$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json) Hash identifier: W5Pl7S70/7rpvfUZIEBbfwu3ucWJHaAL1AlvO3sLQb0= Subject key identifier: D7:22:AB:93:1E:F1:E3:70:2E:97:06:7A:4B:27:24:35:FC:DB:8E:D5 Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft Manifest number: 019A Signing time: Fri 19 Sep 2025 03:59:30 +0000 Manifest this update: Fri 19 Sep 2025 03:59:30 +0000 Manifest next update: Fri 26 Sep 2025 03:59:30 +0000 Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: 4lTsDa+jH8T78UB0v2OWxGxP15IRtKLxMLL+dc1spcc=) 2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: 0UTp5Ayv/ftDBInci/moVW1XbBA3xfvlEMb4Bw4foQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Validity Not Before: Sep 19 03:59:30 2025 GMT Not After : Sep 26 03:59:30 2025 GMT Subject: CN=68ccd522-edd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:1b:9c:a8:42:af:da:1d:2e:e4:3e:4d:80: 7c:2b:eb:05:bb:8f:dd:51:5e:b5:01:09:53:88:53: cc:78:44:5e:6c:5c:29:16:73:4a:b9:37:29:6d:39: 19:4b:22:23:9c:98:80:69:02:e8:0a:d5:78:e5:6b: 57:8e:d3:6b:e5:68:98:38:56:74:b0:9f:24:66:98: e2:0c:14:9f:5e:51:f3:cb:ce:f4:3d:50:07:69:9a: 0b:8a:3e:02:59:09:6e:0c:fc:43:95:e9:2b:9e:fb: 8c:27:67:bf:bc:78:37:a6:5d:f2:3b:23:37:a4:58: c9:d7:cd:52:79:5f:8d:e5:35:2d:8a:42:55:95:44: 68:16:7f:2a:5f:34:15:75:97:64:ea:7f:7e:8a:f6: cd:74:bb:8b:e8:7e:f6:36:a5:ba:76:df:1e:55:80: c8:94:11:0e:90:48:ba:e1:6d:4a:31:1e:96:a9:c5: ba:23:48:43:b5:f9:63:a8:0c:99:0b:db:59:c8:da: b1:d2:40:fa:e4:81:70:64:7f:06:cf:a3:c4:d5:62: 50:28:4d:43:fc:b3:46:c0:27:d4:0a:dc:34:a3:fa: ca:53:ed:8a:50:0f:c4:de:61:72:0d:75:c2:46:58: ef:35:36:75:af:d5:5c:d8:2d:19:02:ac:a0:33:8d: 3b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:22:AB:93:1E:F1:E3:70:2E:97:06:7A:4B:27:24:35:FC:DB:8E:D5 X509v3 Authority Key Identifier: keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:4b:0d:21:88:8a:cd:ee:91:87:cd:38:7e:2c:f5:14:b7:f0: ef:80:b7:99:28:12:0f:12:e0:bd:f2:e9:88:f1:b8:bf:1c:9e: 04:7d:a6:03:69:55:ae:db:91:f9:43:de:72:59:52:95:b4:48: 83:7b:ff:1f:b2:83:9d:14:4c:bd:92:18:6b:e8:e9:b0:71:a4: f3:be:05:a0:55:32:23:c7:a5:32:95:7f:28:5f:6d:8a:79:12: 0d:01:fe:b1:44:1d:c7:e2:18:d4:df:3f:ad:0b:86:95:09:64: aa:e0:ee:6b:05:e9:06:b7:f8:3a:ba:6e:d4:6b:f7:19:6f:01: e4:ce:ed:cf:c8:0e:9b:d6:5c:62:8f:71:25:e1:18:a3:f2:11: 03:30:76:8b:2f:9e:bd:ba:32:b8:00:f9:d9:c0:ab:34:97:5f: b6:49:ca:e4:2b:91:20:ad:9b:8a:c3:49:8a:34:dd:52:d4:1e: af:5f:19:7a:45:57:26:2a:65:e7:f2:ef:33:bd:21:4c:fb:d9: f8:fd:f2:9b:f3:2b:41:d3:c1:ac:62:7a:9a:c0:f7:cd:79:37: b6:55:fe:11:b6:6e:d7:91:bf:c7:42:86:d6:40:7f:1e:cb:fa: b3:e9:31:14:47:a1:38:d4:1c:c1:f0:3f:08:4c:e1:3c:bf:fb: ea:45:01:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy QjU3MDI2MzcwHhcNMjUwOTE5MDM1OTMwWhcNMjUwOTI2MDM1OTMwWjAYMRYwFAYD VQQDEw02OGNjZDUyMi1lZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrsbnKhCr9odLuQ+TYB8K+sFu4/dUV61AQlTiFPMeERebFwpFnNKuTcpbTkZ SyIjnJiAaQLoCtV45WtXjtNr5WiYOFZ0sJ8kZpjiDBSfXlHzy870PVAHaZoLij4C WQluDPxDlekrnvuMJ2e/vHg3pl3yOyM3pFjJ181SeV+N5TUtikJVlURoFn8qXzQV dZdk6n9+ivbNdLuL6H72NqW6dt8eVYDIlBEOkEi64W1KMR6WqcW6I0hDtfljqAyZ C9tZyNqx0kD65IFwZH8Gz6PE1WJQKE1D/LNGwCfUCtw0o/rKU+2KUA/E3mFyDXXC RljvNTZ1r9Vc2C0ZAqygM407+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNciq5Me 8eNwLpcGeksnJDX8247VMB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0 QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzJBOS9EOEREQzFBNjM0QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2 QkJaaHM2NzMySk1yVndKamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBSw0hiIrN7pGHzTh+LPUUt/DvgLeZKBIPEuC98umI8bi/HJ4EfaYD aVWu25H5Q95yWVKVtEiDe/8fsoOdFEy9khhr6OmwcaTzvgWgVTIjx6UylX8oX22K eRINAf6xRB3H4hjU3z+tC4aVCWSq4O5rBekGt/g6um7Ua/cZbwHkzu3PyA6b1lxi j3El4Rij8hEDMHaLL569ujK4APnZwKs0l1+2ScrkK5EgrZuKw0mKNN1S1B6vXxl6 RVcmKmXn8u8zvSFM+9n4/fKb8ytB08GsYnqawPfNeTe2Vf4Rtm7Xkb/HQobWQH8e y/qz6TEUR6E41BzB8D8ITOE8v/vqRQHX -----END CERTIFICATE-----Generated at Fri Sep 19 19:26:36 2025 by rpki-client