$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json) Hash identifier: xv66PNeRLlz1VXjNoZx/OiWxPerDB0U2T80uZDM4hQk= Subject key identifier: D7:9D:5D:4E:DD:D2:4D:DE:77:A0:67:7A:0C:FD:05:90:24:E1:16:70 Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft Manifest number: 0EA8 Signing time: Thu 18 Sep 2025 17:59:50 +0000 Manifest this update: Thu 18 Sep 2025 17:59:50 +0000 Manifest next update: Thu 25 Sep 2025 17:59:50 +0000 Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: wyEhJLRyzwe0i4qOServkGLCIcUOhbXabPmrhjgwH8U=) 2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: vEfRiQNE3h/B834WLq9GOeXPVajCjfh3DLWpODG+4Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Validity Not Before: Sep 18 17:59:50 2025 GMT Not After : Sep 25 17:59:50 2025 GMT Subject: CN=68cc4896-2683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:be:d2:e7:8e:2a:3c:3e:99:84:ba:14:50: 24:76:0e:73:d0:ef:a0:85:3e:52:7b:cf:87:95:b8: a9:f0:df:d3:45:98:a2:57:16:63:83:45:02:08:87: a4:ae:69:28:c0:b9:04:1e:23:e3:cb:d9:1b:71:ac: e7:ac:9d:05:29:dc:ea:ea:0e:34:d5:8f:e6:30:5c: 70:25:a3:6a:96:01:f7:f8:0b:73:27:f9:ca:42:45: b1:ae:90:d2:fb:ad:24:c5:c6:8b:dd:0d:dd:f4:eb: e4:88:df:ca:fc:a5:29:c6:c3:63:6c:d7:65:3e:f1: 9e:d7:dc:3a:10:dc:e3:24:85:1b:eb:be:c4:8e:ec: 90:10:ad:59:f3:47:ce:8e:ca:57:62:0e:b4:20:1f: 07:e4:3d:0f:08:2c:a1:a1:d2:5b:86:8e:a2:f7:86: be:6b:f9:0b:bc:f6:04:5f:e1:4b:85:f2:55:67:ce: 10:76:14:f5:98:2d:11:23:aa:c7:af:1e:6d:f9:9e: 33:32:0f:ef:16:d3:84:df:fd:9b:97:c0:cc:0f:84: dd:73:54:53:be:df:08:c8:d5:17:2d:00:4d:ef:7a: 0a:0b:cb:49:02:ee:1a:22:2e:0d:83:01:0c:0e:35: f7:c3:3e:3d:3e:f6:25:c5:a7:a8:fe:80:38:0c:96: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9D:5D:4E:DD:D2:4D:DE:77:A0:67:7A:0C:FD:05:90:24:E1:16:70 X509v3 Authority Key Identifier: keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:17:04:46:5f:40:6f:fd:1a:8e:d2:5f:16:47:31:4c:5c:af: bc:48:87:f8:a8:b6:94:88:28:09:f9:f3:e5:84:63:af:0c:09: d8:6f:35:a0:48:2a:c7:18:ec:19:a7:43:16:45:26:d9:22:95: 41:f7:e6:db:d9:d5:c4:8e:2c:84:c9:aa:79:3d:d5:18:36:2b: 47:41:8b:a1:9d:a1:b7:d2:08:08:04:18:62:79:d8:14:4a:14: 5e:2f:13:87:9c:2c:03:40:68:ee:ab:5d:be:3f:ca:8a:e6:36: f0:7f:10:98:10:9e:c2:8d:f6:70:4e:3a:e8:87:38:5e:de:84: 24:87:85:76:88:6a:b4:97:2b:38:83:b7:3d:ab:9e:02:6e:54: 08:dd:8e:29:0e:d5:07:0d:b4:0c:67:c5:97:51:ed:ee:07:fd: 20:10:b5:0b:11:27:2f:e2:da:f3:82:5e:8d:e8:d8:2a:59:72: 92:14:5a:9b:db:5f:5b:db:dd:86:47:57:89:18:55:34:dd:47: ff:b0:57:73:4a:c2:01:ce:3e:57:74:b9:c0:fb:fe:b5:4d:e8: ad:12:10:d3:74:1d:65:85:b3:d2:7a:bf:4a:c2:b6:d9:26:4e: 49:d8:11:10:29:77:36:1b:9c:47:eb:fa:20:1d:a4:50:aa:36: a6:1d:03:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKERCNzhEOUY5MzU4RTU2N0QzMDZFRTNCRDFFQUM3NDhF OTYwNkJGOEYwHhcNMjUwOTE4MTc1OTUwWhcNMjUwOTI1MTc1OTUwWjAYMRYwFAYD VQQDEw02OGNjNDg5Ni0yNjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB6+0ueOKjw+mYS6FFAkdg5z0O+ghT5Se8+Hlbip8N/TRZiiVxZjg0UCCIek rmkowLkEHiPjy9kbcaznrJ0FKdzq6g401Y/mMFxwJaNqlgH3+AtzJ/nKQkWxrpDS +60kxcaL3Q3d9OvkiN/K/KUpxsNjbNdlPvGe19w6ENzjJIUb677EjuyQEK1Z80fO jspXYg60IB8H5D0PCCyhodJbho6i94a+a/kLvPYEX+FLhfJVZ84QdhT1mC0RI6rH rx5t+Z4zMg/vFtOE3/2bl8DMD4Tdc1RTvt8IyNUXLQBN73oKC8tJAu4aIi4NgwEM DjX3wz49PvYlxaeo/oA4DJbClQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNedXU7d 0k3ed6Bnegz9BZAk4RZwMB8GA1UdIwQYMBaAFNt42fk1jlZ9MG7jvR6sdI6WBr+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1ZuMHdidU85SHF4MGpwWUd2 NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzalotVFdPVm4wd2J1TzlIcXgwanBZR3Y0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1Zu MHdidU85SHF4MGpwWUd2NDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7FwRGX0Bv/RqO0l8WRzFMXK+8SIf4qLaUiCgJ+fPlhGOvDAnYbzWg SCrHGOwZp0MWRSbZIpVB9+bb2dXEjiyEyap5PdUYNitHQYuhnaG30ggIBBhiedgU ShReLxOHnCwDQGjuq12+P8qK5jbwfxCYEJ7CjfZwTjrohzhe3oQkh4V2iGq0lys4 g7c9q54CblQI3Y4pDtUHDbQMZ8WXUe3uB/0gELULEScv4trzgl6N6NgqWXKSFFqb 219b292GR1eJGFU03Uf/sFdzSsIBzj5XdLnA+/61TeitEhDTdB1lhbPSer9KwrbZ Jk5J2BEQKXc2G5xH6/ogHaRQqjamHQM8 -----END CERTIFICATE-----Generated at Fri Sep 19 02:52:57 2025 by rpki-client