$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json) Hash identifier: T2PEUTcpXdrrb62zHwoLQV3BBIYZMMizUViNPApGLoA= Subject key identifier: 38:D3:E4:7A:58:98:1D:CF:49:A2:A7:B1:A7:A9:D8:AD:33:36:49:80 Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Certificate serial: 085D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft Manifest number: 0853 Signing time: Thu 18 Sep 2025 20:56:13 +0000 Manifest this update: Thu 18 Sep 2025 20:56:12 +0000 Manifest next update: Thu 25 Sep 2025 20:56:12 +0000 Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: rBSvXQWCxNzahUmhQBQN+9BhVkZPg2rqrLpY2oipMtg=) 2: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: SXpG+rP8KDZ7mlez3vzJppnJKS0AYTjR+XpM0wzK6oU=) 3: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: kkpip1TEWWFNH1mROSk1fuufLAg/gIfzk1gjTV7g7jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2141 (0x85d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Validity Not Before: Sep 18 20:56:12 2025 GMT Not After : Sep 25 20:56:12 2025 GMT Subject: CN=68cc71ed-b287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:6d:eb:f8:7e:71:05:b2:45:a5:81:bc:51: 3d:ae:89:35:07:1a:d8:6c:d0:ec:f5:3a:e3:8a:d0: 96:64:14:1a:e2:e6:2e:24:d2:6a:1f:c3:13:75:5b: 5b:5c:7a:7a:c7:a5:69:ad:aa:31:1a:56:32:3c:6b: 29:3c:4b:76:b6:0c:df:b4:4a:ff:4f:ed:3d:2e:d3: c1:56:e4:96:f8:31:09:8b:68:25:8a:f9:5a:37:4f: 4d:36:12:e5:e4:cd:d9:3b:f9:93:fb:90:45:01:fc: ea:65:84:43:87:c7:b4:a3:13:a5:0d:c4:75:95:42: 37:a0:91:35:62:21:f0:91:a2:67:d9:f2:ff:8e:31: 5a:0c:84:f6:c2:89:a1:0b:43:03:05:87:26:d3:6c: 14:30:75:73:29:b5:46:0f:f6:88:55:3f:24:82:4a: 00:9d:51:ea:cd:da:bd:62:b1:74:9e:96:2a:c2:99: 94:20:ca:c1:90:8c:e4:cc:ce:c6:68:e6:92:8a:bd: 70:b3:f2:ac:7a:bf:ca:1d:67:02:2d:88:51:71:af: 78:b7:43:eb:e4:ee:fb:f0:45:d7:ec:dd:62:32:a0: 26:c7:89:45:23:4f:56:c5:9d:24:da:f9:f8:de:f9: 55:78:12:b0:ed:37:17:84:8f:f2:5c:6a:9f:25:93: a0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D3:E4:7A:58:98:1D:CF:49:A2:A7:B1:A7:A9:D8:AD:33:36:49:80 X509v3 Authority Key Identifier: keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:92:a6:4a:26:17:1a:6e:a4:47:03:60:f8:bd:15:05:47:fb: 4c:cb:f0:9b:7a:8d:18:57:04:f5:ef:fb:2f:8b:81:b8:e9:10: 69:c8:08:b9:d4:7a:fa:75:90:34:33:9e:d0:78:e1:63:57:84: 0e:00:69:69:cc:7c:c1:b2:3a:46:42:db:af:e5:f3:3e:92:cc: 04:9f:8d:7f:e9:30:6a:f0:6e:d0:06:cc:ae:e2:14:4a:fa:6b: fa:58:0b:9a:78:23:03:60:d0:2e:98:69:b1:e9:3b:0d:33:55: 22:0a:d0:25:fc:7f:08:21:ee:14:04:ad:cb:18:b2:48:13:0d: fe:0c:90:27:c6:6a:9f:f6:5e:cd:64:5d:69:a9:85:ce:57:69: bf:2d:c5:1f:88:cc:59:7a:75:64:8f:86:f8:ee:4d:a3:aa:44: f8:df:e4:1e:f2:70:68:e2:42:27:59:b6:d7:14:cd:59:29:67: 93:a3:09:c5:9f:a7:d3:9e:82:a1:23:b2:a5:ed:4e:97:2b:e0: 65:3e:11:c9:c6:b0:37:7e:9f:db:5b:3c:25:fd:57:61:93:e4: 89:c7:9e:69:27:af:92:02:b3:7d:60:9c:03:c6:9f:78:6d:a4: 67:37:40:39:c3:69:52:7a:46:4d:7c:db:68:72:f4:17:96:3b: fb:4e:b5:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY5NDAxMTAvBgNVBAUTKEJENzU2OERDNDQ5MzcyRkUyMkMyRUM5RUI3NzJCN0Q2 RTgyRDJBODAwHhcNMjUwOTE4MjA1NjEyWhcNMjUwOTI1MjA1NjEyWjAYMRYwFAYD VQQDEw02OGNjNzFlZC1iMjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2pt6/h+cQWyRaWBvFE9rok1BxrYbNDs9TrjitCWZBQa4uYuJNJqH8MTdVtb XHp6x6VpraoxGlYyPGspPEt2tgzftEr/T+09LtPBVuSW+DEJi2glivlaN09NNhLl 5M3ZO/mT+5BFAfzqZYRDh8e0oxOlDcR1lUI3oJE1YiHwkaJn2fL/jjFaDIT2womh C0MDBYcm02wUMHVzKbVGD/aIVT8kgkoAnVHqzdq9YrF0npYqwpmUIMrBkIzkzM7G aOaSir1ws/Kser/KHWcCLYhRca94t0Pr5O778EXX7N1iMqAmx4lFI09WxZ0k2vn4 3vlVeBKw7TcXhI/yXGqfJZOgLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjT5HpY mB3PSaKnsaep2K0zNkmAMB8GA1UdIwQYMBaAFL11aNxEk3L+IsLsnrdyt9boLSqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjk0MC9FMEQwNkI4MkQ3 N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2NGl3dXlldDNLMzF1Z3RL b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYVm8zRVNUY3Y0aXd1eWV0M0szMXVndEtvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njk0MC9FMEQwNkI4MkQ3N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2 NGl3dXlldDNLMzF1Z3RLb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdkqZKJhcabqRHA2D4vRUFR/tMy/Cbeo0YVwT17/svi4G46RBpyAi5 1Hr6dZA0M57QeOFjV4QOAGlpzHzBsjpGQtuv5fM+kswEn41/6TBq8G7QBsyu4hRK +mv6WAuaeCMDYNAumGmx6TsNM1UiCtAl/H8IIe4UBK3LGLJIEw3+DJAnxmqf9l7N ZF1pqYXOV2m/LcUfiMxZenVkj4b47k2jqkT43+Qe8nBo4kInWbbXFM1ZKWeTownF n6fTnoKhI7Kl7U6XK+BlPhHJxrA3fp/bWzwl/Vdhk+SJx55pJ6+SArN9YJwDxp94 baRnN0A5w2lSekZNfNtocvQXljv7TrVy -----END CERTIFICATE-----Generated at Fri Sep 19 02:31:12 2025 by rpki-client