$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft File: df43qD7agAphAmCFh-30CJ2CQOA.mft (raw, json) Hash identifier: WmXyLMfraN4GJADjb6upp+9yu2SkNXr+D88r1mBXcxU= Subject key identifier: 0B:0D:21:CC:FF:3C:11:C6:47:EF:EA:0E:92:2A:14:5A:0F:1F:6E:40 Authority key identifier: 75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 Certificate issuer: /CN=A91DC7AA/serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft Manifest number: 46 Signing time: Wed 17 Sep 2025 08:07:56 +0000 Manifest this update: Wed 17 Sep 2025 08:07:56 +0000 Manifest next update: Wed 24 Sep 2025 08:07:56 +0000 Files and hashes: 1: df43qD7agAphAmCFh-30CJ2CQOA.crl (hash: JtPZ6YqAOPmy6HlHcaL/2vJ53eLPb5WT0VDPA3wEOCQ=) 2: A7C7EF962A8911F09526D35BC4F9AE02.roa (hash: q6DsrTnHuS/+1sVBywXv85oiJzaT3sKc0CSqiWHXn5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC7AA, serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Validity Not Before: Sep 17 08:07:56 2025 GMT Not After : Sep 24 08:07:56 2025 GMT Subject: CN=68ca6c5c-5ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:1f:30:3b:bc:75:dd:06:fe:12:10:aa:3d: 7f:96:e5:4e:08:31:b9:88:dc:f9:df:21:8b:fe:19: 85:28:35:0d:ac:0f:58:d4:82:fe:18:84:12:c2:8e: 7e:39:f1:6b:51:7c:95:b3:65:c8:2c:3b:2d:cf:61: cd:76:ef:f9:61:8b:97:3b:3b:3e:d7:c6:e8:be:b3: 50:a8:09:69:55:6a:e4:e6:a0:e0:6c:49:fa:8b:6c: 01:6e:14:03:cc:af:22:e2:1d:b2:b8:f5:5b:24:18: af:90:8d:1a:f6:5f:bd:17:ee:7b:5e:ee:a4:90:79: ff:be:ac:42:cc:46:cb:96:c4:30:68:c9:13:95:d3: 1d:2f:49:dc:a4:46:ab:ba:e1:a9:b9:ad:0e:43:4e: 0e:7b:d3:a9:aa:ca:60:34:c5:9e:e0:5d:8e:c6:d3: b3:e3:ac:8d:db:78:5b:e1:c9:71:6f:46:0d:10:8c: af:8c:5a:93:2e:08:ef:c7:57:6e:db:96:04:54:d4: af:09:67:88:5a:d6:f4:cb:77:4a:49:29:67:9a:97: fc:ad:dc:d9:9d:f1:1f:52:d2:13:fb:e2:de:a5:21: 45:bc:0b:f0:36:5b:ec:e5:55:7d:9f:a0:d6:57:06: 35:7d:53:d4:d8:b3:26:57:e2:8c:ca:44:55:96:83: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0D:21:CC:FF:3C:11:C6:47:EF:EA:0E:92:2A:14:5A:0F:1F:6E:40 X509v3 Authority Key Identifier: keyid:75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ae:16:dd:ab:fe:0c:ed:d8:71:56:2c:24:e8:70:1d:04:f8: 37:56:70:ce:af:ff:c9:c4:a6:ee:37:1b:21:04:5c:aa:fd:8d: 06:ca:e0:0e:e9:6a:ec:46:57:9f:53:a6:8d:46:95:12:9d:8c: b6:79:7d:1b:d1:c5:9e:c8:de:28:43:74:9c:09:9a:bb:2b:6d: cd:b8:c4:88:c7:21:fe:58:cc:5a:4d:30:45:20:b8:6d:43:b5: 49:0b:4d:29:b8:9d:48:98:eb:aa:23:14:5e:83:0e:e5:03:a3: cb:07:fa:31:43:df:86:03:f4:67:4f:59:2a:1c:37:3c:a3:95: 6d:0b:89:98:3e:c4:f9:0e:5d:b9:af:cb:5c:b3:94:2f:fa:84: ae:d2:e6:79:31:03:2a:c9:c2:d9:9b:38:76:fc:9e:0f:c8:25: 61:15:d1:e7:65:c5:d7:ba:d4:0d:73:97:21:0a:19:2d:19:13: c1:7b:cc:ad:7b:81:6d:42:01:bd:92:8f:fc:9e:d8:df:55:bb: a3:8c:62:7f:24:6a:33:80:ee:41:3b:c7:e1:1c:e7:fd:8e:5e: a2:fb:11:77:03:ac:7d:a4:ff:9e:9b:37:07:05:ce:1d:fe:45: ee:53:64:28:28:f3:55:fb:04:37:96:f0:ef:af:6d:56:82:ad: 52:c4:79:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzdBQTExMC8GA1UEBRMoNzVGRTM3QTgzRURBODAwQTYxMDI2MDg1ODdFREY0MDg5 RDgyNDBFMDAeFw0yNTA5MTcwODA3NTZaFw0yNTA5MjQwODA3NTZaMBgxFjAUBgNV BAMTDTY4Y2E2YzVjLTVhZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBmh8wO7x13Qb+EhCqPX+W5U4IMbmI3PnfIYv+GYUoNQ2sD1jUgv4YhBLCjn45 8WtRfJWzZcgsOy3PYc127/lhi5c7Oz7Xxui+s1CoCWlVauTmoOBsSfqLbAFuFAPM ryLiHbK49VskGK+QjRr2X70X7nte7qSQef++rELMRsuWxDBoyROV0x0vSdykRqu6 4am5rQ5DTg5706mqymA0xZ7gXY7G07PjrI3beFvhyXFvRg0QjK+MWpMuCO/HV27b lgRU1K8JZ4ha1vTLd0pJKWeal/yt3Nmd8R9S0hP74t6lIUW8C/A2W+zlVX2foNZX BjV9U9TYsyZX4ozKRFWWg0tnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCw0hzP88 EcZH7+oOkioUWg8fbkAwHwYDVR0jBBgwFoAUdf43qD7agAphAmCFh+30CJ2CQOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDN0FBL0QyMkVEQTM0MkE4 ODExRjBBMzBEOTE1OUM0RjlBRTAyL2RmNDNxRDdhZ0FwaEFtQ0ZoLTMwQ0oyQ1FP QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGY0M3FEN2FnQXBoQW1DRmgtMzBDSjJDUU9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD N0FBL0QyMkVEQTM0MkE4ODExRjBBMzBEOTE1OUM0RjlBRTAyL2RmNDNxRDdhZ0Fw aEFtQ0ZoLTMwQ0oyQ1FPQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJmuFt2r/gzt2HFWLCTocB0E+DdWcM6v/8nEpu43GyEEXKr9jQbK4A7p auxGV59Tpo1GlRKdjLZ5fRvRxZ7I3ihDdJwJmrsrbc24xIjHIf5YzFpNMEUguG1D tUkLTSm4nUiY66ojFF6DDuUDo8sH+jFD34YD9GdPWSocNzyjlW0LiZg+xPkOXbmv y1yzlC/6hK7S5nkxAyrJwtmbOHb8ng/IJWEV0edlxde61A1zlyEKGS0ZE8F7zK17 gW1CAb2Sj/ye2N9Vu6OMYn8kajOA7kE7x+Ec5/2OXqL7EXcDrH2k/56bNwcFzh3+ Re5TZCgo81X7BDeW8O+vbVaCrVLEeXo= -----END CERTIFICATE-----Generated at Thu Sep 18 23:26:24 2025 by rpki-client