$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft File: RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json) Hash identifier: BiCZQbbyaASD+iEPNgx95NpG1iOi6R4/mI8/dA27ZNQ= Subject key identifier: 7C:AD:DE:98:D5:40:A8:82:0C:03:43:36:60:3C:88:91:8C:C6:22:F2 Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E Certificate issuer: /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft Manifest number: B6 Signing time: Fri 05 Sep 2025 06:24:59 +0000 Manifest this update: Fri 05 Sep 2025 06:24:59 +0000 Manifest next update: Fri 12 Sep 2025 06:24:59 +0000 Files and hashes: 1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: h3bL0iMUASRFsPhwVbhwWQrWn23D2X8DS38d7ns4ssY=) 2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: T+wmuYYMTFF61NV8D+auleLzw90NK0dFwG6cz8qIwGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Validity Not Before: Sep 5 06:24:59 2025 GMT Not After : Sep 12 06:24:59 2025 GMT Subject: CN=68ba823b-8085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:0a:26:39:dc:1a:e2:77:cd:51:cf:9d:92: bb:4d:98:b3:a3:f1:62:80:1a:b8:db:65:9b:90:ab: 1c:6b:8e:74:8a:6d:7b:4c:57:c5:87:4a:d2:d9:d5: 46:0e:78:b6:48:21:fe:9a:89:c0:ff:be:05:d7:6d: 90:3b:17:3c:10:73:7f:f1:db:64:c2:24:39:2b:86: e2:0c:2d:70:fa:f1:29:77:8e:86:46:d0:03:e9:cf: 81:a8:27:58:ae:3f:ec:29:13:f7:46:18:4e:23:24: 71:ec:49:82:9c:3a:bc:e1:2f:ae:3c:b8:87:d2:c3: c9:47:bc:11:21:38:91:69:86:80:bc:f8:c3:08:4b: 84:3b:4d:45:33:bd:f7:60:15:4d:ab:c5:35:8c:f3: 41:53:91:67:2f:88:60:21:13:36:c1:04:e9:2d:4e: 04:ca:3f:e3:1b:80:15:c7:b4:a5:09:39:26:38:4a: 02:c7:4b:33:9a:95:5f:fd:87:10:64:72:e2:72:b0: 4b:64:a1:88:f2:cc:2a:bb:7b:e1:13:21:b1:70:46: 01:c9:af:c6:72:ce:6a:24:b5:e3:7a:1d:98:22:f4: 9f:35:0d:ab:f9:f1:fb:95:2b:06:5a:a4:f4:f1:5c: 59:f3:a6:31:19:ef:50:5a:6e:32:78:cf:11:ef:19: 94:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AD:DE:98:D5:40:A8:82:0C:03:43:36:60:3C:88:91:8C:C6:22:F2 X509v3 Authority Key Identifier: keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:b3:2a:0f:91:0b:7e:08:5f:82:64:e8:29:5e:f9:05:6f:57: 81:9f:41:91:0d:bf:7d:af:4b:bd:e0:f5:72:12:f6:83:6f:69: fa:eb:6f:7e:97:93:b5:98:13:bc:85:6e:40:97:df:26:90:2b: 0f:38:d8:f8:e4:d2:2b:42:bf:08:a2:ae:46:ee:32:fb:22:04: e5:0a:36:1e:79:1b:e4:c1:8d:8a:05:33:90:bb:30:84:d4:bb: 30:74:ed:f6:8a:1e:ee:73:6f:b6:1f:01:e4:90:05:57:49:c9: 65:e7:4d:00:2c:9f:4b:55:7a:13:4a:a4:49:97:ae:6a:ce:71: 03:47:22:f4:c4:ae:b3:b9:46:cb:e0:6d:f3:a6:ba:de:2d:c3: 0c:32:a4:ad:9b:24:52:b0:41:df:c4:35:3b:06:b5:52:df:b8: f5:07:25:8c:2d:d6:65:48:2d:0c:75:cb:fb:c4:ee:ef:06:a3: 9f:c5:10:9b:a5:83:a3:fa:55:4e:84:6d:a3:a0:73:4c:53:cf: b2:60:3f:2f:a2:a5:e3:9e:9c:3e:d7:1e:2d:82:aa:06:5c:ff: 03:4b:74:51:61:cc:a2:e2:b9:55:86:ee:1a:56:3e:f8:d4:ec: 05:1f:26:40:39:b5:d9:02:1a:1a:78:16:28:41:80:49:42:10: ca:40:1f:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5MkYxMTAvBgNVBAUTKDQ1N0RCNzY2RTFCMEQ2QTREQ0M3RjlBRUNEMjg3RDRE QzNFNzBDOUUwHhcNMjUwOTA1MDYyNDU5WhcNMjUwOTEyMDYyNDU5WjAYMRYwFAYD VQQDEw02OGJhODIzYi04MDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu44KJjncGuJ3zVHPnZK7TZizo/FigBq422WbkKsca450im17TFfFh0rS2dVG Dni2SCH+monA/74F122QOxc8EHN/8dtkwiQ5K4biDC1w+vEpd46GRtAD6c+BqCdY rj/sKRP3RhhOIyRx7EmCnDq84S+uPLiH0sPJR7wRITiRaYaAvPjDCEuEO01FM733 YBVNq8U1jPNBU5FnL4hgIRM2wQTpLU4Eyj/jG4AVx7SlCTkmOEoCx0szmpVf/YcQ ZHLicrBLZKGI8swqu3vhEyGxcEYBya/Gcs5qJLXjeh2YIvSfNQ2r+fH7lSsGWqT0 8VxZ86YxGe9QWm4yeM8R7xmUdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyt3pjV QKiCDANDNmA8iJGMxiLyMB8GA1UdIwQYMBaAFEV9t2bhsNak3Mf5rs0ofU3D5wye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xMjA4NUQxODc0 MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFxVGN4X211elNoOVRjUG5E SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JYMjNadUd3MXFUY3hfbXV6U2g5VGNQbkRKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTkyRi8xMjA4NUQxODc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFx VGN4X211elNoOVRjUG5ESjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdsyoPkQt+CF+CZOgpXvkFb1eBn0GRDb99r0u94PVyEvaDb2n6629+ l5O1mBO8hW5Al98mkCsPONj45NIrQr8Ioq5G7jL7IgTlCjYeeRvkwY2KBTOQuzCE 1LswdO32ih7uc2+2HwHkkAVXScll500ALJ9LVXoTSqRJl65qznEDRyL0xK6zuUbL 4G3zprreLcMMMqStmyRSsEHfxDU7BrVS37j1ByWMLdZlSC0Mdcv7xO7vBqOfxRCb pYOj+lVOhG2joHNMU8+yYD8voqXjnpw+1x4tgqoGXP8DS3RRYcyi4rlVhu4aVj74 1OwFHyZAObXZAhoaeBYoQYBJQhDKQB+4 -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:37 2025 by rpki-client