$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft File: S0Nd1JrBEcPde6D08IaF8hZRWFk.mft (raw, json) Hash identifier: 0JGQLvgQQ3qBp0ZLk7TRJIf4mYIDo+hqUEPnh6gMiP8= Subject key identifier: 81:0A:9A:2D:89:B4:5C:E6:B9:70:D1:00:49:86:9F:58:86:D5:9C:06 Authority key identifier: 4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 Certificate issuer: /CN=A91DC33B/serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Certificate serial: 16AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft Manifest number: 16BE Signing time: Thu 18 Sep 2025 16:48:30 +0000 Manifest this update: Thu 18 Sep 2025 16:48:29 +0000 Manifest next update: Thu 25 Sep 2025 16:48:29 +0000 Files and hashes: 1: S0Nd1JrBEcPde6D08IaF8hZRWFk.crl (hash: kVEXq4cOtYQL/uLD8YXZQEz400m8VhPNSzUh3H0GL7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5803 (0x16ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC33B, serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Validity Not Before: Sep 18 16:48:29 2025 GMT Not After : Sep 25 16:48:29 2025 GMT Subject: CN=68cc37de-1401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:b6:8c:01:4b:5b:b8:10:00:e6:ae:91:4e: b6:c7:6e:d8:10:a2:18:57:8a:bd:17:14:24:e5:58: d6:f0:d7:f8:de:b8:eb:c2:d1:3b:7e:98:e0:eb:67: 81:b7:db:9a:ea:3d:52:3f:ed:43:e9:b0:d2:4f:f1: e4:52:8f:99:87:bb:da:c5:3e:7c:9a:91:88:08:c4: ab:4b:06:ec:a9:f7:c9:cb:de:b1:40:b8:e5:9f:71: ce:4e:5c:4f:e6:75:81:0e:86:22:1c:66:77:87:08: 24:3b:f3:e5:0f:da:d8:0e:67:19:f0:c6:f7:97:a3: c0:0e:04:25:d1:81:0c:7b:39:8c:1d:be:b3:89:04: 90:a8:8b:90:9f:51:49:df:5d:e8:f2:22:c5:4f:06: 08:68:90:f4:f4:00:45:da:75:2e:9c:d6:62:1f:f7: 64:af:cd:8e:eb:e1:d2:e5:57:71:d9:3c:7e:cf:ae: 48:66:b2:a9:c1:f6:7f:6a:e7:d2:9a:26:b5:9a:d9: 52:97:23:1d:3c:46:9e:11:d9:d6:e8:59:74:23:03: f6:5c:d6:f2:bf:e5:e3:4d:a5:ed:fe:ee:f1:da:66: 4e:73:36:1d:d5:54:13:38:41:0b:97:53:3b:08:41: 93:f6:2f:9a:54:be:6d:74:b6:d5:f5:84:a4:9b:b3: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0A:9A:2D:89:B4:5C:E6:B9:70:D1:00:49:86:9F:58:86:D5:9C:06 X509v3 Authority Key Identifier: keyid:4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:1a:ec:72:83:4f:73:33:92:25:57:24:ba:41:59:fb:da:f8: f6:32:b1:f1:ab:5d:93:99:cd:9b:27:97:3d:a5:dc:01:f0:8a: e2:ab:74:6c:b9:c5:14:83:5e:6a:50:cc:da:b8:06:f8:14:50: ab:72:f8:3e:90:d4:44:cd:ac:47:60:fa:c1:e4:69:b7:c5:dc: c7:f1:07:31:8d:52:c9:56:2e:8a:39:7a:ec:76:08:0b:6f:36: aa:c0:b4:f3:5a:78:88:12:d3:be:0a:c3:dc:e6:60:65:6b:49: 4f:0e:0a:59:73:78:58:d2:c8:46:fa:4b:11:3b:45:92:7f:16: 5a:36:9c:47:81:10:28:60:d5:a6:01:d3:ce:65:09:36:5c:e2: aa:b6:6d:e7:8f:ec:6a:7b:2e:99:44:9d:3d:a3:29:52:90:70: 81:f1:73:10:4e:aa:a0:eb:4f:e3:96:c9:b5:64:89:8a:cd:b5: 8c:3c:26:45:d8:7f:65:f0:f3:9e:64:94:6d:a6:06:d4:6b:38: 4c:83:92:05:a5:ac:78:6f:99:49:af:db:98:24:ba:a8:11:b4: b0:f9:80:a4:09:01:39:37:9e:4e:e1:f3:65:47:ae:65:24:e3: 11:ec:8d:ce:6b:8a:3b:b0:04:24:66:a7:3f:57:d0:86:54:18: a9:3e:3f:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzM0IxMTAvBgNVBAUTKDRCNDM1REQ0OUFDMTExQzNERDdCQTBGNEYwODY4NUYy MTY1MTU4NTkwHhcNMjUwOTE4MTY0ODI5WhcNMjUwOTI1MTY0ODI5WjAYMRYwFAYD VQQDEw02OGNjMzdkZS0xNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJa2jAFLW7gQAOaukU62x27YEKIYV4q9FxQk5VjW8Nf43rjrwtE7fpjg62eB t9ua6j1SP+1D6bDST/HkUo+Zh7vaxT58mpGICMSrSwbsqffJy96xQLjln3HOTlxP 5nWBDoYiHGZ3hwgkO/PlD9rYDmcZ8Mb3l6PADgQl0YEMezmMHb6ziQSQqIuQn1FJ 313o8iLFTwYIaJD09ABF2nUunNZiH/dkr82O6+HS5Vdx2Tx+z65IZrKpwfZ/aufS mia1mtlSlyMdPEaeEdnW6Fl0IwP2XNbyv+XjTaXt/u7x2mZOczYd1VQTOEELl1M7 CEGT9i+aVL5tdLbV9YSkm7OtzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEKmi2J tFzmuXDRAEmGn1iG1ZwGMB8GA1UdIwQYMBaAFEtDXdSawRHD3Xug9PCGhfIWUVhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMzQi9CNEM5RkU5MjA2 RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVjUGRlNkQwOElhRjhoWlJX RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwTmQxSnJCRWNQZGU2RDA4SWFGOGhaUldGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMzQi9CNEM5RkU5MjA2RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVj UGRlNkQwOElhRjhoWlJXRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATGuxyg09zM5IlVyS6QVn72vj2MrHxq12Tmc2bJ5c9pdwB8Iriq3Rs ucUUg15qUMzauAb4FFCrcvg+kNREzaxHYPrB5Gm3xdzH8QcxjVLJVi6KOXrsdggL bzaqwLTzWniIEtO+CsPc5mBla0lPDgpZc3hY0shG+ksRO0WSfxZaNpxHgRAoYNWm AdPOZQk2XOKqtm3nj+xqey6ZRJ09oylSkHCB8XMQTqqg60/jlsm1ZImKzbWMPCZF 2H9l8POeZJRtpgbUazhMg5IFpax4b5lJr9uYJLqoEbSw+YCkCQE5N55O4fNlR65l JOMR7I3Oa4o7sAQkZqc/V9CGVBipPj8j -----END CERTIFICATE-----Generated at Fri Sep 19 09:36:31 2025 by rpki-client