$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json) Hash identifier: D/HNgSEV4+/Anwri0veKVOmgdj/xmSuDQ3K+T2x7VqE= Subject key identifier: 5F:AB:27:B9:5C:DF:49:C2:42:87:E1:94:E9:D4:39:20:CA:3E:62:02 Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Certificate serial: 05C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft Manifest number: 059D Signing time: Tue 16 Sep 2025 23:42:42 +0000 Manifest this update: Tue 16 Sep 2025 23:42:42 +0000 Manifest next update: Tue 23 Sep 2025 23:42:42 +0000 Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: QW5Q8ZtvlmaMGIK9LlwVbccWXbZHxWN2v9mUswF+mpM=) 2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: Ji5QHhKyC9d/xw16UVd29SWOnnXI9pwAI1DiN2SnuG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 23:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1479 (0x5c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Validity Not Before: Sep 16 23:42:42 2025 GMT Not After : Sep 23 23:42:42 2025 GMT Subject: CN=68c9f5f2-0f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:9e:68:2f:be:b5:d6:64:f7:8c:0a:b1:f7: 81:7f:32:86:52:0b:6c:ff:78:96:87:bf:b9:a7:4c: f2:4a:ee:3c:6a:e7:fb:e0:dd:17:9a:78:dd:bf:17: 7d:5a:81:a5:fd:7b:b2:1d:23:e4:bf:e3:e4:40:e1: 78:0c:98:0a:67:71:f7:06:ba:c2:92:0e:58:c3:b6: ce:41:40:07:d0:2f:b6:bc:cd:62:89:1a:c0:cb:62: f1:a7:fe:fe:3a:14:ce:f1:c2:77:3b:ec:22:6f:2a: 2c:0e:56:79:e7:d9:86:63:50:0d:25:b5:82:8c:38: 09:f8:4a:2b:77:28:39:94:0d:41:da:03:e1:c5:88: c7:5b:1a:c3:d9:ab:7c:1a:7e:cc:70:53:9a:f3:96: 80:8b:fa:5c:47:c1:96:c7:81:ba:b7:04:46:51:b4: 94:56:38:6d:28:e6:61:29:02:9a:34:36:c2:58:de: b0:f9:97:80:e8:48:7c:18:a0:1e:d4:5d:37:03:f0: 00:6f:e9:66:a3:15:1b:1d:ed:e5:2f:1e:ca:a0:1f: 5f:b3:08:23:e7:63:6d:01:e1:90:56:c9:4a:c5:5e: b7:f6:a6:fb:3e:06:19:9c:3f:d2:30:65:37:3c:e6: e2:26:aa:a5:4e:8b:f9:d5:46:40:d4:01:bb:6e:93: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AB:27:B9:5C:DF:49:C2:42:87:E1:94:E9:D4:39:20:CA:3E:62:02 X509v3 Authority Key Identifier: keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:2e:d6:9f:bb:b0:53:64:0e:be:e5:76:83:69:ab:4e:f2:93: b0:63:d3:bf:dc:7f:00:ce:ad:ae:6d:c4:97:f3:2f:84:6c:04: 16:7e:88:eb:4b:a4:6a:e8:8e:27:31:11:2c:56:0d:bc:fa:47: a7:43:58:6b:c6:c0:7a:31:53:00:65:ad:59:cf:4b:fe:81:22: 8a:36:94:96:7d:09:0c:cc:9b:38:54:cb:d2:64:44:16:13:35: 0b:6d:40:62:a5:a2:bb:e4:62:fc:9a:2b:39:1a:53:ad:23:aa: fc:80:b3:40:d4:ff:50:dd:eb:b6:ed:f1:f6:2e:e0:95:65:4f: 19:e7:8d:76:f3:7d:aa:c2:61:4a:b1:13:29:20:f5:e2:c5:af: 46:43:75:ed:6b:47:c2:09:46:ab:ae:47:09:c4:a8:56:7d:41: 28:d3:d9:d6:56:38:ea:e1:94:79:9d:a9:a6:55:44:3f:92:28: a1:e1:84:0a:23:bd:cf:e9:6e:31:2f:68:6a:6c:1a:40:65:f2: 86:4e:98:57:a3:70:db:a2:79:08:c9:90:f0:97:58:54:3a:6f: 50:f5:59:df:33:90:b1:96:77:a5:4c:cc:c4:34:96:3c:c6:d8: 52:e8:dc:8a:29:6d:bc:26:44:6a:83:c5:3d:47:02:d7:85:ed: 8c:3b:3f:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjExMTAvBgNVBAUTKEZFNTBDMzg1RDlFQjE5RTJFRkExNEZBMzVBREE1QkRF QTVCNDU2RDMwHhcNMjUwOTE2MjM0MjQyWhcNMjUwOTIzMjM0MjQyWjAYMRYwFAYD VQQDEw02OGM5ZjVmMi0wZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXieaC++tdZk94wKsfeBfzKGUgts/3iWh7+5p0zySu48auf74N0Xmnjdvxd9 WoGl/XuyHSPkv+PkQOF4DJgKZ3H3BrrCkg5Yw7bOQUAH0C+2vM1iiRrAy2Lxp/7+ OhTO8cJ3O+wibyosDlZ559mGY1ANJbWCjDgJ+Eordyg5lA1B2gPhxYjHWxrD2at8 Gn7McFOa85aAi/pcR8GWx4G6twRGUbSUVjhtKOZhKQKaNDbCWN6w+ZeA6Eh8GKAe 1F03A/AAb+lmoxUbHe3lLx7KoB9fswgj52NtAeGQVslKxV639qb7PgYZnD/SMGU3 PObiJqqlTov51UZA1AG7bpPVbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+rJ7lc 30nCQofhlOnUOSDKPmICMB8GA1UdIwQYMBaAFP5Qw4XZ6xni76FPo1raW96ltFbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMS82NkU0RTRGNkZC NDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdlTHZvVS1qV3RwYjNxVzBW dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sRERoZG5yR2VMdm9VLWpXdHBiM3FXMFZ0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMS82NkU0RTRGNkZCNDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdl THZvVS1qV3RwYjNxVzBWdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGLtafu7BTZA6+5XaDaatO8pOwY9O/3H8Azq2ubcSX8y+EbAQWfojr S6Rq6I4nMREsVg28+kenQ1hrxsB6MVMAZa1Zz0v+gSKKNpSWfQkMzJs4VMvSZEQW EzULbUBipaK75GL8mis5GlOtI6r8gLNA1P9Q3eu27fH2LuCVZU8Z5412832qwmFK sRMpIPXixa9GQ3Xta0fCCUarrkcJxKhWfUEo09nWVjjq4ZR5nammVUQ/kiih4YQK I73P6W4xL2hqbBpAZfKGTphXo3DbonkIyZDwl1hUOm9Q9VnfM5CxlnelTMzENJY8 xthS6NyKKW28JkRqg8U9RwLXhe2MOz9j -----END CERTIFICATE-----Generated at Thu Sep 18 21:42:45 2025 by rpki-client