$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json) Hash identifier: fIy0mhN5S3IRiVaqLBdiF2+b/5nDwSsF0Zh3E5R4shQ= Subject key identifier: DE:22:DE:7C:AE:82:27:9A:49:FA:43:54:13:41:FB:5F:C9:B7:47:EA Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Certificate serial: 0A6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft Manifest number: 0A65 Signing time: Sun 14 Sep 2025 19:49:46 +0000 Manifest this update: Sun 14 Sep 2025 19:49:45 +0000 Manifest next update: Sun 21 Sep 2025 19:49:45 +0000 Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: MAuiLANcnR5yBwdFftpHXIu9C9tTj3xzKR1hfprag2g=) 2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: 4R+T9ichUclKYc2esjqc1J6rnOewSsSbS/PRV1Yw9jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Sep 2025 19:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2670 (0xa6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Validity Not Before: Sep 14 19:49:45 2025 GMT Not After : Sep 21 19:49:45 2025 GMT Subject: CN=68c71c59-60ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:bc:ec:1e:c2:7a:04:ac:99:1b:b8:a5:63: 3c:43:0b:16:c9:bc:25:53:d8:75:a7:4d:3f:07:cd: 54:27:7c:ce:07:66:a8:da:a5:bd:ee:12:2a:27:05: 73:9e:a9:0d:8b:0a:df:6e:65:33:5f:2e:7e:da:98: ff:b9:dd:c7:4e:df:e2:52:3c:fa:91:c4:6b:f3:91: d2:37:7d:62:98:e1:8c:a7:0f:2a:2d:3f:a9:64:b4: 8d:85:b0:98:77:11:d2:31:33:fb:93:65:92:1e:d3: 93:7f:bd:72:bf:eb:f2:b3:db:8c:82:e2:28:73:44: 09:7d:4e:85:36:4f:47:08:68:85:c2:8c:f0:41:3f: 4e:3f:cb:fd:0a:6b:2b:d9:7f:1d:c9:5c:8d:54:89: 58:4c:c8:da:e9:f2:cd:5d:3f:7c:b8:de:28:7b:26: 82:45:93:1b:93:fd:89:c6:39:ff:c2:d5:52:18:8a: 29:d7:90:b2:e4:e9:af:af:f6:30:18:d0:7f:19:1b: 19:01:ce:75:27:38:52:9d:bc:8b:7c:f4:1b:14:59: 13:d3:a6:cb:2a:a0:52:d7:df:bd:52:df:6c:88:a3: 13:1c:57:c6:d2:39:4f:88:27:e2:bb:0c:48:48:ec: af:0a:57:22:1d:83:ac:96:63:34:b2:75:f4:c5:d3: 17:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:22:DE:7C:AE:82:27:9A:49:FA:43:54:13:41:FB:5F:C9:B7:47:EA X509v3 Authority Key Identifier: keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8a:96:21:4f:98:23:6d:53:5a:98:45:03:bf:e1:10:2a:4c: df:2b:1a:7f:79:08:18:42:ef:4d:92:4a:99:1a:eb:58:84:d4: 8c:35:9b:9d:c5:87:ea:19:e4:f6:5a:f9:41:ed:9b:d8:2c:73: 4f:8d:5b:c6:86:6f:31:67:ad:15:42:86:e3:34:65:25:44:ba: 3b:6e:a1:d3:18:ad:cd:21:06:71:b7:1e:eb:a0:92:a2:00:4c: d4:9d:21:57:a0:24:05:92:96:26:49:63:65:06:bc:8e:85:f7: 2e:01:23:d9:e3:20:80:46:69:e0:b2:1e:6a:ae:f3:16:69:06: a9:00:e9:c1:4d:96:be:0b:3a:9f:91:0f:85:4f:4f:11:97:f5: c9:30:8c:24:1d:5b:c6:8e:70:9f:cb:c8:94:d6:bc:0a:5a:12: 72:23:55:18:44:21:07:d6:5d:5f:a0:21:90:22:d3:21:13:28: d0:b3:9b:06:9f:f6:6f:0b:f3:a0:da:19:3c:9c:49:06:d9:f7: dd:57:c1:09:f0:c1:93:83:39:c7:94:8d:e2:2b:bb:1c:e1:d1: 3b:17:1a:f7:79:c8:ad:e9:c0:a7:2d:0e:de:b7:96:6c:72:e8: ec:3b:a4:c8:ce:5f:c3:d3:5c:c7:37:98:e0:c2:8f:af:26:3d: 9a:1d:5a:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCRTExMTAvBgNVBAUTKDE4MDc5RUU0Mzk4RDY3MUJENjQ3RkNBODJBMjc5NEU1 MEEzMDQ3QkQwHhcNMjUwOTE0MTk0OTQ1WhcNMjUwOTIxMTk0OTQ1WjAYMRYwFAYD VQQDEw02OGM3MWM1OS02MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpi87B7CegSsmRu4pWM8QwsWybwlU9h1p00/B81UJ3zOB2ao2qW97hIqJwVz nqkNiwrfbmUzXy5+2pj/ud3HTt/iUjz6kcRr85HSN31imOGMpw8qLT+pZLSNhbCY dxHSMTP7k2WSHtOTf71yv+vys9uMguIoc0QJfU6FNk9HCGiFwozwQT9OP8v9Cmsr 2X8dyVyNVIlYTMja6fLNXT98uN4oeyaCRZMbk/2Jxjn/wtVSGIop15Cy5Omvr/Yw GNB/GRsZAc51JzhSnbyLfPQbFFkT06bLKqBS19+9Ut9siKMTHFfG0jlPiCfiuwxI SOyvClciHYOslmM0snX0xdMX9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4i3nyu gieaSfpDVBNB+1/Jt0fqMB8GA1UdIwQYMBaAFBgHnuQ5jWcb1kf8qConlOUKMEe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkJFMS9BN0U3MUVGNjZF QTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4dldSX3lvS2llVTVRb3dS NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBZWU1RG1OWnh2V1JfeW9LaWVVNVFvd1I3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkJFMS9BN0U3MUVGNjZFQTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4 dldSX3lvS2llVTVRb3dSNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9ipYhT5gjbVNamEUDv+EQKkzfKxp/eQgYQu9NkkqZGutYhNSMNZud xYfqGeT2WvlB7ZvYLHNPjVvGhm8xZ60VQobjNGUlRLo7bqHTGK3NIQZxtx7roJKi AEzUnSFXoCQFkpYmSWNlBryOhfcuASPZ4yCARmngsh5qrvMWaQapAOnBTZa+Czqf kQ+FT08Rl/XJMIwkHVvGjnCfy8iU1rwKWhJyI1UYRCEH1l1foCGQItMhEyjQs5sG n/ZvC/Og2hk8nEkG2ffdV8EJ8MGTgznHlI3iK7sc4dE7Fxr3ecit6cCnLQ7et5Zs cujsO6TIzl/D01zHN5jgwo+vJj2aHVpW -----END CERTIFICATE-----Generated at Tue Sep 16 09:31:33 2025 by rpki-client