$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json) Hash identifier: IFd/aQqQDwws8105/TbjjtVafVSshN4sWGAjyEuEMXo= Subject key identifier: 92:DD:F4:7E:13:AC:FB:4B:FE:96:2F:9C:83:4D:E3:D5:5E:6C:97:14 Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 0552 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft Manifest number: 053C Signing time: Thu 04 Sep 2025 16:28:44 +0000 Manifest this update: Thu 04 Sep 2025 16:28:43 +0000 Manifest next update: Thu 11 Sep 2025 16:28:43 +0000 Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: Mx56LcD11TRAJ78HzgAKmU6hLzVRIEgx/l6d0rfJaU0=) 2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: yR/rS2v+MnuPsp4IAeWDDgPbPiNnjwU9wDh4QYZV4SU=) 3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: qkuJyiuag7r0VmHzzxIeNNPZvE1YemZEbkXs9TYwx5o=) 4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: YZwNutRVemyQTlte1eEv/AcDXWm1xtlx4204L/kTObo=) 5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: ACLXZnrak+BWFZVdvvziA50vZItebg8EqCvB342Th1I=) 6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: Cywfb2Rnt+MB9wFrcD0/BbNel0gnNnVhinHv2K8l9OM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 16:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1362 (0x552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Sep 4 16:28:43 2025 GMT Not After : Sep 11 16:28:43 2025 GMT Subject: CN=68b9be3b-dac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:fc:cc:bb:c0:c1:c3:5e:08:f4:5c:ac:35: 57:c1:cc:19:41:e0:58:23:34:e9:6c:03:08:17:6a: 3d:c8:ac:37:ec:e0:7b:b1:df:f0:1e:96:4d:98:92: 55:8d:98:92:56:9e:bb:46:fd:a3:49:e9:42:c4:d5: 8e:84:c4:99:1d:82:5d:0b:1b:ad:05:c3:62:51:9e: 0c:14:b4:60:a6:dd:38:66:16:6e:9c:f8:e3:a5:8b: 8e:20:a3:29:b1:e7:b8:f6:2b:f0:77:03:b8:87:8b: 50:bc:f6:1a:05:10:ac:74:77:3b:8b:0d:5e:f9:e1: c0:b1:2f:5c:35:aa:a6:dd:13:fd:23:0e:39:0a:a5: 14:4c:50:07:42:84:5c:a9:b2:bd:42:e9:ab:33:a2: 5d:82:dd:fa:f8:92:e8:40:18:2d:bd:4f:62:7a:29: ba:80:f4:67:39:d6:93:87:00:d6:08:54:41:91:cd: 48:e4:14:8f:c1:27:34:93:d8:33:1e:3e:7f:15:9c: ae:cf:7d:46:f9:05:08:58:84:73:4e:18:3f:a0:70: 14:3d:42:f1:61:83:58:f1:3e:c7:75:91:eb:16:05: 75:f9:e9:81:22:b4:fb:f7:47:c6:0b:ad:23:f9:8d: ff:16:53:02:d6:de:50:45:01:0c:39:e0:88:dd:a6: 28:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DD:F4:7E:13:AC:FB:4B:FE:96:2F:9C:83:4D:E3:D5:5E:6C:97:14 X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:40:74:c9:f6:b9:0a:63:2d:d5:38:fa:aa:f8:37:21:5a:f9: 13:1c:e5:c8:58:50:85:7c:db:20:c8:06:36:a5:b2:e5:f7:05: 89:1b:ee:07:4c:df:82:ad:60:1e:0a:62:0f:f5:54:36:c5:25: 36:8c:bf:1c:da:5e:1f:26:0b:bb:11:66:11:f9:00:8e:cc:af: f0:e7:1b:f9:13:d5:ca:09:a8:14:d4:7a:bd:c1:77:5d:30:30: 32:bc:7f:a8:db:9f:a1:23:48:d7:32:fe:39:63:0d:59:a2:3e: c9:90:16:60:45:5c:35:f1:f9:08:86:e1:9b:32:1b:d3:20:a7: d0:a1:a3:7c:20:94:c7:61:b2:5e:ac:a3:58:aa:e0:6f:1d:84: 9a:3b:65:91:fd:24:4a:23:21:0a:59:3c:fd:9f:6d:8c:d2:31: c8:2f:fc:01:42:30:3b:b1:d9:63:f9:02:04:23:ae:63:91:0f: 35:ca:8a:c4:93:a5:27:ad:80:a6:ab:75:87:d9:63:24:0e:a4: 08:69:ed:6c:1b:d8:cf:26:cb:04:cb:ca:eb:0a:9e:67:eb:18: d4:32:53:28:af:d5:08:78:c4:15:a6:52:43:92:e5:f8:e5:f5: 51:a1:f5:3b:7c:98:ec:12:0f:ee:be:35:a8:cc:1e:af:7a:ea: 5a:49:f9:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjUwOTA0MTYyODQzWhcNMjUwOTExMTYyODQzWjAYMRYwFAYD VQQDEw02OGI5YmUzYi1kYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdP8zLvAwcNeCPRcrDVXwcwZQeBYIzTpbAMIF2o9yKw37OB7sd/wHpZNmJJV jZiSVp67Rv2jSelCxNWOhMSZHYJdCxutBcNiUZ4MFLRgpt04ZhZunPjjpYuOIKMp see49ivwdwO4h4tQvPYaBRCsdHc7iw1e+eHAsS9cNaqm3RP9Iw45CqUUTFAHQoRc qbK9QumrM6Jdgt36+JLoQBgtvU9ieim6gPRnOdaThwDWCFRBkc1I5BSPwSc0k9gz Hj5/FZyuz31G+QUIWIRzThg/oHAUPULxYYNY8T7HdZHrFgV1+emBIrT790fGC60j +Y3/FlMC1t5QRQEMOeCI3aYoEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLd9H4T rPtL/pYvnINN49VebJcUMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS9FQUM3RUVBMDExMkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1 blpxT3NxNXkwOERGVUVVNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFQHTJ9rkKYy3VOPqq+DchWvkTHOXIWFCFfNsgyAY2pbLl9wWJG+4H TN+CrWAeCmIP9VQ2xSU2jL8c2l4fJgu7EWYR+QCOzK/w5xv5E9XKCagU1Hq9wXdd MDAyvH+o25+hI0jXMv45Yw1Zoj7JkBZgRVw18fkIhuGbMhvTIKfQoaN8IJTHYbJe rKNYquBvHYSaO2WR/SRKIyEKWTz9n22M0jHIL/wBQjA7sdlj+QIEI65jkQ81yorE k6UnrYCmq3WH2WMkDqQIae1sG9jPJssEy8rrCp5n6xjUMlMor9UIeMQVplJDkuX4 5fVRofU7fJjsEg/uvjWozB6veupaSfmz -----END CERTIFICATE-----Generated at Sat Sep 6 10:18:33 2025 by rpki-client