$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft File: CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json) Hash identifier: n7E9NmIlrgKocXsj/M0kA9e/9Wzl1AYfuZOLpbp4cn8= Subject key identifier: C5:49:6B:91:3A:6D:A9:25:86:2D:5D:1C:92:47:2D:E1:E9:0D:E1:14 Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5 Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft Manifest number: 0214 Signing time: Wed 17 Sep 2025 02:36:45 +0000 Manifest this update: Wed 17 Sep 2025 02:36:45 +0000 Manifest next update: Wed 24 Sep 2025 02:36:45 +0000 Files and hashes: 1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: FLcfp6SGMrfSmlTO/UoL3AeuOK3O5S9iwcOBOM/V8ok=) 2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: 8+VuZ7fIxTmaLVYpnHMJUk/ecoQHiqToC0QiVIOWMis=) 3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: UKZjo7nlv5xaEfM2Q5iGETEP+0bko/kMccsOgiKgCVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5 Validity Not Before: Sep 17 02:36:45 2025 GMT Not After : Sep 24 02:36:45 2025 GMT Subject: CN=68ca1ebd-a062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:df:d2:3e:1b:9f:51:86:6d:10:38:a7:b6: 83:f7:b8:de:37:20:7e:f4:6b:3c:cb:14:77:d6:1d: 6f:ca:fd:ce:02:34:2b:af:b7:c4:e2:ac:3f:8e:70: 53:fa:42:c6:8e:32:7f:07:ab:aa:3a:3a:c6:3b:1e: 08:b5:0a:1a:53:f9:b9:e7:6e:ba:c3:df:7a:5d:5e: 19:e3:9a:53:eb:f8:5a:c5:b1:5b:c5:71:54:61:e7: bf:99:74:d4:4b:ac:33:27:0e:db:eb:fd:ce:ff:71: a3:68:82:47:51:b1:c0:6f:01:8d:14:27:9c:85:39: 3b:66:9a:b7:7c:06:41:33:49:61:fb:e3:ba:6c:09: 01:42:34:7c:61:5c:84:75:74:09:d9:4a:6f:30:b1: 3b:2d:4a:77:3c:e3:b6:21:e7:ba:c0:20:a5:b3:60: ea:03:4e:9a:0c:50:dd:21:7c:76:4c:74:a9:e6:33: 7c:df:55:17:d4:bf:f4:db:33:8c:b0:c7:ef:41:33: cf:f5:0d:93:41:72:60:cc:b7:ff:16:f9:11:06:1a: f1:60:36:7f:b1:39:cd:79:24:68:9e:d3:68:5c:f8: 9c:96:13:5e:7a:e1:f7:2e:27:a5:69:70:81:57:e5: c2:a3:95:e8:d1:25:59:72:4a:11:a6:81:20:96:0b: 54:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:49:6B:91:3A:6D:A9:25:86:2D:5D:1C:92:47:2D:E1:E9:0D:E1:14 X509v3 Authority Key Identifier: keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:68:48:ae:92:07:10:37:99:bf:70:d3:b2:a8:54:a4:10:a5: cc:d2:33:fa:8f:34:8c:43:dc:2e:46:5e:e8:c5:01:8c:ec:72: ba:2c:fe:37:08:b9:ef:27:f7:20:c1:50:44:ec:73:0e:98:4a: 20:e2:6e:c0:29:4e:30:1d:7c:1f:7e:89:5e:65:f4:e4:70:4a: 1a:c3:84:85:d0:38:19:c6:b9:c3:c8:05:a4:86:c9:b3:4e:75: 7b:0d:0a:44:42:c1:ef:6d:88:8a:12:e9:87:62:9a:55:60:69: dc:9b:25:d6:d7:4f:07:57:fc:97:c1:37:49:0d:7f:26:fd:42: 9c:d0:45:eb:61:6b:7d:ec:69:3e:61:d5:db:be:e3:b9:e5:ea: 68:17:aa:45:e3:b0:d5:f3:01:fa:93:42:26:c3:21:2b:07:08: 16:8a:34:77:25:7a:73:a1:ef:79:36:a6:b6:1d:c4:de:c3:ef: 4c:b9:f0:c9:86:78:91:36:85:bc:26:70:aa:a7:0d:21:b7:48: 98:30:19:ef:7c:01:81:e1:13:4a:5e:1c:0f:61:f2:cd:8e:45: 8f:04:0b:60:66:e2:32:27:ef:0d:c7:5c:f9:2d:5d:b9:fb:ec: ef:8e:a0:45:8b:a6:bb:b8:c3:4e:8b:24:8b:4e:3d:b8:ba:ae: 04:9f:e5:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQwNzMxMTAvBgNVBAUTKDA4QUVEM0UxRENCNkVENzc0MjMwM0NFRkY0N0RFMDJE OTJCM0VERTUwHhcNMjUwOTE3MDIzNjQ1WhcNMjUwOTI0MDIzNjQ1WjAYMRYwFAYD VQQDEw02OGNhMWViZC1hMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqLf0j4bn1GGbRA4p7aD97jeNyB+9Gs8yxR31h1vyv3OAjQrr7fE4qw/jnBT +kLGjjJ/B6uqOjrGOx4ItQoaU/m55266w996XV4Z45pT6/haxbFbxXFUYee/mXTU S6wzJw7b6/3O/3GjaIJHUbHAbwGNFCechTk7Zpq3fAZBM0lh++O6bAkBQjR8YVyE dXQJ2UpvMLE7LUp3POO2Iee6wCCls2DqA06aDFDdIXx2THSp5jN831UX1L/02zOM sMfvQTPP9Q2TQXJgzLf/FvkRBhrxYDZ/sTnNeSRontNoXPiclhNeeuH3LielaXCB V+XCo5Xo0SVZckoRpoEglgtUUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVJa5E6 baklhi1dHJJHLeHpDeEUMB8GA1UdIwQYMBaAFAiu0+Hctu13QjA87/R94C2Ss+3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDA3My9GNEI0Q0E1MjY0 QTQxMUVEQTA4NzZCMTZDNEY5QUUwMi9DSzdUNGR5MjdYZENNRHp2OUgzZ0xaS3o3 ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NLN1Q0ZHkyN1hkQ01EenY5SDNnTFpLejdlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDA3My9GNEI0Q0E1MjY0QTQxMUVEQTA4NzZCMTZDNEY5QUUwMi9DSzdUNGR5MjdY ZENNRHp2OUgzZ0xaS3o3ZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApaEiukgcQN5m/cNOyqFSkEKXM0jP6jzSMQ9wuRl7oxQGM7HK6LP43 CLnvJ/cgwVBE7HMOmEog4m7AKU4wHXwffoleZfTkcEoaw4SF0DgZxrnDyAWkhsmz TnV7DQpEQsHvbYiKEumHYppVYGncmyXW108HV/yXwTdJDX8m/UKc0EXrYWt97Gk+ YdXbvuO55epoF6pF47DV8wH6k0ImwyErBwgWijR3JXpzoe95Nqa2HcTew+9MufDJ hniRNoW8JnCqpw0ht0iYMBnvfAGB4RNKXhwPYfLNjkWPBAtgZuIyJ+8Nx1z5LV25 ++zvjqBFi6a7uMNOiySLTj24uq4En+Vd -----END CERTIFICATE-----Generated at Thu Sep 18 20:24:42 2025 by rpki-client