$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json) Hash identifier: cOd0H+Y69ePRE+ZPUNuQhF7efvcKPeV69t+zyTQoYcs= Subject key identifier: 90:41:F5:7B:53:AB:7A:83:D1:C6:AB:BE:62:E2:28:87:C7:C2:5A:A2 Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA Certificate issuer: /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft Manifest number: 064E Signing time: Mon 08 Sep 2025 22:40:54 +0000 Manifest this update: Mon 08 Sep 2025 22:40:53 +0000 Manifest next update: Mon 15 Sep 2025 22:40:53 +0000 Files and hashes: 1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: xiEf+EsTLKQ5vzXdH/0UQk96raapUwN/zQQUax4ky0M=) 2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: vwAWNkOECPjjWatP7CXVkY05vRy7dP/taTedzApQJgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E473F, serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Validity Not Before: Sep 8 22:40:53 2025 GMT Not After : Sep 15 22:40:53 2025 GMT Subject: CN=68bf5b76-0511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:1d:4e:c7:1b:4d:3c:08:06:c3:11:ef:4f: aa:1c:3a:a7:3d:8b:89:b0:5c:1d:29:6f:8a:6f:ec: bd:a2:34:13:e4:86:17:a1:82:ff:9d:73:04:34:03: a1:43:dd:c1:d7:bf:09:0a:c7:3a:a1:d7:f4:73:98: cc:6e:9c:8d:bf:4c:6c:a1:13:f3:eb:55:5d:a1:51: cb:6c:fe:2d:53:3d:a3:ce:5b:2a:4a:cf:84:4e:a7: 5e:bd:ab:10:9b:2f:53:05:95:43:31:80:2a:e4:f2: 3f:74:63:fe:77:95:95:e7:81:5f:50:69:4d:98:ed: 1c:f3:ad:cb:d3:a5:7e:d3:e4:83:01:81:d4:3f:75: 28:16:a5:60:7e:b7:54:4f:a4:1d:28:c6:83:b7:f7: 6d:9c:ad:78:2c:44:8b:f5:de:de:b7:da:84:84:7d: 4a:be:cf:0f:03:92:bf:97:10:a5:4a:63:00:61:18: c1:1d:4d:f1:3a:0b:20:b1:76:e6:c8:98:41:03:b2: db:8f:e5:10:00:a0:ab:aa:2c:ad:79:83:04:64:0a: e7:f3:a3:fd:b6:d3:79:bb:82:7a:6d:97:ad:b4:90: c6:3e:b7:99:df:2a:8c:98:10:53:fc:32:59:10:8a: 69:38:92:3c:80:45:64:af:bd:74:9f:89:7c:3a:ec: 18:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:41:F5:7B:53:AB:7A:83:D1:C6:AB:BE:62:E2:28:87:C7:C2:5A:A2 X509v3 Authority Key Identifier: keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:14:0f:26:3d:0b:63:e1:f3:70:3c:e8:a4:ef:0a:e2:16:4d: 6f:2c:cd:2e:7d:25:11:af:4c:ee:05:e4:77:b1:27:b3:dd:95: 77:73:fc:bc:c8:78:7a:cf:43:bc:ca:22:88:8c:72:ca:00:a7: 6d:b8:f9:f5:7b:2b:4b:0f:e7:ef:6b:72:48:30:cc:15:59:ad: af:96:3e:34:2d:2b:74:07:73:c7:34:5d:f5:28:5a:e7:ee:2e: 11:de:a8:22:b9:bc:46:65:35:f1:bc:1c:2d:13:61:a5:14:cf: 00:57:7c:c4:e2:da:12:6e:0b:c9:74:dd:b4:28:d7:7b:24:c7: 46:97:70:32:4b:15:95:d3:1c:c6:89:cd:4f:e1:12:d2:3b:61: dd:1f:42:2b:6b:fc:f7:1c:69:a1:1e:1c:1d:10:57:7a:76:21: e3:15:81:a6:8a:55:e9:9e:16:40:39:0f:1e:e9:e6:58:bc:a7: d5:04:73:e4:18:42:a1:8d:7b:ff:d9:83:04:8f:14:5e:93:fa: 83:f2:b6:48:e7:b1:71:15:c5:ad:af:41:97:fc:58:37:70:c9: b9:74:3a:40:36:f2:aa:37:3e:9a:9a:8c:ce:55:27:7d:69:70: 5e:6b:f5:d4:34:34:c2:45:fa:29:eb:16:f3:83:93:9e:2e:45: e5:93:67:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3M0YxMTAvBgNVBAUTKDkzNDFGOUI3MEY3MTRGMTMxQzUyRTFGRTRCRTVFNUFC OEMyNkVCRUEwHhcNMjUwOTA4MjI0MDUzWhcNMjUwOTE1MjI0MDUzWjAYMRYwFAYD VQQDEw02OGJmNWI3Ni0wNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8UdTscbTTwIBsMR70+qHDqnPYuJsFwdKW+Kb+y9ojQT5IYXoYL/nXMENAOh Q93B178JCsc6odf0c5jMbpyNv0xsoRPz61VdoVHLbP4tUz2jzlsqSs+ETqdevasQ my9TBZVDMYAq5PI/dGP+d5WV54FfUGlNmO0c863L06V+0+SDAYHUP3UoFqVgfrdU T6QdKMaDt/dtnK14LESL9d7et9qEhH1Kvs8PA5K/lxClSmMAYRjBHU3xOgsgsXbm yJhBA7Lbj+UQAKCrqiyteYMEZArn86P9ttN5u4J6bZettJDGPreZ3yqMmBBT/DJZ EIppOJI8gEVkr710n4l8OuwY3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBB9XtT q3qD0carvmLiKIfHwlqiMB8GA1UdIwQYMBaAFJNB+bcPcU8THFLh/kvl5auMJuvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDczRi9ENkU1NDAzODlE QjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4TWNVdUgtUy1YbHE0d202 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swSDV0dzl4VHhNY1V1SC1TLVhscTR3bTYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDczRi9ENkU1NDAzODlEQjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4 TWNVdUgtUy1YbHE0d202LW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcFA8mPQtj4fNwPOik7wriFk1vLM0ufSURr0zuBeR3sSez3ZV3c/y8 yHh6z0O8yiKIjHLKAKdtuPn1eytLD+fva3JIMMwVWa2vlj40LSt0B3PHNF31KFrn 7i4R3qgiubxGZTXxvBwtE2GlFM8AV3zE4toSbgvJdN20KNd7JMdGl3AySxWV0xzG ic1P4RLSO2HdH0Ira/z3HGmhHhwdEFd6diHjFYGmilXpnhZAOQ8e6eZYvKfVBHPk GEKhjXv/2YMEjxRek/qD8rZI57FxFcWtr0GX/Fg3cMm5dDpANvKqNz6amozOVSd9 aXBea/XUNDTCRfop6xbzg5OeLkXlk2eh -----END CERTIFICATE-----Generated at Wed Sep 10 04:17:37 2025 by rpki-client