$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft File: a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json) Hash identifier: QJWfOmeBOB6zNRBrsPwsz/yh3hKoAFbXCpQNsWRUpXA= Subject key identifier: 2B:53:F3:BA:A9:4C:08:50:CC:37:C0:9F:27:67:39:1D:FA:EA:95:F3 Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B Certificate issuer: /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft Manifest number: 01A7 Signing time: Fri 19 Sep 2025 03:45:00 +0000 Manifest this update: Fri 19 Sep 2025 03:45:00 +0000 Manifest next update: Fri 26 Sep 2025 03:45:00 +0000 Files and hashes: 1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: pW8/ylSc2X2RpwfFCggFks8GMX4j+AxWyWjLcDGPUnM=) 2: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: uBYO+C6UlAsgzho2C/yzZOLuZD7LLvHBHa19TIwL+RU=) 3: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: 4bQshwbLuuIizTEi1i8kAXXdNltaobrkapRT1VY6dw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Validity Not Before: Sep 19 03:45:00 2025 GMT Not After : Sep 26 03:45:00 2025 GMT Subject: CN=68ccd1bc-c9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:ee:ae:88:0f:d1:0b:45:94:79:40:b8:98: ba:09:95:3d:68:64:db:e2:ab:8d:e0:4d:3a:03:79: e0:71:2a:d0:1a:9a:89:e7:65:b3:2a:33:3b:29:a3: 1d:16:0f:e3:a0:40:d0:ee:55:86:06:d4:de:0e:b2: 96:3c:31:91:e7:80:94:b9:3e:e4:5d:11:73:fc:d1: a0:b1:ba:8b:0c:3e:e4:cf:6f:5b:6c:1a:d3:dd:17: 12:79:f9:01:70:4d:08:25:10:09:98:13:57:97:62: 32:13:4b:bb:ba:50:09:8a:ab:b1:6d:39:d0:18:09: 7d:fc:1f:2f:cb:ee:d3:03:d7:82:81:12:c4:f3:99: 27:74:3c:c9:8e:f0:de:70:bc:2c:5a:3e:59:b6:d8: 1e:d1:54:75:86:2c:b8:5f:35:75:a7:2b:f0:d4:d3: 19:3b:ab:79:0b:96:5b:71:96:ab:ea:44:cf:4f:4e: b6:10:38:12:ef:72:02:1e:8a:38:4e:58:e5:3b:dc: 9f:6d:71:2d:77:74:f5:64:e0:cc:29:1d:48:3f:e7: 8d:fe:36:c5:23:67:79:32:af:52:d8:4b:20:ef:dd: 23:7a:d9:c3:7f:cf:27:df:4b:be:e3:93:8a:c2:cd: 78:d7:f3:3a:71:31:f8:41:fd:f3:41:72:b1:34:e1: 2d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:53:F3:BA:A9:4C:08:50:CC:37:C0:9F:27:67:39:1D:FA:EA:95:F3 X509v3 Authority Key Identifier: keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:e0:2a:84:f2:11:87:0f:b7:92:c9:f6:a4:a0:11:6b:84:bd: e4:b1:66:c5:66:75:0c:39:c2:86:31:08:29:2f:5a:04:ea:15: 10:a9:41:ef:57:02:dc:84:02:71:8a:a9:6d:fb:bf:06:9c:93: a5:63:4b:92:e3:41:7f:74:b2:6a:db:58:15:c3:1f:00:c9:62: 50:b5:a8:e8:26:ed:8f:23:7d:2a:5f:ea:89:76:35:1f:51:b2: 9e:a1:2d:5e:b6:ba:a8:69:cc:c2:26:84:12:d2:bf:6c:85:d9: 16:9d:50:61:e6:3f:6d:d2:fd:f9:3a:54:91:64:c7:4d:0f:6b: 5e:76:a6:4b:c4:6f:a4:54:b2:99:70:22:a1:c7:9a:84:cb:66: 57:5d:36:89:e6:1e:a4:01:0b:d3:3d:45:d4:05:c9:6f:79:1a: e1:a1:61:3b:71:bc:46:62:4c:35:5d:ed:b0:49:80:a4:6d:ff: 91:3e:b5:2b:4d:fe:01:db:51:37:52:19:73:5e:d4:c1:52:dc: 89:3c:1c:5f:24:84:13:19:86:f5:24:8d:39:8f:59:f9:c1:d1: 06:9a:a6:5c:28:a7:3c:27:fe:4b:37:c7:ab:60:ef:10:c7:ba: dd:44:66:7e:f7:2d:2a:9c:21:bc:61:e5:51:e2:8c:7b:3a:21: 36:27:df:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4NkYxMTAvBgNVBAUTKDZCQUREN0Q1RDExMjgxMTJENzBBQjRBMjQ1MjQwMTQy OEY5RDA5N0IwHhcNMjUwOTE5MDM0NTAwWhcNMjUwOTI2MDM0NTAwWjAYMRYwFAYD VQQDEw02OGNjZDFiYy1jOWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsELurogP0QtFlHlAuJi6CZU9aGTb4quN4E06A3ngcSrQGpqJ52WzKjM7KaMd Fg/joEDQ7lWGBtTeDrKWPDGR54CUuT7kXRFz/NGgsbqLDD7kz29bbBrT3RcSefkB cE0IJRAJmBNXl2IyE0u7ulAJiquxbTnQGAl9/B8vy+7TA9eCgRLE85kndDzJjvDe cLwsWj5Zttge0VR1hiy4XzV1pyvw1NMZO6t5C5ZbcZar6kTPT062EDgS73ICHoo4 TljlO9yfbXEtd3T1ZODMKR1IP+eN/jbFI2d5Mq9S2Esg790jetnDf88n30u+45OK ws141/M6cTH4Qf3zQXKxNOEtBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtT87qp TAhQzDfAnydnOR366pXzMB8GA1UdIwQYMBaAFGut19XREoES1wq0okUkAUKPnQl7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzg2Ri80N0JBMjhBRTEz RjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dSTFhDclNpUlNRQlFvLWRD WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2M1gxZEVTZ1JMWENyU2lSU1FCUW8tZENYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qzg2Ri80N0JBMjhBRTEzRjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dS TFhDclNpUlNRQlFvLWRDWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp4CqE8hGHD7eSyfakoBFrhL3ksWbFZnUMOcKGMQgpL1oE6hUQqUHv VwLchAJxiqlt+78GnJOlY0uS40F/dLJq21gVwx8AyWJQtajoJu2PI30qX+qJdjUf UbKeoS1etrqoaczCJoQS0r9shdkWnVBh5j9t0v35OlSRZMdND2tedqZLxG+kVLKZ cCKhx5qEy2ZXXTaJ5h6kAQvTPUXUBclveRrhoWE7cbxGYkw1Xe2wSYCkbf+RPrUr Tf4B21E3UhlzXtTBUtyJPBxfJIQTGYb1JI05j1n5wdEGmqZcKKc8J/5LN8erYO8Q x7rdRGZ+9y0qnCG8YeVR4ox7OiE2J9/x -----END CERTIFICATE-----Generated at Fri Sep 19 08:33:18 2025 by rpki-client