$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft File: 1ex0z8jA_QV81Og74-tX8GHcWPg.mft (raw, json) Hash identifier: yrmUIrEIGWIJuI4nR/5Kamo+AqLYuvOHeY2PF08+LKE= Subject key identifier: ED:5F:9E:7D:0D:7C:75:08:0E:8F:CF:67:14:2F:4D:64:53:6B:21:96 Authority key identifier: D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 Certificate issuer: /CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft Manifest number: D9 Signing time: Wed 17 Sep 2025 06:12:00 +0000 Manifest this update: Wed 17 Sep 2025 06:11:59 +0000 Manifest next update: Wed 24 Sep 2025 06:11:59 +0000 Files and hashes: 1: 1ex0z8jA_QV81Og74-tX8GHcWPg.crl (hash: fMx4g0iLAUh6/87ZKNgxKTNAiBgOseSi2EklhFj6FQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D313B, serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Validity Not Before: Sep 17 06:11:59 2025 GMT Not After : Sep 24 06:11:59 2025 GMT Subject: CN=68ca5130-6411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:45:52:a2:ea:67:1c:2b:ac:5c:f0:0a:69:39: 79:1e:4a:14:ae:da:21:3e:ef:eb:2b:19:3d:ef:1a: b5:85:eb:b4:7d:9a:74:a5:54:04:e1:cf:ef:35:3f: 6c:8d:db:6f:88:d3:b7:10:cf:d6:53:b6:a0:88:3b: e2:ae:e8:a1:dd:b8:10:39:f7:91:ac:cc:e8:ba:90: 5d:30:c9:22:1b:18:da:15:17:fa:aa:e7:0f:6b:0b: 25:14:e5:69:b5:ef:60:ed:7a:27:62:75:d9:d8:d5: 2e:c4:71:93:4b:d2:dc:a9:ef:cb:c7:e0:fe:d2:32: 5e:21:c3:19:69:b2:ac:38:62:f3:13:b8:de:65:b4: 00:2f:a1:b7:99:0f:d8:f0:4e:0e:87:ee:40:38:d2: 1d:4b:65:c7:df:9e:e1:12:13:3f:36:5f:95:c1:6b: 8c:ff:22:e6:52:ff:e0:8f:d3:68:f3:11:de:ea:a2: 04:b2:c1:9e:5b:d8:e9:c0:69:62:3a:c6:03:15:d2: d0:5e:8a:ae:61:40:eb:db:84:2a:e7:4b:89:0e:a5: c2:3c:eb:13:ea:45:ab:8f:06:dd:43:c0:e6:44:f0: b8:96:90:bc:de:1d:91:43:c3:6c:fe:4f:8a:04:51: 0e:68:76:81:13:1f:bd:85:df:c1:77:a2:1d:48:30: 8c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5F:9E:7D:0D:7C:75:08:0E:8F:CF:67:14:2F:4D:64:53:6B:21:96 X509v3 Authority Key Identifier: keyid:D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:2d:f1:fa:ab:30:31:b6:ec:1b:d2:75:10:95:d9:8c:88:53: 84:65:65:92:b8:5b:a9:23:58:85:cb:e8:60:d0:90:b3:cf:93: 8d:d7:33:c8:f4:5c:28:66:42:7f:98:ea:45:89:06:77:a2:21: c4:1e:54:6b:60:73:23:70:c9:b7:01:b6:ce:ea:ef:d5:10:d6: 37:59:a7:fb:20:c9:e4:3d:d6:a0:92:45:30:6f:32:34:22:a1: 14:e2:da:ef:88:19:b9:f9:01:8f:45:49:55:18:bd:c2:e5:b6: 4b:62:f0:07:5d:28:58:14:41:1f:37:75:57:b3:0b:50:50:39: 4e:80:14:20:dd:52:41:5a:66:52:d4:b4:f2:00:1b:8a:e7:89: ea:ba:7b:03:0a:fd:75:cf:e8:90:ee:b4:8e:77:cd:87:66:0f: 77:c3:d0:eb:b7:ea:e1:11:07:21:de:f6:07:aa:d1:2b:31:cc: fb:84:ec:12:c4:d6:90:2a:35:f7:29:dc:9d:a6:46:a4:77:ad: fd:c1:91:8b:52:83:89:88:2f:27:3b:b4:85:c6:89:72:b6:20: a3:7c:57:9c:60:86:c4:0b:ee:1a:52:0b:8d:95:9f:fa:32:41: 69:82:8a:1f:86:40:48:16:da:2d:29:b9:27:cf:fe:1a:82:dd: 34:8c:d2:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxM0IxMTAvBgNVBAUTKEQ1RUM3NENGQzhDMEZEMDU3Q0Q0RTgzQkUzRUI1N0Yw NjFEQzU4RjgwHhcNMjUwOTE3MDYxMTU5WhcNMjUwOTI0MDYxMTU5WjAYMRYwFAYD VQQDEw02OGNhNTEzMC02NDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEVSoupnHCusXPAKaTl5HkoUrtohPu/rKxk97xq1heu0fZp0pVQE4c/vNT9s jdtviNO3EM/WU7agiDviruih3bgQOfeRrMzoupBdMMkiGxjaFRf6qucPawslFOVp te9g7XonYnXZ2NUuxHGTS9Lcqe/Lx+D+0jJeIcMZabKsOGLzE7jeZbQAL6G3mQ/Y 8E4Oh+5AONIdS2XH357hEhM/Nl+VwWuM/yLmUv/gj9No8xHe6qIEssGeW9jpwGli OsYDFdLQXoquYUDr24Qq50uJDqXCPOsT6kWrjwbdQ8DmRPC4lpC83h2RQ8Ns/k+K BFEOaHaBEx+9hd/Bd6IdSDCMLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1fnn0N fHUIDo/PZxQvTWRTayGWMB8GA1UdIwQYMBaAFNXsdM/IwP0FfNToO+PrV/Bh3Fj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9ENUJGRUMxNDQ3 REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9RVjgxT2c3NC10WDhHSGNX UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFleDB6OGpBX1FWODFPZzc0LXRYOEdIY1dQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEzQi9ENUJGRUMxNDQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9R VjgxT2c3NC10WDhHSGNXUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAILfH6qzAxtuwb0nUQldmMiFOEZWWSuFupI1iFy+hg0JCzz5ON1zPI 9FwoZkJ/mOpFiQZ3oiHEHlRrYHMjcMm3AbbO6u/VENY3Waf7IMnkPdagkkUwbzI0 IqEU4trviBm5+QGPRUlVGL3C5bZLYvAHXShYFEEfN3VXswtQUDlOgBQg3VJBWmZS 1LTyABuK54nqunsDCv11z+iQ7rSOd82HZg93w9Drt+rhEQch3vYHqtErMcz7hOwS xNaQKjX3Kdydpkakd639wZGLUoOJiC8nO7SFxolytiCjfFecYIbEC+4aUguNlZ/6 MkFpgoofhkBIFtotKbknz/4agt00jNLw -----END CERTIFICATE-----Generated at Fri Sep 19 00:43:47 2025 by rpki-client