$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json) Hash identifier: oMoMkW1c+7JAy6CFGJN5wTS1MttGDWMTHyMGUgckElA= Subject key identifier: F6:87:26:04:6A:C2:D8:EB:BA:B2:88:C6:D5:D8:26:93:57:8A:50:B0 Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft Manifest number: 0172 Signing time: Mon 15 Sep 2025 04:17:23 +0000 Manifest this update: Mon 15 Sep 2025 04:17:22 +0000 Manifest next update: Mon 22 Sep 2025 04:17:22 +0000 Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: EiaofKwTdDRckb4Z1mw02Q+/6OXuOXb/gTlakaKwRkI=) 2: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: J8+lxSFWmAdItoP7AGJ9n1czEhUKmEFacTRv8zqHb88=) 3: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: mZ/f/kYNljSI/Y1NgwFenBb3960hqwOok7c22vWxduM=) 4: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: LjDyklpsY4tER3qyvIF/MVWeA44K8qWvTHC+14bUFS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 04:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Validity Not Before: Sep 15 04:17:22 2025 GMT Not After : Sep 22 04:17:22 2025 GMT Subject: CN=68c79353-99bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:25:be:d0:46:56:06:7b:c6:4a:b9:77:7d: 19:13:7b:82:15:df:89:9b:9d:59:4f:fc:94:85:77: e8:14:10:ed:a4:0f:82:5a:3a:16:aa:c9:fe:5a:0a: 4d:3c:60:67:f8:f2:2f:be:12:c3:2d:5f:86:c9:9c: 7b:1f:25:e0:b3:87:dc:7e:b8:3f:b7:b3:28:17:74: f3:39:73:ee:e4:82:8d:64:91:ce:98:4b:47:c2:e1: 60:9c:76:ab:ad:0a:f0:b3:24:bb:c6:ed:a8:c5:6c: 5b:d4:f1:09:eb:5a:1e:ae:4b:e2:30:7a:35:bd:05: e8:1d:ac:f1:9d:e8:c3:97:fb:4b:14:ca:da:d5:a6: 80:d5:c2:7b:72:84:97:f8:ae:b5:c3:13:19:b1:a5: 26:a8:c4:ec:00:19:75:d7:0b:e2:7e:c9:79:e8:dd: d1:1f:b1:e7:aa:ca:a8:a1:a5:3e:4b:93:6c:d0:d5: 13:89:3a:86:76:ab:5c:16:76:da:89:1d:f5:19:f2: 68:1f:24:12:b4:93:90:d1:cd:28:5c:14:dd:80:af: c9:9f:a5:e2:d1:cf:45:a4:cf:45:3f:d9:cd:60:fc: 43:85:47:12:16:86:00:49:99:06:79:22:d0:d1:7f: 12:bc:03:ef:ff:44:44:61:d5:9e:3f:74:11:ca:b0: cd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:87:26:04:6A:C2:D8:EB:BA:B2:88:C6:D5:D8:26:93:57:8A:50:B0 X509v3 Authority Key Identifier: keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:7d:7e:d2:7f:a6:84:d1:83:17:76:2b:67:ca:21:d2:26:10: 26:85:be:76:63:d3:97:a0:8a:40:2e:59:ee:e8:4f:a8:b9:c0: e8:b4:03:59:41:e0:66:b3:3a:3a:51:86:9e:2e:88:37:6b:b3: 21:e4:1b:2a:3a:69:ec:8d:f8:54:45:94:31:36:c9:4b:52:9f: 39:7f:6a:d1:54:93:0e:c8:e0:26:e6:1d:5b:93:e7:88:e5:18: 43:7c:5a:9c:bd:28:84:61:1f:51:67:4b:25:1d:fa:a6:82:46: a2:8c:21:83:a6:e9:1e:78:83:1e:19:16:52:b2:6c:98:44:60: 6d:ba:38:03:05:16:0d:b2:b6:51:36:c7:c8:b2:c9:3f:f5:f6: bb:1b:74:8a:ff:9a:7a:7b:3b:17:a1:c9:a4:36:ef:24:2a:52: 4e:e3:5d:46:de:02:66:a1:26:9d:1d:62:98:d5:22:bd:62:c0: 37:e4:77:63:ce:fd:fc:45:e9:b0:1b:b0:7c:64:8f:b0:26:c4: 86:23:fa:2f:65:fc:30:a0:e5:41:0a:82:a1:0e:25:4c:f2:78: 1c:71:96:7b:29:6a:b7:60:2d:3f:5a:9d:92:05:91:d5:f3:42: a8:57:2c:27:52:dd:13:0e:f8:f5:60:c9:34:a4:f0:f6:cf:ee: 2e:8f:a2:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3RTkxMTAvBgNVBAUTKERGNTE0NzBCMTVFOEMxNDFBRjJGQTg0NkEyOEMwM0Iz ODU5MUJBQjQwHhcNMjUwOTE1MDQxNzIyWhcNMjUwOTIyMDQxNzIyWjAYMRYwFAYD VQQDEw02OGM3OTM1My05OWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsl4lvtBGVgZ7xkq5d30ZE3uCFd+Jm51ZT/yUhXfoFBDtpA+CWjoWqsn+WgpN PGBn+PIvvhLDLV+GyZx7HyXgs4fcfrg/t7MoF3TzOXPu5IKNZJHOmEtHwuFgnHar rQrwsyS7xu2oxWxb1PEJ61oerkviMHo1vQXoHazxnejDl/tLFMra1aaA1cJ7coSX +K61wxMZsaUmqMTsABl11wvifsl56N3RH7HnqsqooaU+S5Ns0NUTiTqGdqtcFnba iR31GfJoHyQStJOQ0c0oXBTdgK/Jn6Xi0c9FpM9FP9nNYPxDhUcSFoYASZkGeSLQ 0X8SvAPv/0REYdWeP3QRyrDN4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaHJgRq wtjrurKIxtXYJpNXilCwMB8GA1UdIwQYMBaAFN9RRwsV6MFBry+oRqKMA7OFkbq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdFOS9FOTlFN0Y1MjZF MkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dVR3ZMNmhHb293RHM0V1J1 clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxRkhDeFhvd1VHdkw2aEdvb3dEczRXUnVyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdFOS9FOTlFN0Y1MjZFMkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dV R3ZMNmhHb293RHM0V1J1clEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJfX7Sf6aE0YMXditnyiHSJhAmhb52Y9OXoIpALlnu6E+oucDotANZ QeBmszo6UYaeLog3a7Mh5BsqOmnsjfhURZQxNslLUp85f2rRVJMOyOAm5h1bk+eI 5RhDfFqcvSiEYR9RZ0slHfqmgkaijCGDpukeeIMeGRZSsmyYRGBtujgDBRYNsrZR NsfIssk/9fa7G3SK/5p6ezsXocmkNu8kKlJO411G3gJmoSadHWKY1SK9YsA35Hdj zv38RemwG7B8ZI+wJsSGI/ovZfwwoOVBCoKhDiVM8ngccZZ7KWq3YC0/Wp2SBZHV 80KoVywnUt0TDvj1YMk0pPD2z+4uj6LZ -----END CERTIFICATE-----Generated at Wed Sep 17 03:05:34 2025 by rpki-client