$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json) Hash identifier: 7vUC7rh7l1rgtThJAEv+fTgnHws7dUZz6+hTdz2vNdA= Subject key identifier: E9:C9:8E:1E:E3:CD:1A:DE:18:E8:17:70:D1:DC:E4:6A:49:13:68:F5 Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft Manifest number: 4A Signing time: Wed 17 Sep 2025 08:06:59 +0000 Manifest this update: Wed 17 Sep 2025 08:06:58 +0000 Manifest next update: Wed 24 Sep 2025 08:06:58 +0000 Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: V30W9fBEZIETLYraph06acmBFRgD6xSR0we5kfPepGM=) 2: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: xeAIE2lZn+YXNt0L7vlDN0DVHrs7CNulexHVxcXbegs=) 3: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: 1L8lUrtPjTnoEjcERsj866aTFLWQJPYnWRL13TGRub4=) 4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: Pfe2htQw7FQ69zCdUGOvP9JJR+bvYFVzLzCF/2HMviU=) 5: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: 5FSb2Jsk8vMB09hl36LtVE9KBpWP+PzKRBhhPkFdcWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Validity Not Before: Sep 17 08:06:58 2025 GMT Not After : Sep 24 08:06:58 2025 GMT Subject: CN=68ca6c23-6fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:82:e6:12:00:f2:25:40:57:5d:79:ee:5b: 83:9c:cc:d9:ee:a9:da:d5:c8:4c:15:2a:e2:d5:6f: 5b:81:05:fd:ed:5a:3b:94:4c:58:e4:ea:e1:bf:c7: 31:07:89:b2:58:ff:56:68:be:44:e3:f9:c7:11:2c: 34:5a:29:74:01:db:8a:90:d4:59:3b:ab:44:1c:2f: b7:a3:86:bb:1a:cf:5c:80:dd:a6:96:92:68:81:c9: 94:f0:d8:93:9c:b6:b1:21:cb:7e:69:8c:9e:bb:3a: bc:b3:82:3c:ec:b0:94:ee:66:e2:9e:28:9b:51:58: 58:3c:c1:eb:a1:6d:25:c4:8d:e1:f6:09:1a:10:d3: dc:8e:13:89:5d:b4:33:2c:6a:8b:a0:63:97:65:bc: 63:b8:ab:04:06:13:40:08:7b:17:2f:56:a2:01:05: fe:9c:f8:99:f2:43:c2:92:5c:d6:77:8d:7d:4f:36: a0:09:9e:83:7e:39:da:4e:02:78:24:1e:ae:48:4e: 64:68:92:04:2b:0e:e9:f3:ea:f9:49:bd:4b:08:7b: 25:b2:03:2a:e5:37:59:dd:b8:e2:b1:0c:98:28:a0: c0:42:1c:08:18:64:5d:5e:dc:32:35:67:a1:50:9b: e6:8a:a2:2e:96:0d:a2:67:53:7a:84:5e:db:64:6c: 7d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C9:8E:1E:E3:CD:1A:DE:18:E8:17:70:D1:DC:E4:6A:49:13:68:F5 X509v3 Authority Key Identifier: keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:63:0d:03:e4:ad:e0:d0:8e:b6:b7:2d:5e:27:1b:18:8e:21: c4:f4:72:d0:1a:4f:d9:ec:e4:05:8a:44:de:24:a4:21:79:dd: 00:81:cd:a5:4d:d9:18:d0:c3:6c:fa:9b:06:b5:fb:28:20:22: 40:05:9d:9f:3d:fd:b8:fb:fd:73:30:87:b2:b7:ea:89:5b:77: 42:36:09:5b:00:6c:d5:fe:21:bb:4d:ec:23:9a:14:96:ac:64: f3:f0:28:4c:b9:8c:d7:11:4c:1c:88:8e:9b:51:19:d9:d4:06: dd:0a:3a:55:c6:c1:53:bf:4d:36:4d:b5:e3:6a:18:ad:c8:78: 75:df:fd:07:9a:6c:4b:bb:24:b0:d7:7d:d8:60:20:3e:af:3c: d1:17:bf:6b:64:16:6b:aa:70:9b:44:cb:b2:ae:3b:ee:da:8a: d9:2a:22:b7:f9:8f:cd:64:96:41:37:02:f3:11:63:da:83:d8: 7e:a4:1f:39:ee:10:0d:9d:1b:75:23:65:ab:8d:c2:4a:8e:15: 41:91:d1:0d:96:d7:45:96:de:c2:d8:4b:10:8a:5f:1b:b6:1d: d9:cf:0e:9d:6a:43:c4:84:f2:42:4e:b7:1a:6b:da:18:ba:67: e8:38:42:23:07:e9:ef:5d:1b:8a:a8:f2:97:75:75:d3:ec:e4: c5:da:c6:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0E3NTExMC8GA1UEBRMoOTdBQ0RERTI5MTFBMDlGMzkzNUYxODYwREIwNTdENENG RjQ2QjJDNTAeFw0yNTA5MTcwODA2NThaFw0yNTA5MjQwODA2NThaMBgxFjAUBgNV BAMTDTY4Y2E2YzIzLTZmZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6HoLmEgDyJUBXXXnuW4OczNnuqdrVyEwVKuLVb1uBBf3tWjuUTFjk6uG/xzEH ibJY/1ZovkTj+ccRLDRaKXQB24qQ1Fk7q0QcL7ejhrsaz1yA3aaWkmiByZTw2JOc trEhy35pjJ67OryzgjzssJTuZuKeKJtRWFg8weuhbSXEjeH2CRoQ09yOE4ldtDMs aougY5dlvGO4qwQGE0AIexcvVqIBBf6c+JnyQ8KSXNZ3jX1PNqAJnoN+OdpOAngk Hq5ITmRokgQrDunz6vlJvUsIeyWyAyrlN1nduOKxDJgooMBCHAgYZF1e3DI1Z6FQ m+aKoi6WDaJnU3qEXttkbH3PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6cmOHuPN Gt4Y6Bdw0dzkakkTaPUwHwYDVR0jBBgwFoAUl6zd4pEaCfOTXxhg2wV9TP9GssUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3QTc1L0U2RjRCNkRBMjc1 MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3Nz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDZ6ZDRwRWFDZk9UWHhoZzJ3VjlUUDlHc3NVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 QTc1L0U2RjRCNkRBMjc1MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZP VFh4aGcyd1Y5VFA5R3NzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKNjDQPkreDQjra3LV4nGxiOIcT0ctAaT9ns5AWKRN4kpCF53QCBzaVN 2RjQw2z6mwa1+yggIkAFnZ89/bj7/XMwh7K36olbd0I2CVsAbNX+IbtN7COaFJas ZPPwKEy5jNcRTByIjptRGdnUBt0KOlXGwVO/TTZNteNqGK3IeHXf/QeabEu7JLDX fdhgID6vPNEXv2tkFmuqcJtEy7KuO+7aitkqIrf5j81klkE3AvMRY9qD2H6kHznu EA2dG3UjZauNwkqOFUGR0Q2W10WW3sLYSxCKXxu2HdnPDp1qQ8SE8kJOtxpr2hi6 Z+g4QiMH6e9dG4qo8pd1ddPs5MXaxnc= -----END CERTIFICATE-----Generated at Thu Sep 18 20:47:03 2025 by rpki-client