$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft File: l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json) Hash identifier: w+8ybxk2e2UbZvIW18m9f9NToDqJUnpaChv7xC7WpgI= Subject key identifier: 7C:4C:C0:DD:95:0D:AF:87:7D:B3:46:22:F8:95:DD:95:04:C6:A8:CD Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6 Certificate issuer: /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6 Certificate serial: 07E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft Manifest number: 07D8 Signing time: Thu 18 Sep 2025 21:25:19 +0000 Manifest this update: Thu 18 Sep 2025 21:25:18 +0000 Manifest next update: Thu 25 Sep 2025 21:25:18 +0000 Files and hashes: 1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: eXaotrWUbkXiBj86DOlfLVgGGv1f38FdwxIH+hJ1f+o=) 2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: Xox0RKn25c/NtUoE1hfxgdRKbyAd4ZoK4OD14DUbhsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2020 (0x7e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6 Validity Not Before: Sep 18 21:25:18 2025 GMT Not After : Sep 25 21:25:18 2025 GMT Subject: CN=68cc78bf-2425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:40:0b:87:dd:54:6c:5b:bf:10:5c:69:7f: 41:89:9f:aa:7b:1d:4e:c6:6f:dc:03:8e:95:50:b7: 06:f2:d8:09:c2:44:0f:02:35:0f:a3:bf:5d:0f:7d: 53:39:fd:c9:b2:35:aa:29:33:4b:21:64:3d:31:0f: 86:c6:57:e8:4f:ce:90:d7:39:f2:07:4a:1d:65:9c: 4a:34:7b:cc:4a:b1:78:62:2c:0a:88:a1:1f:3f:c5: 6d:f8:04:82:f0:73:28:47:2a:82:07:d2:01:9c:5f: cd:30:a5:02:af:87:7b:c5:09:c8:d2:1c:f6:10:ea: 84:45:3b:6a:8a:94:ee:b3:26:52:c4:ac:fd:a1:86: 1c:5b:dc:54:c9:81:6e:5d:1f:1b:14:58:43:c3:90: cf:46:03:80:f2:f0:3f:1d:95:65:2e:da:15:17:d6: 6b:d6:3f:8e:a5:23:48:73:4b:03:97:15:78:32:26: fd:a8:5b:c3:18:27:2d:c5:cf:f5:5b:ad:cd:a6:86: 7e:0c:95:e9:d2:2a:c2:7b:c9:25:41:ca:b4:72:5e: 84:75:59:b4:d9:15:2a:b9:2e:85:99:9a:26:31:ae: 56:83:ce:ca:fc:10:77:47:3a:f5:d1:e1:b0:4a:ba: 8c:3b:c2:f2:d0:ee:d8:ae:92:a1:34:dd:87:63:17: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4C:C0:DD:95:0D:AF:87:7D:B3:46:22:F8:95:DD:95:04:C6:A8:CD X509v3 Authority Key Identifier: keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:fe:18:74:cf:2d:04:ac:d1:db:28:0e:c0:de:3c:d1:09:00: 09:a0:c5:88:b7:a9:95:ea:50:34:f7:41:4e:a2:7d:15:4f:4a: e1:a6:a5:fb:10:d1:ed:18:bf:07:c6:5b:fa:eb:f9:66:0d:66: fc:b4:1f:5a:c7:45:1a:6d:73:f8:96:16:e5:6a:9e:cb:03:c6: d4:e8:1b:21:30:18:fc:42:eb:4b:05:44:7c:4d:16:3f:a6:70: 82:54:ac:1d:b2:bb:4e:9c:6f:82:48:c3:4a:8e:b3:af:89:85: 7e:1e:7e:8f:c5:cf:dd:fb:76:31:7f:26:6d:7a:09:d8:96:8a: 0f:13:e7:fc:38:5a:57:6b:79:fc:12:9f:a9:84:37:1c:22:9d: 43:3a:e7:dc:50:8b:7f:27:75:60:69:18:e9:04:54:dd:4f:0a: 51:79:2f:01:a2:8c:12:64:f6:58:c0:48:41:bd:be:5f:73:76: 46:5d:2c:06:f8:42:4d:ea:b3:97:7f:c5:44:c3:90:46:0a:ef: a8:a1:ca:06:e0:1c:27:0f:b4:53:50:ef:03:7b:58:c6:d6:3d: 69:22:f5:d1:a9:33:20:a9:fb:7c:f1:c9:db:95:4c:99:98:07: 8e:67:ad:f0:cb:a2:6e:2e:a7:47:06:3c:a8:e0:94:14:68:dc: 47:00:e0:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2QjAxMTAvBgNVBAUTKDk3NjFGRjVGM0Y4NDE2QkUwMUUyM0ZDNzA1ODQ3REZB OTQ0ODREQjYwHhcNMjUwOTE4MjEyNTE4WhcNMjUwOTI1MjEyNTE4WjAYMRYwFAYD VQQDEw02OGNjNzhiZi0yNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonpAC4fdVGxbvxBcaX9BiZ+qex1Oxm/cA46VULcG8tgJwkQPAjUPo79dD31T Of3JsjWqKTNLIWQ9MQ+GxlfoT86Q1znyB0odZZxKNHvMSrF4YiwKiKEfP8Vt+ASC 8HMoRyqCB9IBnF/NMKUCr4d7xQnI0hz2EOqERTtqipTusyZSxKz9oYYcW9xUyYFu XR8bFFhDw5DPRgOA8vA/HZVlLtoVF9Zr1j+OpSNIc0sDlxV4Mib9qFvDGCctxc/1 W63NpoZ+DJXp0irCe8klQcq0cl6EdVm02RUquS6FmZomMa5Wg87K/BB3Rzr10eGw SrqMO8Ly0O7YrpKhNN2HYxfIVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxMwN2V Da+HfbNGIviV3ZUExqjNMB8GA1UdIwQYMBaAFJdh/18/hBa+AeI/xwWEffqUSE22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZCMC9FNTA5MDJCNjA3 OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZyNEI0al9IQllSOS1wUklU YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wySF9Yei1FRnI0QjRqX0hCWVI5LXBSSVRiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDZCMC9FNTA5MDJCNjA3OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZy NEI0al9IQllSOS1wUklUYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDV/hh0zy0ErNHbKA7A3jzRCQAJoMWIt6mV6lA090FOon0VT0rhpqX7 ENHtGL8Hxlv66/lmDWb8tB9ax0UabXP4lhblap7LA8bU6BshMBj8QutLBUR8TRY/ pnCCVKwdsrtOnG+CSMNKjrOviYV+Hn6Pxc/d+3YxfyZtegnYlooPE+f8OFpXa3n8 Ep+phDccIp1DOufcUIt/J3VgaRjpBFTdTwpReS8BoowSZPZYwEhBvb5fc3ZGXSwG +EJN6rOXf8VEw5BGCu+oocoG4BwnD7RTUO8De1jG1j1pIvXRqTMgqft88cnblUyZ mAeOZ63wy6JuLqdHBjyo4JQUaNxHAOAV -----END CERTIFICATE-----Generated at Fri Sep 19 05:35:03 2025 by rpki-client