$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft File: fNlYoAf08OVuSo0kV2aIYiurciE.mft (raw, json) Hash identifier: dde8hcV3PR9qvcTB1zWF7/pKb32Tx8I3sZc0ErFK3Ig= Subject key identifier: 7D:9E:74:D1:55:24:D1:3B:C4:35:0B:80:54:37:D3:DB:D8:33:A8:E6 Authority key identifier: 7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21 Certificate issuer: /CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft Manifest number: 015F Signing time: Wed 17 Sep 2025 04:39:53 +0000 Manifest this update: Wed 17 Sep 2025 04:39:52 +0000 Manifest next update: Wed 24 Sep 2025 04:39:52 +0000 Files and hashes: 1: fNlYoAf08OVuSo0kV2aIYiurciE.crl (hash: LnV43fPzikR+jT+hfva7P/Lz6uUPME0LMixCOKqfotU=) 2: CEA08B0A7B7411F0B30B5E4FC4F9AE02.roa (hash: ql4+ww0zhpLAZ6qhF7JKNz35W7z0OdqH31PA5z7n2aM=) 3: 289652667B7511F0A2592A6EC4F9AE02.roa (hash: MIG5ytjBmWgfoVPKlrbWqCYL4yCWtxcV0jRXlzp0+A0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8AF2, serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221 Validity Not Before: Sep 17 04:39:52 2025 GMT Not After : Sep 24 04:39:52 2025 GMT Subject: CN=68ca3b98-18b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:fa:a9:8c:1f:6d:36:91:0d:81:38:09:eb: 3a:57:cd:b5:23:da:66:29:f5:5b:e3:a8:42:fe:64: c6:7e:50:c8:85:57:b6:d1:b8:aa:b7:89:b5:3a:48: e1:50:50:85:8e:66:26:ef:4d:ad:d5:b6:ee:e5:1e: ba:5a:a0:68:a1:d6:c5:4b:c7:42:b5:08:03:9c:89: d0:c1:31:6a:3c:2a:42:c7:e7:77:41:ae:d7:b3:14: 0d:87:46:c6:4c:52:6d:79:34:1b:0d:e8:f5:c7:a5: 18:2b:69:ef:9e:95:00:84:f6:d3:11:86:f4:94:d0: 1b:fe:d6:b8:00:90:33:31:05:86:3f:3f:76:ba:44: 21:46:82:83:10:74:a4:0c:4a:cc:61:ac:8b:85:f8: 81:41:bc:ff:be:f6:a2:f4:74:78:b0:b3:dd:10:b5: 7f:ef:d9:f4:1a:c6:ec:00:2e:02:9b:b8:8c:33:ef: f4:6d:c4:57:d4:56:ba:9a:33:d8:b4:4c:fb:93:1b: 1a:54:9c:2e:81:9d:88:59:d0:31:7a:80:7e:34:7b: c1:fe:01:aa:e8:44:f0:e2:3a:49:f6:96:34:e5:71: b5:dd:5e:9b:a2:b8:74:2c:3c:81:a2:d4:9a:ed:e3: 64:7a:f5:4a:21:b4:cd:18:ce:6a:b3:7c:6a:2f:d3: 64:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9E:74:D1:55:24:D1:3B:C4:35:0B:80:54:37:D3:DB:D8:33:A8:E6 X509v3 Authority Key Identifier: keyid:7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5c:c7:9c:ff:5d:71:a7:65:ea:97:22:2e:32:e9:27:42:8c: a9:19:af:c8:9b:8b:01:2b:6c:fa:87:d3:1e:36:ff:38:b9:e1: d6:23:a7:f9:90:86:c6:12:a1:94:5b:e7:55:bc:3b:0f:2d:12: 34:91:99:e6:3c:e3:1f:a7:08:f1:95:da:58:53:78:be:10:8c: 3c:d6:4e:e3:f2:e7:06:95:44:0a:5c:18:c2:35:52:af:39:7a: 1a:b9:5e:ef:69:9e:8a:e6:58:19:9b:3a:5d:13:4f:ce:9e:1b: 92:1a:f7:8a:f6:74:5a:ee:80:50:09:14:76:84:35:1b:1d:17: 74:02:53:ba:1d:da:34:7e:27:14:f6:a9:34:72:0d:15:2e:8f: ec:52:38:11:82:36:3a:29:dd:de:d7:4d:f4:b8:1a:41:00:3e: 11:e2:f9:f1:49:e2:2f:5d:27:6a:b5:b3:4f:5b:07:34:3c:ca: 0f:ef:89:19:9c:7e:ec:49:ee:39:ff:95:23:fd:a1:87:bc:c4: d6:4f:f5:4d:96:72:76:16:2a:81:55:35:39:db:c2:2b:56:7d: b9:c9:1e:9f:c8:05:ec:86:d4:67:d2:1b:c6:9a:b1:99:ab:cd: d1:a8:44:2d:4f:3d:94:05:46:be:47:42:37:28:1b:78:8e:e8: fc:ba:a3:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThBRjIxMTAvBgNVBAUTKDdDRDk1OEEwMDdGNEYwRTU2RTRBOEQyNDU3NjY4ODYy MkJBQjcyMjEwHhcNMjUwOTE3MDQzOTUyWhcNMjUwOTI0MDQzOTUyWjAYMRYwFAYD VQQDEw02OGNhM2I5OC0xOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhv6qYwfbTaRDYE4Ces6V821I9pmKfVb46hC/mTGflDIhVe20biqt4m1Okjh UFCFjmYm702t1bbu5R66WqBoodbFS8dCtQgDnInQwTFqPCpCx+d3Qa7XsxQNh0bG TFJteTQbDej1x6UYK2nvnpUAhPbTEYb0lNAb/ta4AJAzMQWGPz92ukQhRoKDEHSk DErMYayLhfiBQbz/vvai9HR4sLPdELV/79n0GsbsAC4Cm7iMM+/0bcRX1Fa6mjPY tEz7kxsaVJwugZ2IWdAxeoB+NHvB/gGq6ETw4jpJ9pY05XG13V6borh0LDyBotSa 7eNkevVKIbTNGM5qs3xqL9NkCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2edNFV JNE7xDULgFQ309vYM6jmMB8GA1UdIwQYMBaAFHzZWKAH9PDlbkqNJFdmiGIrq3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEFGMi81NzMyQzgzODg0 NEMxMUVFQjFGMkNBMjlDNEY5QUUwMi9mTmxZb0FmMDhPVnVTbzBrVjJhSVlpdXJj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZObFlvQWYwOE9WdVNvMGtWMmFJWWl1cmNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEFGMi81NzMyQzgzODg0NEMxMUVFQjFGMkNBMjlDNEY5QUUwMi9mTmxZb0FmMDhP VnVTbzBrVjJhSVlpdXJjaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMXMec/11xp2XqlyIuMuknQoypGa/Im4sBK2z6h9MeNv84ueHWI6f5 kIbGEqGUW+dVvDsPLRI0kZnmPOMfpwjxldpYU3i+EIw81k7j8ucGlUQKXBjCNVKv OXoauV7vaZ6K5lgZmzpdE0/OnhuSGveK9nRa7oBQCRR2hDUbHRd0AlO6Hdo0ficU 9qk0cg0VLo/sUjgRgjY6Kd3e1030uBpBAD4R4vnxSeIvXSdqtbNPWwc0PMoP74kZ nH7sSe45/5Uj/aGHvMTWT/VNlnJ2FiqBVTU528IrVn25yR6fyAXshtRn0hvGmrGZ q83RqEQtTz2UBUa+R0I3KBt4juj8uqOQ -----END CERTIFICATE-----Generated at Fri Sep 19 04:04:40 2025 by rpki-client