$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json) Hash identifier: I8EGhNoFT/N/0mBmB08smgnYG2Fw4jqYdiY2p0fRlhc= Subject key identifier: 75:F4:84:AC:EC:22:47:C1:BA:A0:90:4D:EC:41:AE:BA:9B:10:E1:07 Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft Manifest number: A0 Signing time: Tue 09 Sep 2025 06:24:36 +0000 Manifest this update: Tue 09 Sep 2025 06:24:36 +0000 Manifest next update: Tue 16 Sep 2025 06:24:36 +0000 Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: 3JU2nTKwNXnq1wx9uI7dMm3qaj5jGyUzdkcTcce/cMo=) 2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: UxagGWZX5GRBTZt0jQYki52H3QWf9jW1QGZTQhh7RfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Validity Not Before: Sep 9 06:24:36 2025 GMT Not After : Sep 16 06:24:36 2025 GMT Subject: CN=68bfc824-5ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:9b:a7:0f:af:42:29:67:2f:81:af:b7:ea: d4:e4:c5:6e:c3:44:d3:6b:db:d8:57:8a:3a:18:63: ba:6c:ea:24:c1:fc:0b:da:d7:c9:50:27:fe:41:c7: 12:fd:b1:b7:ef:33:12:0e:b0:c8:2b:b9:cc:b5:ea: 0d:19:89:9e:27:8c:38:50:91:13:23:87:ef:6e:fa: dd:23:bf:96:47:2c:76:6a:a3:ee:28:3a:48:27:a5: 05:c1:e9:12:aa:68:e6:9b:5b:a2:2f:19:7b:59:db: 38:78:83:0f:df:bf:b2:ec:6c:33:42:d2:98:8d:96: bf:3d:70:8d:b9:fb:82:96:0b:cb:31:3d:dc:9c:6c: 43:72:a1:b1:bf:25:3d:1c:dc:98:6f:60:8f:f9:65: 29:92:10:c9:12:81:fb:d7:99:bb:6b:fd:04:88:f3: f2:1c:73:55:8b:15:1a:38:ab:db:78:08:17:69:e8: 3e:07:36:46:4d:0a:e2:49:4c:2c:f9:94:63:d2:d1: 2d:bf:55:73:b5:5a:ff:02:f6:65:bb:2b:36:6f:4d: 85:c9:f6:26:a7:87:dd:79:b6:41:7c:33:88:4f:ec: 5d:95:bb:68:87:35:a2:50:27:cc:a9:0d:f5:4e:b5: bd:cc:20:f0:f0:67:7a:d5:65:c5:33:08:fd:c6:0a: 96:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F4:84:AC:EC:22:47:C1:BA:A0:90:4D:EC:41:AE:BA:9B:10:E1:07 X509v3 Authority Key Identifier: keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:d2:48:d3:a0:10:68:9d:50:63:40:d8:af:ac:fc:68:ac:be: 35:c6:65:7d:1e:db:8c:b2:83:d7:2b:0f:ad:70:7d:fb:c8:f1: 7f:11:bb:eb:56:d0:7f:3d:87:c9:7a:ff:7e:6e:0f:4d:63:10: b4:a4:a9:9b:f9:ce:a7:ed:dc:e9:07:40:4d:10:05:a2:e0:59: 02:8c:68:9f:95:d1:9a:56:fc:be:e1:78:52:28:77:4a:92:bb: 83:47:93:d7:b4:9d:d8:96:3b:8b:6e:a0:79:f3:1a:83:ff:ad: 77:ed:eb:a5:d8:41:fb:98:6c:18:81:2d:4d:66:b4:f6:db:47: ee:19:a5:ff:9d:3e:c6:c6:87:e9:55:b3:ba:6e:a5:ba:54:ab: a4:67:f1:16:a6:c6:7a:02:f1:1b:8a:ec:2b:2c:3d:70:46:d3: 0d:f1:cd:5e:c0:3b:7a:30:95:69:44:a1:b7:58:42:24:26:98: 80:ea:80:b0:80:e0:6f:b8:d4:c3:1d:85:03:38:6f:15:b0:7c: 7f:f2:b8:4c:60:40:08:1c:a6:60:e1:a1:80:23:fb:54:01:2f: ed:0d:de:b7:a9:de:4b:96:bf:e1:76:70:7d:1b:02:11:2d:4f: c0:b5:8d:53:8e:7f:70:f6:42:c5:19:4e:61:88:46:eb:15:52: c7:8f:7c:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDNkExMTAvBgNVBAUTKDQ0OUQwN0RBOTIwREEwMjYzNDJCRjZFMjY4OUNDN0Uw RjBBM0NBRkMwHhcNMjUwOTA5MDYyNDM2WhcNMjUwOTE2MDYyNDM2WjAYMRYwFAYD VQQDEw02OGJmYzgyNC01YWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4Wbpw+vQilnL4Gvt+rU5MVuw0TTa9vYV4o6GGO6bOokwfwL2tfJUCf+QccS /bG37zMSDrDIK7nMteoNGYmeJ4w4UJETI4fvbvrdI7+WRyx2aqPuKDpIJ6UFwekS qmjmm1uiLxl7Wds4eIMP37+y7GwzQtKYjZa/PXCNufuClgvLMT3cnGxDcqGxvyU9 HNyYb2CP+WUpkhDJEoH715m7a/0EiPPyHHNVixUaOKvbeAgXaeg+BzZGTQriSUws +ZRj0tEtv1VztVr/AvZluys2b02FyfYmp4fdebZBfDOIT+xdlbtohzWiUCfMqQ31 TrW9zCDw8Gd61WXFMwj9xgqW1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHX0hKzs IkfBuqCQTexBrrqbEOEHMB8GA1UdIwQYMBaAFESdB9qSDaAmNCv24micx+Dwo8r8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUM2QS85MDY2MkVCNjlD MEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9DWTBLX2JpYUp6SDRQQ2p5 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JKMEgycElOb0NZMEtfYmlhSnpINFBDanl2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUM2QS85MDY2MkVCNjlDMEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9D WTBLX2JpYUp6SDRQQ2p5dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS0kjToBBonVBjQNivrPxorL41xmV9HtuMsoPXKw+tcH37yPF/Ebvr VtB/PYfJev9+bg9NYxC0pKmb+c6n7dzpB0BNEAWi4FkCjGifldGaVvy+4XhSKHdK kruDR5PXtJ3YljuLbqB58xqD/6137eul2EH7mGwYgS1NZrT220fuGaX/nT7Gxofp VbO6bqW6VKukZ/EWpsZ6AvEbiuwrLD1wRtMN8c1ewDt6MJVpRKG3WEIkJpiA6oCw gOBvuNTDHYUDOG8VsHx/8rhMYEAIHKZg4aGAI/tUAS/tDd63qd5Llr/hdnB9GwIR LU/AtY1Tjn9w9kLFGU5hiEbrFVLHj3xn -----END CERTIFICATE-----Generated at Wed Sep 10 19:41:23 2025 by rpki-client