$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: S0aHCtrGyhMHTr8LOv9UHMIs7l9zVx4Si9pmKIqOmMU= Subject key identifier: 66:98:77:30:6E:8C:09:6A:A1:C2:21:FA:31:61:A3:FC:F5:79:BE:45 Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 0962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 095B Signing time: Tue 16 Sep 2025 20:22:25 +0000 Manifest this update: Tue 16 Sep 2025 20:22:25 +0000 Manifest next update: Tue 23 Sep 2025 20:22:25 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: 3HdfChWMvkYAkSLAG75lvxaotmHBExBs//RFEC5ILVc=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: 0cYkjMp/gtYpvp6HxvXFQpX0b09jvpiPKpMRszh/Xsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 20:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Sep 16 20:22:25 2025 GMT Not After : Sep 23 20:22:25 2025 GMT Subject: CN=68c9c701-e2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f1:aa:c8:75:01:7a:6b:87:16:ae:75:f8:77: 11:dc:c4:aa:2a:f1:b8:b9:89:c6:f9:3d:32:cc:04: e6:2c:47:85:b9:ec:fe:44:9c:75:24:3f:64:1f:df: 27:c5:a7:cf:e0:6d:c2:1f:e3:f1:85:d7:46:2b:08: f5:f8:37:2a:a0:f3:57:3b:a1:12:c2:60:71:d9:2f: 0d:86:0b:f3:71:2c:61:09:18:6b:76:1c:35:2d:03: 13:99:be:04:77:3a:df:3d:68:24:e7:3f:d5:9d:0f: 8e:14:f3:a4:c5:05:44:50:0f:09:14:6f:dc:cf:a3: 5d:4f:8e:cf:91:2a:41:fc:7d:28:67:63:6d:53:3a: f3:13:a1:2b:fa:97:a6:e1:74:ab:34:23:06:ef:53: d6:30:eb:8d:43:1b:ab:2b:f4:49:b5:a6:4e:d2:4d: 80:9c:26:82:26:2d:1b:6f:97:9d:a9:64:bd:5c:39: da:7b:59:26:25:98:ca:70:8f:84:f0:65:a5:a9:e5: f0:6d:10:89:e9:7e:cf:11:e6:cb:5a:24:79:1e:5d: fd:66:be:83:c0:fa:2c:5c:fb:9e:94:8a:b0:45:d7: 53:2c:24:57:a1:d1:07:41:a7:2a:f7:b7:70:b9:62: 75:d1:cc:28:85:cd:49:52:46:22:5b:59:96:9f:5a: 38:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:98:77:30:6E:8C:09:6A:A1:C2:21:FA:31:61:A3:FC:F5:79:BE:45 X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:e7:b3:d9:0f:11:75:21:f4:8b:c6:ea:a5:1d:01:92:85:23: 5f:d3:42:95:71:02:ce:21:bf:a6:49:7e:ea:9f:8e:33:88:54: 7c:84:67:bf:19:21:e6:40:af:05:58:68:42:ae:bb:e7:d9:89: 90:37:a2:d5:23:1d:04:20:33:97:11:27:23:9a:d7:fb:95:f5: 6f:0b:28:03:aa:2e:f1:b5:db:6c:0d:71:2e:67:8e:25:0f:28: 6e:97:bb:46:53:24:da:8d:14:07:9e:5b:ff:2b:e2:f4:1b:df: fc:ad:61:a3:f3:ed:fa:a0:f2:a1:ac:51:82:74:63:1c:a0:12: 4e:47:01:02:1e:77:3e:41:b0:c2:24:7b:af:8e:b1:6d:5d:d0: 22:6f:ae:5e:cc:91:bf:31:83:ba:38:99:66:4e:e4:81:8c:28: 1d:78:bb:96:00:67:54:30:4e:06:67:44:bd:d9:8b:64:bd:3c: c1:64:0a:e2:9b:a2:87:75:68:a5:b1:91:90:c2:3f:78:85:3b: b7:77:0f:bc:64:f6:f2:49:b3:18:c0:04:84:59:75:42:e6:27: ae:f5:19:dc:47:33:81:f8:ae:03:5f:d0:72:29:05:9e:85:b1: 3f:dd:8e:69:cf:b4:6f:66:d3:28:0f:31:2a:4a:0c:8f:d3:9a: fd:2f:65:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjUwOTE2MjAyMjI1WhcNMjUwOTIzMjAyMjI1WjAYMRYwFAYD VQQDEw02OGM5YzcwMS1lMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/GqyHUBemuHFq51+HcR3MSqKvG4uYnG+T0yzATmLEeFuez+RJx1JD9kH98n xafP4G3CH+PxhddGKwj1+DcqoPNXO6ESwmBx2S8NhgvzcSxhCRhrdhw1LQMTmb4E dzrfPWgk5z/VnQ+OFPOkxQVEUA8JFG/cz6NdT47PkSpB/H0oZ2NtUzrzE6Er+pem 4XSrNCMG71PWMOuNQxurK/RJtaZO0k2AnCaCJi0bb5edqWS9XDnae1kmJZjKcI+E 8GWlqeXwbRCJ6X7PEebLWiR5Hl39Zr6DwPosXPuelIqwRddTLCRXodEHQacq97dw uWJ10cwohc1JUkYiW1mWn1o4hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaYdzBu jAlqocIh+jFho/z1eb5FMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB157PZDxF1IfSLxuqlHQGShSNf00KVcQLOIb+mSX7qn44ziFR8hGe/ GSHmQK8FWGhCrrvn2YmQN6LVIx0EIDOXEScjmtf7lfVvCygDqi7xtdtsDXEuZ44l Dyhul7tGUyTajRQHnlv/K+L0G9/8rWGj8+36oPKhrFGCdGMcoBJORwECHnc+QbDC JHuvjrFtXdAib65ezJG/MYO6OJlmTuSBjCgdeLuWAGdUME4GZ0S92YtkvTzBZAri m6KHdWilsZGQwj94hTu3dw+8ZPbySbMYwASEWXVC5ieu9RncRzOB+K4DX9ByKQWe hbE/3Y5pz7RvZtMoDzEqSgyP05r9L2Wi -----END CERTIFICATE-----Generated at Thu Sep 18 11:19:50 2025 by rpki-client