$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json) Hash identifier: tqMFLxBMvluKlPIOm7LkDyJDuxexVEHzWDTUfQ9r93g= Subject key identifier: 36:F6:F8:25:BC:5A:4D:53:64:81:15:E9:EB:3F:30:C2:9D:49:E7:81 Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft Manifest number: 01C0 Signing time: Tue 02 Sep 2025 23:10:48 +0000 Manifest this update: Tue 02 Sep 2025 23:10:47 +0000 Manifest next update: Tue 09 Sep 2025 23:10:47 +0000 Files and hashes: 1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: /M6r4Fwly/hPVxc70Sijq3L7sWl2o7TxPUufYxLempU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Validity Not Before: Sep 2 23:10:47 2025 GMT Not After : Sep 9 23:10:47 2025 GMT Subject: CN=68b77978-d9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:92:7e:eb:5a:0d:cc:55:5e:a9:46:18:37: 35:84:2f:c8:fe:12:d9:6e:da:db:18:b0:73:11:d4: de:95:e9:ca:e1:62:39:1f:46:f4:60:6f:83:e6:4c: 33:f0:33:a8:a5:ec:37:60:d2:d2:98:a9:8f:ad:59: 38:3d:90:89:ae:12:08:86:60:e7:72:f8:dd:48:f1: 84:ce:9f:1b:d1:06:a9:75:f1:6b:b6:32:73:0d:12: 78:a6:5f:99:81:d0:0f:8b:43:73:f8:9f:2d:96:bb: 33:0a:9a:bb:8c:b4:d2:ca:ea:28:42:ff:39:99:6d: 46:93:8c:b4:c3:9f:27:93:59:87:0d:c1:04:df:fa: ed:95:2e:0c:12:36:af:3b:77:c3:4c:86:0a:6e:c7: ce:93:05:b6:d8:e6:c2:ef:f3:e8:fb:23:e7:9c:59: ca:38:82:5f:c5:62:dc:87:63:42:5d:48:9c:88:c6: 93:66:18:a0:2c:ab:90:18:80:ec:d9:86:a0:67:37: 36:ce:03:53:c2:88:b9:4e:d1:f0:e3:a3:33:a5:ae: 7e:d2:b9:fc:6e:08:28:0d:11:33:2e:c9:a4:cb:95: 1a:76:12:3a:cf:55:8b:11:92:2f:96:b0:0f:ea:63: a9:17:51:8b:d3:78:c4:d9:33:5d:3e:f6:d1:3e:2a: f5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F6:F8:25:BC:5A:4D:53:64:81:15:E9:EB:3F:30:C2:9D:49:E7:81 X509v3 Authority Key Identifier: keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:9f:fb:7f:1f:44:30:3d:2d:30:c7:6d:e0:a8:9b:8c:b7:4b: 23:7e:7a:56:7c:c1:98:1a:34:76:bd:92:19:25:83:ef:f1:8b: 1d:37:a8:4a:46:8f:1e:af:eb:05:44:b1:ab:7e:49:94:f4:57: ad:4a:4c:8a:fd:d0:ff:27:8d:60:a1:8e:68:a1:b4:e2:fc:e4: be:99:0e:73:56:3f:3a:5b:40:27:c7:7e:e1:67:9c:a0:da:ca: ab:90:45:96:a1:2f:2d:8c:e2:de:13:f9:b4:26:d7:ed:a9:88: 4e:d5:15:dd:c3:3e:f8:d0:1b:74:1c:a6:84:15:57:eb:8a:df: 98:61:70:5f:b1:c4:b9:b5:03:b2:ef:e8:49:1f:72:65:16:f6: e3:2e:58:c1:cd:fc:a1:42:85:ca:30:65:f3:00:91:b1:9f:06: d4:4f:fb:c9:68:c2:c6:ea:4a:26:52:68:03:02:06:9c:77:60: 68:98:07:10:da:80:5a:de:f7:8c:bc:5a:60:fd:84:96:48:6e: 78:11:f9:cc:df:ae:f4:70:4f:8b:b8:f0:05:45:9a:97:c1:f5: c2:95:e8:49:88:22:39:cb:91:55:67:c8:fa:c4:f4:12:76:01: 79:4b:4a:f7:bb:e5:c5:90:f1:ea:6c:31:02:71:13:c9:2d:fb: 0b:6d:94:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKDlGRTAwQzE5Q0UwQjhGOTZFQ0Y4OUEzNTdGN0QxQUY1 NThGOTZGRjUwHhcNMjUwOTAyMjMxMDQ3WhcNMjUwOTA5MjMxMDQ3WjAYMRYwFAYD VQQDEw02OGI3Nzk3OC1kOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3GSfutaDcxVXqlGGDc1hC/I/hLZbtrbGLBzEdTelenK4WI5H0b0YG+D5kwz 8DOopew3YNLSmKmPrVk4PZCJrhIIhmDncvjdSPGEzp8b0QapdfFrtjJzDRJ4pl+Z gdAPi0Nz+J8tlrszCpq7jLTSyuooQv85mW1Gk4y0w58nk1mHDcEE3/rtlS4MEjav O3fDTIYKbsfOkwW22ObC7/Po+yPnnFnKOIJfxWLch2NCXUiciMaTZhigLKuQGIDs 2YagZzc2zgNTwoi5TtHw46Mzpa5+0rn8bggoDREzLsmky5UadhI6z1WLEZIvlrAP 6mOpF1GL03jE2TNdPvbRPir18wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDb2+CW8 Wk1TZIEV6es/MMKdSeeBMB8GA1UdIwQYMBaAFJ/gDBnOC4+W7PiaNX99GvVY+W/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC82NzAwNThCNERG RjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1YnMtSm8xZjMwYTlWajVi X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24tQU1HYzRMajVicy1KbzFmMzBhOVZqNWJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC82NzAwNThCNERGRjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1 YnMtSm8xZjMwYTlWajViX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWn/t/H0QwPS0wx23gqJuMt0sjfnpWfMGYGjR2vZIZJYPv8YsdN6hK Ro8er+sFRLGrfkmU9FetSkyK/dD/J41goY5oobTi/OS+mQ5zVj86W0Anx37hZ5yg 2sqrkEWWoS8tjOLeE/m0JtftqYhO1RXdwz740Bt0HKaEFVfrit+YYXBfscS5tQOy 7+hJH3JlFvbjLljBzfyhQoXKMGXzAJGxnwbUT/vJaMLG6komUmgDAgacd2BomAcQ 2oBa3veMvFpg/YSWSG54EfnM3670cE+LuPAFRZqXwfXClehJiCI5y5FVZ8j6xPQS dgF5S0r3u+XFkPHqbDECcRPJLfsLbZTT -----END CERTIFICATE-----Generated at Thu Sep 4 16:00:07 2025 by rpki-client