$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: snD+/k0zrSCEywPLlp7PhhC+hDLu5wbUQ8buA0WcB6Q= Subject key identifier: B5:85:4F:8C:9E:D7:01:B2:B1:F0:C4:12:EA:34:B2:7F:48:66:33:11 Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 1933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 1927 Signing time: Thu 18 Sep 2025 16:33:42 +0000 Manifest this update: Thu 18 Sep 2025 16:33:41 +0000 Manifest next update: Thu 25 Sep 2025 16:33:41 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: 9Z9lwQhhJExmaKiLtWHOMCdBlScF+NbAlYCIWZeetsE=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: jwMU1HqTvqxMmK/7tE3BOcmdI4jJyKnBQ4irQO6dgGw=) 3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: x3Si4KMD2wvo6rCmh6bPANGnveohQUAF1yIi2AXTiDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6451 (0x1933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Sep 18 16:33:41 2025 GMT Not After : Sep 25 16:33:41 2025 GMT Subject: CN=68cc3466-d674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:43:2b:da:f6:e7:21:d7:f1:9c:fe:20:44:bf: 5d:26:01:c3:79:b7:4f:7a:05:8e:d1:78:df:6f:24: f9:e7:02:d0:26:90:1c:06:f4:39:9f:15:d1:f6:99: a8:0d:b3:5d:e3:11:24:9d:30:56:48:d5:55:7e:6c: 4a:a9:7f:9c:1d:61:00:fe:a4:fc:10:49:9f:58:2f: 27:ac:77:62:31:0d:9b:d6:8d:d9:a8:da:09:b1:13: cd:d0:4c:2d:84:b9:aa:23:ea:12:ae:4a:8e:3e:8f: 7b:fd:25:62:95:b7:87:5c:6a:bd:5c:a3:e7:f0:d1: 36:f3:dc:89:09:72:30:19:5d:cd:5f:c0:50:0c:76: bb:a6:29:8a:ab:2f:4f:bb:f2:8a:82:08:8a:e1:26: 4e:6d:df:03:f0:1c:bc:75:a5:ea:ee:ab:c2:11:6c: e8:eb:99:06:a2:64:ac:1e:10:22:5c:a0:12:1f:7e: 86:b5:21:7f:28:73:b1:08:14:32:e5:87:8b:53:b9: 73:7c:f8:20:42:a2:70:48:c2:45:c5:3c:d4:20:c6: 51:06:aa:79:80:63:f8:f4:25:64:97:8e:29:17:d2: 1d:e4:e8:09:95:b5:c5:03:9a:44:00:6a:d0:03:02: be:04:6e:49:a6:4a:f7:a4:eb:1e:a9:d0:40:b2:83: e0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:85:4F:8C:9E:D7:01:B2:B1:F0:C4:12:EA:34:B2:7F:48:66:33:11 X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:03:5a:42:2d:0f:5b:3a:33:fb:81:e6:96:0d:ff:bb:65:1d: f5:b8:d9:4c:57:19:80:2f:5c:58:ec:3c:1d:57:51:83:c0:7c: 3b:e1:94:52:74:6a:85:cd:42:b8:33:9e:39:3e:37:10:92:9a: f1:08:91:9f:d4:05:a8:60:f9:dd:4f:a5:47:b3:af:1e:d3:26: f3:e9:dd:ce:9e:a0:87:3d:3e:be:79:e3:e1:83:29:a4:f6:7c: 09:42:5e:9f:e3:61:32:0f:8d:94:8e:e5:37:9b:2b:2d:7b:04: b1:34:dd:c3:9e:c3:4c:fe:ef:8b:c8:db:97:94:1c:c2:8a:1e: b0:26:cc:8e:fc:46:4b:6c:90:9d:91:13:21:df:2b:18:5b:5e: 50:85:65:ca:7a:56:35:b4:72:1c:71:57:00:ed:1d:08:84:5d: e9:c1:65:68:e7:e1:d0:4c:42:4b:04:13:b9:fc:da:93:95:c1: f9:2e:35:c9:dd:54:be:12:eb:ff:2d:0d:c9:01:03:42:1e:60: 4b:ea:d9:7c:a6:f8:4c:a5:ba:88:0d:59:2d:6d:24:13:19:04: 52:db:33:30:08:2f:85:73:ee:0a:a6:fa:c8:a5:82:76:89:4c: 07:80:e3:e7:47:fb:74:a2:8f:c9:09:e2:b1:df:15:7f:53:75: 78:06:21:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjUwOTE4MTYzMzQxWhcNMjUwOTI1MTYzMzQxWjAYMRYwFAYD VQQDEw02OGNjMzQ2Ni1kNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+UMr2vbnIdfxnP4gRL9dJgHDebdPegWO0XjfbyT55wLQJpAcBvQ5nxXR9pmo DbNd4xEknTBWSNVVfmxKqX+cHWEA/qT8EEmfWC8nrHdiMQ2b1o3ZqNoJsRPN0Ewt hLmqI+oSrkqOPo97/SVilbeHXGq9XKPn8NE289yJCXIwGV3NX8BQDHa7pimKqy9P u/KKggiK4SZObd8D8By8daXq7qvCEWzo65kGomSsHhAiXKASH36GtSF/KHOxCBQy 5YeLU7lzfPggQqJwSMJFxTzUIMZRBqp5gGP49CVkl44pF9Id5OgJlbXFA5pEAGrQ AwK+BG5Jpkr3pOseqdBAsoPgtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWFT4ye 1wGysfDEEuo0sn9IZjMRMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIA1pCLQ9bOjP7geaWDf+7ZR31uNlMVxmAL1xY7DwdV1GDwHw74ZRS dGqFzUK4M545PjcQkprxCJGf1AWoYPndT6VHs68e0ybz6d3OnqCHPT6+eePhgymk 9nwJQl6f42EyD42UjuU3mystewSxNN3DnsNM/u+LyNuXlBzCih6wJsyO/EZLbJCd kRMh3ysYW15QhWXKelY1tHIccVcA7R0IhF3pwWVo5+HQTEJLBBO5/NqTlcH5LjXJ 3VS+Euv/LQ3JAQNCHmBL6tl8pvhMpbqIDVktbSQTGQRS2zMwCC+Fc+4KpvrIpYJ2 iUwHgOPnR/t0oo/JCeKx3xV/U3V4BiFW -----END CERTIFICATE-----Generated at Fri Sep 19 02:32:05 2025 by rpki-client