$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json) Hash identifier: hnp5X7Y9RxOL6eYJdjnJffMnkIQ70BSqhejDFaizBi8= Subject key identifier: E8:0D:09:0F:69:33:69:D7:9E:5B:A1:8D:41:9A:4B:E3:16:24:57:39 Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft Manifest number: 045F Signing time: Wed 17 Sep 2025 00:40:38 +0000 Manifest this update: Wed 17 Sep 2025 00:40:38 +0000 Manifest next update: Wed 24 Sep 2025 00:40:38 +0000 Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: dvjkfCctq1NEr1jHsQwrhwCYt/oW36deOV+Yc5SJCWU=) 2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: c6vlUnQWxWwAT8iWt17JqzfF6ipPIApaxLVylf4FJGg=) 3: BC148566D22B11EE9443A443C4F9AE02.roa (hash: +f0SgnVqjTGf0Ix6OCOZmxBPZxff4HtF7xpjcxcn/GE=) 4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: kTJ8czPgPRYvRUYRTSuFaRzwT5mPZmvDIQm8YSYeRGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Validity Not Before: Sep 17 00:40:38 2025 GMT Not After : Sep 24 00:40:38 2025 GMT Subject: CN=68ca0386-73e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:f9:07:d7:be:d1:a7:ab:d4:b2:c9:40:52: 20:49:d1:40:25:8a:a6:aa:f4:db:ed:6b:71:b5:82: 62:e8:1f:f5:66:16:16:2d:c0:99:92:0e:d0:c9:9b: b6:1e:34:db:2d:94:c2:b8:0a:aa:ef:f7:53:b8:0e: 37:50:1e:aa:7a:66:8c:2d:19:86:10:f3:2f:dc:2c: 59:34:47:3a:02:4a:89:08:b1:21:f5:c2:93:a3:9e: 61:4a:49:9c:6e:23:0f:c7:d5:a6:98:b4:d4:80:ae: 61:1f:61:10:56:63:6f:be:75:ab:fe:94:4c:40:24: e2:2f:b4:ef:73:e4:da:8f:b3:e7:ff:eb:11:ea:b9: 90:19:8d:0f:94:91:8d:51:7d:16:18:75:a6:f2:93: f0:f9:8c:fd:ca:b3:5f:72:eb:02:8f:69:ef:8f:d9: 91:26:d3:34:26:31:27:0f:5f:01:03:5d:13:47:64: 2c:95:b0:44:12:8c:35:fd:b0:8d:b7:b4:a0:d0:fe: 16:b5:56:88:84:98:e4:af:a3:6d:e2:e3:2e:82:b4: 5f:74:69:4e:bd:b2:b8:ba:02:5c:ac:e3:1f:d0:f8: 6e:13:01:8d:8f:40:aa:14:af:10:9a:bb:67:4d:23: 06:ec:aa:5f:80:d4:ee:a4:8b:7f:34:d6:51:ee:2b: 98:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0D:09:0F:69:33:69:D7:9E:5B:A1:8D:41:9A:4B:E3:16:24:57:39 X509v3 Authority Key Identifier: keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:7d:a0:74:f5:be:be:b0:cb:61:f9:da:2e:41:07:aa:29:b3: 0a:e4:95:b4:2a:39:1f:68:d7:10:02:36:82:9a:cf:ef:b6:f2: d1:c3:80:d6:1a:06:74:41:da:15:5c:ab:69:42:7c:9d:d9:08: 7d:8a:61:b6:67:cf:4c:22:0c:a3:a8:c7:a6:4f:58:28:e1:b9: d6:ff:d5:54:ff:ae:11:e8:2f:ba:90:4e:e9:e2:37:6c:65:a0: db:78:e1:57:66:f6:e6:a8:79:25:92:12:76:29:17:74:52:64: 0a:ee:79:d2:c7:6d:00:54:e8:95:53:88:57:86:a7:8e:6c:26: f4:20:2d:f9:51:ac:5b:e0:be:41:ea:e7:4a:21:91:6a:f9:67: 6c:68:1b:d6:1f:3d:19:2a:86:2d:ce:c0:c7:7d:40:d8:73:2d: e6:f8:e1:12:14:65:18:d8:25:15:3e:6f:ad:ea:1e:59:9e:6a: a5:4f:e2:7b:08:be:e6:58:04:85:ce:13:c0:b6:99:98:12:28: 0a:73:89:01:95:87:ea:32:70:57:d7:29:51:70:34:78:61:dd: ce:03:a4:00:e8:83:c3:28:34:41:c9:8b:90:8f:02:73:61:b7: 9a:d2:18:99:ef:7d:d1:98:fb:27:61:59:7f:62:75:22:19:0b: 20:fb:d7:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy NkZERjdBMTMwHhcNMjUwOTE3MDA0MDM4WhcNMjUwOTI0MDA0MDM4WjAYMRYwFAYD VQQDEw02OGNhMDM4Ni03M2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwI75B9e+0aer1LLJQFIgSdFAJYqmqvTb7WtxtYJi6B/1ZhYWLcCZkg7QyZu2 HjTbLZTCuAqq7/dTuA43UB6qemaMLRmGEPMv3CxZNEc6AkqJCLEh9cKTo55hSkmc biMPx9WmmLTUgK5hH2EQVmNvvnWr/pRMQCTiL7Tvc+Taj7Pn/+sR6rmQGY0PlJGN UX0WGHWm8pPw+Yz9yrNfcusCj2nvj9mRJtM0JjEnD18BA10TR2QslbBEEow1/bCN t7Sg0P4WtVaIhJjkr6Nt4uMugrRfdGlOvbK4ugJcrOMf0PhuEwGNj0CqFK8Qmrtn TSMG7KpfgNTupIt/NNZR7iuYrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgNCQ9p M2nXnluhjUGaS+MWJFc5MB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUFGNS9FOTlGNTIzQTZFQzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0 YVRUbVB0YUlmVWNtX2ZlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXfaB09b6+sMth+douQQeqKbMK5JW0KjkfaNcQAjaCms/vtvLRw4DW GgZ0QdoVXKtpQnyd2Qh9imG2Z89MIgyjqMemT1go4bnW/9VU/64R6C+6kE7p4jds ZaDbeOFXZvbmqHklkhJ2KRd0UmQK7nnSx20AVOiVU4hXhqeObCb0IC35Uaxb4L5B 6udKIZFq+WdsaBvWHz0ZKoYtzsDHfUDYcy3m+OESFGUY2CUVPm+t6h5ZnmqlT+J7 CL7mWASFzhPAtpmYEigKc4kBlYfqMnBX1ylRcDR4Yd3OA6QA6IPDKDRByYuQjwJz Ybea0hiZ733RmPsnYVl/YnUiGQsg+9cr -----END CERTIFICATE-----Generated at Thu Sep 18 23:46:15 2025 by rpki-client