$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft File: 148wkE5135TOt1lmr4OOdj6ol2I.mft (raw, json) Hash identifier: V85QJigyRTTo/QMyDPfQR5rUcdiLr+/1giCZWT67zjo= Subject key identifier: A0:09:77:ED:19:4F:49:ED:BA:D6:A4:61:FB:54:82:ED:7C:B7:58:4B Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 Certificate issuer: /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft Manifest number: FA Signing time: Wed 17 Sep 2025 05:47:01 +0000 Manifest this update: Wed 17 Sep 2025 05:47:01 +0000 Manifest next update: Wed 24 Sep 2025 05:47:01 +0000 Files and hashes: 1: 148wkE5135TOt1lmr4OOdj6ol2I.crl (hash: bYLNpxZen4+ve1tpF7xasnXsym7em6cHsv395Mw10CY=) 2: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (hash: 3q4SG/qlGVDYq4EV5cqZmr+jLzfEittQVkz7pS+z/KE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Validity Not Before: Sep 17 05:47:01 2025 GMT Not After : Sep 24 05:47:01 2025 GMT Subject: CN=68ca4b55-0ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:f4:0e:11:ba:f2:a7:b6:25:84:8e:97:3c: 15:96:74:e4:79:d8:8f:0b:10:5e:2d:12:28:96:19: aa:68:e0:4a:84:61:2b:62:6c:38:f0:51:83:53:e0: 7d:e4:cc:52:ad:55:29:97:e6:2d:d4:a7:68:3a:d0: 6c:35:da:34:a3:51:cc:89:a5:b1:c3:c5:70:ea:ec: d2:b8:68:39:37:e0:18:60:7c:ba:eb:1e:a3:08:e9: 66:8c:65:2d:bb:f9:f4:76:39:cd:e4:c8:09:3f:4c: 48:b2:fc:b5:8b:61:64:5e:a3:3c:46:ae:45:45:23: ae:3b:45:96:24:a5:f3:fa:68:7b:48:2f:0a:70:29: e8:4d:8b:59:7c:ca:c1:b0:bf:17:46:16:ad:78:db: 98:56:7e:fd:b2:4d:02:c3:83:f0:cc:31:76:ee:f6: fb:a5:3e:74:fc:b3:03:12:30:8d:ed:09:5e:f5:ca: 90:e2:a0:d2:1a:2d:7f:8c:3b:09:42:ad:d7:26:50: 3d:e0:f9:0b:03:a1:4b:db:a0:e1:79:de:05:90:97: 32:5d:4a:a0:2f:dd:f1:01:84:83:cc:e4:d0:d2:a2: fc:0a:1c:f9:13:8d:ed:09:a8:7f:8c:26:89:c1:7f: 93:e4:bb:37:83:30:48:40:1f:85:ff:d6:80:d3:26: 32:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:09:77:ED:19:4F:49:ED:BA:D6:A4:61:FB:54:82:ED:7C:B7:58:4B X509v3 Authority Key Identifier: keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a4:c9:3b:61:5c:e5:f3:26:31:4a:eb:91:78:6f:70:a2:db: 09:bf:01:39:15:2b:6a:9f:db:85:d6:7b:3d:3a:13:5b:2c:f0: 32:51:a0:77:de:d1:86:b1:c1:ee:f2:7a:bc:25:47:00:13:bc: 65:0f:37:b2:18:77:c5:18:26:bd:e8:f7:a1:af:09:80:6f:89: 82:a0:89:64:ea:48:5c:3c:a5:ff:44:3d:7e:62:f1:83:6f:90: 0c:d2:cd:9e:bd:08:e2:34:ec:61:c8:c5:dc:05:25:c7:46:ee: 46:63:bd:31:5a:83:45:16:d3:cf:64:57:00:00:18:4a:69:0c: 8f:58:1b:9b:e4:e1:68:60:46:e1:74:f6:b0:46:c0:98:5f:1f: 5b:b3:ed:29:80:12:6d:84:85:fd:2b:bc:57:ee:fe:29:6f:2f: ef:8e:84:7a:e8:59:7b:11:46:fa:6c:ad:e8:a3:bc:55:1b:61: c8:26:02:69:28:e1:0f:04:14:c7:36:85:2e:24:d4:57:fa:31: 9a:73:3b:ae:8d:b7:d6:c8:1d:8d:6f:c1:84:70:94:b6:35:d2: 31:a5:1b:b7:2b:45:34:d3:fe:0c:0d:39:84:e7:25:c1:fe:41: 87:9e:04:e8:f5:cc:16:24:ca:d1:05:ab:c2:19:b0:15:f1:95: fd:2b:a1:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0MDMxMTAvBgNVBAUTKEQ3OEYzMDkwNEU3NURGOTRDRUI3NTk2NkFGODM4RTc2 M0VBODk3NjIwHhcNMjUwOTE3MDU0NzAxWhcNMjUwOTI0MDU0NzAxWjAYMRYwFAYD VQQDEw02OGNhNGI1NS0wYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn30DhG68qe2JYSOlzwVlnTkediPCxBeLRIolhmqaOBKhGErYmw48FGDU+B9 5MxSrVUpl+Yt1KdoOtBsNdo0o1HMiaWxw8Vw6uzSuGg5N+AYYHy66x6jCOlmjGUt u/n0djnN5MgJP0xIsvy1i2FkXqM8Rq5FRSOuO0WWJKXz+mh7SC8KcCnoTYtZfMrB sL8XRhateNuYVn79sk0Cw4PwzDF27vb7pT50/LMDEjCN7Qle9cqQ4qDSGi1/jDsJ Qq3XJlA94PkLA6FL26Dhed4FkJcyXUqgL93xAYSDzOTQ0qL8Chz5E43tCah/jCaJ wX+T5Ls3gzBIQB+F/9aA0yYyKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAJd+0Z T0ntutakYftUgu18t1hLMB8GA1UdIwQYMBaAFNePMJBOdd+UzrdZZq+DjnY+qJdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTQwMy84MDIwNzJFODE4 QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1VE90MWxtcjRPT2RqNm9s MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE0OHdrRTUxMzVUT3QxbG1yNE9PZGo2b2wySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTQwMy84MDIwNzJFODE4QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1 VE90MWxtcjRPT2RqNm9sMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdpMk7YVzl8yYxSuuReG9wotsJvwE5FStqn9uF1ns9OhNbLPAyUaB3 3tGGscHu8nq8JUcAE7xlDzeyGHfFGCa96PehrwmAb4mCoIlk6khcPKX/RD1+YvGD b5AM0s2evQjiNOxhyMXcBSXHRu5GY70xWoNFFtPPZFcAABhKaQyPWBub5OFoYEbh dPawRsCYXx9bs+0pgBJthIX9K7xX7v4pby/vjoR66Fl7EUb6bK3oo7xVG2HIJgJp KOEPBBTHNoUuJNRX+jGaczuujbfWyB2Nb8GEcJS2NdIxpRu3K0U00/4MDTmE5yXB /kGHngTo9cwWJMrRBavCGbAV8ZX9K6GD -----END CERTIFICATE-----Generated at Fri Sep 19 05:10:25 2025 by rpki-client