$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft File: AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json) Hash identifier: f+PCI1JMpXbB1VmlI/d0kwYQh2Uie4wM/SFWWuTXXXc= Subject key identifier: 82:83:D8:12:C0:E6:10:C0:9B:E2:31:F9:DD:7B:B4:94:B2:10:6A:AD Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3 Certificate issuer: /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft Manifest number: 18 Signing time: Wed 17 Sep 2025 08:48:34 +0000 Manifest this update: Wed 17 Sep 2025 08:48:33 +0000 Manifest next update: Wed 24 Sep 2025 08:48:33 +0000 Files and hashes: 1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: 4MMkHd5q9TiOVgOgqX19r6yG6Z0+KoxGujTXbPuNQJA=) 2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: x6HQ5RDi7bp4WcPcgDw38Yb49M8i1vVS8BiW9zZO4Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3 Validity Not Before: Sep 17 08:48:33 2025 GMT Not After : Sep 24 08:48:33 2025 GMT Subject: CN=68ca75e1-f3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9a:4c:4a:77:87:b2:86:de:20:59:5f:6e:89: 9f:fe:49:22:44:36:c8:b8:6c:10:c5:a1:fe:43:bb: c0:f0:dd:c0:ac:b9:f0:9c:b4:b4:38:c2:e9:32:ef: b7:1f:ed:f5:5c:bd:97:9e:be:1b:33:99:d4:f3:30: 28:94:3e:f2:ab:84:0d:82:0d:07:70:3b:23:f8:30: 3a:54:70:7d:b8:0e:04:59:52:77:bc:8b:69:2a:1f: 7f:eb:d8:3c:26:a4:c7:06:0b:9f:f8:89:8b:43:96: 7f:22:4e:9d:d3:5b:44:0e:4d:bc:41:78:e4:28:3f: a4:9f:db:a5:5d:66:af:f6:24:26:5e:cc:b5:97:2e: df:e2:fa:e5:19:ec:00:cd:f8:f7:2d:b9:91:bf:a0: 89:6e:8a:56:9e:0a:44:d7:72:fe:d2:dd:9b:99:2a: ae:b1:d9:6c:41:28:22:bf:27:3a:b8:6f:9f:96:e8: 5f:e1:8c:07:99:16:35:53:aa:96:a4:1e:45:43:02: b0:b1:31:f8:65:78:4d:50:68:8d:92:72:05:cf:66: 0d:56:c3:96:f8:75:9f:e8:d2:01:4b:51:df:b1:62: f9:f1:40:59:3d:3b:6b:4e:f6:e9:1b:9e:b2:3b:06: f9:8e:68:7d:21:43:07:e3:61:74:b4:0c:e0:29:0c: e8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:83:D8:12:C0:E6:10:C0:9B:E2:31:F9:DD:7B:B4:94:B2:10:6A:AD X509v3 Authority Key Identifier: keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:d3:44:a0:63:7e:00:51:79:50:9a:6f:1b:10:7d:07:35:13: ee:41:ef:04:fa:0e:1c:3d:fa:df:aa:ac:d0:16:e0:33:05:01: 9f:24:c1:3b:c3:64:1b:ac:93:f7:a2:a3:0b:9c:98:c5:5f:e8: 80:bc:57:04:ae:d2:f6:3e:01:e6:19:cd:7e:ee:a2:77:bd:37: 4b:8a:ea:99:fb:70:11:db:12:a5:f8:78:8c:46:b1:c4:57:8a: ef:ac:a7:da:dc:d7:1f:5d:5c:95:2b:f6:f0:3b:04:9f:72:81: 22:f9:56:11:70:ae:d6:38:a9:69:ae:80:ba:90:56:b3:ce:a9: ec:21:4f:f9:41:58:59:bc:82:a9:15:a3:f1:8f:15:09:1f:5c: 6d:9b:1f:1e:8e:ba:32:73:25:7d:11:f4:70:76:98:32:55:77: 1a:5b:61:3e:1b:bb:3c:fa:fa:b9:b6:64:a2:b6:52:bf:4b:78: 0d:20:67:91:06:57:00:d4:18:ba:fb:f8:e4:97:b4:bf:a5:2d: 71:2f:44:08:b9:b1:52:c6:a4:e8:77:79:cb:8a:42:62:6c:00: f7:1d:57:3e:8a:60:39:10:67:6e:2d:f5:35:42:28:88:66:1a: ef:47:63:99:a8:d9:e0:98:a6:0d:b2:4b:42:96:35:03:d0:e2: 73:c6:17:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NTk3OTExMC8GA1UEBRMoMDFDODU4MTgxMDg4RTFCOUM1Nzc1RENBMEM0QkFFOUI5 RkY1NzdCMzAeFw0yNTA5MTcwODQ4MzNaFw0yNTA5MjQwODQ4MzNaMBgxFjAUBgNV BAMTDTY4Y2E3NWUxLWYzYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfmkxKd4eyht4gWV9uiZ/+SSJENsi4bBDFof5Du8Dw3cCsufCctLQ4wuky77cf 7fVcvZeevhszmdTzMCiUPvKrhA2CDQdwOyP4MDpUcH24DgRZUne8i2kqH3/r2Dwm pMcGC5/4iYtDln8iTp3TW0QOTbxBeOQoP6Sf26VdZq/2JCZezLWXLt/i+uUZ7ADN +PctuZG/oIluilaeCkTXcv7S3ZuZKq6x2WxBKCK/Jzq4b5+W6F/hjAeZFjVTqpak HkVDArCxMfhleE1QaI2ScgXPZg1Ww5b4dZ/o0gFLUd+xYvnxQFk9O2tO9ukbnrI7 BvmOaH0hQwfjYXS0DOApDOjTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgoPYEsDm EMCb4jH53Xu0lLIQaq0wHwYDVR0jBBgwFoAUAchYGBCI4bnFd13KDEuum5/1d7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ1OTc5LzUzOTUwNzg2N0Yy NzExRjA5NEJBNTcyN0M0RjlBRTAyL0FjaFlHQkNJNGJuRmQxM0tERXV1bTVfMWQ3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWNoWUdCQ0k0Ym5GZDEzS0RFdXVtNV8xZDdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ1 OTc5LzUzOTUwNzg2N0YyNzExRjA5NEJBNTcyN0M0RjlBRTAyL0FjaFlHQkNJNGJu RmQxM0tERXV1bTVfMWQ3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK7TRKBjfgBReVCabxsQfQc1E+5B7wT6Dhw9+t+qrNAW4DMFAZ8kwTvD ZBusk/eiowucmMVf6IC8VwSu0vY+AeYZzX7uone9N0uK6pn7cBHbEqX4eIxGscRX iu+sp9rc1x9dXJUr9vA7BJ9ygSL5VhFwrtY4qWmugLqQVrPOqewhT/lBWFm8gqkV o/GPFQkfXG2bHx6OujJzJX0R9HB2mDJVdxpbYT4buzz6+rm2ZKK2Ur9LeA0gZ5EG VwDUGLr7+OSXtL+lLXEvRAi5sVLGpOh3ecuKQmJsAPcdVz6KYDkQZ24t9TVCKIhm Gu9HY5mo2eCYpg2yS0KWNQPQ4nPGF/U= -----END CERTIFICATE-----Generated at Thu Sep 18 23:28:38 2025 by rpki-client