$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft File: 4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json) Hash identifier: bDAVvUbK5Wf5IO7r4WZK35iR1ZgHHAX1NgFE/cjvygQ= Subject key identifier: 79:D6:DF:A6:9C:90:3C:50:E0:AA:49:78:F6:8C:B8:C8:AD:AB:3E:B8 Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 Certificate issuer: /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Certificate serial: 0BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft Manifest number: 0BD1 Signing time: Thu 18 Sep 2025 19:06:32 +0000 Manifest this update: Thu 18 Sep 2025 19:06:32 +0000 Manifest next update: Thu 25 Sep 2025 19:06:32 +0000 Files and hashes: 1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: iWmZX95J9BoDJX69vidjy/Yo9keh+uPWmku+/ugfvqY=) 2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: hJTBnRNb+rBuco3pui7GARCwhnSPV6pCkk0fRFtrHKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Validity Not Before: Sep 18 19:06:32 2025 GMT Not After : Sep 25 19:06:32 2025 GMT Subject: CN=68cc5838-93e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b4:18:c2:1c:d1:97:d9:33:04:0a:dd:39:ad: 61:8c:3a:bb:39:a4:8e:24:b8:e7:60:4b:4b:24:49: f3:91:57:0a:4f:de:2a:81:8c:c4:62:25:73:47:5f: 7c:03:b1:7d:0c:1c:b7:ae:47:f9:2f:5d:5f:1f:ba: 1e:29:b4:07:ec:ba:1a:f7:92:d4:ba:aa:ff:dc:2b: da:9f:ed:4c:6e:35:98:b1:36:54:c3:81:b2:25:b9: b0:74:0f:d7:e6:48:e0:a0:cf:1a:c4:cd:b9:a2:c0: 15:32:c3:6e:42:ef:db:41:4a:b5:2b:8c:57:8c:ff: 2e:ac:71:e1:5b:4b:9b:f6:25:51:dc:25:39:a0:d4: ce:e0:68:54:32:94:8c:47:fc:c8:51:44:88:6e:8e: 83:98:42:79:2e:3d:bc:67:fe:8d:7b:de:1b:f0:49: 68:c4:6e:5e:ed:2e:bf:be:84:b9:7e:52:da:15:e9: 73:45:80:fc:b9:72:cc:01:68:1b:64:dd:79:13:e7: 93:02:ee:d9:96:41:9a:9d:60:d2:fc:2c:69:e6:c8: 07:88:f3:af:bb:b6:76:97:42:53:9b:66:f6:9c:9f: cf:a6:bf:08:e4:47:2d:ca:fb:8c:2c:1f:a4:ab:92: 0d:cb:69:f7:37:95:b7:ee:cc:8f:e8:c1:3b:38:fd: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D6:DF:A6:9C:90:3C:50:E0:AA:49:78:F6:8C:B8:C8:AD:AB:3E:B8 X509v3 Authority Key Identifier: keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:7c:01:79:e5:e6:38:3d:6a:82:10:f0:da:da:69:85:64:64: 4d:72:3e:e2:41:09:41:ac:d7:9b:df:9a:78:92:41:40:ce:de: cb:f3:0d:d0:71:7f:3c:87:4c:b9:f7:1a:78:ad:fc:83:93:44: ac:d8:da:0d:0d:dd:fe:0c:32:1c:a5:23:ae:a8:f0:16:33:ed: a2:bb:27:41:67:e2:3d:cc:4c:ee:3e:b4:9e:86:71:31:e3:74: 06:7f:7d:f0:e5:16:52:08:59:55:7a:28:7c:59:03:4e:6c:3f: 10:a8:43:e3:a1:33:f9:b4:63:ba:01:42:47:ec:1e:da:e5:c3: f5:a5:82:c2:a6:9e:b9:32:fc:42:38:b9:35:c6:b5:a3:50:3b: 4b:c9:f7:fd:08:28:cb:3a:e4:b2:d0:ee:04:08:12:52:69:d7: f6:04:8d:b6:aa:75:97:5d:a7:db:11:bf:2a:7e:56:44:4f:27: 57:a3:20:27:96:86:be:cf:0a:10:dc:7f:23:56:54:f4:e4:64: ba:14:e7:3e:d5:97:b4:ba:21:5e:44:29:ca:8d:d7:2d:d8:89: fa:34:2b:4c:8a:ba:54:78:a1:7b:e6:1f:34:18:fb:b7:ef:be: ca:fd:d6:9c:54:65:5a:ac:55:1b:19:65:f1:85:b5:4a:06:ea: 8f:3e:9c:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGMUMxMTAvBgNVBAUTKEUyMDgxRUE0RDNDREI1OTlFMjYwODYwMjcwNEZEQjM1 ODZENDhGNTcwHhcNMjUwOTE4MTkwNjMyWhcNMjUwOTI1MTkwNjMyWjAYMRYwFAYD VQQDEw02OGNjNTgzOC05M2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37QYwhzRl9kzBArdOa1hjDq7OaSOJLjnYEtLJEnzkVcKT94qgYzEYiVzR198 A7F9DBy3rkf5L11fH7oeKbQH7Loa95LUuqr/3Cvan+1MbjWYsTZUw4GyJbmwdA/X 5kjgoM8axM25osAVMsNuQu/bQUq1K4xXjP8urHHhW0ub9iVR3CU5oNTO4GhUMpSM R/zIUUSIbo6DmEJ5Lj28Z/6Ne94b8EloxG5e7S6/voS5flLaFelzRYD8uXLMAWgb ZN15E+eTAu7ZlkGanWDS/Cxp5sgHiPOvu7Z2l0JTm2b2nJ/Ppr8I5EctyvuMLB+k q5INy2n3N5W37syP6ME7OP2gUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnW36ac kDxQ4KpJePaMuMitqz64MB8GA1UdIwQYMBaAFOIIHqTTzbWZ4mCGAnBP2zWG1I9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREYxQy8zNkM5NjIyMDI2 M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRabmlZSVlDY0VfYk5ZYlVq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRnZ2VwTlBOdFpuaVlJWUNjRV9iTlliVWoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REYxQy8zNkM5NjIyMDI2M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRa bmlZSVlDY0VfYk5ZYlVqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnfAF55eY4PWqCEPDa2mmFZGRNcj7iQQlBrNeb35p4kkFAzt7L8w3Q cX88h0y59xp4rfyDk0Ss2NoNDd3+DDIcpSOuqPAWM+2iuydBZ+I9zEzuPrSehnEx 43QGf33w5RZSCFlVeih8WQNObD8QqEPjoTP5tGO6AUJH7B7a5cP1pYLCpp65MvxC OLk1xrWjUDtLyff9CCjLOuSy0O4ECBJSadf2BI22qnWXXafbEb8qflZETydXoyAn loa+zwoQ3H8jVlT05GS6FOc+1Ze0uiFeRCnKjdct2In6NCtMirpUeKF75h80GPu3 777K/dacVGVarFUbGWXxhbVKBuqPPpzz -----END CERTIFICATE-----Generated at Fri Sep 19 07:32:50 2025 by rpki-client