$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: KhEgmABDqANFhjcPY5RjCBEX2IAF6FCMuzhCGM5jt9w= Subject key identifier: E2:C2:39:93:F1:D9:98:06:52:F1:A9:8B:B6:AC:30:3F:12:67:51:AA Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 01C3 Signing time: Sun 07 Sep 2025 04:09:16 +0000 Manifest this update: Sun 07 Sep 2025 04:09:16 +0000 Manifest next update: Sun 14 Sep 2025 04:09:16 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: uOhpWAowSX1dDxHqV+TItaab0CWkpAHcnJKlisr2qKI=) 2: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: QNh4Gp3kB3GNMrEGFFxhGCwWm4t5z9f8382iFUZwPZ0=) 3: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: oh7ui7LK3WMunAv1J2fHvn2kFRTi6Zr/uzSPr1lq2oo=) 4: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: Kl6m9JQHHfBeMqk1Tlm1MbQi4JjMBE2qeSJnrNub/g4=) 5: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: EN9le6O09Kb0iq4iN/kD7cySPcZbryI877AWUndMCII=) 6: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: o6iFpFIV0jtxY3uECfavGNZC5f2SO5jee3QS3JMuNlk=) 7: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: QdChkVX5/kDffpKHFjUpYMXDKAHSdfijGoyZP5SONNo=) 8: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: iRjjH0VL4+7PEhkSOx43L1Sne21LW5Me4PTZp36WaZY=) 9: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: PdzatKQUNncHpwKWYwWLFeCXI+EXj5VrdThfE8iLC8o=) 10: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: DXd58lVKAvc2UPgiS5Dl9wenDfuBudEt81twiJtKSDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Sep 7 04:09:16 2025 GMT Not After : Sep 14 04:09:16 2025 GMT Subject: CN=68bd056c-fcf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:16:94:5b:82:56:6c:a5:f5:0b:dd:17:d2:2b: 24:b6:9f:65:d6:a4:ed:ab:1d:9c:8d:23:74:3f:bf: 29:e0:34:92:7c:04:9f:8d:65:a1:06:f9:20:66:d4: 75:16:77:12:40:ad:40:44:2b:c5:5a:e9:08:75:0d: d0:5e:39:41:f3:62:b4:61:bc:59:93:49:70:60:ed: 17:0e:34:4f:e7:53:5e:69:46:15:22:e3:0d:a1:55: 87:c2:c7:df:c8:f9:70:36:92:ee:00:55:62:99:90: ed:c4:04:01:5e:6b:0c:7c:36:0c:16:42:b7:7e:3c: ea:86:47:45:21:c1:ad:b9:a5:0f:77:62:76:66:91: 64:6a:74:39:11:6b:28:7d:28:1f:3f:80:db:41:40: 8c:98:82:a9:f9:07:52:6e:be:24:b3:5a:9c:90:31: ac:a2:bd:bf:c4:1c:55:e9:73:f4:20:2b:4d:45:05: 59:4a:85:a0:6a:af:30:56:2b:e4:83:07:d0:9f:02: f3:59:56:be:10:03:90:70:fc:dc:b1:48:dc:66:6a: 72:2d:15:3c:1a:34:c6:d2:07:78:73:60:f8:48:dc: 19:4a:8e:73:ad:83:3d:f3:0d:4d:73:f7:67:ff:ce: b4:bd:8d:dd:86:2b:86:12:fd:d0:b5:f0:57:26:cf: 67:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C2:39:93:F1:D9:98:06:52:F1:A9:8B:B6:AC:30:3F:12:67:51:AA X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:65:b8:82:18:e6:a2:dc:e1:9d:1f:3e:a1:8e:fd:03:97:1a: 54:24:46:ae:49:fd:29:61:3b:12:b0:ea:df:2e:bc:40:a3:cd: c0:be:e7:fa:6d:4e:38:1a:47:f7:03:43:11:46:8d:0c:f3:9e: 78:4a:bb:ea:53:b6:86:c4:5d:97:82:0e:9f:7e:1d:f8:5a:0e: c7:5b:8f:62:0a:8e:e6:59:62:15:a3:7c:11:68:c4:e9:e6:ea: 4c:b9:74:ca:68:d2:db:bb:75:32:d6:f5:05:73:d0:e9:43:08: c1:9e:59:6e:39:d3:f7:93:53:11:7f:39:a4:4e:ad:b5:ac:6a: 4d:4f:21:5f:aa:ab:06:73:02:de:57:9f:c3:ee:4a:15:d8:de: 94:5d:27:3a:f1:03:7b:14:ad:30:23:62:f0:c8:85:c4:ba:a3: 30:e8:f6:66:48:79:83:6d:51:65:e0:42:1a:27:93:19:94:a8: f0:d1:eb:d5:01:e7:7b:97:37:3e:0a:fd:ab:b0:3d:a0:ac:58: 5f:d3:30:1d:a2:46:a0:f8:9e:29:bc:e5:94:ad:7e:19:3c:02: fa:2a:88:61:87:c6:75:22:2c:49:66:9b:fe:c7:9b:80:24:e1: 61:3c:bf:5a:e2:2a:29:ff:58:c2:76:3c:c9:d2:f9:82:71:82: 1e:8f:2e:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUwOTA3MDQwOTE2WhcNMjUwOTE0MDQwOTE2WjAYMRYwFAYD VQQDEw02OGJkMDU2Yy1mY2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RaUW4JWbKX1C90X0isktp9l1qTtqx2cjSN0P78p4DSSfASfjWWhBvkgZtR1 FncSQK1ARCvFWukIdQ3QXjlB82K0YbxZk0lwYO0XDjRP51NeaUYVIuMNoVWHwsff yPlwNpLuAFVimZDtxAQBXmsMfDYMFkK3fjzqhkdFIcGtuaUPd2J2ZpFkanQ5EWso fSgfP4DbQUCMmIKp+QdSbr4ks1qckDGsor2/xBxV6XP0ICtNRQVZSoWgaq8wVivk gwfQnwLzWVa+EAOQcPzcsUjcZmpyLRU8GjTG0gd4c2D4SNwZSo5zrYM98w1Nc/dn /860vY3dhiuGEv3QtfBXJs9n2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLCOZPx 2ZgGUvGpi7asMD8SZ1GqMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEZbiCGOai3OGdHz6hjv0DlxpUJEauSf0pYTsSsOrfLrxAo83Avuf6 bU44Gkf3A0MRRo0M8554SrvqU7aGxF2Xgg6ffh34Wg7HW49iCo7mWWIVo3wRaMTp 5upMuXTKaNLbu3Uy1vUFc9DpQwjBnlluOdP3k1MRfzmkTq21rGpNTyFfqqsGcwLe V5/D7koV2N6UXSc68QN7FK0wI2LwyIXEuqMw6PZmSHmDbVFl4EIaJ5MZlKjw0evV Aed7lzc+Cv2rsD2grFhf0zAdokag+J4pvOWUrX4ZPAL6Kohhh8Z1IixJZpv+x5uA JOFhPL9a4iop/1jCdjzJ0vmCcYIejy6V -----END CERTIFICATE-----Generated at Mon Sep 8 02:15:04 2025 by rpki-client