$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft File: 0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json) Hash identifier: C8BFK99tnw5aF9gmDMlW3kLVOzL8PwhY+IyDFueyoK8= Subject key identifier: 86:B4:35:EB:3A:9F:9B:8A:B9:FF:75:A9:3D:DF:10:F0:E3:EA:3C:D8 Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft Manifest number: 01FC Signing time: Fri 19 Sep 2025 02:55:14 +0000 Manifest this update: Fri 19 Sep 2025 02:55:14 +0000 Manifest next update: Fri 26 Sep 2025 02:55:14 +0000 Files and hashes: 1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: DcG17wCukeU6N5eA6K0Y8ssbsO+k2OVsy3cle67+pmA=) 2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: xyd0ZZrH0VHNsmRtbjg/g57C4k5UyZ1DuB1/mljU4Qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 02:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Validity Not Before: Sep 19 02:55:14 2025 GMT Not After : Sep 26 02:55:14 2025 GMT Subject: CN=68ccc612-8add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:92:8b:a0:b5:d9:7c:ad:f2:58:20:fb:a1: 65:55:c2:ec:a4:7f:26:e4:34:d6:d8:50:a9:70:ad: 46:f6:8c:b3:12:65:07:8c:7d:94:f7:bc:fb:ec:41: 10:e0:e6:6f:78:f7:7f:58:d8:ac:bc:99:24:1e:02: 9a:3c:14:50:ab:b4:ea:70:3b:4f:fa:01:94:30:2e: dd:8e:de:0f:67:56:af:51:fe:2a:e4:94:56:e3:19: 9e:67:f9:da:77:08:eb:3c:a0:cf:1f:83:ec:ea:c3: b9:d1:5e:e3:90:e4:f5:2f:4b:09:3f:16:94:f4:d0: 85:cb:c8:df:e7:34:3d:f3:8a:ad:9e:6a:2d:8d:93: d6:81:fb:1b:64:7d:1c:63:3e:cf:c7:b5:af:7d:05: d4:5a:9e:28:f7:77:7d:7e:1b:c2:c2:b1:c4:87:b5: 97:31:a7:3e:63:49:ca:41:af:c7:e1:bf:eb:fb:b9: 82:d4:cd:0f:7a:76:1e:24:af:11:04:f4:1a:fb:20: 62:83:7b:3d:64:62:4f:4e:37:da:d5:84:1e:ea:fb: 9c:f9:25:e8:a4:1c:4d:ef:c7:bd:85:55:32:b4:28: 9a:b5:4d:44:38:7b:60:e6:99:1a:c8:9f:15:9e:ae: e1:3f:c4:80:f1:75:e9:0b:60:66:c9:9f:51:b5:5b: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B4:35:EB:3A:9F:9B:8A:B9:FF:75:A9:3D:DF:10:F0:E3:EA:3C:D8 X509v3 Authority Key Identifier: keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bb:49:45:54:67:ca:80:aa:0f:5a:da:86:d4:53:ef:ad:af: 23:72:4e:1f:1e:1e:b6:f6:54:84:ef:ae:32:a2:f1:b0:f8:3d: 6b:ad:f1:ee:1f:82:f3:be:7b:5a:8f:06:9e:31:ec:dc:73:5c: 60:49:a5:ae:c4:71:f9:4f:e1:e4:43:dc:b1:53:8a:d0:42:cb: c1:c6:55:5d:d0:81:29:b4:3b:3a:d6:f9:30:fc:33:0f:37:79: 4e:6b:98:95:13:19:d8:91:74:60:1e:94:c7:8d:7f:dd:78:b0: cf:6e:03:63:f8:ce:d7:75:da:01:a7:06:30:3c:c3:61:e1:ac: ba:64:8d:55:d6:ca:47:11:19:36:89:6e:03:9d:78:75:d0:13: 92:d3:a8:10:81:74:ae:c1:f0:2e:c7:84:07:da:ca:62:e5:4b: e6:90:31:f3:cc:c0:51:0e:09:d6:5b:a0:9d:ee:d6:07:23:17: 6b:0f:d2:b9:2d:44:9b:f4:40:5d:81:5f:c6:1d:eb:b5:62:21: ab:0b:ab:77:72:41:63:45:43:ee:b4:2c:5b:51:6e:e1:20:be: 5a:77:8b:55:8c:7c:19:64:46:17:09:24:d6:13:b8:97:07:01: 57:3e:1a:3d:b0:d1:3d:fc:69:c6:5c:f3:d7:78:1c:f9:e9:ed: 36:92:52:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3 RjA5N0M5MDgwHhcNMjUwOTE5MDI1NTE0WhcNMjUwOTI2MDI1NTE0WjAYMRYwFAYD VQQDEw02OGNjYzYxMi04YWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK+Si6C12Xyt8lgg+6FlVcLspH8m5DTW2FCpcK1G9oyzEmUHjH2U97z77EEQ 4OZvePd/WNisvJkkHgKaPBRQq7TqcDtP+gGUMC7djt4PZ1avUf4q5JRW4xmeZ/na dwjrPKDPH4Ps6sO50V7jkOT1L0sJPxaU9NCFy8jf5zQ984qtnmotjZPWgfsbZH0c Yz7Px7WvfQXUWp4o93d9fhvCwrHEh7WXMac+Y0nKQa/H4b/r+7mC1M0PenYeJK8R BPQa+yBig3s9ZGJPTjfa1YQe6vuc+SXopBxN78e9hVUytCiatU1EOHtg5pkayJ8V nq7hP8SA8XXpC2BmyZ9RtVtcvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIa0Nes6 n5uKuf91qT3fEPDj6jzYMB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUFBOC8yNzg1OTkxMjkxRUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhv OTA4MjF3ZVJYWjFfQ1h5UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMu0lFVGfKgKoPWtqG1FPvra8jck4fHh629lSE764yovGw+D1rrfHu H4LzvntajwaeMezcc1xgSaWuxHH5T+HkQ9yxU4rQQsvBxlVd0IEptDs61vkw/DMP N3lOa5iVExnYkXRgHpTHjX/deLDPbgNj+M7XddoBpwYwPMNh4ay6ZI1V1spHERk2 iW4DnXh10BOS06gQgXSuwfAux4QH2spi5UvmkDHzzMBRDgnWW6Cd7tYHIxdrD9K5 LUSb9EBdgV/GHeu1YiGrC6t3ckFjRUPutCxbUW7hIL5ad4tVjHwZZEYXCSTWE7iX BwFXPho9sNE9/GnGXPPXeBz56e02klKn -----END CERTIFICATE-----Generated at Fri Sep 19 06:51:16 2025 by rpki-client