iGvuxHVK+tsukdP588N8pkZkNjAlvPqkAC2qjZ54WU+yMkrpjmlBEqpn1+2dQ U3JHVZHOSQR0GyRB0m1cNy8a5MD/3yCB -----END CERTIFICATE-----Generated at Thu Sep 18 23:12:10 2025 by rpki-client