$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: MsapaM/p/+YD/rA5pGo5SqIZRCsZHXiRQ1xeHoUOg3U= Subject key identifier: 48:D2:E2:4F:4F:FE:E2:0C:1A:B3:C0:31:1A:65:54:75:A3:9D:2F:10 Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 1904 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 18E6 Signing time: Thu 04 Sep 2025 16:35:50 +0000 Manifest this update: Thu 04 Sep 2025 16:35:49 +0000 Manifest next update: Thu 11 Sep 2025 16:35:49 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: uR9iBHpYtZk4JC0g8qln0Wp86ehH2qXH4wD3rWHlUmU=) 2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: dkIdUkxS0d2PbrqHHzMK0XKv4nvJXGsXU3jrSo/hWKk=) 3: A6ACA298858911E88026B416C4F9AE02.roa (hash: Bm6Hg3gh1j1a80wR2XX7xwyi1WY27Wumi8LE07BcSR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 16:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6404 (0x1904) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: Sep 4 16:35:49 2025 GMT Not After : Sep 11 16:35:49 2025 GMT Subject: CN=68b9bfe6-2a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3c:a5:fe:94:8b:b1:d9:34:83:dc:ad:4e:29: b0:b8:f5:ba:3f:3f:b9:18:59:d4:65:07:3c:15:42: 8a:2d:40:d0:23:87:e3:3e:eb:b4:62:9f:6a:cf:be: e5:1c:51:8d:89:5c:1d:b6:c2:29:9f:a5:46:32:2c: 1b:b3:19:28:5a:fb:26:44:08:43:3a:e3:50:df:93: e5:88:c5:9f:3a:66:af:a6:6d:8e:49:41:4a:4e:dd: 31:59:89:37:cd:56:c3:ad:de:83:a9:ba:4d:3b:04: b6:8d:d3:7b:cf:5d:f9:ce:93:c4:b7:16:37:2b:a5: 1d:3e:a1:f9:d9:0d:25:97:b6:32:88:f1:be:9b:61: 00:a4:9e:bd:37:14:31:10:2a:db:df:33:61:22:70: 3d:f8:a7:c8:65:46:6b:90:d2:87:fe:5e:22:48:27: 4d:8d:9b:df:3b:d3:a8:ed:93:51:29:83:a7:93:bf: 33:63:1b:a4:21:b1:0f:c5:d1:60:cd:10:7f:7b:f6: 9b:c4:d7:55:c0:7f:e1:39:0a:e3:be:59:c0:d9:93: 18:9c:78:5a:ed:91:61:a8:0f:df:1d:c5:ef:75:62: 0a:1d:d2:f5:37:cd:20:a7:ad:74:11:14:b5:71:48: 9a:c6:59:a1:48:b1:64:6a:7b:3a:63:19:6e:6d:97: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D2:E2:4F:4F:FE:E2:0C:1A:B3:C0:31:1A:65:54:75:A3:9D:2F:10 X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:67:33:f1:8d:02:fd:c5:c9:a6:57:0d:dc:36:02:38:ad:6a: 21:5b:da:36:f1:cf:e9:7d:a7:b4:34:ae:1a:55:a8:7c:c4:07: 1e:8b:45:90:7e:8b:fc:9c:3d:22:dd:bc:f6:40:27:8b:bf:91: 4e:62:c5:74:f4:a8:34:6f:cf:4c:a3:b9:88:98:89:3d:fc:02: 30:29:ea:ef:be:cc:92:01:df:84:3c:af:0d:db:62:d8:79:3f: a9:7f:29:cb:54:a7:2d:b8:05:0f:33:70:95:16:4d:f1:c2:97: 5c:3c:a2:9f:d6:36:76:1f:f6:90:42:72:a8:2b:d3:46:7b:c3: e2:05:71:2a:d9:94:f5:12:cd:90:20:06:fc:5f:10:bc:ed:86: c1:c7:cb:25:f5:2b:19:8e:4d:15:b7:a3:0a:9b:df:c8:63:ae: 15:f8:96:59:8a:5f:ff:cd:0a:25:c6:85:72:f4:09:a5:d9:bd: 4d:79:10:ad:c8:51:6d:2b:57:a8:15:cf:7a:47:5e:ca:83:b8: 74:9e:ad:99:40:bd:28:7c:01:8e:c1:cc:be:1c:ea:67:d6:50: 95:88:98:25:e3:f6:49:d3:77:ad:01:54:ac:49:ac:6d:54:e8: 61:44:ab:3a:bf:bc:af:b1:12:54:47:1e:88:04:12:87:d2:3d: 98:9c:ee:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjUwOTA0MTYzNTQ5WhcNMjUwOTExMTYzNTQ5WjAYMRYwFAYD VQQDEw02OGI5YmZlNi0yYTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTyl/pSLsdk0g9ytTimwuPW6Pz+5GFnUZQc8FUKKLUDQI4fjPuu0Yp9qz77l HFGNiVwdtsIpn6VGMiwbsxkoWvsmRAhDOuNQ35PliMWfOmavpm2OSUFKTt0xWYk3 zVbDrd6DqbpNOwS2jdN7z135zpPEtxY3K6UdPqH52Q0ll7YyiPG+m2EApJ69NxQx ECrb3zNhInA9+KfIZUZrkNKH/l4iSCdNjZvfO9Oo7ZNRKYOnk78zYxukIbEPxdFg zRB/e/abxNdVwH/hOQrjvlnA2ZMYnHha7ZFhqA/fHcXvdWIKHdL1N80gp610ERS1 cUiaxlmhSLFkans6YxlubZflvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjS4k9P /uIMGrPAMRplVHWjnS8QMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNZzPxjQL9xcmmVw3cNgI4rWohW9o28c/pfae0NK4aVah8xAcei0WQ fov8nD0i3bz2QCeLv5FOYsV09Kg0b89Mo7mImIk9/AIwKervvsySAd+EPK8N22LY eT+pfynLVKctuAUPM3CVFk3xwpdcPKKf1jZ2H/aQQnKoK9NGe8PiBXEq2ZT1Es2Q IAb8XxC87YbBx8sl9SsZjk0Vt6MKm9/IY64V+JZZil//zQolxoVy9Aml2b1NeRCt yFFtK1eoFc96R17Kg7h0nq2ZQL0ofAGOwcy+HOpn1lCViJgl4/ZJ03etAVSsSaxt VOhhRKs6v7yvsRJURx6IBBKH0j2YnO4v -----END CERTIFICATE-----Generated at Sat Sep 6 02:09:06 2025 by rpki-client