$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft File: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft (raw, json) Hash identifier: rE3puNmBNekjsJ3BDOE1TPN8ka1rpc1qVCGTTqy8Fy4= Subject key identifier: 12:69:23:A2:DF:8D:BE:6D:B3:D5:FC:7B:8D:CE:EF:75:BC:B4:A2:EF Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft Manifest number: 41 Signing time: Wed 17 Sep 2025 08:10:20 +0000 Manifest this update: Wed 17 Sep 2025 08:10:19 +0000 Manifest next update: Wed 24 Sep 2025 08:10:19 +0000 Files and hashes: 1: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl (hash: Wl4862hfZD92zmv6tXjJOoWatZbVB9iru/4SAVGZAFA=) 2: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (hash: vDWq5W9RCH51uCc7RR26CZCfoA3jrfAEXK2LnEYPwlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Validity Not Before: Sep 17 08:10:19 2025 GMT Not After : Sep 24 08:10:19 2025 GMT Subject: CN=68ca6ceb-e304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:26:a7:ba:fe:9d:37:8b:08:bf:ac:89:3f:bc: 72:b3:98:22:6c:b0:42:20:b7:44:2f:a2:5a:8f:51: 3b:bd:19:d7:6c:54:20:31:33:d9:32:f6:b6:f9:2c: eb:21:eb:0e:7d:f8:55:d6:be:d4:5f:9a:e5:f7:9e: e8:49:45:78:90:af:27:f6:ae:2c:25:0b:bf:8d:4a: 55:fb:6b:64:36:20:49:2a:fd:a5:97:3b:91:0b:8a: 40:f8:87:cf:37:18:09:71:54:a5:9d:03:52:50:e9: 32:6a:82:fc:26:9c:76:10:4b:26:d7:66:53:78:71: c2:f9:26:96:51:fd:cb:2f:be:8f:ac:54:e4:8a:ff: ac:cf:76:d9:35:86:d4:e6:61:df:d2:19:1b:a5:85: 37:e0:4a:cb:18:f8:6a:c7:50:23:be:f7:22:a0:b7: d4:56:38:04:d0:2f:11:40:b1:ee:33:00:7b:4c:52: 76:ea:6b:3f:b0:7e:12:2d:d4:4e:bf:69:af:de:15: d9:7d:0c:35:fa:9c:0e:29:5d:09:80:31:30:ae:6e: f5:f7:d1:dd:90:cf:b0:0c:55:2d:2e:98:a2:b2:35: 27:46:79:37:70:35:5c:2d:41:b5:98:d7:0b:eb:4b: 34:a1:32:a4:de:43:f0:23:9d:13:b7:fc:ed:2f:ac: 3e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:69:23:A2:DF:8D:BE:6D:B3:D5:FC:7B:8D:CE:EF:75:BC:B4:A2:EF X509v3 Authority Key Identifier: keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:7c:0a:86:b6:d8:94:98:7e:3f:36:f7:94:42:ed:5f:20:54: d2:2a:79:19:e6:dd:3a:c1:45:18:a9:2d:77:9c:55:07:cd:8d: 06:d2:48:ad:09:74:aa:18:16:d5:52:6a:40:64:b9:41:a7:a3: 1f:e3:ad:b5:df:57:15:17:4e:ba:18:b0:ef:95:8a:98:53:0a: b8:18:2f:eb:50:7d:ee:61:72:75:47:2a:a8:43:e0:bf:ba:0c: d5:e7:1a:7d:a3:5a:dd:c2:cb:92:13:8a:20:62:61:ee:b8:1d: f2:00:b9:49:27:c3:dd:60:51:c2:0a:5d:9c:78:a7:14:83:f8: 83:46:3a:ef:8d:8b:55:4c:50:18:fa:49:d0:01:f4:62:0a:b0: 5b:a6:bc:62:1d:43:3f:33:f5:56:fc:5d:37:38:f9:69:55:de: f0:fc:14:b4:56:c7:8f:86:50:18:9b:a1:75:7c:8f:82:52:4f: ad:84:59:64:ac:df:c6:b1:22:8d:6d:d2:e0:1b:c7:44:78:65: 1c:15:9e:bf:44:db:fa:6b:13:9c:50:1d:4b:6b:6b:74:39:83: 1a:5c:b9:f1:40:28:92:bb:9d:49:98:04:fe:9d:16:b2:31:99: 4c:5a:bc:94:49:73:95:8f:81:83:64:17:ff:88:c5:89:52:3f: 89:84:c5:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEREOTExMC8GA1UEBRMoN0ZGQzgwNTY1MDc0MkNFQTUwOTg2RDExQUJDQjczRTBG NTUwNThGOTAeFw0yNTA5MTcwODEwMTlaFw0yNTA5MjQwODEwMTlaMBgxFjAUBgNV BAMTDTY4Y2E2Y2ViLWUzMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyJqe6/p03iwi/rIk/vHKzmCJssEIgt0QvolqPUTu9GddsVCAxM9ky9rb5LOsh 6w59+FXWvtRfmuX3nuhJRXiQryf2riwlC7+NSlX7a2Q2IEkq/aWXO5ELikD4h883 GAlxVKWdA1JQ6TJqgvwmnHYQSybXZlN4ccL5JpZR/csvvo+sVOSK/6zPdtk1htTm Yd/SGRulhTfgSssY+GrHUCO+9yKgt9RWOATQLxFAse4zAHtMUnbqaz+wfhIt1E6/ aa/eFdl9DDX6nA4pXQmAMTCubvX30d2Qz7AMVS0umKKyNSdGeTdwNVwtQbWY1wvr SzShMqTeQ/AjnRO3/O0vrD4VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEmkjot+N vm2z1fx7jc7vdby0ou8wHwYDVR0jBBgwFoAUf/yAVlB0LOpQmG0Rq8tz4PVQWPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4REQ5L0EzODdDRjhFMkZE MjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9wUW1HMFJxOHR6NFBWUVdQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZl95QVZsQjBMT3BRbUcwUnE4dHo0UFZRV1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 REQ5L0EzODdDRjhFMkZEMjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9w UW1HMFJxOHR6NFBWUVdQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIZ8Coa22JSYfj8295RC7V8gVNIqeRnm3TrBRRipLXecVQfNjQbSSK0J dKoYFtVSakBkuUGnox/jrbXfVxUXTroYsO+ViphTCrgYL+tQfe5hcnVHKqhD4L+6 DNXnGn2jWt3Cy5ITiiBiYe64HfIAuUknw91gUcIKXZx4pxSD+INGOu+Ni1VMUBj6 SdAB9GIKsFumvGIdQz8z9Vb8XTc4+WlV3vD8FLRWx4+GUBiboXV8j4JST62EWWSs 38axIo1t0uAbx0R4ZRwVnr9E2/prE5xQHUtra3Q5gxpcufFAKJK7nUmYBP6dFrIx mUxavJRJc5WPgYNkF/+IxYlSP4mExf4= -----END CERTIFICATE-----Generated at Fri Sep 19 05:24:43 2025 by rpki-client