$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json) Hash identifier: 7zxkLNjbgaZdmfL2lytBeBBm1J4UOw/7wpxXXIm22kQ= Subject key identifier: 11:C8:6E:1D:65:5D:00:E6:90:50:0F:B1:E4:F2:92:30:7B:60:D7:C3 Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 0673 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft Manifest number: 066B Signing time: Thu 18 Sep 2025 22:49:27 +0000 Manifest this update: Thu 18 Sep 2025 22:49:27 +0000 Manifest next update: Thu 25 Sep 2025 22:49:27 +0000 Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: r4EnNKJ9td/aVcYhQLMSzuZOVvRtnUK5mZZxPcNYQgs=) 2: 2CB68FE8943211F0B1116B74C4F9AE02.roa (hash: sRekyvpaHi1HRXeZ3u4w8tB8zhjPNZGcLgiz5ie3o8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1651 (0x673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: Sep 18 22:49:27 2025 GMT Not After : Sep 25 22:49:27 2025 GMT Subject: CN=68cc8c77-32cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e4:d5:af:bc:ca:62:26:5c:0b:36:ec:36:25: 72:3b:66:34:e1:8c:0e:09:53:44:49:4a:6d:65:6d: 35:9b:72:78:54:69:96:61:87:a4:5e:d1:d4:d5:d3: 5e:06:6c:71:3a:ba:70:1d:f7:1c:78:35:ac:fb:7b: 06:80:ab:b4:74:90:0a:f0:40:4b:2a:ef:61:f7:de: fd:01:22:4f:97:32:7c:8a:fb:62:3e:17:9d:41:c1: d3:e1:3f:cb:d1:fa:c7:d8:6a:1a:fa:7c:4d:ce:2d: ef:70:1a:2f:cb:d5:f9:45:c5:f9:0c:e2:4e:03:fa: d7:42:53:6c:c5:52:d5:66:20:97:25:18:25:4c:02: 55:95:5e:85:5e:c8:7a:b8:b7:4d:e0:82:78:b1:d3: a3:e2:3c:3e:f5:3a:b7:fa:11:4f:23:89:ea:72:39: 00:8e:59:39:e9:a4:f5:eb:80:63:f5:9d:0e:04:3f: 42:89:13:8b:9d:cd:da:0d:93:65:73:7c:f2:a2:57: 0f:24:84:43:2d:08:f5:ca:f9:ba:06:6c:a1:a8:28: 5a:74:f7:11:15:3d:94:bb:e9:cd:7e:af:89:a4:60: 06:bf:c2:81:04:26:ef:af:30:9f:7b:93:5f:b0:bd: e0:4d:37:76:95:41:30:07:25:58:a5:0a:a9:4e:19: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C8:6E:1D:65:5D:00:E6:90:50:0F:B1:E4:F2:92:30:7B:60:D7:C3 X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:18:00:25:2a:d4:cb:32:13:7a:a6:fc:93:30:22:88:2a:aa: 85:d2:23:b1:b5:35:6f:a6:88:8a:10:72:33:fd:14:54:5f:16: d2:9c:78:ab:38:ea:fa:49:33:dd:d1:b5:c8:e6:2a:2b:03:6a: 41:78:8d:a8:9c:84:ed:05:76:b9:c9:8e:62:6f:ee:40:88:d0: de:fd:ed:25:00:92:5e:cf:b5:37:61:a2:e6:0a:11:39:11:e1: 88:e2:0c:83:fd:74:2d:ff:b2:1c:dd:da:75:c8:45:53:dd:e6: 3b:33:4d:ca:43:ca:05:c0:c3:86:26:3c:c5:91:06:f5:ca:f8: b3:fd:16:60:bf:75:44:46:b9:04:64:69:24:ef:bc:58:6c:5d: 4a:1f:a0:41:60:05:c3:a8:91:10:46:f7:26:b6:fa:ba:2e:90: 83:63:92:0a:76:22:05:d7:c7:5f:8d:f3:26:f5:dc:3c:3e:cf: dd:9b:84:81:06:88:82:a8:76:06:5e:7f:02:ed:59:51:ba:98: 07:d3:52:f1:0e:88:36:33:21:c1:9f:7e:26:2e:73:df:58:0f: 6d:15:08:50:de:a9:05:34:38:1b:d4:e7:e4:fd:33:ff:04:c3: 99:dc:43:b5:f4:b1:e1:63:ec:e1:bb:93:06:a4:da:7b:df:d6: 91:e9:63:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjUwOTE4MjI0OTI3WhcNMjUwOTI1MjI0OTI3WjAYMRYwFAYD VQQDEw02OGNjOGM3Ny0zMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+TVr7zKYiZcCzbsNiVyO2Y04YwOCVNESUptZW01m3J4VGmWYYekXtHU1dNe BmxxOrpwHfcceDWs+3sGgKu0dJAK8EBLKu9h9979ASJPlzJ8ivtiPhedQcHT4T/L 0frH2Goa+nxNzi3vcBovy9X5RcX5DOJOA/rXQlNsxVLVZiCXJRglTAJVlV6FXsh6 uLdN4IJ4sdOj4jw+9Tq3+hFPI4nqcjkAjlk56aT164Bj9Z0OBD9CiROLnc3aDZNl c3zyolcPJIRDLQj1yvm6BmyhqChadPcRFT2Uu+nNfq+JpGAGv8KBBCbvrzCfe5Nf sL3gTTd2lUEwByVYpQqpThkRiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHIbh1l XQDmkFAPseTykjB7YNfDMB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVBOS9FNjQ2QkYxRTk2ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpM WFZKRTNncC1VNWRCLUlpaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSGAAlKtTLMhN6pvyTMCKIKqqF0iOxtTVvpoiKEHIz/RRUXxbSnHir OOr6STPd0bXI5iorA2pBeI2onITtBXa5yY5ib+5AiNDe/e0lAJJez7U3YaLmChE5 EeGI4gyD/XQt/7Ic3dp1yEVT3eY7M03KQ8oFwMOGJjzFkQb1yviz/RZgv3VERrkE ZGkk77xYbF1KH6BBYAXDqJEQRvcmtvq6LpCDY5IKdiIF18dfjfMm9dw8Ps/dm4SB BoiCqHYGXn8C7VlRupgH01LxDog2MyHBn34mLnPfWA9tFQhQ3qkFNDgb1Ofk/TP/ BMOZ3EO19LHhY+zhu5MGpNp739aR6WNq -----END CERTIFICATE-----Generated at Fri Sep 19 03:56:57 2025 by rpki-client