$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json) Hash identifier: GQyWHef0BL/rLQk1GMqZ8Km1esvnsNVLCdJ6l9O+5XY= Subject key identifier: 7D:7B:EF:B4:A2:A9:81:D3:3F:5C:5E:C2:F0:72:CB:71:A9:ED:94:10 Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft Manifest number: 0290 Signing time: Sun 07 Sep 2025 02:05:00 +0000 Manifest this update: Sun 07 Sep 2025 02:04:59 +0000 Manifest next update: Sun 14 Sep 2025 02:04:59 +0000 Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: GWnaotmdJScgTrF7ojZnl+Pp1MUZ9uIxP3oKbOdgiPU=) 2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: Yrv7ZBN66aHo1fxboSYdyeMXxVo+vZh3rt3Di282sAw=) 3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: 4shhW+hfwKEr12lvGKCQFs6BqumTNDAweN+QTLEQJao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Validity Not Before: Sep 7 02:04:59 2025 GMT Not After : Sep 14 02:04:59 2025 GMT Subject: CN=68bce84b-0909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:f6:cc:b8:66:82:11:5f:ba:da:34:ed:50: 13:b3:41:d9:6c:db:ea:69:16:84:9c:7a:fc:5f:40: 1e:f2:fa:b6:5b:8b:99:be:b9:21:08:74:97:a1:74: b9:4b:94:e9:3b:cd:a8:8b:d0:02:1d:87:41:65:9a: 24:ac:40:c2:e6:9c:f4:78:bf:91:49:cf:b6:27:b4: 61:0e:90:7d:61:0e:f3:84:a3:b0:92:5d:02:ab:8f: eb:5a:d8:9b:0e:b1:a0:f1:95:8c:cf:02:69:72:90: 69:b8:a1:7a:f8:97:9c:13:95:77:44:b6:6c:7a:1d: 65:aa:97:06:16:b7:72:5c:89:0c:5f:99:01:03:7f: f0:47:b7:4d:6d:42:5c:31:62:6c:59:6a:76:d3:9e: ff:e4:62:57:15:6a:19:fd:f1:c6:96:15:64:0f:d6: 3f:92:75:f2:d5:e3:a6:a4:c6:5a:85:ec:cb:fd:42: 36:ab:68:a4:f4:6b:74:1d:fa:70:32:71:ee:8f:8b: 74:86:cb:dc:e8:c9:87:d1:43:46:a4:8f:1e:ce:fc: 77:fc:d0:f0:c9:81:46:ee:72:1b:af:e3:ce:f3:d7: 35:8f:bc:fc:ea:c8:96:89:ab:bf:ea:fa:07:78:d1: da:20:b5:53:19:7b:b1:5a:67:67:4f:33:17:2d:87: c8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7B:EF:B4:A2:A9:81:D3:3F:5C:5E:C2:F0:72:CB:71:A9:ED:94:10 X509v3 Authority Key Identifier: keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a8:0d:89:9e:e6:1c:5e:25:4e:6d:c4:9d:9d:6f:37:49:fb: cd:29:4f:04:9d:cd:b0:f3:52:c2:6c:ed:ed:f1:2d:ba:83:62: 09:de:2a:0a:b1:f5:57:c0:c6:2f:d7:f0:9e:23:c4:91:fa:5b: 82:49:f4:a8:e2:66:9b:83:26:aa:57:93:1d:4e:a2:e9:70:20: 11:79:c5:e9:15:f5:c9:cd:19:48:fb:ac:2c:e5:a6:4b:0e:3f: bc:89:de:01:08:78:cd:a0:86:24:ef:22:d5:c8:32:cc:70:11: fe:d3:5b:9d:3d:b6:bf:bc:83:8b:9e:ff:8c:47:7e:ca:86:3a: b5:c3:dc:15:1a:fc:38:72:6a:44:45:bf:70:f0:b8:71:64:66: 52:d5:18:fc:f8:75:f9:1d:84:b5:fa:79:a5:57:31:58:3f:8c: 1e:44:06:e6:be:f9:68:a5:08:ca:18:4c:81:22:02:9e:c1:11: eb:33:b9:20:83:46:1f:9a:20:c6:73:9c:ea:95:82:e1:7a:a1: bd:d4:b4:23:6f:00:63:32:71:54:0f:8f:1c:2d:91:40:2d:a9: 90:ff:6e:59:04:47:35:9e:17:c4:4e:43:19:ba:c8:17:10:6a: c6:7c:cc:7b:cf:d6:87:10:28:d9:97:2d:86:97:e9:43:ed:82: 4f:ee:10:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFGOTUxMTAvBgNVBAUTKEQ2RjA2NzI0RDA5Njg3MDdFRDFERkFGREJCMjI1ODAy QjNEQUExOTQwHhcNMjUwOTA3MDIwNDU5WhcNMjUwOTE0MDIwNDU5WjAYMRYwFAYD VQQDEw02OGJjZTg0Yi0wOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylz2zLhmghFfuto07VATs0HZbNvqaRaEnHr8X0Ae8vq2W4uZvrkhCHSXoXS5 S5TpO82oi9ACHYdBZZokrEDC5pz0eL+RSc+2J7RhDpB9YQ7zhKOwkl0Cq4/rWtib DrGg8ZWMzwJpcpBpuKF6+JecE5V3RLZseh1lqpcGFrdyXIkMX5kBA3/wR7dNbUJc MWJsWWp2057/5GJXFWoZ/fHGlhVkD9Y/knXy1eOmpMZahezL/UI2q2ik9Gt0Hfpw MnHuj4t0hsvc6MmH0UNGpI8ezvx3/NDwyYFG7nIbr+PO89c1j7z86siWiau/6voH eNHaILVTGXuxWmdnTzMXLYfI8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1777Si qYHTP1xewvByy3Gp7ZQQMB8GA1UdIwQYMBaAFNbwZyTQlocH7R36/bsiWAKz2qGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUY5NS9GRjkzRUM3MjE5 NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3ZnRIZnI5dXlKWUFyUGFv WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2Qm5KTkNXaHdmdEhmcjl1eUpZQXJQYW9aUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUY5NS9GRjkzRUM3MjE5NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3 ZnRIZnI5dXlKWUFyUGFvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuqA2JnuYcXiVObcSdnW83SfvNKU8Enc2w81LCbO3t8S26g2IJ3ioK sfVXwMYv1/CeI8SR+luCSfSo4mabgyaqV5MdTqLpcCARecXpFfXJzRlI+6ws5aZL Dj+8id4BCHjNoIYk7yLVyDLMcBH+01udPba/vIOLnv+MR37Khjq1w9wVGvw4cmpE Rb9w8LhxZGZS1Rj8+HX5HYS1+nmlVzFYP4weRAbmvvlopQjKGEyBIgKewRHrM7kg g0YfmiDGc5zqlYLheqG91LQjbwBjMnFUD48cLZFALamQ/25ZBEc1nhfETkMZusgX EGrGfMx7z9aHECjZly2Gl+lD7YJP7hA/ -----END CERTIFICATE-----Generated at Mon Sep 8 03:30:28 2025 by rpki-client