$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json) Hash identifier: 5zWwTzYUw2tW9ok03k5k0krgFtqEsYiAei2I7A9sgqU= Subject key identifier: 89:CD:63:1A:46:41:7D:9E:3D:F2:03:56:33:E1:52:C5:5C:C1:A3:91 Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Certificate serial: 0A34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft Manifest number: 0A11 Signing time: Thu 18 Sep 2025 20:03:20 +0000 Manifest this update: Thu 18 Sep 2025 20:03:19 +0000 Manifest next update: Thu 25 Sep 2025 20:03:19 +0000 Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: /yDj026KcXmU/h4RbMWZNb/ZJHYtIbe4e9562Jk0xl8=) 2: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: yfdf5Mv/GJ9tUDZNlDnmM6hHiINUq2OvlkNbS0rVles=) 3: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: qU5SgxuYfj9EbloGsgp5NlU+LGZow7QsAYGZSye/EIM=) 4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: PgZPVHxtNUmnyrhnnwVcg3kijll4dZA2GpurrS7x078=) 5: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: mCrr4AsBoN0UqBzrLZ/+kB+0BpCUxnU7wJAUdq4LZdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2612 (0xa34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Validity Not Before: Sep 18 20:03:19 2025 GMT Not After : Sep 25 20:03:19 2025 GMT Subject: CN=68cc6588-047c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:58:a6:3c:90:52:b6:5c:56:55:bb:ff:d2: d7:14:44:f8:ac:d1:8f:7c:4f:cb:8a:b1:35:e7:8c: 6f:17:08:45:48:ae:bd:14:da:af:75:f8:9f:bf:1a: ad:fc:c9:7b:61:cc:8a:61:dc:82:c2:bd:4c:f0:9c: 9d:24:fb:f6:9d:7d:20:27:92:04:2b:63:09:f9:af: 4c:aa:b9:59:0e:31:c0:16:61:27:7d:b9:47:18:5d: d3:0f:01:71:e9:15:05:8b:9b:56:58:04:9f:1b:b0: a1:03:f7:0b:dc:60:7c:f9:99:07:17:6c:e0:c0:ab: 38:26:0a:ec:77:3a:52:f4:17:3d:a2:ac:90:bf:bb: 67:d5:4c:91:c7:54:34:15:c0:17:2e:f9:6b:7f:e6: ff:f1:18:57:f9:4a:b1:1a:25:88:39:b5:92:51:18: 0b:7e:7a:13:36:2e:68:50:6a:dd:f6:a3:e8:49:ad: d2:44:fa:9a:38:16:72:fb:60:4b:fd:94:b7:2b:23: 7a:26:6b:71:a9:86:03:8e:d2:cf:a8:9b:1c:95:2a: 9f:52:8d:6b:bc:f3:3e:4c:29:77:c9:e5:9c:fc:7e: dd:1e:fe:6d:ee:9c:88:90:7a:16:d4:77:2c:ec:55: 36:1d:ea:a0:0e:88:7e:fd:4c:dd:35:51:5c:32:0b: 5d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CD:63:1A:46:41:7D:9E:3D:F2:03:56:33:E1:52:C5:5C:C1:A3:91 X509v3 Authority Key Identifier: keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:d3:9d:73:ac:8d:c3:eb:64:ed:7e:51:aa:69:e7:46:22:6f: 83:35:65:7f:46:a1:ea:ff:a8:9b:be:9a:34:75:7c:7c:e0:19: 4e:d9:d4:45:54:fe:45:1a:1c:a7:f4:f2:11:08:a1:ea:e6:d4: ea:bf:a8:5e:5a:c6:20:be:02:11:e3:89:03:f8:c9:80:83:a8: fb:62:0a:ba:98:0f:87:9c:54:b3:eb:55:52:b1:7e:a3:99:19: 80:68:16:1d:00:ff:87:b8:15:9f:1b:cd:59:b1:12:48:a5:9b: 70:48:5a:05:f5:32:e7:74:be:74:2d:35:72:3c:b5:38:ec:1e: b8:bd:e7:8b:8e:51:33:92:a6:7b:9d:d9:eb:1b:b2:48:c9:16: 0b:33:c2:6e:e8:0a:09:32:e7:85:43:1d:ab:36:fc:95:ce:be: 51:33:d6:44:a9:3b:d5:8f:8b:cf:2a:56:1f:45:18:ea:da:2e: bd:d4:9e:9e:33:d8:58:aa:1c:56:96:de:01:8f:be:f9:5f:ce: 7c:db:fd:7e:ce:07:c4:a0:3d:ce:4f:93:31:25:27:8a:e3:c5: 63:07:6e:3e:20:82:0f:bb:36:a3:01:45:d9:53:77:5b:9f:23: 51:24:a2:cd:af:26:b8:c3:31:56:d7:55:0e:28:60:8e:8a:b1: 44:2a:3d:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2 NTIwRjA4MDIwHhcNMjUwOTE4MjAwMzE5WhcNMjUwOTI1MjAwMzE5WjAYMRYwFAYD VQQDEw02OGNjNjU4OC0wNDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6FYpjyQUrZcVlW7/9LXFET4rNGPfE/LirE154xvFwhFSK69FNqvdfifvxqt /Ml7YcyKYdyCwr1M8JydJPv2nX0gJ5IEK2MJ+a9MqrlZDjHAFmEnfblHGF3TDwFx 6RUFi5tWWASfG7ChA/cL3GB8+ZkHF2zgwKs4JgrsdzpS9Bc9oqyQv7tn1UyRx1Q0 FcAXLvlrf+b/8RhX+UqxGiWIObWSURgLfnoTNi5oUGrd9qPoSa3SRPqaOBZy+2BL /ZS3KyN6JmtxqYYDjtLPqJsclSqfUo1rvPM+TCl3yeWc/H7dHv5t7pyIkHoW1Hcs 7FU2HeqgDoh+/UzdNVFcMgtduwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInNYxpG QX2ePfIDVjPhUsVcwaORMB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTU4MC9DN0NFMkUxMDdGOEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJC RTZ5QWU0U1RRS3hsSVBDQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh051zrI3D62TtflGqaedGIm+DNWV/RqHq/6ibvpo0dXx84BlO2dRF VP5FGhyn9PIRCKHq5tTqv6heWsYgvgIR44kD+MmAg6j7Ygq6mA+HnFSz61VSsX6j mRmAaBYdAP+HuBWfG81ZsRJIpZtwSFoF9TLndL50LTVyPLU47B64veeLjlEzkqZ7 ndnrG7JIyRYLM8Ju6AoJMueFQx2rNvyVzr5RM9ZEqTvVj4vPKlYfRRjq2i691J6e M9hYqhxWlt4Bj775X8582/1+zgfEoD3OT5MxJSeK48VjB24+IIIPuzajAUXZU3db nyNRJKLNrya4wzFW11UOKGCOirFEKj2G -----END CERTIFICATE-----Generated at Fri Sep 19 00:34:38 2025 by rpki-client