$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: fVlK3i+X0T/k9L0eFEPtSRH5dh1cvIbiCZrDMR+PGB4= Subject key identifier: 32:BB:28:A2:CF:F1:D4:41:26:95:8C:D6:7B:45:E6:4D:85:C2:3A:60 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 34F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 34D4 Signing time: Sat 06 Sep 2025 14:55:55 +0000 Manifest this update: Sat 06 Sep 2025 14:55:54 +0000 Manifest next update: Sat 13 Sep 2025 14:55:54 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: 8o+nTiKuHCyes1SWxe8ex7p8hRAwv3MhvjwK1p7lYDA=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: mYoYyr1o64AZsjx2x5gA3CLCgmfiA6pfIdBA+yYc62o=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: BiN0k39VUnPLhlKViMIRm8mbjvoQycrvLT233B9KH/Y=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: xQvW4YZqb4bpCHiKIuihyp10lyfUE3gYXiSNZp52O44=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: jD/7/ehRzXn+r7A8PWs0CNNR/EbOe0oKdg7xk/UAFqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13554 (0x34f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Sep 6 14:55:54 2025 GMT Not After : Sep 13 14:55:54 2025 GMT Subject: CN=68bc4b7b-4731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:65:c7:41:43:83:3c:8b:e1:e3:c2:73:ef: d1:e4:75:93:7c:a7:83:fa:02:0b:80:98:17:14:27: 05:b6:60:3d:3f:7f:7b:0f:ce:ac:a3:55:45:be:1b: 9c:04:22:1f:dd:ef:dc:53:93:1f:0e:a4:11:c0:08: ba:a2:e7:83:5b:61:16:7e:79:3d:cf:8e:ac:88:a3: ee:30:e3:11:9d:e4:4f:a4:18:9b:6a:c8:05:e3:c3: 50:5b:87:15:ac:9d:cd:9d:a5:42:e5:ab:e8:d3:70: 8d:1b:cb:4f:bc:06:56:f6:df:59:82:c2:4d:6d:85: 94:e2:6d:25:92:c2:16:51:82:e8:00:81:12:a4:92: 1a:02:8e:0e:bc:1f:77:b7:d3:95:13:fb:8f:e6:02: bf:43:cc:85:c6:17:ad:d7:9a:1e:d5:4e:16:b6:d5: e8:d5:db:03:cf:a1:31:8a:00:6c:4d:1b:77:63:d5: e4:7f:a1:4f:65:ba:4c:56:1f:3a:b0:09:ed:6f:47: c8:ae:b3:10:68:d6:38:36:b4:b6:67:de:b0:d8:ab: a0:ab:a2:eb:bd:2c:54:fe:a2:8e:63:e2:10:c8:3f: 66:3d:b9:63:e0:34:fb:c4:e7:7d:87:46:d7:d9:26: 49:c8:08:5a:af:6b:4d:24:e9:ac:31:a3:05:b5:2e: e8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BB:28:A2:CF:F1:D4:41:26:95:8C:D6:7B:45:E6:4D:85:C2:3A:60 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:32:89:e6:a0:3a:ab:8e:a8:40:1b:a6:57:ed:db:92:c9:7f: 85:29:8c:54:cf:71:c6:d5:92:d3:61:d3:c6:59:ea:96:4b:af: 84:75:b3:1c:29:03:79:ad:70:42:42:13:05:2a:1c:4e:f7:94: 9a:b0:70:0f:49:5e:44:00:22:7b:c8:85:b5:c5:89:d7:e4:c8: 07:21:f8:a4:39:d7:0a:11:fc:9a:13:7f:7a:03:43:34:35:d3: 95:8b:68:e1:97:4a:b5:ce:bb:f4:e8:23:2c:c1:e7:ea:3d:0f: c2:ef:0d:41:19:0d:91:88:63:9d:83:60:b9:7d:b6:e3:1c:66: d2:c3:cd:a3:1f:a9:ce:2b:c1:5a:15:e8:24:04:74:b1:96:f3: 9a:6b:f0:90:60:12:b6:e9:97:a3:a9:6c:32:27:bb:e8:9d:e8: af:ca:c5:f3:9f:dc:6f:c2:43:32:0c:bc:25:6f:98:78:4e:f4: 52:2c:84:3e:5f:de:9e:b7:b1:95:e5:0b:c1:b8:29:d8:6d:37: b0:2c:c9:e0:d3:91:c7:df:12:85:02:47:61:44:86:24:52:bc: 91:55:74:b2:30:50:cd:38:ae:e7:34:29:59:5a:bd:a7:16:2b: 9a:27:d8:2b:79:22:ae:e4:c6:6f:fe:c4:54:db:38:2b:1b:fb: a1:80:81:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjUwOTA2MTQ1NTU0WhcNMjUwOTEzMTQ1NTU0WjAYMRYwFAYD VQQDEw02OGJjNGI3Yi00NzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCZlx0FDgzyL4ePCc+/R5HWTfKeD+gILgJgXFCcFtmA9P397D86so1VFvhuc BCIf3e/cU5MfDqQRwAi6oueDW2EWfnk9z46siKPuMOMRneRPpBibasgF48NQW4cV rJ3NnaVC5avo03CNG8tPvAZW9t9ZgsJNbYWU4m0lksIWUYLoAIESpJIaAo4OvB93 t9OVE/uP5gK/Q8yFxhet15oe1U4WttXo1dsDz6ExigBsTRt3Y9Xkf6FPZbpMVh86 sAntb0fIrrMQaNY4NrS2Z96w2Kugq6LrvSxU/qKOY+IQyD9mPblj4DT7xOd9h0bX 2SZJyAhar2tNJOmsMaMFtS7oNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK7KKLP 8dRBJpWM1ntF5k2FwjpgMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnMonmoDqrjqhAG6ZX7duSyX+FKYxUz3HG1ZLTYdPGWeqWS6+EdbMc KQN5rXBCQhMFKhxO95SasHAPSV5EACJ7yIW1xYnX5MgHIfikOdcKEfyaE396A0M0 NdOVi2jhl0q1zrv06CMswefqPQ/C7w1BGQ2RiGOdg2C5fbbjHGbSw82jH6nOK8Fa FegkBHSxlvOaa/CQYBK26ZejqWwyJ7voneivysXzn9xvwkMyDLwlb5h4TvRSLIQ+ X96et7GV5QvBuCnYbTewLMng05HH3xKFAkdhRIYkUryRVXSyMFDNOK7nNClZWr2n FiuaJ9greSKu5MZv/sRU2zgrG/uhgIEd -----END CERTIFICATE-----Generated at Sun Sep 7 15:20:12 2025 by rpki-client