$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft File: acCJt6SOfabuTwH-xqmOCtL6gQs.mft (raw, json) Hash identifier: +IvrkKFvhjhWTkM1zykHA01LJ5xlUbsYz9t53H54VGY= Subject key identifier: 7A:E5:66:2D:06:01:B2:01:40:FA:DF:3A:F4:64:84:CF:E7:96:3B:BE Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B Certificate issuer: /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft Manifest number: 0226 Signing time: Fri 05 Sep 2025 02:20:25 +0000 Manifest this update: Fri 05 Sep 2025 02:20:24 +0000 Manifest next update: Fri 12 Sep 2025 02:20:24 +0000 Files and hashes: 1: acCJt6SOfabuTwH-xqmOCtL6gQs.crl (hash: 4XGtoq4AkM4mk995m1npqT6t6YsFVRnc6Q2o3AQ+8AE=) 2: 350CDCB44ED611ED84336740C4F9AE02.roa (hash: Rl7cC9aD2+HUzvALoJy+W3POWuoH4LCYbv/U7VQpjNA=) 3: 4214E284606911EFBDF1A71AC4F9AE02.roa (hash: 6Nzq1WoXAkjRrieEemeMX09rMtSXxNTIJXhrfWNFeNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D32F4, serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Validity Not Before: Sep 5 02:20:24 2025 GMT Not After : Sep 12 02:20:24 2025 GMT Subject: CN=68ba48e9-52a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b4:8c:5d:1e:6f:43:40:06:c2:da:78:f1:0d: d4:20:e4:13:21:57:2e:de:f0:88:c4:b9:39:79:45: 9a:75:49:47:0c:b0:71:f2:da:f2:ba:ab:ea:35:3e: 8e:b0:36:9b:2b:77:3a:e3:7a:64:ec:69:c7:a2:77: ab:95:b2:18:b2:91:e8:54:33:d3:fb:fa:ba:f0:35: 76:c7:2f:d8:cd:9c:7a:e0:7e:9e:5b:ae:38:89:58: 13:a2:b6:00:fe:10:d2:56:58:df:2c:08:24:2b:fc: 61:ee:98:19:61:9b:89:98:71:e7:e2:66:9a:55:66: 10:73:8a:50:ab:b8:ae:79:45:61:f9:77:65:22:5c: 7e:24:48:ca:7b:c1:97:16:7b:cb:1e:08:8a:6d:6a: df:b1:83:00:9c:d7:a5:f2:81:82:59:d3:b7:59:bc: 93:82:bc:04:c2:ca:11:6f:11:5d:74:6f:86:6b:4c: d6:95:d6:17:4b:27:f8:42:dc:4f:ba:9b:2f:cb:e8: 47:60:56:9b:5b:21:f6:6d:f1:53:27:74:6a:8b:2c: 5f:cd:8a:fe:6e:29:aa:1a:5b:f9:a7:b1:0c:8a:9d: 2a:b2:d6:ac:a8:b9:1f:3f:9b:2d:f7:01:3e:fb:3b: 6f:3e:60:75:88:5e:91:93:b8:fb:e3:57:5a:21:87: 67:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E5:66:2D:06:01:B2:01:40:FA:DF:3A:F4:64:84:CF:E7:96:3B:BE X509v3 Authority Key Identifier: keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:2e:7c:cb:14:0c:46:34:85:af:57:de:f1:4c:2b:2f:c7:b5: 21:1d:8b:4a:64:2e:4b:cf:d1:77:cf:b3:8d:d2:a2:52:ec:a4: 73:6f:8c:0f:ed:dd:55:5f:e3:e1:bd:a2:d7:ce:21:dc:73:4c: f7:1a:ce:aa:5e:0b:62:44:d5:0f:90:6c:f4:08:58:15:3a:0d: 14:57:f1:dc:33:06:2d:c8:82:cc:ce:c5:50:d3:d6:59:36:96: ee:3f:71:11:4e:50:39:5d:7b:2d:6c:ac:a3:bc:0a:31:a0:14: 7d:ed:99:54:23:d5:49:4b:a6:f9:20:bf:f9:e1:9a:f0:4d:eb: 63:08:9c:5f:25:e2:f6:2b:eb:ec:94:fe:24:17:be:31:09:44: cd:d0:53:8b:29:96:8b:89:f6:0a:e6:7c:c0:d8:2c:91:5d:15: bd:9c:6d:f0:02:ea:f9:b4:2e:9f:26:cb:d4:b4:12:9d:8d:cf: ef:73:84:21:3d:d3:a2:45:7d:a0:d6:08:a6:59:55:d3:dd:3f: 99:15:65:ca:01:a4:aa:ac:a5:86:3c:05:09:5a:33:52:a6:9c: f5:70:56:72:88:de:31:8d:a8:2f:21:44:41:d2:3f:2d:99:ff: 94:9e:51:8c:61:d9:d2:8f:77:f5:a3:04:ea:97:76:c5:24:6c: 7e:e9:a1:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyRjQxMTAvBgNVBAUTKDY5QzA4OUI3QTQ4RTdEQTZFRTRGMDFGRUM2QTk4RTBB RDJGQTgxMEIwHhcNMjUwOTA1MDIyMDI0WhcNMjUwOTEyMDIyMDI0WjAYMRYwFAYD VQQDEw02OGJhNDhlOS01MmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LSMXR5vQ0AGwtp48Q3UIOQTIVcu3vCIxLk5eUWadUlHDLBx8tryuqvqNT6O sDabK3c643pk7GnHonerlbIYspHoVDPT+/q68DV2xy/YzZx64H6eW644iVgTorYA /hDSVljfLAgkK/xh7pgZYZuJmHHn4maaVWYQc4pQq7iueUVh+XdlIlx+JEjKe8GX FnvLHgiKbWrfsYMAnNel8oGCWdO3WbyTgrwEwsoRbxFddG+Ga0zWldYXSyf4QtxP upsvy+hHYFabWyH2bfFTJ3RqiyxfzYr+bimqGlv5p7EMip0qstasqLkfP5st9wE+ +ztvPmB1iF6Rk7j741daIYdn4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrlZi0G AbIBQPrfOvRkhM/nlju+MB8GA1UdIwQYMBaAFGnAibekjn2m7k8B/sapjgrS+oEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzJGNC9CNENBNzc5NjRE RTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2ZhYnVUd0gteHFtT0N0TDZn UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjQ0p0NlNPZmFidVR3SC14cW1PQ3RMNmdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzJGNC9CNENBNzc5NjRERTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2Zh YnVUd0gteHFtT0N0TDZnUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBLnzLFAxGNIWvV97xTCsvx7UhHYtKZC5Lz9F3z7ON0qJS7KRzb4wP 7d1VX+PhvaLXziHcc0z3Gs6qXgtiRNUPkGz0CFgVOg0UV/HcMwYtyILMzsVQ09ZZ NpbuP3ERTlA5XXstbKyjvAoxoBR97ZlUI9VJS6b5IL/54ZrwTetjCJxfJeL2K+vs lP4kF74xCUTN0FOLKZaLifYK5nzA2CyRXRW9nG3wAur5tC6fJsvUtBKdjc/vc4Qh PdOiRX2g1gimWVXT3T+ZFWXKAaSqrKWGPAUJWjNSppz1cFZyiN4xjagvIURB0j8t mf+UnlGMYdnSj3f1owTql3bFJGx+6aHS -----END CERTIFICATE-----Generated at Fri Sep 5 11:30:19 2025 by rpki-client