$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json) Hash identifier: lKoTDnagC+POG/yjg5VX1x9vsa2bEmygrijNXY5b7DA= Subject key identifier: 1C:96:F1:92:B4:00:4C:F2:AF:64:76:5D:AC:9A:46:B1:48:35:F9:C4 Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 07CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft Manifest number: 07DB Signing time: Tue 16 Sep 2025 21:31:50 +0000 Manifest this update: Tue 16 Sep 2025 21:31:49 +0000 Manifest next update: Tue 23 Sep 2025 21:31:49 +0000 Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: X2w+FlMJQl4bH94s+z54a7rcdyqGUhSAQRZz+6mnOSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 21:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: Sep 16 21:31:49 2025 GMT Not After : Sep 23 21:31:49 2025 GMT Subject: CN=68c9d746-c0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4a:f1:4b:fa:96:cc:74:32:c4:45:f4:01:15: af:58:5e:e1:f8:ea:05:6f:ae:24:22:dc:82:9b:5b: 3f:eb:ff:00:e8:da:9e:41:e2:23:f9:f4:90:e3:f4: e1:81:72:fc:ab:2b:98:d9:8c:ea:eb:c4:9f:5c:1a: cf:38:10:b2:88:53:76:d2:b0:6a:1d:ae:63:b5:e4: 49:43:3b:3e:48:c0:d3:86:94:89:ce:30:0c:61:2b: 0f:dc:5b:89:c9:e8:8d:31:06:6c:a3:2c:22:69:56: 8d:71:58:dc:37:52:29:55:cd:33:e9:e4:0e:6e:42: 17:ce:81:bb:4b:16:b5:14:24:2e:c9:95:ac:02:48: 1c:1f:be:54:59:c4:3a:30:76:91:c2:fb:1c:69:7b: 6d:3a:77:e4:51:61:7d:a5:e7:31:24:92:75:00:d4: 3e:b5:b1:59:c4:b5:c8:6d:b0:43:ec:f9:72:f1:d4: c4:70:5c:e8:72:d4:84:e6:6e:60:fe:48:e9:cf:39: 94:3d:3c:cf:8b:5a:71:15:bb:6c:c2:42:ce:1e:da: 86:8c:95:6f:34:29:da:e2:5d:43:c3:00:89:c9:83: 66:31:9c:ea:26:2b:87:6f:1c:c3:f3:8a:75:20:7b: a5:30:6e:5c:83:50:a9:5f:cd:59:a6:bb:7b:2a:b0: f8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:96:F1:92:B4:00:4C:F2:AF:64:76:5D:AC:9A:46:B1:48:35:F9:C4 X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:13:a6:ff:0e:ac:41:15:de:1d:2d:6c:72:dd:01:2a:1d:dd: ae:7e:93:97:07:00:b4:d6:7f:be:22:ae:21:ce:be:25:3d:b2: fe:0e:6d:6e:b9:8a:ae:4c:03:e0:00:2f:a4:3c:bf:10:18:34: 63:69:86:fb:2a:a9:71:eb:40:17:b3:cb:d2:51:d8:04:ef:36: 8a:97:ba:ac:4e:59:3e:ae:08:23:d5:cc:01:b7:bc:3e:89:d5: 10:d0:de:d2:1b:7d:28:21:63:6b:d8:33:ae:0b:fb:14:19:f3: 55:3d:44:c0:c0:81:cc:7e:b1:49:f6:97:8c:4b:9f:79:ad:3b: 18:1f:e8:da:66:0f:c7:1f:84:d3:e1:fb:79:c9:a6:38:ad:40: 97:1b:6a:d6:9f:5d:22:9c:22:f9:1d:53:53:86:11:ca:8e:37: b8:39:46:d7:b2:dc:f0:83:17:e1:94:36:97:a9:05:34:ea:44: 9a:16:cc:5d:a7:d1:bd:f5:4a:27:31:18:15:74:70:4c:87:dc: cf:da:89:81:2a:14:3e:45:b9:37:3a:30:37:cc:d1:9c:6b:1e: f7:9f:14:fc:d0:e9:4b:16:13:6a:4d:25:9b:a7:3e:81:0f:ca: 84:34:0b:6b:2a:66:92:f6:25:8d:d9:62:3c:ba:8c:a5:9d:b3: 2e:a5:87:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjUwOTE2MjEzMTQ5WhcNMjUwOTIzMjEzMTQ5WjAYMRYwFAYD VQQDEw02OGM5ZDc0Ni1jMGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ErxS/qWzHQyxEX0ARWvWF7h+OoFb64kItyCm1s/6/8A6NqeQeIj+fSQ4/Th gXL8qyuY2Yzq68SfXBrPOBCyiFN20rBqHa5jteRJQzs+SMDThpSJzjAMYSsP3FuJ yeiNMQZsoywiaVaNcVjcN1IpVc0z6eQObkIXzoG7Sxa1FCQuyZWsAkgcH75UWcQ6 MHaRwvscaXttOnfkUWF9pecxJJJ1ANQ+tbFZxLXIbbBD7Ply8dTEcFzoctSE5m5g /kjpzzmUPTzPi1pxFbtswkLOHtqGjJVvNCna4l1DwwCJyYNmMZzqJiuHbxzD84p1 IHulMG5cg1CpX81Zprt7KrD43QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByW8ZK0 AEzyr2R2XayaRrFINfnEMB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0 TUcwZUZzaTVVak5LM1VEeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaE6b/DqxBFd4dLWxy3QEqHd2ufpOXBwC01n++Iq4hzr4lPbL+Dm1u uYquTAPgAC+kPL8QGDRjaYb7Kqlx60AXs8vSUdgE7zaKl7qsTlk+rggj1cwBt7w+ idUQ0N7SG30oIWNr2DOuC/sUGfNVPUTAwIHMfrFJ9peMS595rTsYH+jaZg/HH4TT 4ft5yaY4rUCXG2rWn10inCL5HVNThhHKjje4OUbXstzwgxfhlDaXqQU06kSaFsxd p9G99UonMRgVdHBMh9zP2omBKhQ+Rbk3OjA3zNGcax73nxT80OlLFhNqTSWbpz6B D8qENAtrKmaS9iWN2WI8uoylnbMupYfZ -----END CERTIFICATE-----Generated at Thu Sep 18 21:37:30 2025 by rpki-client