$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json) Hash identifier: zpz/x8L9SUTCh5x8zhfhxSX2xRLuCy1tURupEdUVUdA= Subject key identifier: 12:21:C4:A3:7C:E6:D1:8B:88:36:BD:5E:CD:C5:D9:99:A1:6D:04:89 Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft Manifest number: 017F Signing time: Fri 19 Sep 2025 04:13:02 +0000 Manifest this update: Fri 19 Sep 2025 04:13:01 +0000 Manifest next update: Fri 26 Sep 2025 04:13:01 +0000 Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: uwbtBu552cXIkV8pXWbmu9oyLBmdjt5n+x/ckzQxwo4=) 2: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: W2nP9JOONlKqK4NCPj/Qx89sx6/xDl/kU79SU2cQL5s=) 3: 13713EBA7CF011F0A1556D56C4F9AE02.roa (hash: T9ZQW9KI45+yftMg3AeOLdDC7qadlsWAl60UTn6wQQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Validity Not Before: Sep 19 04:13:01 2025 GMT Not After : Sep 26 04:13:01 2025 GMT Subject: CN=68ccd84d-c38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:63:b3:79:e4:69:fa:37:74:43:34:da:56: 67:f6:e3:82:71:ab:6b:cf:fd:e9:a1:a9:2a:25:ff: a0:d8:5e:86:e0:a1:18:f5:a1:72:e1:ed:c1:90:48: 61:7a:f2:bb:ca:61:9c:ef:ab:f7:12:12:a2:0c:70: 07:62:6a:85:21:64:e0:c7:e3:7b:f8:e5:be:48:a4: 79:1f:0d:c6:b2:e0:53:35:26:53:5e:03:0e:fc:56: 07:d5:18:4a:e4:22:bb:34:60:37:64:9a:45:02:d1: 91:be:38:38:90:ad:1b:78:dc:2f:4c:52:dd:6e:45: 7d:57:b4:91:8c:c5:87:1d:3b:23:5d:c4:71:90:0a: 9a:48:24:57:58:11:d4:ef:65:7d:3e:1a:68:e6:a7: e0:3f:0e:0c:34:53:3c:c6:d0:9f:68:fc:10:78:ab: cd:06:e9:54:4d:71:04:5b:3b:a3:74:3c:22:d0:bb: 17:4d:23:c2:a3:e4:5d:fc:ab:96:e6:6a:26:f6:7c: 99:cf:4d:08:7a:b3:fa:a2:2f:7d:5f:95:41:dc:77: 70:ab:c1:c3:11:ae:4c:89:1b:cb:6e:2c:1f:41:f0: 3f:65:5b:3c:19:ef:64:90:1c:e9:67:50:7f:37:3a: 68:91:ab:17:cb:38:41:91:fb:c9:40:b8:68:a3:74: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:21:C4:A3:7C:E6:D1:8B:88:36:BD:5E:CD:C5:D9:99:A1:6D:04:89 X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:ad:6d:2c:01:75:42:70:5f:88:06:f7:03:4c:3f:f5:13:0f: aa:19:30:6d:a0:d2:e9:99:c7:d1:cf:b4:73:3e:7e:82:e7:cb: 52:25:3f:6b:a6:28:ab:29:5f:44:3b:0a:56:03:e4:5a:1e:73: a6:82:e8:12:6c:7a:01:77:a0:e6:54:7b:a9:9d:35:0d:2e:c3: a6:df:22:2c:c4:f0:72:41:88:20:bb:bc:21:cb:6b:0c:f9:e3: b2:22:b5:98:ea:a9:97:b5:77:cf:a0:fc:75:c2:ff:05:7a:6f: c3:eb:bf:41:81:57:77:80:04:9e:ad:a2:92:21:85:f2:d0:0a: d5:f1:12:6e:ff:d1:5b:ad:ef:82:da:ce:5f:8c:9e:be:dc:71: f7:7c:68:36:a3:db:1c:c6:66:eb:9e:02:10:36:2a:25:4b:f6: e1:fd:34:a0:d2:c3:bc:06:75:5a:c7:13:5a:33:b8:f0:cf:58: aa:e1:3f:bf:bf:08:3a:69:01:b6:4b:4f:23:74:c9:2d:60:2e: e7:6d:28:41:a1:58:6d:2f:62:32:ed:c2:28:3f:d1:a9:7b:f0: 31:1e:c4:bd:e4:3e:7d:1a:da:db:9b:bb:cf:ee:d9:b6:52:c7: 45:1b:97:1a:59:d3:75:f5:ed:14:a2:80:30:11:bc:aa:e8:f9: c0:22:42:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjUwOTE5MDQxMzAxWhcNMjUwOTI2MDQxMzAxWjAYMRYwFAYD VQQDEw02OGNjZDg0ZC1jMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArENjs3nkafo3dEM02lZn9uOCcatrz/3poakqJf+g2F6G4KEY9aFy4e3BkEhh evK7ymGc76v3EhKiDHAHYmqFIWTgx+N7+OW+SKR5Hw3GsuBTNSZTXgMO/FYH1RhK 5CK7NGA3ZJpFAtGRvjg4kK0beNwvTFLdbkV9V7SRjMWHHTsjXcRxkAqaSCRXWBHU 72V9Phpo5qfgPw4MNFM8xtCfaPwQeKvNBulUTXEEWzujdDwi0LsXTSPCo+Rd/KuW 5mom9nyZz00IerP6oi99X5VB3Hdwq8HDEa5MiRvLbiwfQfA/ZVs8Ge9kkBzpZ1B/ NzpokasXyzhBkfvJQLhoo3QWlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIhxKN8 5tGLiDa9Xs3F2ZmhbQSJMB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1 OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1rW0sAXVCcF+IBvcDTD/1Ew+qGTBtoNLpmcfRz7RzPn6C58tSJT9r piirKV9EOwpWA+RaHnOmgugSbHoBd6DmVHupnTUNLsOm3yIsxPByQYggu7why2sM +eOyIrWY6qmXtXfPoPx1wv8Fem/D679BgVd3gASeraKSIYXy0ArV8RJu/9Fbre+C 2s5fjJ6+3HH3fGg2o9scxmbrngIQNiolS/bh/TSg0sO8BnVaxxNaM7jwz1iq4T+/ vwg6aQG2S08jdMktYC7nbShBoVhtL2Iy7cIoP9Gpe/AxHsS95D59Gtrbm7vP7tm2 UsdFG5caWdN19e0UooAwEbyq6PnAIkK5 -----END CERTIFICATE-----Generated at Fri Sep 19 12:38:27 2025 by rpki-client