$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: qySI/XSEHVwGZm3s7opa3UQyTFFJPVr5zmJsJknmnws= Subject key identifier: A4:82:A2:37:96:D8:EF:75:DF:9C:23:19:83:77:88:AD:B4:C8:5F:B7 Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0D97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0D90 Signing time: Thu 18 Sep 2025 18:06:58 +0000 Manifest this update: Thu 18 Sep 2025 18:06:57 +0000 Manifest next update: Thu 25 Sep 2025 18:06:57 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: UL28tPemsYOrAzxZ+L58e38mei7FHL+T/r9Sh2ZRi7c=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: EM624Ee5dZvup/p2NN7lZAjAZv2Q+/2EJL827rz91tU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3479 (0xd97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Sep 18 18:06:57 2025 GMT Not After : Sep 25 18:06:57 2025 GMT Subject: CN=68cc4a41-3291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:77:54:9f:df:e7:c1:b4:df:df:8c:0e:bb:da: 76:74:eb:2e:0f:72:5b:cf:c0:f3:c0:83:de:0c:21: e7:52:de:8c:9c:ce:2e:d7:4c:f1:82:de:94:21:82: 3f:60:50:74:b9:16:15:b7:4c:f9:41:77:c5:45:ff: d0:6a:db:df:66:a5:b2:0c:24:aa:2e:45:97:b1:44: 91:d5:72:1b:33:45:35:78:f0:3b:1c:23:0a:0b:d5: 91:c2:39:51:06:44:d8:ef:b1:6a:ce:6f:72:6d:70: f9:c5:d1:2a:b7:51:06:fa:0b:d7:e3:58:97:7d:6a: ac:0a:9f:02:9b:7d:6b:64:f6:bc:cb:a7:fb:e1:4c: 8f:da:9d:a6:c8:3c:f0:3c:8c:3c:98:32:d0:82:1c: bc:9e:a6:56:34:d9:e2:96:e6:bc:af:df:59:52:f5: a5:f3:c0:f6:73:5e:c7:54:e5:fc:11:4a:06:9a:79: 0e:37:4e:a7:78:84:2c:54:35:9a:2e:af:7b:03:19: 5b:e0:dc:14:1e:10:2a:4b:a6:7b:dd:a3:7d:c3:89: 29:d4:5b:23:f3:9f:57:3d:c8:92:8a:25:7d:d9:20: e0:df:7c:a2:6d:42:14:25:9f:07:77:9e:41:0c:15: 84:3b:3f:df:24:cb:ec:09:84:fb:11:0d:66:9c:13: e4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:82:A2:37:96:D8:EF:75:DF:9C:23:19:83:77:88:AD:B4:C8:5F:B7 X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:df:d0:ba:cb:ef:e7:aa:7a:68:bd:34:77:be:8b:3c:b3:38: 6e:31:97:ee:a2:49:74:c8:8b:54:9e:cb:dd:60:36:af:d5:d0: 4f:1d:cc:03:cd:c0:07:70:4e:5a:c0:4f:20:91:a7:d6:7e:30: 55:60:29:7d:63:6f:e1:ec:4e:ff:3a:1a:cd:76:8a:35:e3:7e: 3e:5b:b9:a2:00:e1:25:5d:74:de:da:2a:24:55:c0:1e:00:8f: 27:ad:fb:a7:cf:d3:27:60:63:87:c7:23:f5:d4:95:02:e4:8d: 94:f7:83:e2:63:b0:7c:eb:ca:12:cc:1d:d0:ac:7e:f0:1c:0b: b2:e0:d8:ae:af:01:ae:dd:70:da:cb:7f:4a:1b:e9:24:a5:d1: 2f:a4:5d:2c:7f:97:73:f2:fe:9e:f7:34:33:4e:c3:d2:7b:2e: eb:d6:f0:2a:dd:96:8f:6f:16:d5:d8:58:c5:20:bb:4d:62:d7: dc:fd:40:f5:11:e9:d5:41:0c:cc:b2:82:ce:b9:68:dc:b8:02: 02:40:a6:3c:49:cc:11:c9:32:52:b7:c3:96:b3:d8:76:3b:f1: 8b:cd:e6:b4:f7:88:39:b3:d9:8c:de:c9:76:1f:67:9e:f1:94: e6:29:c8:c5:e9:b5:0d:c4:51:54:39:55:d2:f4:a2:36:0e:4c: aa:b5:28:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjUwOTE4MTgwNjU3WhcNMjUwOTI1MTgwNjU3WjAYMRYwFAYD VQQDEw02OGNjNGE0MS0zMjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HdUn9/nwbTf34wOu9p2dOsuD3Jbz8DzwIPeDCHnUt6MnM4u10zxgt6UIYI/ YFB0uRYVt0z5QXfFRf/QatvfZqWyDCSqLkWXsUSR1XIbM0U1ePA7HCMKC9WRwjlR BkTY77Fqzm9ybXD5xdEqt1EG+gvX41iXfWqsCp8Cm31rZPa8y6f74UyP2p2myDzw PIw8mDLQghy8nqZWNNnilua8r99ZUvWl88D2c17HVOX8EUoGmnkON06neIQsVDWa Lq97Axlb4NwUHhAqS6Z73aN9w4kp1Fsj859XPciSiiV92SDg33yibUIUJZ8Hd55B DBWEOz/fJMvsCYT7EQ1mnBPkJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSCojeW 2O9135wjGYN3iK20yF+3MB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF39C6y+/nqnpovTR3vos8szhuMZfuokl0yItUnsvdYDav1dBPHcwD zcAHcE5awE8gkafWfjBVYCl9Y2/h7E7/OhrNdoo1434+W7miAOElXXTe2iokVcAe AI8nrfunz9MnYGOHxyP11JUC5I2U94PiY7B868oSzB3QrH7wHAuy4NiurwGu3XDa y39KG+kkpdEvpF0sf5dz8v6e9zQzTsPSey7r1vAq3ZaPbxbV2FjFILtNYtfc/UD1 EenVQQzMsoLOuWjcuAICQKY8ScwRyTJSt8OWs9h2O/GLzea094g5s9mM3sl2H2ee 8ZTmKcjF6bUNxFFUOVXS9KI2DkyqtShc -----END CERTIFICATE-----Generated at Fri Sep 19 10:16:34 2025 by rpki-client