$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft File: dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json) Hash identifier: 67Fn3F/eDBBndtiH4dpStabmFoU+M+lziojBPKP5fwk= Subject key identifier: 7C:E2:01:50:78:9B:2A:BA:53:03:B7:F7:A1:1C:FB:65:41:1B:6E:AE Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 0895 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft Manifest number: 088C Signing time: Thu 18 Sep 2025 20:50:36 +0000 Manifest this update: Thu 18 Sep 2025 20:50:35 +0000 Manifest next update: Thu 25 Sep 2025 20:50:35 +0000 Files and hashes: 1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: IIAq4VW/XlCeeVYQkwFwIvbzXI85F5KhVnRMBttS4Fk=) 2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: 8KEvrrkPqDZO6TToBnuRSPRZoDSK+MH3syDaDWUh+s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2197 (0x895) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: Sep 18 20:50:35 2025 GMT Not After : Sep 25 20:50:35 2025 GMT Subject: CN=68cc709b-03d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:39:08:5a:f9:f1:98:1d:64:f9:7c:94:70: 72:af:71:84:25:db:5b:23:ac:ab:2b:f0:57:49:f4: 55:81:6b:27:8e:8a:de:0e:69:bd:3b:5a:79:83:3f: c9:7f:d4:a2:f5:f7:b5:39:32:dd:5c:a2:ba:d7:17: 8c:cb:1b:55:f9:5c:84:3c:55:7d:71:03:d4:3a:e1: 57:6f:2c:d6:fa:24:0c:74:ed:59:89:6c:5d:44:37: a6:2b:3d:e0:b7:1f:22:c8:cc:83:50:12:99:12:79: 67:46:19:43:4f:3f:01:67:ef:50:9c:60:fb:01:d9: fe:f9:02:aa:b1:50:30:97:81:77:a1:33:fd:f4:5c: 28:70:a8:7b:23:a8:49:22:06:9f:a2:11:2a:ff:11: 5a:74:24:cc:0f:c6:f6:37:fb:b0:fb:84:78:19:2e: e9:4a:74:86:e6:04:ec:40:84:33:f2:e2:01:81:d7: a0:6b:8d:0b:39:c4:91:d6:e0:2a:3f:4d:c6:e7:b7: 83:84:e5:30:3c:12:c5:a5:49:4d:1b:a2:e7:8f:5e: 5d:cf:04:55:e1:98:25:7b:04:54:78:46:58:00:28: 4f:e3:ae:eb:c4:1a:97:e6:c2:c2:95:c2:81:2d:ee: cd:5a:c4:4b:4f:43:0a:1b:b4:f2:69:23:bb:41:73: 15:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E2:01:50:78:9B:2A:BA:53:03:B7:F7:A1:1C:FB:65:41:1B:6E:AE X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:60:14:f9:dd:f0:ae:be:f4:48:88:5f:62:85:af:77:cd:d2: f8:e2:f7:e2:2a:2e:2b:a8:54:d8:4b:76:fd:d4:77:9b:0e:66: 7a:84:8e:0a:ae:a2:11:d4:e2:c4:51:3c:ba:2b:4f:ec:06:2e: fc:ba:39:49:ba:c6:72:f0:63:91:06:b8:84:23:8e:ad:fb:4f: 53:64:84:01:87:bb:7c:62:9f:e9:84:41:b5:26:89:0a:74:21: 9d:a7:bc:ab:a4:bf:fa:70:f3:20:42:d0:db:82:be:0e:5c:e8: 26:c6:70:f0:bd:4c:33:41:47:46:4d:0f:88:f1:96:20:73:6c: 38:c2:03:c1:e3:43:bc:f0:c8:2f:cb:e3:02:41:b1:53:9d:6f: c7:93:4c:03:37:0b:2d:fb:e5:f8:93:be:ec:31:d2:da:39:ea: fe:95:e9:15:56:ad:38:55:51:37:b9:af:d5:7b:b2:eb:d6:7e: 95:02:b5:c7:f6:c3:4e:3e:fe:e3:12:fb:b0:10:ba:3d:78:b6: 6b:51:29:0b:45:17:00:e8:4f:81:78:5b:60:14:01:a6:de:e3: 71:85:be:4f:2f:3e:ba:70:65:eb:bf:f8:2c:19:f0:78:3a:4e: 61:ae:2b:14:c5:8f:29:10:1e:5a:6a:e4:e5:5e:6f:8e:05:8b: 92:75:e9:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjUwOTE4MjA1MDM1WhcNMjUwOTI1MjA1MDM1WjAYMRYwFAYD VQQDEw02OGNjNzA5Yi0wM2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3M5CFr58ZgdZPl8lHByr3GEJdtbI6yrK/BXSfRVgWsnjoreDmm9O1p5gz/J f9Si9fe1OTLdXKK61xeMyxtV+VyEPFV9cQPUOuFXbyzW+iQMdO1ZiWxdRDemKz3g tx8iyMyDUBKZEnlnRhlDTz8BZ+9QnGD7Adn++QKqsVAwl4F3oTP99FwocKh7I6hJ IgafohEq/xFadCTMD8b2N/uw+4R4GS7pSnSG5gTsQIQz8uIBgdega40LOcSR1uAq P03G57eDhOUwPBLFpUlNG6Lnj15dzwRV4ZglewRUeEZYAChP467rxBqX5sLClcKB Le7NWsRLT0MKG7TyaSO7QXMVdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHziAVB4 myq6UwO396Ec+2VBG26uMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZFNS9FMDgzQTBFQUNCMTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZf ZGJFd0N0S1VEbl9NRkMtSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALYBT53fCuvvRIiF9iha93zdL44vfiKi4rqFTYS3b91HebDmZ6hI4K rqIR1OLEUTy6K0/sBi78ujlJusZy8GORBriEI46t+09TZIQBh7t8Yp/phEG1JokK dCGdp7yrpL/6cPMgQtDbgr4OXOgmxnDwvUwzQUdGTQ+I8ZYgc2w4wgPB40O88Mgv y+MCQbFTnW/Hk0wDNwst++X4k77sMdLaOer+lekVVq04VVE3ua/Ve7Lr1n6VArXH 9sNOPv7jEvuwELo9eLZrUSkLRRcA6E+BeFtgFAGm3uNxhb5PLz66cGXrv/gsGfB4 Ok5hrisUxY8pEB5aauTlXm+OBYuSdelX -----END CERTIFICATE-----Generated at Fri Sep 19 09:36:36 2025 by rpki-client