$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft File: mgI7gKvPTmeX04jA3oFgoW6xXf4.mft (raw, json) Hash identifier: 9LEsebbHTQlP69bgdEPRiynt8fbml0P8kgGgmwAIT6Q= Subject key identifier: 5F:D9:20:E8:D4:0D:5E:26:A6:C4:48:37:EF:2B:08:88:2A:3C:94:F6 Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE Certificate issuer: /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft Manifest number: 27 Signing time: Tue 09 Sep 2025 07:56:04 +0000 Manifest this update: Tue 09 Sep 2025 07:56:03 +0000 Manifest next update: Tue 16 Sep 2025 07:56:03 +0000 Files and hashes: 1: mgI7gKvPTmeX04jA3oFgoW6xXf4.crl (hash: SYYi/5JJInEhdKXa7R3+F+/nglX+V+JSukgadXEd3DU=) 2: 3C15F928579311F0B296C030C4F9AE02.roa (hash: nqk1ux23a4hNUp2hbZ+iR4SaGmMhlfdgLlDN61RvYPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE Validity Not Before: Sep 9 07:56:03 2025 GMT Not After : Sep 16 07:56:03 2025 GMT Subject: CN=68bfdd94-dd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:3d:56:fa:1a:a2:4a:eb:40:15:85:45:9c: 78:76:7e:bf:f8:4c:97:21:aa:9d:5f:18:e8:94:8a: 1d:76:7f:74:3a:46:c3:9e:76:22:a1:be:d9:4f:07: 64:26:5e:19:8c:1c:58:13:d3:b5:3d:3f:6f:03:0c: 04:d3:4d:59:26:20:3b:7a:10:9f:76:cb:12:80:e2: c8:99:d8:f5:80:f7:92:75:55:c3:22:9e:33:5d:65: 09:33:ac:41:cb:46:13:af:74:5f:91:16:47:9f:3b: 86:e5:98:b2:49:1e:18:cb:3e:79:af:02:4a:b7:61: 38:b5:4b:b8:72:97:4c:69:ab:2c:67:7d:10:90:aa: 43:89:54:81:a6:73:79:c8:4d:a0:bf:68:d0:e9:b4: 17:9d:fa:c7:d8:99:3a:a1:7a:93:4f:19:8a:13:da: 73:b7:45:cb:1d:bb:cf:75:2b:45:7e:b8:78:34:3c: 42:e3:35:34:3e:d2:9e:5b:c5:4b:a9:88:0e:e1:3a: 40:7f:a8:54:11:ce:ea:f1:fb:43:7e:7c:d3:a4:19: 12:dc:1d:75:58:a5:58:e7:5b:6b:55:ae:87:b2:84: 47:8d:b7:c5:ee:84:82:5e:2d:bb:35:dc:fc:c7:f6: 23:94:f4:0e:af:01:52:b3:30:cd:0b:2e:4f:98:51: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D9:20:E8:D4:0D:5E:26:A6:C4:48:37:EF:2B:08:88:2A:3C:94:F6 X509v3 Authority Key Identifier: keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:38:8a:28:4c:84:00:42:b0:ba:24:62:8c:97:a9:10:21:c9: bc:79:ab:d7:b7:1d:3e:35:2a:b1:fe:da:31:e5:13:09:87:2b: 6e:26:82:ee:1e:6a:05:13:c1:15:34:08:ca:a3:3b:45:78:1a: 5c:16:77:33:87:18:5d:ae:4d:e2:a7:24:de:1c:40:cb:42:48: 75:90:c7:7e:3a:7f:9f:43:ef:7a:7e:2a:b1:f0:17:b9:5a:ca: 39:7c:d8:7d:90:22:a1:64:89:dc:02:0d:dd:6b:70:de:5a:82: 88:2a:49:e9:13:75:02:e8:fa:29:ad:f6:61:48:91:2c:75:79: b7:94:81:c2:43:11:28:10:0f:57:85:f2:1d:a7:18:c1:6f:64: 8e:b3:be:b0:00:03:58:df:55:44:2c:60:95:3c:8a:32:cf:ea: be:f7:41:02:cb:5b:7a:e5:5a:3a:c7:d5:9b:d9:b2:25:17:6b: 7a:4f:67:e4:8a:2a:6a:d5:87:cb:a8:b4:ac:2f:87:e4:1f:14: 92:64:b2:2d:d8:fa:c6:3c:8e:ad:9c:3c:0e:e5:5c:a2:fd:91: a5:1e:cd:d4:e3:b4:35:18:df:dc:6d:b2:e9:51:96:b5:bf:56: 29:97:be:49:b2:52:7f:0e:19:01:7c:16:6c:52:7d:61:4e:21: ad:a0:34:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjZFRjExMC8GA1UEBRMoOUEwMjNCODBBQkNGNEU2Nzk3RDM4OEMwREU4MTYwQTE2 RUIxNURGRTAeFw0yNTA5MDkwNzU2MDNaFw0yNTA5MTYwNzU2MDNaMBgxFjAUBgNV BAMTDTY4YmZkZDk0LWRkMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCfT1W+hqiSutAFYVFnHh2fr/4TJchqp1fGOiUih12f3Q6RsOediKhvtlPB2Qm XhmMHFgT07U9P28DDATTTVkmIDt6EJ92yxKA4siZ2PWA95J1VcMinjNdZQkzrEHL RhOvdF+RFkefO4blmLJJHhjLPnmvAkq3YTi1S7hyl0xpqyxnfRCQqkOJVIGmc3nI TaC/aNDptBed+sfYmTqhepNPGYoT2nO3Rcsdu891K0V+uHg0PELjNTQ+0p5bxUup iA7hOkB/qFQRzurx+0N+fNOkGRLcHXVYpVjnW2tVroeyhEeNt8XuhIJeLbs13PzH 9iOU9A6vAVKzMM0LLk+YUS/tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX9kg6NQN XiamxEg37ysIiCo8lPYwHwYDVR0jBBgwFoAUmgI7gKvPTmeX04jA3oFgoW6xXf4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGNkVGL0FDQkY2RjJBNTc0 MjExRjBCRURCNDU1Q0M0RjlBRTAyL21nSTdnS3ZQVG1lWDA0akEzb0Znb1c2eFhm NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWdJN2dLdlBUbWVYMDRqQTNvRmdvVzZ4WGY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG NkVGL0FDQkY2RjJBNTc0MjExRjBCRURCNDU1Q0M0RjlBRTAyL21nSTdnS3ZQVG1l WDA0akEzb0Znb1c2eFhmNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFo4iihMhABCsLokYoyXqRAhybx5q9e3HT41KrH+2jHlEwmHK24mgu4e agUTwRU0CMqjO0V4GlwWdzOHGF2uTeKnJN4cQMtCSHWQx346f59D73p+KrHwF7la yjl82H2QIqFkidwCDd1rcN5agogqSekTdQLo+imt9mFIkSx1ebeUgcJDESgQD1eF 8h2nGMFvZI6zvrAAA1jfVUQsYJU8ijLP6r73QQLLW3rlWjrH1ZvZsiUXa3pPZ+SK KmrVh8uotKwvh+QfFJJksi3Y+sY8jq2cPA7lXKL9kaUezdTjtDUY39xtsulRlrW/ VimXvkmyUn8OGQF8FmxSfWFOIa2gNMY= -----END CERTIFICATE-----Generated at Tue Sep 9 17:14:11 2025 by rpki-client