$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft File: 71ABp1tYBZ2TpdMWOFS0atZqnsg.mft (raw, json) Hash identifier: v2N19GfZYrHeksCfezdb/azo5BF9z5hH4hAjGF6jJFQ= Subject key identifier: 1D:18:E7:F5:A6:19:A0:3B:66:74:A0:16:D0:AE:D0:6F:BF:44:0A:32 Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 Certificate issuer: /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft Manifest number: 0590 Signing time: Mon 08 Sep 2025 23:18:01 +0000 Manifest this update: Mon 08 Sep 2025 23:18:01 +0000 Manifest next update: Mon 15 Sep 2025 23:18:01 +0000 Files and hashes: 1: 71ABp1tYBZ2TpdMWOFS0atZqnsg.crl (hash: I/C8cV2/2TQkBRMnBnZsOdoax0iN6q1dHIF6JsEtKgs=) 2: AB22314C35C211ED8FD8923EC4F9AE02.roa (hash: MnGT95K1KMZ27Vz9GV0/eAka386Vq2ptFRht280ijWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0E19, serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Validity Not Before: Sep 8 23:18:01 2025 GMT Not After : Sep 15 23:18:01 2025 GMT Subject: CN=68bf6429-19d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:c5:ab:47:6c:0b:a6:4a:7e:17:8a:4e:d2: 86:8c:82:2b:11:f8:33:10:69:91:39:c3:7b:96:cf: e8:33:6b:5b:8e:ca:2d:20:4a:a5:2b:b7:e3:7e:2a: 21:04:e6:de:25:93:a6:50:f6:cd:71:1c:7c:86:71: 6e:6b:38:18:9a:ec:3d:15:6e:ef:2c:ce:1d:05:b6: a9:86:91:6d:4d:dc:5a:4a:a2:61:36:b6:0d:5f:1b: cd:e5:b2:08:f7:b7:56:87:f0:c5:3c:88:8b:cc:e3: 32:30:57:63:f1:d8:7b:52:22:1e:4a:d1:a9:ab:1e: b4:6f:8a:13:8f:19:4c:6d:66:7d:9b:62:92:b0:90: 4e:07:7e:a6:16:b8:87:b2:75:6e:4e:91:6a:02:8f: 97:b9:63:9d:19:cb:95:8e:65:a4:46:8a:fd:a7:21: 89:33:5f:ce:92:c7:7d:b4:0e:4e:53:8e:b4:5a:7c: 9e:d3:d6:04:d9:7b:27:87:15:2c:34:a0:d3:88:8f: 87:53:77:09:42:10:bc:5a:8e:f0:db:a5:e7:2a:f2: da:c0:de:9a:38:f8:0e:95:38:42:d8:73:96:7b:c3: 9e:e0:2a:b1:d8:c0:d4:21:8e:1f:bb:7b:be:47:59: 9a:e1:57:53:2d:16:3f:6b:6f:bb:f3:e9:f8:60:9d: 9e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:18:E7:F5:A6:19:A0:3B:66:74:A0:16:D0:AE:D0:6F:BF:44:0A:32 X509v3 Authority Key Identifier: keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:8e:20:67:30:ef:1c:81:4b:22:b7:5c:13:0b:c4:6a:26:45: 4e:54:59:f1:93:5c:fe:b1:2c:23:13:20:61:9b:3a:81:15:55: 5e:67:fd:10:0d:aa:71:92:3a:3b:0d:f3:15:dc:ed:19:0f:2a: 68:5d:06:ee:02:a1:62:4c:22:54:8e:6c:26:9e:cf:4c:67:09: c3:91:94:a3:b0:19:86:d1:82:cd:bd:9a:b3:63:23:a4:d8:2b: 5d:76:dc:31:fb:ec:b2:59:cb:5b:82:ea:78:0e:6b:5d:1d:8f: 12:f9:35:78:da:17:e6:00:e2:ca:93:a0:52:9c:30:5e:dd:83: ca:e2:d6:2f:5a:bd:01:39:f1:97:a7:c6:12:9a:da:0e:65:32: a3:5f:ec:29:dc:f1:a2:af:87:04:a8:15:bf:7f:47:cc:8d:ab: 62:33:80:d4:61:fd:b3:06:0d:78:fc:a8:b5:28:45:65:d1:33: ab:8a:03:04:03:93:fb:e1:81:e4:d2:52:71:2b:23:f4:2c:c2: 2d:62:bf:2d:ac:7a:87:58:e9:ef:30:32:1e:46:a0:fe:5a:e3: c7:a3:46:a6:c5:71:8d:b1:d8:6c:36:7b:c6:73:2b:33:a4:d3: f6:ac:b2:e8:6a:f4:1b:4e:36:74:40:44:bd:7c:fe:d6:8b:d0: 5c:14:32:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFMTkxMTAvBgNVBAUTKEVGNTAwMUE3NUI1ODA1OUQ5M0E1RDMxNjM4NTRCNDZB RDY2QTlFQzgwHhcNMjUwOTA4MjMxODAxWhcNMjUwOTE1MjMxODAxWjAYMRYwFAYD VQQDEw02OGJmNjQyOS0xOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEzFq0dsC6ZKfheKTtKGjIIrEfgzEGmROcN7ls/oM2tbjsotIEqlK7fjfioh BObeJZOmUPbNcRx8hnFuazgYmuw9FW7vLM4dBbaphpFtTdxaSqJhNrYNXxvN5bII 97dWh/DFPIiLzOMyMFdj8dh7UiIeStGpqx60b4oTjxlMbWZ9m2KSsJBOB36mFriH snVuTpFqAo+XuWOdGcuVjmWkRor9pyGJM1/Oksd9tA5OU460Wnye09YE2XsnhxUs NKDTiI+HU3cJQhC8Wo7w26XnKvLawN6aOPgOlThC2HOWe8Oe4Cqx2MDUIY4fu3u+ R1ma4VdTLRY/a2+78+n4YJ2e4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0Y5/Wm GaA7ZnSgFtCu0G+/RAoyMB8GA1UdIwQYMBaAFO9QAadbWAWdk6XTFjhUtGrWap7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEUxOS83MDcxNDY0RUVE RUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJaMlRwZE1XT0ZTMGF0WnFu c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcxQUJwMXRZQloyVHBkTVdPRlMwYXRacW5zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEUxOS83MDcxNDY0RUVERUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJa MlRwZE1XT0ZTMGF0WnFuc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwjiBnMO8cgUsit1wTC8RqJkVOVFnxk1z+sSwjEyBhmzqBFVVeZ/0Q Dapxkjo7DfMV3O0ZDypoXQbuAqFiTCJUjmwmns9MZwnDkZSjsBmG0YLNvZqzYyOk 2Ctddtwx++yyWctbgup4DmtdHY8S+TV42hfmAOLKk6BSnDBe3YPK4tYvWr0BOfGX p8YSmtoOZTKjX+wp3PGir4cEqBW/f0fMjatiM4DUYf2zBg14/Ki1KEVl0TOrigME A5P74YHk0lJxKyP0LMItYr8trHqHWOnvMDIeRqD+WuPHo0amxXGNsdhsNnvGcysz pNP2rLLoavQbTjZ0QES9fP7Wi9BcFDKA -----END CERTIFICATE-----Generated at Tue Sep 9 13:24:30 2025 by rpki-client