$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft File: 3IDIXlEBCJqyQl0_yRd5haASXG4.mft (raw, json) Hash identifier: iXF9nD+QWaXu/8Vet1vDcVGtYmZy6Dm9ZA7uwcNJu1I= Subject key identifier: 47:69:D7:70:8F:D5:00:0C:64:3A:76:6F:E5:F0:05:C3:CC:8E:1A:9B Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E Certificate issuer: /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft Manifest number: 86 Signing time: Fri 05 Sep 2025 07:14:55 +0000 Manifest this update: Fri 05 Sep 2025 07:14:54 +0000 Manifest next update: Fri 12 Sep 2025 07:14:54 +0000 Files and hashes: 1: 3IDIXlEBCJqyQl0_yRd5haASXG4.crl (hash: Y7fSjd/zRIMCIzMYMr6mvdLixnKprbnff5tS3a6N3bo=) 2: 727850D8D3EF11EFB596E00CC4F9AE02.roa (hash: hvte1LGzH8lQs5HlVIeT4otbezAzwXIr7d7vqIECmd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D74A6, serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Validity Not Before: Sep 5 07:14:54 2025 GMT Not After : Sep 12 07:14:54 2025 GMT Subject: CN=68ba8def-ccc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:35:19:71:a3:14:95:33:78:94:89:f0:a7: cd:30:ff:39:4f:e4:bd:f3:0d:26:13:b6:7c:e5:89: 36:2b:87:fc:e2:76:6a:6e:13:cb:c8:d1:b2:55:4d: e2:9d:d9:9f:04:dd:80:a8:fc:60:81:b0:c7:45:b2: 81:6e:9d:be:53:0e:ef:94:6c:5c:f6:d1:31:32:4a: aa:13:7e:12:77:13:1f:ae:cc:b6:e1:af:21:33:72: 4a:be:e8:3b:eb:8a:ce:8a:d5:f5:6e:23:5d:77:80: f1:fe:77:8e:b8:4b:9d:54:37:65:68:fa:ba:b5:c0: f7:02:38:9e:c4:d4:59:43:39:ba:23:2b:09:3f:ff: dd:51:09:ad:1b:e6:52:75:96:a0:2a:00:d8:7f:ed: ee:48:a3:1f:75:bd:60:78:64:61:0f:80:cd:cc:9a: c9:76:f8:64:15:65:64:e5:e9:fc:10:c1:f8:bb:e6: 0d:86:a6:1d:fd:96:9f:0b:8b:d0:8c:04:18:41:d7: 41:3e:02:00:bd:ba:da:f7:c9:dd:d2:44:cd:2a:20: 25:7a:0c:59:eb:62:79:72:a5:8f:fc:61:4e:4b:2a: ab:1c:18:55:e6:76:56:06:2d:4a:1b:9d:3c:17:5c: 9b:7e:1a:3e:2d:a9:04:65:ee:33:ed:09:e0:a2:68: 24:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:69:D7:70:8F:D5:00:0C:64:3A:76:6F:E5:F0:05:C3:CC:8E:1A:9B X509v3 Authority Key Identifier: keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ab:ca:ae:a7:5a:e8:d5:24:fb:ca:4c:ce:aa:aa:f4:24:66: d0:e5:08:f1:a8:03:73:08:a6:7f:f5:b4:8b:23:5d:29:bd:b1: 96:b7:85:06:5d:0b:b5:6b:39:70:b4:83:bd:dd:06:64:85:0b: 0f:af:cf:d9:c8:13:e3:be:0c:ba:40:ca:ca:98:b4:f3:7b:28: 6f:3a:9a:6c:81:23:7a:6d:81:76:58:0f:e3:c0:21:17:c0:f4: 17:12:a0:ab:f7:87:a5:70:93:dd:1f:c5:e2:de:5b:0b:7e:b7: 37:87:0a:8b:89:e2:9a:cc:ba:d0:60:d7:27:c8:4b:ed:85:ae: 7c:7b:b4:c3:2f:d1:8c:67:b7:4c:1a:1b:57:d6:f0:fd:ad:2f: 41:16:95:37:b6:86:94:c9:c7:0b:29:6b:f5:e9:9f:86:19:63: 09:d9:54:d4:cc:cd:46:df:4f:62:50:e5:52:01:b0:e0:85:81: 76:34:71:c4:05:09:c0:c8:fc:7d:40:be:6b:65:cf:ea:88:1b: 8c:36:fd:c6:50:ed:4a:16:83:83:25:48:af:d1:b2:5e:c9:fe: 57:44:cf:2e:e2:5e:7d:77:99:a5:87:f6:79:9c:6e:7f:fc:27: 85:48:89:00:60:27:3f:cc:3a:be:d0:08:85:5b:9b:3d:41:63: 7c:d0:6f:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0QTYxMTAvBgNVBAUTKERDODBDODVFNTEwMTA4OUFCMjQyNUQzRkM5MTc3OTg1 QTAxMjVDNkUwHhcNMjUwOTA1MDcxNDU0WhcNMjUwOTEyMDcxNDU0WjAYMRYwFAYD VQQDEw02OGJhOGRlZi1jY2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3w1GXGjFJUzeJSJ8KfNMP85T+S98w0mE7Z85Yk2K4f84nZqbhPLyNGyVU3i ndmfBN2AqPxggbDHRbKBbp2+Uw7vlGxc9tExMkqqE34SdxMfrsy24a8hM3JKvug7 64rOitX1biNdd4Dx/neOuEudVDdlaPq6tcD3AjiexNRZQzm6IysJP//dUQmtG+ZS dZagKgDYf+3uSKMfdb1geGRhD4DNzJrJdvhkFWVk5en8EMH4u+YNhqYd/ZafC4vQ jAQYQddBPgIAvbra98nd0kTNKiAlegxZ62J5cqWP/GFOSyqrHBhV5nZWBi1KG508 F1ybfho+LakEZe4z7QngomgkKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdp13CP 1QAMZDp2b+XwBcPMjhqbMB8GA1UdIwQYMBaAFNyAyF5RAQiaskJdP8kXeYWgElxu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzRBNi83MTcxQkJGMkQx OUMxMUVGODNDRUFEM0NDNEY5QUUwMi8zSURJWGxFQkNKcXlRbDBfeVJkNWhhQVNY RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNJRElYbEVCQ0pxeVFsMF95UmQ1aGFBU1hHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzRBNi83MTcxQkJGMkQxOUMxMUVGODNDRUFEM0NDNEY5QUUwMi8zSURJWGxFQkNK cXlRbDBfeVJkNWhhQVNYRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlq8qup1ro1ST7ykzOqqr0JGbQ5QjxqANzCKZ/9bSLI10pvbGWt4UG XQu1azlwtIO93QZkhQsPr8/ZyBPjvgy6QMrKmLTzeyhvOppsgSN6bYF2WA/jwCEX wPQXEqCr94elcJPdH8Xi3lsLfrc3hwqLieKazLrQYNcnyEvtha58e7TDL9GMZ7dM GhtX1vD9rS9BFpU3toaUyccLKWv16Z+GGWMJ2VTUzM1G309iUOVSAbDghYF2NHHE BQnAyPx9QL5rZc/qiBuMNv3GUO1KFoODJUiv0bJeyf5XRM8u4l59d5mlh/Z5nG5/ /CeFSIkAYCc/zDq+0AiFW5s9QWN80G8q -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:47 2025 by rpki-client