$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: vPupoeAujz7cP9zW45TMczw31zXePHHuPb1zqbViUZQ= Subject key identifier: 95:79:78:2E:D6:99:78:03:79:BE:58:4B:AC:A2:30:3A:84:CE:7B:F7 Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 0909 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 08DB Signing time: Mon 08 Sep 2025 20:27:29 +0000 Manifest this update: Mon 08 Sep 2025 20:27:28 +0000 Manifest next update: Mon 15 Sep 2025 20:27:28 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: H4hagq47MxUQk7ZVxXZYA2+d+PD/CSF+gdhHL4kNrvA=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=) 3: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: 3PD/x5elGPt/NTqjyFL6QFT8slsuLxNOAQu2SL4y1Fo=) 4: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=) 5: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=) 6: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2313 (0x909) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Sep 8 20:27:28 2025 GMT Not After : Sep 15 20:27:28 2025 GMT Subject: CN=68bf3c30-f98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7f:e8:69:9a:93:f9:84:25:ae:2d:6b:4f:72: 8a:2e:6b:92:c9:15:5b:76:54:9a:a1:3b:bc:13:28: ed:37:59:76:71:2f:41:12:e8:55:d8:b8:9c:ff:a4: b8:2d:b9:97:4f:a1:87:25:6e:cc:45:d8:e8:aa:49: d1:29:f3:40:63:62:d6:3d:38:2b:22:cd:60:e3:07: 88:e7:b5:5b:46:68:ac:9c:46:35:f8:f1:ce:68:75: 31:fc:46:22:de:19:28:c5:ae:31:51:ec:ab:bd:77: 76:63:a5:bf:f4:1c:bc:27:6a:84:55:70:1a:b7:43: 52:85:7b:02:46:e5:48:fe:45:4e:b0:95:2f:d9:a2: 15:7e:f2:1e:46:35:1d:3e:e4:82:45:43:13:b3:eb: 47:95:57:c1:bf:bb:76:fa:9f:2c:16:0d:a8:72:4a: 41:90:16:3e:67:54:76:42:29:2a:46:ef:3f:f5:f4: 61:68:53:33:32:bc:01:52:69:5e:d1:f5:43:ff:e3: 90:10:14:07:7f:db:9f:59:ad:1c:24:ef:62:a6:82: 6a:4d:e2:d3:e6:c4:d1:56:f9:5c:57:8f:ee:2e:46: 87:65:59:dd:8e:11:56:17:f9:2f:1f:d4:57:bb:bd: ed:60:25:97:ab:6a:45:d4:2a:d6:72:c7:84:f1:ca: 4d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:79:78:2E:D6:99:78:03:79:BE:58:4B:AC:A2:30:3A:84:CE:7B:F7 X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a3:7f:81:0c:bc:b7:33:24:b8:97:48:f9:a5:b7:ea:94:27: 00:2b:96:12:df:a3:56:11:b4:74:d9:40:af:7f:20:14:4d:c8: be:cd:f7:6f:84:c6:ca:b4:ee:58:ee:72:a9:78:16:14:c8:c4: 9f:4d:2c:9d:7f:9e:61:07:5c:7c:e3:a1:70:f0:01:4f:1f:33: 73:7c:f2:3f:07:a9:10:f8:00:a4:ef:5d:aa:19:c8:72:42:d8: d7:3e:d9:6a:95:2c:a1:33:42:99:76:02:46:0c:12:6f:a9:e6: 1a:13:58:a9:b4:0d:bc:e0:42:12:d5:e5:db:b2:4b:c1:0f:48: 46:34:56:67:79:53:ab:90:d7:0c:20:53:18:30:ed:d6:d3:7b: f4:66:77:06:c6:fc:0b:71:5e:00:88:c7:44:a5:b4:d5:27:3e: 44:e3:2d:0c:c1:97:4e:99:39:61:7a:d3:4d:f3:f1:b8:b9:75: a3:c7:bc:fa:89:6c:77:65:3a:89:c1:34:4e:8f:62:19:4c:b9: 34:73:21:dc:12:5e:8e:f2:3e:4f:cc:2a:80:fb:ac:c5:07:2c: bc:32:71:e6:85:24:04:4a:eb:e1:d9:a5:5d:e9:2f:1f:28:d6: a0:47:a9:88:43:f6:33:39:33:7a:56:02:2a:7d:d2:47:39:e2: 01:3f:6a:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUwOTA4MjAyNzI4WhcNMjUwOTE1MjAyNzI4WjAYMRYwFAYD VQQDEw02OGJmM2MzMC1mOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsH/oaZqT+YQlri1rT3KKLmuSyRVbdlSaoTu8EyjtN1l2cS9BEuhV2Lic/6S4 LbmXT6GHJW7MRdjoqknRKfNAY2LWPTgrIs1g4weI57VbRmisnEY1+PHOaHUx/EYi 3hkoxa4xUeyrvXd2Y6W/9By8J2qEVXAat0NShXsCRuVI/kVOsJUv2aIVfvIeRjUd PuSCRUMTs+tHlVfBv7t2+p8sFg2ockpBkBY+Z1R2QikqRu8/9fRhaFMzMrwBUmle 0fVD/+OQEBQHf9ufWa0cJO9ipoJqTeLT5sTRVvlcV4/uLkaHZVndjhFWF/kvH9RX u73tYCWXq2pF1CrWcseE8cpNVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV5eC7W mXgDeb5YS6yiMDqEznv3MB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAo3+BDLy3MyS4l0j5pbfqlCcAK5YS36NWEbR02UCvfyAUTci+zfdv hMbKtO5Y7nKpeBYUyMSfTSydf55hB1x846Fw8AFPHzNzfPI/B6kQ+ACk712qGchy QtjXPtlqlSyhM0KZdgJGDBJvqeYaE1iptA284EIS1eXbskvBD0hGNFZneVOrkNcM IFMYMO3W03v0ZncGxvwLcV4AiMdEpbTVJz5E4y0MwZdOmTlhetNN8/G4uXWjx7z6 iWx3ZTqJwTROj2IZTLk0cyHcEl6O8j5PzCqA+6zFByy8MnHmhSQESuvh2aVd6S8f KNagR6mIQ/YzOTN6VgIqfdJHOeIBP2qv -----END CERTIFICATE-----Generated at Tue Sep 9 17:26:35 2025 by rpki-client