$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft File: phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft (raw, json) Hash identifier: BeEx+DqUMVmJ0A/40d7gjxJCrL9BdM/UTUhcenZqtqI= Subject key identifier: 0E:54:61:7B:BC:1B:B4:3D:E2:8D:D2:F2:47:54:D2:ED:F9:BD:40:C0 Authority key identifier: A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D Certificate issuer: /CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft Manifest number: 01AB Signing time: Wed 17 Sep 2025 03:48:08 +0000 Manifest this update: Wed 17 Sep 2025 03:48:08 +0000 Manifest next update: Wed 24 Sep 2025 03:48:08 +0000 Files and hashes: 1: phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl (hash: rXoJz1Nz9RZgllrX2P/Gl5m4iPabzRHLlSfdtpq3wS0=) 2: 939530627B6311F0BF7B4936C4F9AE02.roa (hash: 3WTSm0ARO6OxYTvyrfdEmxZEWxigI2p51l76SgzYhn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1623, serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D Validity Not Before: Sep 17 03:48:08 2025 GMT Not After : Sep 24 03:48:08 2025 GMT Subject: CN=68ca2f78-ac17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:65:90:bd:ed:22:9f:37:cd:af:45:d1:fb: 43:40:07:9f:1c:41:cf:5a:8c:c5:bb:db:8d:8d:32: 17:e0:aa:ae:90:76:4f:dc:8f:2e:3f:de:73:03:f5: 61:b4:d7:ad:1c:a2:9b:9b:74:01:e6:e8:e1:93:1f: 29:1b:6b:3a:36:c1:ed:c7:06:a6:d7:a7:c9:39:a1: e2:56:8c:83:8c:07:d6:d9:3e:aa:df:b2:5f:7f:d0: ec:26:24:ab:11:08:04:a1:a2:d9:74:37:ed:bf:c0: d5:88:6d:47:86:dd:97:1c:fe:92:d8:ba:97:1f:10: 11:03:07:0f:db:e9:31:66:ce:38:15:4b:7d:4e:ef: ab:5e:db:12:26:e0:e5:01:2c:c6:8d:72:c7:e8:3a: 71:ea:4f:3d:9c:7d:a6:1b:47:5d:c5:6f:3b:8c:9a: 21:3a:54:51:7c:79:3b:b1:43:07:c4:3c:f7:32:cb: 2f:11:16:b4:a8:98:cf:27:86:66:8e:89:45:f3:24: 2b:5c:32:84:5c:a0:ab:99:cb:4d:60:b4:c8:c4:cc: 9b:07:6c:da:c4:34:8a:aa:7d:47:21:30:61:9e:53: 97:41:9b:42:50:5e:93:11:ef:67:8c:e3:bb:17:63: db:4e:06:e0:4d:66:13:5d:d0:2b:3d:d4:a2:d5:7a: 23:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:54:61:7B:BC:1B:B4:3D:E2:8D:D2:F2:47:54:D2:ED:F9:BD:40:C0 X509v3 Authority Key Identifier: keyid:A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:29:ab:10:2f:3d:b0:c1:7c:88:51:72:b4:16:0b:35:be:57: 97:ae:89:02:e2:db:1d:ad:6c:42:b8:0b:84:40:51:60:3d:9d: 7e:b2:33:3c:f4:01:c6:58:f9:4e:99:84:16:43:fc:49:f9:0d: 72:c8:0b:4b:82:84:3b:14:43:53:31:21:dc:f1:29:54:4c:31: 56:6d:42:45:78:d2:ae:ec:be:76:b7:28:09:cc:24:a9:c7:eb: 42:e0:cb:ec:9c:cc:19:b5:d1:15:02:24:93:fa:2d:06:4c:fe: 8f:41:0b:47:e9:2d:88:69:f1:52:6f:6e:b7:39:6d:cd:c2:03: 98:66:99:09:22:19:ec:a4:6f:54:1c:c2:0e:a1:7e:86:c9:cc: 74:d2:47:86:13:2e:9f:47:98:11:47:33:b3:fe:56:0c:a9:b1: 3b:87:d7:da:43:a6:dc:0f:73:95:8f:c1:6f:5e:08:11:6a:20: 0c:64:7f:eb:c5:32:bb:97:70:7d:5a:01:99:4f:b6:35:17:5a: 7b:0a:d6:9c:dd:e2:9e:ff:a7:42:4f:1a:de:79:4c:e7:a7:74: a4:ac:9a:5d:87:75:61:da:61:4f:4f:89:ac:56:b0:50:44:3f: da:37:e3:ae:a4:1d:95:03:b6:b2:71:41:c2:be:39:1e:d4:d4: 2e:fc:83:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2MjMxMTAvBgNVBAUTKEE2MTUwNzgwRTBCQTExRUEwQURDNDM0QUVEMzgzQzhC ODJBODk2MUQwHhcNMjUwOTE3MDM0ODA4WhcNMjUwOTI0MDM0ODA4WjAYMRYwFAYD VQQDEw02OGNhMmY3OC1hYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvh1lkL3tIp83za9F0ftDQAefHEHPWozFu9uNjTIX4KqukHZP3I8uP95zA/Vh tNetHKKbm3QB5ujhkx8pG2s6NsHtxwam16fJOaHiVoyDjAfW2T6q37Jff9DsJiSr EQgEoaLZdDftv8DViG1Hht2XHP6S2LqXHxARAwcP2+kxZs44FUt9Tu+rXtsSJuDl ASzGjXLH6Dpx6k89nH2mG0ddxW87jJohOlRRfHk7sUMHxDz3MssvERa0qJjPJ4Zm jolF8yQrXDKEXKCrmctNYLTIxMybB2zaxDSKqn1HITBhnlOXQZtCUF6TEe9njOO7 F2PbTgbgTWYTXdArPdSi1XojUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5UYXu8 G7Q94o3S8kdU0u35vUDAMB8GA1UdIwQYMBaAFKYVB4DguhHqCtxDSu04PIuCqJYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTYyMy80MTA3MzVDQTE0 OUExMUVFQURGMUM2MTBDNEY5QUUwMi9waFVIZ09DNkVlb0szRU5LN1RnOGk0S29s aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoVUhnT0M2RWVvSzNFTks3VGc4aTRLb2xoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTYyMy80MTA3MzVDQTE0OUExMUVFQURGMUM2MTBDNEY5QUUwMi9waFVIZ09DNkVl b0szRU5LN1RnOGk0S29saDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+KasQLz2wwXyIUXK0Fgs1vleXrokC4tsdrWxCuAuEQFFgPZ1+sjM8 9AHGWPlOmYQWQ/xJ+Q1yyAtLgoQ7FENTMSHc8SlUTDFWbUJFeNKu7L52tygJzCSp x+tC4MvsnMwZtdEVAiST+i0GTP6PQQtH6S2IafFSb263OW3NwgOYZpkJIhnspG9U HMIOoX6Gycx00keGEy6fR5gRRzOz/lYMqbE7h9faQ6bcD3OVj8FvXggRaiAMZH/r xTK7l3B9WgGZT7Y1F1p7Ctac3eKe/6dCTxreeUznp3SkrJpdh3Vh2mFPT4msVrBQ RD/aN+OupB2VA7aycUHCvjke1NQu/IN/ -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:24 2025 by rpki-client