$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft File: 53anM2-PZ4WjagEEaEC1FKDUGSk.mft (raw, json) Hash identifier: BeXLtv/BeQGjDRj4UNwF276KDWlRb8UE/DdamwyL3dQ= Subject key identifier: ED:C9:0C:74:10:1E:22:31:56:20:20:F2:FD:A2:68:BE:B7:44:E5:06 Authority key identifier: E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 Certificate issuer: /CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Certificate serial: 0C77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft Manifest number: 0C71 Signing time: Tue 16 Sep 2025 18:33:08 +0000 Manifest this update: Tue 16 Sep 2025 18:33:07 +0000 Manifest next update: Tue 23 Sep 2025 18:33:07 +0000 Files and hashes: 1: 53anM2-PZ4WjagEEaEC1FKDUGSk.crl (hash: Dsz9Sh0mumNpF5SimJGtkon4QiDjaTNkMma/Ppx2FvI=) 2: 964FB9AE06A111EAAE446E30C4F9AE02.roa (hash: 7T6rttGkDUZMLr7YNcGWXFP6okk75uTuQj2yDiVmYPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 18:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3191 (0xc77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1486, serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Validity Not Before: Sep 16 18:33:07 2025 GMT Not After : Sep 23 18:33:07 2025 GMT Subject: CN=68c9ad64-a460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:71:83:8d:80:9f:bd:58:fc:92:b3:65:d8: 67:65:94:c6:7b:41:af:e4:94:50:b4:33:21:13:9c: 80:4c:ba:42:52:b5:eb:e5:1e:f9:58:36:e1:89:74: ad:01:75:a6:a3:07:75:a2:d2:bd:1c:b0:00:a4:24: ac:fc:21:61:3a:bb:e9:4c:ca:6d:84:ca:98:a2:e8: 96:ee:84:c1:62:2a:62:ef:84:36:92:0b:b0:77:78: 44:6e:c0:61:10:4a:93:41:99:d8:5e:cc:80:6e:79: ff:ad:13:8a:0a:a5:3d:74:4d:1e:36:1c:78:a7:69: 9c:5b:60:a6:99:83:bb:33:6e:96:1c:e0:83:ed:f2: 38:71:67:cc:4d:5c:2b:f7:a4:a8:e9:97:dc:fd:ee: 4e:ea:51:41:fa:af:5f:75:e8:45:7d:a7:8c:bf:30: e3:d2:c1:24:bc:27:11:f9:f7:7f:74:79:53:40:36: 70:36:7c:0c:81:41:81:4e:56:a6:cd:18:01:33:f6: 63:e2:e2:53:b5:36:84:75:69:0e:cf:a4:99:98:0a: 0a:ed:77:d2:f6:fc:d2:f3:b9:35:c1:65:56:ed:00: 27:91:97:10:de:7a:f0:ed:10:7b:bb:2d:e1:48:00: 2f:ef:4d:26:21:2a:97:e0:77:28:dd:02:33:44:f5: 65:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C9:0C:74:10:1E:22:31:56:20:20:F2:FD:A2:68:BE:B7:44:E5:06 X509v3 Authority Key Identifier: keyid:E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:87:5f:4b:31:5b:08:bb:d5:d3:9b:e2:0a:f3:b7:ae:d9:1f: 27:72:f5:5b:22:94:81:83:54:c9:d5:4f:9d:2f:46:02:e1:a8: c0:47:b0:8b:61:22:91:4e:bf:03:b2:2b:c1:08:f6:7e:d0:90: 80:1f:1c:32:41:96:99:88:f4:d6:fe:b4:dc:1d:e1:73:1f:24: 85:f3:d0:0d:cb:f1:10:fd:df:80:5c:66:fe:0c:9d:98:b9:e6: f4:ff:1c:c8:60:fa:e9:89:a0:46:76:b7:07:e9:4b:dd:a3:91: 47:3d:4f:5e:f0:5e:f8:c3:7d:ea:2f:2d:45:6f:93:e7:1d:5f: 30:35:83:73:5a:bd:86:ba:8f:76:81:fb:24:4a:98:5d:a6:39: fa:b7:dd:fd:cd:85:6e:bb:ba:0b:ae:16:8b:0a:16:e2:2b:d7: 64:8e:60:24:b5:75:b7:ec:0a:62:52:5a:6f:d0:b1:0d:ea:5c: 9a:e4:b9:97:56:78:81:2d:3d:bf:0b:f0:c0:b7:49:3e:34:8c: 7d:25:98:79:44:c9:87:d1:22:92:fd:61:77:74:87:c6:d9:56: 88:f3:28:b7:ea:7f:6c:f4:0b:4a:38:b8:51:c0:48:24:85:ab: 9f:a0:63:39:a8:47:ec:a5:e5:7a:d2:18:ae:32:20:5b:be:50: fd:c9:5c:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE0ODYxMTAvBgNVBAUTKEU3NzZBNzMzNkY4RjY3ODVBMzZBMDEwNDY4NDBCNTE0 QTBENDE5MjkwHhcNMjUwOTE2MTgzMzA3WhcNMjUwOTIzMTgzMzA3WjAYMRYwFAYD VQQDEw02OGM5YWQ2NC1hNDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0Rxg42An71Y/JKzZdhnZZTGe0Gv5JRQtDMhE5yATLpCUrXr5R75WDbhiXSt AXWmowd1otK9HLAApCSs/CFhOrvpTMpthMqYouiW7oTBYipi74Q2kguwd3hEbsBh EEqTQZnYXsyAbnn/rROKCqU9dE0eNhx4p2mcW2CmmYO7M26WHOCD7fI4cWfMTVwr 96So6Zfc/e5O6lFB+q9fdehFfaeMvzDj0sEkvCcR+fd/dHlTQDZwNnwMgUGBTlam zRgBM/Zj4uJTtTaEdWkOz6SZmAoK7XfS9vzS87k1wWVW7QAnkZcQ3nrw7RB7uy3h SAAv700mISqX4Hco3QIzRPVlGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3JDHQQ HiIxViAg8v2iaL63ROUGMB8GA1UdIwQYMBaAFOd2pzNvj2eFo2oBBGhAtRSg1Bkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ4Ni8wNkM0QjJGRTA2 QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0V2phZ0VFYUVDMUZLRFVH U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzYW5NMi1QWjRXamFnRUVhRUMxRktEVUdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTQ4Ni8wNkM0QjJGRTA2QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0 V2phZ0VFYUVDMUZLRFVHU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOh19LMVsIu9XTm+IK87eu2R8ncvVbIpSBg1TJ1U+dL0YC4ajAR7CL YSKRTr8DsivBCPZ+0JCAHxwyQZaZiPTW/rTcHeFzHySF89ANy/EQ/d+AXGb+DJ2Y ueb0/xzIYPrpiaBGdrcH6Uvdo5FHPU9e8F74w33qLy1Fb5PnHV8wNYNzWr2Guo92 gfskSphdpjn6t939zYVuu7oLrhaLChbiK9dkjmAktXW37ApiUlpv0LEN6lya5LmX VniBLT2/C/DAt0k+NIx9JZh5RMmH0SKS/WF3dIfG2VaI8yi36n9s9AtKOLhRwEgk haufoGM5qEfspeV60hiuMiBbvlD9yVyi -----END CERTIFICATE-----Generated at Thu Sep 18 19:06:11 2025 by rpki-client