$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json) Hash identifier: Euxnje1S8gPCVexsmCyyJLV3fpwe+iIw7Z5RFX/aHy0= Subject key identifier: 20:91:05:6D:08:96:47:1B:06:F4:0B:B6:3C:57:93:AD:03:C0:D9:B6 Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft Manifest number: 0C75 Signing time: Thu 18 Sep 2025 18:37:19 +0000 Manifest this update: Thu 18 Sep 2025 18:37:19 +0000 Manifest next update: Thu 25 Sep 2025 18:37:19 +0000 Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: cqYMIRI0+jEp12S/ZNcHwYGXuMRX4GLrcdp6ipvvbFI=) 2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: fzV6mKN4RsRKk9FHAZNWKpTQRTVNAoWs1ftj78Q3KMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50FB, serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Validity Not Before: Sep 18 18:37:19 2025 GMT Not After : Sep 25 18:37:19 2025 GMT Subject: CN=68cc515f-d29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:be:ca:a2:00:b5:4a:3f:9a:3e:56:10:25: de:e4:cd:46:39:fd:f6:41:27:6e:93:0a:50:42:60: a8:6a:52:45:87:ad:22:ec:8f:7e:c4:a5:c4:a8:31: 5f:6b:f9:86:d0:72:87:36:ec:18:be:cd:53:2e:cd: e3:d8:72:7e:cf:63:af:7e:5a:be:29:9f:62:7a:ad: e6:08:50:e0:16:65:c0:36:ae:a2:b2:9e:6a:ad:1d: ef:82:82:6e:e0:41:49:dc:81:3d:c7:fd:89:43:c9: e0:95:8b:f0:79:06:77:8e:2a:1b:e7:97:1b:39:10: a4:0c:32:93:37:d1:da:19:82:06:14:61:7c:57:66: 86:3b:c7:69:dd:ad:30:fd:45:8f:ff:5d:aa:67:98: b8:6e:7d:9c:27:f2:bc:4f:2e:31:3d:0c:9a:25:c7: b5:04:7f:85:3e:e4:06:06:58:6e:1f:6c:2b:25:0d: 82:2a:7f:a5:21:2e:eb:0d:ab:e8:67:4e:37:bd:60: 87:77:a5:bd:63:1a:15:f8:db:95:e7:f3:d2:f6:59: b5:7d:50:a9:20:93:18:1f:19:c3:b7:66:7d:a5:88: 34:59:5f:9d:22:ad:b7:85:8f:23:f4:0d:28:76:5f: 17:a7:85:53:44:b8:94:7a:df:0f:c8:b2:a1:1d:c4: aa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:91:05:6D:08:96:47:1B:06:F4:0B:B6:3C:57:93:AD:03:C0:D9:B6 X509v3 Authority Key Identifier: keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ee:39:63:b2:96:11:1d:13:48:44:00:b5:4c:69:9d:b5:9d: 1e:91:48:e3:fa:cd:50:fd:93:52:34:fd:10:51:f9:28:cc:19: 1d:3f:f7:e9:74:df:8e:c7:d6:6d:bd:6c:1d:03:ba:8a:97:31: 17:7e:d3:ea:cd:36:e0:0c:09:b0:ed:72:6b:b7:05:b9:82:ce: 4c:5d:c0:40:85:45:dc:36:84:d1:d7:aa:0c:0f:5f:69:85:ab: 26:61:00:25:9b:f3:95:a2:1d:18:e2:5c:51:d6:6e:c5:f8:a0: 0b:3b:a8:bb:26:cf:17:f7:c8:06:13:58:8b:3f:06:a5:80:a9: e0:c1:1d:c4:99:1c:e8:cd:a2:cc:ee:38:47:89:f2:17:a1:84: 3b:57:81:9b:a5:0b:af:3d:4d:47:36:0b:c4:73:e6:01:cd:50: c3:b9:4b:a0:6d:8f:61:9d:73:26:fb:1c:34:33:88:df:15:92: 31:ad:f0:d7:95:43:70:e8:9d:6c:02:77:d3:a0:7a:71:8e:01: 3b:9c:ca:a0:cb:bd:8e:e8:bd:59:e0:18:b8:c3:c2:c3:e7:53: a3:e4:67:d7:dd:47:1a:5c:8b:34:54:a8:ab:48:c6:96:d9:5e: 0d:9a:40:08:ee:2c:31:2f:b4:36:3f:69:66:f3:66:53:15:ca: 0d:a0:bb:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwRkIxMTAvBgNVBAUTKEQ0Q0Y1RjA5NjczNkYyNEVBMjQxMDc5MkE2MDNDREJB REQ4MjdEQ0QwHhcNMjUwOTE4MTgzNzE5WhcNMjUwOTI1MTgzNzE5WjAYMRYwFAYD VQQDEw02OGNjNTE1Zi1kMjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsb++yqIAtUo/mj5WECXe5M1GOf32QSdukwpQQmCoalJFh60i7I9+xKXEqDFf a/mG0HKHNuwYvs1TLs3j2HJ+z2Ovflq+KZ9ieq3mCFDgFmXANq6isp5qrR3vgoJu 4EFJ3IE9x/2JQ8nglYvweQZ3jiob55cbORCkDDKTN9HaGYIGFGF8V2aGO8dp3a0w /UWP/12qZ5i4bn2cJ/K8Ty4xPQyaJce1BH+FPuQGBlhuH2wrJQ2CKn+lIS7rDavo Z043vWCHd6W9YxoV+NuV5/PS9lm1fVCpIJMYHxnDt2Z9pYg0WV+dIq23hY8j9A0o dl8Xp4VTRLiUet8PyLKhHcSqGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCRBW0I lkcbBvQLtjxXk60DwNm2MB8GA1UdIwQYMBaAFNTPXwlnNvJOokEHkqYDzbrdgn3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBGQi8yNTdCQjJDNDA3 MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhrNmlRUWVTcGdQTnV0MkNm YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFNOWZDV2MyOGs2aVFRZVNwZ1BOdXQyQ2ZjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBGQi8yNTdCQjJDNDA3MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhr NmlRUWVTcGdQTnV0MkNmYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+7jljspYRHRNIRAC1TGmdtZ0ekUjj+s1Q/ZNSNP0QUfkozBkdP/fp dN+Ox9ZtvWwdA7qKlzEXftPqzTbgDAmw7XJrtwW5gs5MXcBAhUXcNoTR16oMD19p hasmYQAlm/OVoh0Y4lxR1m7F+KALO6i7Js8X98gGE1iLPwalgKngwR3EmRzozaLM 7jhHifIXoYQ7V4GbpQuvPU1HNgvEc+YBzVDDuUugbY9hnXMm+xw0M4jfFZIxrfDX lUNw6J1sAnfToHpxjgE7nMqgy72O6L1Z4Bi4w8LD51Oj5GfX3UcaXIs0VKirSMaW 2V4NmkAI7iwxL7Q2P2lm82ZTFcoNoLtt -----END CERTIFICATE-----Generated at Fri Sep 19 10:42:49 2025 by rpki-client