$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft File: e14ORHE1uxchraYfZdx1yV9U2wI.mft (raw, json) Hash identifier: +e9YQwcdLwA5LuU+bea9rx3N6BWGVAqqVsqiA+h51+k= Subject key identifier: 00:90:A0:8F:20:CD:38:35:F3:78:CC:A5:9B:C3:68:29:A0:F5:64:42 Authority key identifier: 7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 Certificate issuer: /CN=A91D8226/serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft Manifest number: 8F Signing time: Wed 17 Sep 2025 07:14:28 +0000 Manifest this update: Wed 17 Sep 2025 07:14:28 +0000 Manifest next update: Wed 24 Sep 2025 07:14:28 +0000 Files and hashes: 1: e14ORHE1uxchraYfZdx1yV9U2wI.crl (hash: cW34fa1T+/l886Zah9Xrt+UyB+1GSlnYhebILnpztWU=) 2: E4086C08BC2311EF9A445084C4F9AE02.roa (hash: r/4IGYNLMpKuCk8NRggWB2EhHJYpkEkj/MdGzvjYmVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8226, serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Validity Not Before: Sep 17 07:14:28 2025 GMT Not After : Sep 24 07:14:28 2025 GMT Subject: CN=68ca5fd4-ef7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:3b:8a:3b:7e:0e:f4:d1:04:c1:2c:88:72: ca:6e:f0:4f:fd:c3:52:45:fc:ff:3c:e3:b5:cf:74: c5:e6:bd:c0:ab:cc:0c:b3:53:50:20:8c:61:d6:03: bd:53:2b:f8:34:56:c1:74:55:74:7d:49:8c:49:3e: 53:e1:7d:b3:4e:2d:2b:9c:65:27:bd:b6:15:13:bb: c7:68:70:82:b3:1b:a4:30:73:68:47:f3:2a:a9:05: 4c:ca:5e:62:7d:9e:d2:3c:b0:ba:0d:fd:0c:ef:8f: 03:04:10:51:3e:3d:d4:9d:c2:91:fd:9f:e1:33:9d: fd:b5:82:22:19:9c:fe:0c:32:60:39:f8:fc:c7:67: 00:ff:d8:d4:bf:e7:13:bf:45:7c:14:e0:51:fe:ff: 54:26:2b:38:58:b3:08:e2:ee:a9:50:3c:76:32:d3: 17:6a:c0:87:a4:18:a4:ad:a1:e0:76:ea:8e:06:e9: 5c:8b:12:cb:32:1f:37:75:53:c4:08:2f:24:a4:75: ad:62:ef:e2:6d:49:3f:4a:c9:11:67:23:91:37:56: d3:8f:25:cb:de:d8:42:14:f0:c3:eb:d8:f4:56:73: 9a:e7:f9:83:c2:1c:9c:5d:d8:e5:55:9c:1a:7b:24: 62:f4:2d:3c:2a:2d:3e:ef:bf:43:11:84:53:03:94: 02:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:90:A0:8F:20:CD:38:35:F3:78:CC:A5:9B:C3:68:29:A0:F5:64:42 X509v3 Authority Key Identifier: keyid:7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:32:3e:61:44:aa:3b:8c:58:ae:85:89:e5:9f:e8:1f:66:8e: a6:63:e7:29:70:70:b2:08:19:86:f6:42:0a:8e:af:ad:1a:1a: f6:5b:32:d6:f3:37:b9:c6:73:25:99:66:b5:e6:4c:fa:05:da: d6:7a:34:41:a1:14:75:dd:8a:77:77:86:c7:a5:19:36:b9:67: 6c:c1:e5:2e:33:65:da:6a:08:e4:34:0a:6e:9c:e2:9a:3c:b0: f5:83:98:84:74:80:50:c3:e2:75:79:56:c2:67:5e:6e:b7:0b: 3f:9f:fe:df:c2:1a:aa:aa:4d:f4:59:f7:88:18:6f:a6:a6:71: f3:e4:38:37:2d:67:84:f3:83:a1:39:dc:36:8a:ab:0c:77:0a: 4a:ce:14:64:6e:3a:48:41:d8:f3:f2:b4:04:9d:f2:5e:1c:f6: 09:2f:fd:08:49:58:70:f4:65:c6:50:5e:58:90:48:6d:b6:7f: 73:c6:54:60:59:f5:5b:ba:e2:33:f6:8f:5f:1c:05:c0:2d:f5: 6a:f8:7d:b2:97:e2:a1:ae:96:16:0f:bc:16:f2:8d:97:29:07: 6c:57:6a:d0:f5:e1:82:62:43:b7:55:c4:73:ea:4f:c2:e0:f3: f3:7c:7f:53:0a:bf:04:0c:db:23:9d:9c:af:75:54:c3:5c:5b: 5a:63:5f:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyMjYxMTAvBgNVBAUTKDdCNUUwRTQ0NzEzNUJCMTcyMUFEQTYxRjY1REM3NUM5 NUY1NERCMDIwHhcNMjUwOTE3MDcxNDI4WhcNMjUwOTI0MDcxNDI4WjAYMRYwFAYD VQQDEw02OGNhNWZkNC1lZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7s7ijt+DvTRBMEsiHLKbvBP/cNSRfz/POO1z3TF5r3Aq8wMs1NQIIxh1gO9 Uyv4NFbBdFV0fUmMST5T4X2zTi0rnGUnvbYVE7vHaHCCsxukMHNoR/MqqQVMyl5i fZ7SPLC6Df0M748DBBBRPj3UncKR/Z/hM539tYIiGZz+DDJgOfj8x2cA/9jUv+cT v0V8FOBR/v9UJis4WLMI4u6pUDx2MtMXasCHpBikraHgduqOBulcixLLMh83dVPE CC8kpHWtYu/ibUk/SskRZyORN1bTjyXL3thCFPDD69j0VnOa5/mDwhycXdjlVZwa eyRi9C08Ki0+779DEYRTA5QCowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACQoI8g zTg183jMpZvDaCmg9WRCMB8GA1UdIwQYMBaAFHteDkRxNbsXIa2mH2XcdclfVNsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODIyNi9FQzRERjMxNEJD MUYxMUVGQUFEQTc0NUZDNEY5QUUwMi9lMTRPUkhFMXV4Y2hyYVlmWmR4MXlWOVUy d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxNE9SSEUxdXhjaHJhWWZaZHgxeVY5VTJ3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODIyNi9FQzRERjMxNEJDMUYxMUVGQUFEQTc0NUZDNEY5QUUwMi9lMTRPUkhFMXV4 Y2hyYVlmWmR4MXlWOVUyd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfMj5hRKo7jFiuhYnln+gfZo6mY+cpcHCyCBmG9kIKjq+tGhr2WzLW 8ze5xnMlmWa15kz6BdrWejRBoRR13Yp3d4bHpRk2uWdsweUuM2XaagjkNApunOKa PLD1g5iEdIBQw+J1eVbCZ15utws/n/7fwhqqqk30WfeIGG+mpnHz5Dg3LWeE84Oh Odw2iqsMdwpKzhRkbjpIQdjz8rQEnfJeHPYJL/0ISVhw9GXGUF5YkEhttn9zxlRg WfVbuuIz9o9fHAXALfVq+H2yl+KhrpYWD7wW8o2XKQdsV2rQ9eGCYkO3VcRz6k/C 4PPzfH9TCr8EDNsjnZyvdVTDXFtaY1/p -----END CERTIFICATE-----Generated at Fri Sep 19 04:02:42 2025 by rpki-client