$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft File: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft (raw, json) Hash identifier: M+wvXa9I6KmfpMwemp/i5Twp5o2la9xO0T8RBHppol4= Subject key identifier: 28:63:0F:53:71:9C:0D:D0:69:0D:F6:FF:91:45:54:27:3C:22:79:21 Authority key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88 Certificate issuer: /CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft Manifest number: 0130 Signing time: Tue 09 Sep 2025 04:39:00 +0000 Manifest this update: Tue 09 Sep 2025 04:39:00 +0000 Manifest next update: Tue 16 Sep 2025 04:39:00 +0000 Files and hashes: 1: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl (hash: eZiBIAVWLwk4qzOJewQ21hHcurM6wyi/GzlxRXsbSvw=) 2: 4CC50DB2BB7811EE9416DD42C4F9AE02.roa (hash: zPBkBX8TSXO+DP7kaXxBDzxvo14LuZd67QJ/cyraKFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75, serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188 Validity Not Before: Sep 9 04:39:00 2025 GMT Not After : Sep 16 04:39:00 2025 GMT Subject: CN=68bfaf64-6bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d5:5f:77:e4:87:58:08:5b:d6:45:78:73:95: ad:e0:94:e8:d1:4d:e6:75:4c:ec:6f:34:56:f5:a5: d1:71:43:fb:2f:a5:7f:cf:72:f7:b4:c1:d4:05:59: 29:fe:eb:51:62:08:62:06:aa:bf:13:96:c6:fe:ef: 0e:58:c7:27:e9:b0:d9:a1:41:48:fc:ba:1b:81:92: d1:be:f8:fe:23:9b:27:f9:35:82:bf:1a:c2:68:a4: 67:fe:14:97:e4:28:19:3b:5a:f4:e6:fb:61:7d:08: e7:7f:03:f3:d0:e9:8f:a4:33:1a:7e:1f:65:36:4e: 0a:70:bc:2d:51:7f:7f:ce:06:42:ff:0a:7b:f4:b2: 3a:54:52:76:b5:65:eb:2e:b5:8c:a1:07:93:23:cc: b2:00:1f:f6:40:6a:a1:e1:64:10:6b:34:86:e2:86: 0c:eb:e5:52:a1:2b:69:95:14:11:02:0b:c9:31:ef: bf:88:07:cc:f3:b3:27:cf:22:10:ce:f9:b3:1e:01: a8:e9:bc:e1:1e:eb:6f:aa:b4:fa:86:57:3f:5a:e6: b5:9a:78:91:39:8b:e0:25:91:2f:45:6a:2f:ef:78: ce:89:ff:24:99:0b:c4:35:db:3f:36:93:de:5a:50: 64:0c:22:92:9c:bc:43:de:b4:43:49:16:d3:1d:9b: 25:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:63:0F:53:71:9C:0D:D0:69:0D:F6:FF:91:45:54:27:3C:22:79:21 X509v3 Authority Key Identifier: keyid:7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4d:0c:b0:eb:af:55:42:49:4c:45:48:88:78:1f:cb:35:b5: 20:d4:d5:2a:08:e1:3b:60:bd:c3:09:9f:d3:24:a1:02:d3:92: b9:fc:e8:5a:d4:82:05:fa:c5:2a:3e:1d:10:6b:c2:cf:7d:9a: df:16:70:bc:47:8e:b3:9f:47:e3:28:d1:29:b1:95:bf:62:f0: a5:d6:6c:78:5e:0c:e9:32:5c:24:d1:b9:23:fa:76:e5:da:80: 0f:47:38:4e:67:75:15:d9:ea:a2:82:58:c5:7c:40:9f:50:18: ae:8c:5b:fc:f1:58:2e:d3:1d:09:a5:63:92:c0:c4:2f:d9:2e: 4d:06:58:94:66:96:98:38:a2:2b:e9:aa:61:0b:69:7f:30:85: 03:8f:61:48:18:3f:43:63:36:f8:ee:c9:96:a8:f1:2a:3e:48: 27:ce:dc:60:e4:43:c3:16:e1:30:44:db:3a:b1:50:1c:aa:a0: df:76:5c:9f:f0:0e:b5:77:21:7b:bd:af:e3:e6:2c:02:ec:57: 43:f5:94:7b:3b:67:a0:10:b0:4b:b7:f4:05:fd:2b:70:e9:69: 8f:e2:84:36:66:bd:2d:83:e5:62:f7:57:f3:6e:ea:1f:29:f0: 06:7a:c3:da:0a:24:9b:82:b9:43:c0:1c:a1:46:60:1a:03:4c: b6:c8:02:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCNzUxMTAvBgNVBAUTKDdCRTk4QzdBQUFEODdDOUYyNTkyOTYzMDE2NDNBMzYx MEE3QjUxODgwHhcNMjUwOTA5MDQzOTAwWhcNMjUwOTE2MDQzOTAwWjAYMRYwFAYD VQQDEw02OGJmYWY2NC02YmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztVfd+SHWAhb1kV4c5Wt4JTo0U3mdUzsbzRW9aXRcUP7L6V/z3L3tMHUBVkp /utRYghiBqq/E5bG/u8OWMcn6bDZoUFI/LobgZLRvvj+I5sn+TWCvxrCaKRn/hSX 5CgZO1r05vthfQjnfwPz0OmPpDMafh9lNk4KcLwtUX9/zgZC/wp79LI6VFJ2tWXr LrWMoQeTI8yyAB/2QGqh4WQQazSG4oYM6+VSoStplRQRAgvJMe+/iAfM87MnzyIQ zvmzHgGo6bzhHutvqrT6hlc/Wua1mniROYvgJZEvRWov73jOif8kmQvENds/NpPe WlBkDCKSnLxD3rRDSRbTHZslxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChjD1Nx nA3QaQ32/5FFVCc8InkhMB8GA1UdIwQYMBaAFHvpjHqq2HyfJZKWMBZDo2EKe1GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREI3NS9FNjUxOUExNEJC NzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9lLW1NZXFyWWZKOGxrcFl3RmtPallRcDdV WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtbU1lcXJZZko4bGtwWXdGa09qWVFwN1VZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REI3NS9FNjUxOUExNEJCNzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9lLW1NZXFyWWZK OGxrcFl3RmtPallRcDdVWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvTQyw669VQklMRUiIeB/LNbUg1NUqCOE7YL3DCZ/TJKEC05K5/Oha 1IIF+sUqPh0Qa8LPfZrfFnC8R46zn0fjKNEpsZW/YvCl1mx4XgzpMlwk0bkj+nbl 2oAPRzhOZ3UV2eqigljFfECfUBiujFv88Vgu0x0JpWOSwMQv2S5NBliUZpaYOKIr 6aphC2l/MIUDj2FIGD9DYzb47smWqPEqPkgnztxg5EPDFuEwRNs6sVAcqqDfdlyf 8A61dyF7va/j5iwC7FdD9ZR7O2egELBLt/QF/Stw6WmP4oQ2Zr0tg+Vi91fzbuof KfAGesPaCiSbgrlDwByhRmAaA0y2yAKW -----END CERTIFICATE-----Generated at Tue Sep 9 13:24:32 2025 by rpki-client