$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json) Hash identifier: Muw/P7MMTF1DSeepPoi17WApc6cGKLB3TvhAMkn6K6o= Subject key identifier: B3:85:19:9D:1C:A2:71:B0:BA:24:C8:18:32:BB:F0:B0:99:CF:42:0A Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft Manifest number: 029A Signing time: Fri 19 Sep 2025 02:02:37 +0000 Manifest this update: Fri 19 Sep 2025 02:02:37 +0000 Manifest next update: Fri 26 Sep 2025 02:02:37 +0000 Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: yU/cgkG0+23DTewZT+liOuiHwkiQwJKN7jIz+X/I2aM=) 2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: xcEo5ZEds1+7lHb6kjHbxyhxfOhLVoaBRTvNwgY9oCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Validity Not Before: Sep 19 02:02:37 2025 GMT Not After : Sep 26 02:02:37 2025 GMT Subject: CN=68ccb9bd-503c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:bd:94:fc:68:9c:77:fc:05:17:29:82:cf: 6e:da:3b:07:ba:7d:6f:63:8d:f5:63:a7:f4:75:25: 69:40:87:aa:4a:2a:e3:23:17:c3:b6:3d:66:9b:16: af:6c:93:74:41:f0:0c:be:e8:bc:67:01:77:a3:84: 2b:e6:0d:a5:5d:b2:fe:8f:12:91:a1:c3:c8:ed:bd: 28:c1:22:0a:52:16:56:b0:0a:39:cf:51:cd:90:f4: 76:34:4b:38:51:85:a3:b1:e9:27:3b:eb:ca:eb:de: 47:a4:40:53:08:b0:e7:3f:67:56:be:88:ee:e3:f9: 8f:9d:53:82:1f:61:95:47:9e:f5:ac:7c:8f:ba:af: fe:85:b2:8e:cd:02:31:44:08:7d:66:d2:cc:03:a1: 56:ce:8a:79:c2:b5:bc:66:11:36:39:5f:07:91:ae: 4c:ea:42:27:d3:33:5e:a3:11:1d:9d:f9:0a:01:a9: 38:b5:a6:95:5e:c7:d2:96:04:eb:3b:b3:82:20:f5: 19:a5:a6:0c:98:34:d7:bc:34:4e:8d:d2:53:4f:4e: ad:1d:38:a9:92:c6:48:f4:4d:64:93:0a:fe:10:46: 30:7f:54:90:71:1f:b6:cf:21:5d:34:d5:ea:72:74: 1a:c1:19:9f:2d:6a:79:96:ad:a2:c4:be:36:c4:6f: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:85:19:9D:1C:A2:71:B0:BA:24:C8:18:32:BB:F0:B0:99:CF:42:0A X509v3 Authority Key Identifier: keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d9:b0:b9:f8:ab:80:9d:72:05:f9:c4:68:93:e2:71:fd:a9: 7c:55:9a:0a:1e:12:c8:50:9d:de:05:98:b0:68:4a:c2:c9:e7: 48:ed:36:f3:c0:63:1d:5e:a0:42:ba:5b:0f:0f:6a:6e:9b:b9: 91:3c:29:d6:65:47:e4:a2:f3:aa:4a:36:16:0f:64:82:b3:fc: 16:62:4c:83:d7:63:8a:f8:d3:d0:28:ee:4b:83:b1:a8:a2:c0: 20:9e:aa:37:45:b9:a3:1e:c6:2f:b5:a6:b8:cc:4f:7a:49:07: f3:6a:54:50:84:81:63:4e:d8:2a:f7:42:87:0a:c1:40:81:56: f9:26:2c:ec:62:41:7e:3b:1b:79:c5:b1:4f:bf:f0:5d:ae:5d: 62:95:b3:ff:cb:30:54:7b:15:fc:fc:9e:8c:7a:9b:a3:33:2f: 6f:f1:40:86:38:28:ac:3d:45:bb:53:12:81:28:8e:3c:f2:78: 9e:f3:ab:a5:2c:66:b6:7c:0c:cf:24:c4:72:69:1f:fb:6f:08: cd:24:74:a8:0a:14:5d:1c:78:52:be:88:98:e5:9e:01:0a:7f: 5b:4b:f8:28:7b:93:ff:65:d6:a8:52:91:81:53:8b:bc:a7:1e: f0:9c:a5:89:c4:59:70:b3:be:c3:f9:9c:b4:45:fa:a6:48:42: 82:d9:d0:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz QjIyMDE4OUQwHhcNMjUwOTE5MDIwMjM3WhcNMjUwOTI2MDIwMjM3WjAYMRYwFAYD VQQDEw02OGNjYjliZC01MDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMu9lPxonHf8BRcpgs9u2jsHun1vY431Y6f0dSVpQIeqSirjIxfDtj1mmxav bJN0QfAMvui8ZwF3o4Qr5g2lXbL+jxKRocPI7b0owSIKUhZWsAo5z1HNkPR2NEs4 UYWjseknO+vK695HpEBTCLDnP2dWvoju4/mPnVOCH2GVR571rHyPuq/+hbKOzQIx RAh9ZtLMA6FWzop5wrW8ZhE2OV8Hka5M6kIn0zNeoxEdnfkKAak4taaVXsfSlgTr O7OCIPUZpaYMmDTXvDROjdJTT06tHTipksZI9E1kkwr+EEYwf1SQcR+2zyFdNNXq cnQawRmfLWp5lq2ixL42xG+3zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOFGZ0c onGwuiTIGDK78LCZz0IKMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2 QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ TVc5bVF0bnJYMHc3SWdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU2bC5+KuAnXIF+cRok+Jx/al8VZoKHhLIUJ3eBZiwaErCyedI7Tbz wGMdXqBCulsPD2pum7mRPCnWZUfkovOqSjYWD2SCs/wWYkyD12OK+NPQKO5Lg7Go osAgnqo3RbmjHsYvtaa4zE96SQfzalRQhIFjTtgq90KHCsFAgVb5JizsYkF+Oxt5 xbFPv/Bdrl1ilbP/yzBUexX8/J6MepujMy9v8UCGOCisPUW7UxKBKI488nie86ul LGa2fAzPJMRyaR/7bwjNJHSoChRdHHhSvoiY5Z4BCn9bS/goe5P/ZdaoUpGBU4u8 px7wnKWJxFlws77D+Zy0RfqmSEKC2dBe -----END CERTIFICATE-----Generated at Fri Sep 19 03:46:16 2025 by rpki-client