$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json) Hash identifier: 5tSLdpY7MF/DMrt0vA2+rSxWeJVwuvCQiYTuGrTljlY= Subject key identifier: 23:52:60:6F:E0:A4:21:3C:03:90:83:98:F8:E3:B2:8E:B0:CE:04:66 Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Certificate serial: 0899 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft Manifest number: 0860 Signing time: Mon 08 Sep 2025 20:56:00 +0000 Manifest this update: Mon 08 Sep 2025 20:55:59 +0000 Manifest next update: Mon 15 Sep 2025 20:55:59 +0000 Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: SvQTp4keAAEAGRrxfOtdQjNvR1kXrvFAYeXpFeArzWc=) 2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: FSKLxu00ctg24+HmZkC2VPQWpobiDfHHaUN+7Y4NQZA=) 3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: KU0OYgNotYA3UtDO5hlxYlQJ813PAymWu54BIJPXlUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2201 (0x899) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Validity Not Before: Sep 8 20:55:59 2025 GMT Not After : Sep 15 20:55:59 2025 GMT Subject: CN=68bf42df-66b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:e5:34:24:1b:f0:fc:0e:5d:81:2e:90:7e: ed:6b:4b:37:2b:88:35:4f:aa:a7:21:36:30:4e:f3: ca:86:b0:de:b0:0d:c3:5c:08:d2:d9:7d:92:c3:1d: e3:e9:f0:fd:4f:a8:22:13:f4:38:d8:0f:70:e6:33: 1b:e7:ed:ef:6d:a5:ea:5e:49:59:33:6e:04:a2:3a: 11:64:72:68:a1:4d:e6:82:b0:ff:f1:32:ab:01:16: a0:45:ff:7a:72:33:d4:50:ab:02:60:c4:82:91:f9: d9:7b:b9:a4:92:3d:70:00:45:5c:f2:33:a9:0d:36: 01:03:8f:44:25:47:2d:00:b9:26:1b:52:b0:20:4f: ec:70:29:33:85:5c:5b:de:ee:07:bd:bc:ad:27:73: 83:23:6a:cc:1d:10:50:e7:00:c5:be:a3:a3:46:5d: ec:92:36:0f:62:0c:53:2f:84:c6:5b:78:8b:7c:e3: b8:dc:28:6f:42:73:c9:11:62:b9:5a:84:ba:8e:62: b0:33:c7:a9:f2:08:3a:4a:1b:6b:2d:8d:d1:2f:43: c6:00:52:63:71:ad:ae:75:82:bf:e3:3e:5a:22:ef: f4:36:67:21:b8:4c:9a:9b:b0:43:94:2c:31:80:74: 7e:30:dc:c7:8e:dd:76:91:e6:95:08:90:7a:12:5f: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:52:60:6F:E0:A4:21:3C:03:90:83:98:F8:E3:B2:8E:B0:CE:04:66 X509v3 Authority Key Identifier: keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:f6:36:2b:49:c2:79:5f:02:0b:43:95:77:c1:e3:75:28:e3: ca:e7:a2:cd:8c:16:d7:66:0a:b4:80:ab:6b:96:e4:87:20:31: 09:cf:d0:56:bc:31:12:29:8a:9e:e3:4f:98:2a:fc:2f:3c:04: 38:58:f8:93:d9:7f:b8:7b:c1:2f:27:a9:90:51:02:2c:80:55: 98:cb:b7:20:ef:0b:00:31:51:b3:d5:68:c5:5a:5c:1e:78:66: 3d:ba:63:99:6a:07:10:9e:f2:5e:fc:e5:6a:26:d4:a7:d4:69: 10:e8:ed:32:79:9b:0e:02:cb:8a:d2:f9:f0:8f:50:cc:7a:70: 32:d0:df:ef:e6:ef:a5:9e:68:59:fd:d6:29:c9:b2:ce:59:61: 43:76:cd:c2:cb:f5:fe:1c:c6:99:2c:a5:25:17:13:12:61:61: f9:fe:f9:c5:68:60:62:6a:b8:72:51:8b:6a:bd:2c:f7:97:91: 9f:ef:2a:5e:5c:5c:d3:04:a6:79:20:7a:46:88:74:07:c1:a2: 26:df:e7:1d:ed:4d:bc:c9:27:de:b1:16:79:87:28:05:f6:e3: 9c:66:a4:bf:68:e3:25:09:5d:a7:47:2d:ea:33:9d:44:7c:f0: a6:34:41:a9:ba:c6:4c:9d:fc:c4:20:36:87:fd:88:83:93:12: 73:76:15:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx Nzc4RDA2QkYwHhcNMjUwOTA4MjA1NTU5WhcNMjUwOTE1MjA1NTU5WjAYMRYwFAYD VQQDEw02OGJmNDJkZi02NmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BHlNCQb8PwOXYEukH7ta0s3K4g1T6qnITYwTvPKhrDesA3DXAjS2X2Swx3j 6fD9T6giE/Q42A9w5jMb5+3vbaXqXklZM24EojoRZHJooU3mgrD/8TKrARagRf96 cjPUUKsCYMSCkfnZe7mkkj1wAEVc8jOpDTYBA49EJUctALkmG1KwIE/scCkzhVxb 3u4HvbytJ3ODI2rMHRBQ5wDFvqOjRl3skjYPYgxTL4TGW3iLfOO43ChvQnPJEWK5 WoS6jmKwM8ep8gg6ShtrLY3RL0PGAFJjca2udYK/4z5aIu/0NmchuEyam7BDlCwx gHR+MNzHjt12keaVCJB6El9l7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNSYG/g pCE8A5CDmPjjso6wzgRmMB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpF ZDFGTUdxbEc1c1FYZU5CcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv9jYrScJ5XwILQ5V3weN1KOPK56LNjBbXZgq0gKtrluSHIDEJz9BW vDESKYqe40+YKvwvPAQ4WPiT2X+4e8EvJ6mQUQIsgFWYy7cg7wsAMVGz1WjFWlwe eGY9umOZagcQnvJe/OVqJtSn1GkQ6O0yeZsOAsuK0vnwj1DMenAy0N/v5u+lnmhZ /dYpybLOWWFDds3Cy/X+HMaZLKUlFxMSYWH5/vnFaGBiarhyUYtqvSz3l5Gf7ype XFzTBKZ5IHpGiHQHwaIm3+cd7U28ySfesRZ5hygF9uOcZqS/aOMlCV2nRy3qM51E fPCmNEGpusZMnfzEIDaH/YiDkxJzdhX7 -----END CERTIFICATE-----Generated at Tue Sep 9 13:20:52 2025 by rpki-client