$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft File: CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json) Hash identifier: XiuiBH5Utty78GBV2pHXbeal42wvoBegg49dx+hLkk8= Subject key identifier: 71:A4:0D:06:61:03:8A:89:63:F7:CE:4C:48:B1:40:D4:FC:A5:F1:21 Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C Certificate issuer: /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft Manifest number: F3 Signing time: Wed 17 Sep 2025 05:53:21 +0000 Manifest this update: Wed 17 Sep 2025 05:53:21 +0000 Manifest next update: Wed 24 Sep 2025 05:53:21 +0000 Files and hashes: 1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: ytn+xpTd/DP7qOeLytd1lgcRrH05QmS9RBDzaaZgKEY=) 2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: GcLg66G+nJPqXwCpBzyC3D0WjujSmh3tIwuu+y3/BEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA5F, serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Validity Not Before: Sep 17 05:53:21 2025 GMT Not After : Sep 24 05:53:21 2025 GMT Subject: CN=68ca4cd1-82c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5b:23:dc:d0:84:b6:8a:c9:03:70:c1:ef:f7: fe:16:a0:6c:86:39:75:70:86:0d:29:6c:f5:7c:c7: 4d:b7:b7:42:45:5f:59:e4:35:cc:46:dd:92:fd:9d: b8:ec:f9:90:06:3d:46:61:2e:75:a2:a4:2c:9a:ec: 3e:e7:18:e1:67:a9:c5:be:79:49:21:0b:6d:c8:0a: 6c:d9:41:26:72:c5:fe:d9:29:37:61:fd:17:59:b0: ec:f6:89:b1:74:eb:bb:c6:12:2d:11:b0:1c:9a:9e: 2f:a0:82:33:01:ce:d2:9a:95:60:53:6e:1f:95:8f: 60:cd:a2:5c:a6:81:9b:f5:e7:20:ae:50:e7:27:c4: 7c:87:ab:f1:26:c3:18:22:ff:dd:5f:91:1b:a3:6c: a1:fa:53:f7:ff:5c:13:aa:a7:ff:9d:7d:80:bd:e8: 2b:6e:53:ae:69:24:6b:4e:37:b9:77:05:8d:05:fd: 04:f6:d5:29:b3:51:d5:f6:74:f2:1d:a7:28:13:f5: 40:4f:de:6a:fb:78:a5:8c:b0:b0:94:07:28:4e:c4: 60:ca:13:b3:63:e9:7e:f0:2e:a3:67:13:f7:a3:13: a9:e7:aa:1c:46:5b:8c:b3:79:79:08:32:a0:d4:e8: 81:a3:21:74:b5:56:86:ec:85:94:c2:6f:1a:00:2a: 24:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A4:0D:06:61:03:8A:89:63:F7:CE:4C:48:B1:40:D4:FC:A5:F1:21 X509v3 Authority Key Identifier: keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:24:ea:31:cd:91:59:62:a4:5b:bf:2a:40:bb:05:ca:f8:7f: b9:b2:b3:3a:cb:ac:d2:42:0e:9a:28:69:95:29:77:6c:20:d8: 97:c3:c3:5c:0e:7d:b8:c0:67:8c:c5:5a:9f:d2:71:9f:05:57: 0f:7f:7c:a7:4b:5d:57:82:d9:66:b2:b9:bf:6d:9b:e8:48:0a: 5d:73:c5:bd:90:44:1e:19:ce:80:54:69:74:c7:7b:9f:86:6b: 11:f3:32:0a:45:79:c8:d6:d8:3e:20:5b:2b:e7:12:b6:06:4f: 10:ca:0d:c7:24:f6:b4:29:d4:90:27:57:51:e4:00:56:89:a3: 83:0b:3d:44:0b:72:6b:ad:46:2b:21:ea:3f:0e:5f:ee:b3:73: f4:fe:d9:77:5c:5f:0f:0a:e1:c4:d6:0b:7a:2d:15:df:32:9a: 93:b8:0d:69:cf:a0:7f:66:76:05:2d:33:2e:7d:8f:fe:6f:b4: d7:e5:54:59:ac:c8:65:9e:42:da:d4:68:49:79:c4:8a:d8:f0: 49:f6:f6:42:51:88:2f:33:5b:0b:fd:9e:7e:1c:9e:62:fe:a2: 81:40:84:53:39:75:e2:ab:7e:da:57:f7:60:84:ee:1f:3c:ee: 67:2e:d8:5d:5d:31:0e:de:d7:04:b2:28:18:99:9f:5d:a8:d6: 2d:7f:9d:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNUYxMTAvBgNVBAUTKDA5QzdEOUU3RjI2M0RCMEI4QjgyMDFFN0QyOTNDQURF Q0I5N0NGOEMwHhcNMjUwOTE3MDU1MzIxWhcNMjUwOTI0MDU1MzIxWjAYMRYwFAYD VQQDEw02OGNhNGNkMS04MmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFsj3NCEtorJA3DB7/f+FqBshjl1cIYNKWz1fMdNt7dCRV9Z5DXMRt2S/Z24 7PmQBj1GYS51oqQsmuw+5xjhZ6nFvnlJIQttyAps2UEmcsX+2Sk3Yf0XWbDs9omx dOu7xhItEbAcmp4voIIzAc7SmpVgU24flY9gzaJcpoGb9ecgrlDnJ8R8h6vxJsMY Iv/dX5Ebo2yh+lP3/1wTqqf/nX2AvegrblOuaSRrTje5dwWNBf0E9tUps1HV9nTy HacoE/VAT95q+3iljLCwlAcoTsRgyhOzY+l+8C6jZxP3oxOp56ocRluMs3l5CDKg 1OiBoyF0tVaG7IWUwm8aACokoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGkDQZh A4qJY/fOTEixQNT8pfEhMB8GA1UdIwQYMBaAFAnH2efyY9sLi4IB59KTyt7Ll8+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE1Ri80QjU5MDZCODIz RUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3dUxnZ0huMHBQSzNzdVh6 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjZlo1X0pqMnd1TGdnSG4wcFBLM3N1WHo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE1Ri80QjU5MDZCODIzRUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3 dUxnZ0huMHBQSzNzdVh6NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6JOoxzZFZYqRbvypAuwXK+H+5srM6y6zSQg6aKGmVKXdsINiXw8Nc Dn24wGeMxVqf0nGfBVcPf3ynS11Xgtlmsrm/bZvoSApdc8W9kEQeGc6AVGl0x3uf hmsR8zIKRXnI1tg+IFsr5xK2Bk8Qyg3HJPa0KdSQJ1dR5ABWiaODCz1EC3JrrUYr Ieo/Dl/us3P0/tl3XF8PCuHE1gt6LRXfMpqTuA1pz6B/ZnYFLTMufY/+b7TX5VRZ rMhlnkLa1GhJecSK2PBJ9vZCUYgvM1sL/Z5+HJ5i/qKBQIRTOXXiq37aV/dghO4f PO5nLthdXTEO3tcEsigYmZ9dqNYtf51G -----END CERTIFICATE-----Generated at Thu Sep 18 20:53:14 2025 by rpki-client