$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json) Hash identifier: 9GW6+IL9zty6BcIMvDHQth3i1LAI9EWscgf0Wf8mc+g= Subject key identifier: E5:5A:38:95:7A:8D:C6:DB:95:CB:F7:F3:AF:7B:13:8E:5C:63:C3:CF Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft Manifest number: 01E5 Signing time: Fri 19 Sep 2025 03:05:22 +0000 Manifest this update: Fri 19 Sep 2025 03:05:21 +0000 Manifest next update: Fri 26 Sep 2025 03:05:21 +0000 Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: yrIzQJWtF15nR3kabuAxs3WPkm1bNnQEM3x5Ap0RrIY=) 2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: O+pEwQE3iQIl6k8H64M8+4x6mQxagzl13MHt0furEwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Validity Not Before: Sep 19 03:05:21 2025 GMT Not After : Sep 26 03:05:21 2025 GMT Subject: CN=68ccc872-e45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e9:0b:87:45:b6:3c:fe:b8:c2:78:98:7e:30: cc:d0:db:42:f3:5d:f1:0a:4f:e6:96:82:71:06:2f: 94:b3:ae:fe:05:d1:92:b9:d5:c7:8c:0c:70:af:fa: 50:a0:5d:0c:5e:69:30:46:5e:f0:8c:94:12:f7:80: 0d:9d:11:f6:ae:65:7b:21:df:85:d5:cf:a7:ed:bd: 9f:a6:2d:6a:98:7a:21:38:e4:29:86:eb:ba:b8:7e: 5f:f6:84:05:f6:a4:5c:cc:ca:1c:e0:d2:6a:04:de: 0b:a7:29:20:8d:2d:ac:48:e6:44:e9:f4:38:30:e4: 96:f9:9f:a0:3e:7c:86:bc:c8:53:12:70:d7:18:92: 99:f6:a5:b5:7d:c1:b8:e5:61:72:fa:2b:2e:62:8f: 32:43:e8:85:73:e9:a5:87:42:f6:44:96:e0:2c:9a: 61:e5:ff:17:35:43:5a:5b:ec:d0:61:14:9e:03:91: 05:ad:c0:2a:4d:a4:36:8e:68:b1:dc:b4:d6:5b:a4: 82:e3:8c:0e:d7:4d:83:6d:f1:52:98:c5:7e:d9:66: e2:6a:ab:61:d3:a2:f8:b3:05:be:b4:e6:31:0a:86: 92:ba:df:db:34:0e:e0:9c:6d:56:eb:82:5b:ce:80: 1a:b3:94:a3:14:13:7b:7c:88:66:a1:08:42:f2:8f: 32:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5A:38:95:7A:8D:C6:DB:95:CB:F7:F3:AF:7B:13:8E:5C:63:C3:CF X509v3 Authority Key Identifier: keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:0f:6c:9b:4d:d7:a5:08:02:3a:9a:f3:0a:ce:18:91:c8:54: fb:fc:02:36:24:4a:15:97:80:5a:fe:c2:6d:67:22:31:3f:af: 87:9f:28:8a:c0:3f:9f:eb:69:c2:f8:d6:e4:a3:4f:ce:f7:fb: 58:bc:d8:0a:f7:06:8b:75:ae:aa:ae:81:ee:28:d6:bc:2d:7f: dd:2f:b1:36:fe:cf:1a:8e:4c:76:77:ef:98:e8:33:28:0b:6c: 6b:69:1e:62:8b:59:a3:08:1e:51:56:71:7e:a0:4e:84:70:f8: d2:08:f9:93:28:31:53:e0:45:8d:ec:30:66:8d:7a:2e:f9:e9: b8:f4:8f:59:61:bc:26:f7:df:92:ad:7a:74:b9:76:00:cf:1b: 09:07:6c:78:06:5b:e1:65:cc:ea:70:a4:21:a9:be:2a:3d:c5: 0d:09:dd:64:0d:42:b8:52:87:18:37:9b:99:22:cc:0a:16:98: 8c:85:c3:35:cb:07:cf:86:3c:59:75:3d:8a:6c:39:84:9d:9b: d6:5c:99:4c:45:f1:ce:b5:42:8c:c8:21:a0:4d:37:84:a8:34: 02:db:8e:ab:7a:1a:0c:25:d2:86:ad:95:e1:d6:1d:09:4c:3b: a3:36:64:4b:dd:80:82:4d:8c:be:ee:0f:a7:f6:8d:96:80:1f: ef:99:73:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QzYxMTAvBgNVBAUTKDcxNTQ2MDczQkQwOTI3RUJFQjg1MEYwNkRBNzZBNzI3 NjlFNzEzNkIwHhcNMjUwOTE5MDMwNTIxWhcNMjUwOTI2MDMwNTIxWjAYMRYwFAYD VQQDEw02OGNjYzg3Mi1lNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ekLh0W2PP64wniYfjDM0NtC813xCk/mloJxBi+Us67+BdGSudXHjAxwr/pQ oF0MXmkwRl7wjJQS94ANnRH2rmV7Id+F1c+n7b2fpi1qmHohOOQphuu6uH5f9oQF 9qRczMoc4NJqBN4LpykgjS2sSOZE6fQ4MOSW+Z+gPnyGvMhTEnDXGJKZ9qW1fcG4 5WFy+isuYo8yQ+iFc+mlh0L2RJbgLJph5f8XNUNaW+zQYRSeA5EFrcAqTaQ2jmix 3LTWW6SC44wO102DbfFSmMV+2Wbiaqth06L4swW+tOYxCoaSut/bNA7gnG1W64Jb zoAas5SjFBN7fIhmoQhC8o8yiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVaOJV6 jcbblcv38697E45cY8PPMB8GA1UdIwQYMBaAFHFUYHO9CSfr64UPBtp2pydp5xNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZDNi8yQ0FFQUQwNEIz M0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkotdnJoUThHMm5hbkoybm5F MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWUmdjNzBKSi12cmhROEcybmFuSjJubkUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZDNi8yQ0FFQUQwNEIzM0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkot dnJoUThHMm5hbkoybm5FMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUD2ybTdelCAI6mvMKzhiRyFT7/AI2JEoVl4Ba/sJtZyIxP6+HnyiK wD+f62nC+Nbko0/O9/tYvNgK9waLda6qroHuKNa8LX/dL7E2/s8ajkx2d++Y6DMo C2xraR5ii1mjCB5RVnF+oE6EcPjSCPmTKDFT4EWN7DBmjXou+em49I9ZYbwm99+S rXp0uXYAzxsJB2x4BlvhZczqcKQhqb4qPcUNCd1kDUK4UocYN5uZIswKFpiMhcM1 ywfPhjxZdT2KbDmEnZvWXJlMRfHOtUKMyCGgTTeEqDQC246rehoMJdKGrZXh1h0J TDujNmRL3YCCTYy+7g+n9o2WgB/vmXME -----END CERTIFICATE-----Generated at Fri Sep 19 13:58:07 2025 by rpki-client