$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json) Hash identifier: ZtlA/NDY3fOffAG3zyM8XWyo2M1QQCatcsFh6JCkeUY= Subject key identifier: 4C:3A:6B:DD:DD:94:6D:66:FC:92:66:97:29:B3:F8:9D:DE:0E:EA:A5 Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 18C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft Manifest number: 18C0 Signing time: Sat 06 Sep 2025 15:50:42 +0000 Manifest this update: Sat 06 Sep 2025 15:50:41 +0000 Manifest next update: Sat 13 Sep 2025 15:50:41 +0000 Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: K7VGYo55JFqUToYMLSy91CGYJF7z7ffBhzNe0TU+j3M=) 2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: Hi67OIgPZ7TBkvwrxhK9udO+gzYygQSZ8bHnr5IGMCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6343 (0x18c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: Sep 6 15:50:41 2025 GMT Not After : Sep 13 15:50:41 2025 GMT Subject: CN=68bc5851-9fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:f7:0c:4a:19:b5:06:c2:ea:c3:7c:4a:d0: 4e:54:01:0f:cd:9b:93:8c:85:e6:1c:06:a3:f9:3b: 59:81:b6:64:44:04:db:55:4b:7e:49:f8:b2:13:83: 4b:d2:ee:08:ad:c7:de:03:7b:d5:04:8f:92:fe:f0: 21:e3:19:ff:4c:29:6d:c9:67:67:89:17:96:ff:d6: 4b:d8:c7:20:1f:91:c3:3e:4e:34:04:5e:b1:28:f0: 5d:b7:65:09:7b:05:83:20:70:58:b2:28:29:5e:28: e8:f7:ad:e2:41:03:4b:c6:21:f6:b6:9f:f5:05:c4: b3:05:24:34:d0:3b:10:47:66:7a:20:63:f4:18:9e: db:bb:47:5b:91:cf:74:56:71:8a:24:a6:a7:e0:cc: 7d:1d:4d:b8:62:07:a1:59:87:ec:96:66:40:95:b5: 36:b3:9f:65:31:7f:26:11:5a:c1:77:88:d2:45:f7: 04:32:d9:33:86:00:6b:39:b1:9d:aa:d5:7f:d2:92: a3:42:cd:2c:76:33:6a:bd:15:ec:04:8e:84:a5:7f: 2b:7d:62:1e:f0:83:b2:0f:94:f2:7b:0a:83:f8:6d: 2f:71:de:c4:89:5c:32:88:bf:da:ca:99:46:47:8a: 5e:b2:c0:4b:4e:94:7f:04:e3:44:ec:31:c6:40:7b: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3A:6B:DD:DD:94:6D:66:FC:92:66:97:29:B3:F8:9D:DE:0E:EA:A5 X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:5c:72:e9:5c:33:1e:86:90:89:6a:90:be:cd:d9:f9:22:24: 51:90:0f:12:f4:3c:ed:94:a6:fe:30:64:87:c9:3a:a6:bb:d2: 64:e7:55:98:3a:b9:6a:04:40:3b:8c:8e:62:87:15:db:18:64: 94:1b:95:80:a4:72:8a:5f:c5:a9:aa:4c:8b:d2:a7:a4:e8:bf: 4d:d5:06:3a:8c:e5:0e:d1:7c:13:66:08:7b:0b:3e:e3:d6:94: 6f:85:0a:a9:97:8b:70:40:c1:f9:1d:73:28:c5:14:c1:fc:70: ff:9f:e6:df:5d:51:10:02:18:52:11:fc:19:44:4d:c4:b1:d8: 0e:59:68:91:a5:2c:35:f2:20:1d:3c:06:53:2b:87:53:c1:82: c9:3f:89:a4:b3:26:a8:d5:4d:c4:d0:b9:9a:74:cd:90:c0:7f: a8:0d:97:40:a9:f2:d4:85:32:16:96:ff:98:23:75:da:35:b7: a9:57:9f:1a:cc:d8:ed:c4:46:08:c8:cc:aa:07:1a:e8:df:29: 65:b1:57:fb:53:f8:92:c6:c5:aa:f9:2d:48:b1:37:6f:89:31: 9e:07:f1:ab:ad:0a:8d:6a:32:44:22:a0:24:39:d5:13:69:f2: e2:c8:15:dc:06:d3:60:4d:ed:2e:97:d3:21:04:26:b1:ed:da: d2:37:e3:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjUwOTA2MTU1MDQxWhcNMjUwOTEzMTU1MDQxWjAYMRYwFAYD VQQDEw02OGJjNTg1MS05ZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyB33DEoZtQbC6sN8StBOVAEPzZuTjIXmHAaj+TtZgbZkRATbVUt+SfiyE4NL 0u4IrcfeA3vVBI+S/vAh4xn/TCltyWdniReW/9ZL2McgH5HDPk40BF6xKPBdt2UJ ewWDIHBYsigpXijo963iQQNLxiH2tp/1BcSzBSQ00DsQR2Z6IGP0GJ7bu0dbkc90 VnGKJKan4Mx9HU24YgehWYfslmZAlbU2s59lMX8mEVrBd4jSRfcEMtkzhgBrObGd qtV/0pKjQs0sdjNqvRXsBI6EpX8rfWIe8IOyD5TyewqD+G0vcd7EiVwyiL/ayplG R4pessBLTpR/BONE7DHGQHuXvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEw6a93d lG1m/JJmlymz+J3eDuqlMB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1 N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEXHLpXDMehpCJapC+zdn5IiRRkA8S9DztlKb+MGSHyTqmu9Jk51WY OrlqBEA7jI5ihxXbGGSUG5WApHKKX8WpqkyL0qek6L9N1QY6jOUO0XwTZgh7Cz7j 1pRvhQqpl4twQMH5HXMoxRTB/HD/n+bfXVEQAhhSEfwZRE3EsdgOWWiRpSw18iAd PAZTK4dTwYLJP4mksyao1U3E0LmadM2QwH+oDZdAqfLUhTIWlv+YI3XaNbepV58a zNjtxEYIyMyqBxro3yllsVf7U/iSxsWq+S1IsTdviTGeB/GrrQqNajJEIqAkOdUT afLiyBXcBtNgTe0ul9MhBCax7drSN+O1 -----END CERTIFICATE-----Generated at Sat Sep 6 21:33:44 2025 by rpki-client