$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json) Hash identifier: oCVok9EXUPYZnx0YbMxEB14xfD+j5Ip9qsid3y1G2qo= Subject key identifier: F2:72:D4:FB:B4:42:95:F5:E2:FC:E2:85:4B:D8:CF:42:41:3D:05:46 Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft Manifest number: A4 Signing time: Tue 09 Sep 2025 06:21:58 +0000 Manifest this update: Tue 09 Sep 2025 06:21:57 +0000 Manifest next update: Tue 16 Sep 2025 06:21:57 +0000 Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: /Rey+7EParnpJIE8YaPTaW4xZXZGtRvG+75llKrPNec=) 2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: gWk0VsOcbG73/lmCIcmaJtgvf1O8GLTJ+JuzqZmFgTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Validity Not Before: Sep 9 06:21:57 2025 GMT Not After : Sep 16 06:21:57 2025 GMT Subject: CN=68bfc786-f202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:f1:73:48:b6:47:b3:60:1e:f7:61:1f:97: ca:55:6f:93:95:5c:69:e5:6f:ab:92:20:ab:b7:00: dd:c5:cb:4f:d2:a0:76:60:86:59:17:15:4d:9c:55: 8a:6e:1e:11:03:b7:72:ef:5c:eb:c2:3e:14:68:b3: cd:f1:1a:0e:e7:ec:da:6b:58:bd:0e:ff:1d:bb:52: e3:8e:b4:5b:da:90:08:6c:8b:9f:89:89:ca:b7:cd: 36:3d:2d:f8:4d:f1:9b:33:c2:56:73:4d:45:e7:de: 81:4e:5c:32:08:62:93:45:fb:91:a8:e2:d0:1b:95: da:13:c0:09:c4:6f:ba:ca:ae:5c:4e:41:8e:a8:dc: cc:f2:0d:19:65:33:36:77:24:bc:ff:00:b0:e7:03: f6:a1:7c:e9:a3:12:de:47:e8:47:de:c2:32:4d:c0: 88:4b:c9:fd:0d:17:37:46:21:74:81:ee:45:62:c5: fe:9a:7c:50:c4:e3:ca:71:ad:ac:f8:d1:82:da:28: 60:56:75:6f:22:c0:59:13:61:67:df:7b:7d:ca:b0: 59:cb:f0:40:d5:b7:16:2c:20:d0:90:14:26:26:53: 8e:3f:89:e5:74:97:83:ec:c5:4c:5f:0b:8e:a4:d5: ef:fb:ee:eb:ce:0b:75:a2:8b:16:80:4e:79:b5:9a: 63:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:72:D4:FB:B4:42:95:F5:E2:FC:E2:85:4B:D8:CF:42:41:3D:05:46 X509v3 Authority Key Identifier: keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:35:5e:73:b4:90:ea:59:a8:b1:c3:54:10:9d:e8:7d:6b:81: e1:d0:58:af:96:4b:74:bd:d3:b5:a1:92:f6:c1:6a:29:0c:e5: 9d:15:8b:c0:1b:54:d1:8a:07:d2:7a:4f:24:a7:ab:46:02:37: 8c:26:e5:57:a8:8f:21:ed:73:1f:d6:65:62:0b:63:6d:c8:80: ab:d3:5d:ce:85:60:bd:a8:91:b6:2f:12:4c:f5:73:6d:18:de: dd:00:f1:20:37:8c:f1:c3:d1:74:1f:20:43:5a:45:30:4c:68: 65:62:e4:1d:bc:50:95:e9:66:1c:66:01:d7:04:cf:2d:e8:92: cb:61:07:a8:24:15:4b:1f:ef:34:ce:f3:22:01:61:ff:14:73: 6a:4b:cd:63:fd:d8:a1:ef:d7:c3:df:c5:c0:28:0b:9c:7a:94: 30:1f:9c:2d:70:9c:d4:83:fa:54:45:c9:59:9e:95:7d:63:a6: bf:e0:72:01:7b:f2:6f:68:da:b4:f6:f6:bc:27:38:cc:0d:93: 45:65:49:96:5d:40:20:b7:9f:ec:32:2c:a3:85:3b:53:55:26: 21:99:83:05:73:41:73:b9:29:3e:51:a9:98:3d:fc:62:7d:14: 47:50:4d:37:9d:09:bc:8f:34:a7:7c:f4:75:1d:6c:20:66:85: 8a:51:9d:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKEFDQjcwMjUxRUIxNUI3NUQ0MjI5QUEyMTMxRTNEOUE4 N0MyOTQ1QzAwHhcNMjUwOTA5MDYyMTU3WhcNMjUwOTE2MDYyMTU3WjAYMRYwFAYD VQQDEw02OGJmYzc4Ni1mMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKTxc0i2R7NgHvdhH5fKVW+TlVxp5W+rkiCrtwDdxctP0qB2YIZZFxVNnFWK bh4RA7dy71zrwj4UaLPN8RoO5+zaa1i9Dv8du1LjjrRb2pAIbIufiYnKt802PS34 TfGbM8JWc01F596BTlwyCGKTRfuRqOLQG5XaE8AJxG+6yq5cTkGOqNzM8g0ZZTM2 dyS8/wCw5wP2oXzpoxLeR+hH3sIyTcCIS8n9DRc3RiF0ge5FYsX+mnxQxOPKca2s +NGC2ihgVnVvIsBZE2Fn33t9yrBZy/BA1bcWLCDQkBQmJlOOP4nldJeD7MVMXwuO pNXv++7rzgt1oosWgE55tZpjuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJy1Pu0 QpX14vzihUvYz0JBPQVGMB8GA1UdIwQYMBaAFKy3AlHrFbddQimqITHj2ah8KUXA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9CMTQ0OUM0RTk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQxMUNLYW9oTWVQWnFId3BS Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JMY0NVZXNWdDExQ0thb2hNZVBacUh3cFJjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9CMTQ0OUM0RTk0REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQx MUNLYW9oTWVQWnFId3BSY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJNV5ztJDqWaixw1QQneh9a4Hh0Fivlkt0vdO1oZL2wWopDOWdFYvA G1TRigfSek8kp6tGAjeMJuVXqI8h7XMf1mViC2NtyICr013OhWC9qJG2LxJM9XNt GN7dAPEgN4zxw9F0HyBDWkUwTGhlYuQdvFCV6WYcZgHXBM8t6JLLYQeoJBVLH+80 zvMiAWH/FHNqS81j/dih79fD38XAKAucepQwH5wtcJzUg/pURclZnpV9Y6a/4HIB e/JvaNq09va8JzjMDZNFZUmWXUAgt5/sMiyjhTtTVSYhmYMFc0FzuSk+UamYPfxi fRRHUE03nQm8jzSnfPR1HWwgZoWKUZ0B -----END CERTIFICATE-----Generated at Tue Sep 9 13:33:59 2025 by rpki-client