$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: kH8o0JN7wc2k9LFPtbvJ1aM5Bn/tg782uKDtVH/Emcs= Subject key identifier: 4E:6A:F7:A8:FE:BB:82:7B:C5:0B:7F:75:DE:BD:65:F0:E2:DC:1F:8D Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 013D Signing time: Sun 07 Sep 2025 04:53:35 +0000 Manifest this update: Sun 07 Sep 2025 04:53:34 +0000 Manifest next update: Sun 14 Sep 2025 04:53:34 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: bj1qqro2BVEpdqpV/4dSTbFQOpIKP2KeLLaG2W8MoAw=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: 6BXa0l0XZh/eGvl4ynq5V2Aj3lZVf/u92wrWO9e9+lA=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 0ui5S8hmz9C0Ock78UXOuJaT2l8PyKzUulCehXJDbXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Sep 7 04:53:34 2025 GMT Not After : Sep 14 04:53:34 2025 GMT Subject: CN=68bd0fce-981b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:a5:b2:58:be:76:56:27:f7:18:5b:3b:fc: 01:27:7a:18:f3:66:cf:c8:e6:d0:e0:4d:41:53:21: 0c:ea:a8:93:45:94:77:ef:a7:f7:7d:69:02:49:70: ca:0a:c7:09:11:1f:fa:df:99:c9:dc:f0:3c:68:da: 10:82:0f:fe:ba:bc:69:f6:50:a1:1e:45:20:18:43: e9:32:25:b7:b0:c3:1a:17:5f:c7:43:be:c5:5c:d5: 62:e7:70:f8:dd:41:8a:f2:12:93:b6:9b:4b:95:d4: d0:fa:f7:a8:1c:1a:fb:82:3f:3c:51:dd:a9:a4:d0: c4:0c:f7:65:24:7f:f1:ad:28:5f:59:9c:b5:7e:8a: 57:8f:5c:f3:89:04:75:2f:5f:86:20:e3:56:ea:31: 13:9c:15:d9:23:b2:52:10:21:4b:b5:27:29:2f:74: 76:52:3c:8d:5a:b9:d3:a8:f2:77:c7:26:58:36:03: a3:12:d1:4b:9b:e7:60:58:b3:bb:7b:0d:24:4b:a6: 70:b0:2c:fb:25:b7:32:59:61:b6:ed:70:82:da:4a: 40:ea:b0:85:40:0d:b4:30:90:22:5e:5b:2c:4a:8c: 83:e4:95:16:b8:fc:f4:da:8e:be:28:20:8c:48:26: c3:3d:10:47:a5:ce:a1:76:1a:b6:10:af:a0:70:8a: 43:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6A:F7:A8:FE:BB:82:7B:C5:0B:7F:75:DE:BD:65:F0:E2:DC:1F:8D X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:75:0a:00:15:85:fc:f6:53:57:3b:48:59:7d:34:2e:33:56: 73:b0:08:72:52:24:7e:1e:c6:73:37:33:f2:30:06:9d:db:00: d1:2c:ab:41:95:64:f4:1c:a7:9c:25:67:2c:fd:03:58:2e:be: f3:f7:f2:ee:e3:00:7d:ae:55:f0:2d:68:1c:f4:d8:64:a3:c3: f5:ac:83:39:ba:5a:b6:0b:76:c0:4e:d9:1f:d4:62:2d:ea:94: 32:39:3f:f6:91:00:f9:af:29:9a:4c:49:70:29:91:e4:38:ab: 90:16:3e:13:4a:eb:b1:75:6c:23:ff:da:fd:31:d6:e7:58:07: af:20:42:d4:fd:a1:99:5a:e5:b6:6a:6a:bc:ff:37:16:9a:c9: d2:d0:df:28:77:a5:37:4b:ad:50:aa:5e:bc:d7:67:25:de:fd: 5b:a1:66:bf:e0:db:85:a7:ab:9e:94:68:14:18:a1:53:51:77: 44:90:04:5b:7c:3e:30:89:54:cc:f0:04:bb:29:e7:38:83:8d: 7c:6a:74:c4:29:e2:1d:51:7f:e2:c5:59:99:a6:49:3a:4a:da: 7a:c8:21:38:a9:e2:2e:d0:16:8e:22:a4:c1:9b:e1:38:14:54: 9d:1f:90:86:0d:b0:10:96:bb:19:6a:2d:1e:c8:84:2b:3d:17: c5:da:96:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUwOTA3MDQ1MzM0WhcNMjUwOTE0MDQ1MzM0WjAYMRYwFAYD VQQDEw02OGJkMGZjZS05ODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzX+lsli+dlYn9xhbO/wBJ3oY82bPyObQ4E1BUyEM6qiTRZR376f3fWkCSXDK CscJER/635nJ3PA8aNoQgg/+urxp9lChHkUgGEPpMiW3sMMaF1/HQ77FXNVi53D4 3UGK8hKTtptLldTQ+veoHBr7gj88Ud2ppNDEDPdlJH/xrShfWZy1fopXj1zziQR1 L1+GIONW6jETnBXZI7JSECFLtScpL3R2UjyNWrnTqPJ3xyZYNgOjEtFLm+dgWLO7 ew0kS6ZwsCz7JbcyWWG27XCC2kpA6rCFQA20MJAiXlssSoyD5JUWuPz02o6+KCCM SCbDPRBHpc6hdhq2EK+gcIpDoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5q96j+ u4J7xQt/dd69ZfDi3B+NMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEdQoAFYX89lNXO0hZfTQuM1ZzsAhyUiR+HsZzNzPyMAad2wDRLKtB lWT0HKecJWcs/QNYLr7z9/Lu4wB9rlXwLWgc9Nhko8P1rIM5ulq2C3bATtkf1GIt 6pQyOT/2kQD5rymaTElwKZHkOKuQFj4TSuuxdWwj/9r9MdbnWAevIELU/aGZWuW2 amq8/zcWmsnS0N8od6U3S61Qql6812cl3v1boWa/4NuFp6uelGgUGKFTUXdEkARb fD4wiVTM8AS7Kec4g418anTEKeIdUX/ixVmZpkk6Stp6yCE4qeIu0BaOIqTBm+E4 FFSdH5CGDbAQlrsZai0eyIQrPRfF2paD -----END CERTIFICATE-----Generated at Sun Sep 7 14:33:05 2025 by rpki-client