$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft File: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json) Hash identifier: 5rQrVru0ZMiqM3TqF1RthZliibadc8Yppb36XUanL+U= Subject key identifier: 2B:40:E4:08:0A:A1:DD:78:9C:B1:C5:51:B1:1D:F2:08:75:45:E3:8B Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Certificate serial: 04F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft Manifest number: 04EC Signing time: Wed 17 Sep 2025 00:09:51 +0000 Manifest this update: Wed 17 Sep 2025 00:09:51 +0000 Manifest next update: Wed 24 Sep 2025 00:09:51 +0000 Files and hashes: 1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: q5j3pUyS63nYNfqasuM78kwWFiSHEn5LkTYHiiMb5M8=) 2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: OEZzXzknZfZ5+s266LCfZPiCa3g7F7GJ2hmeU6hbgO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1269 (0x4f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Validity Not Before: Sep 17 00:09:51 2025 GMT Not After : Sep 24 00:09:51 2025 GMT Subject: CN=68c9fc4f-95a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:63:68:46:08:8c:8f:68:c7:a0:c3:b0:4f:dc: a6:c5:84:0e:06:40:1f:15:4d:e1:7e:8a:f5:4f:fb: e7:45:ee:2d:6d:34:9d:ae:a3:1f:7d:2a:8d:72:7e: 1e:ed:30:ea:cf:be:04:02:50:61:a7:6f:a6:3c:13: 29:c2:75:73:d9:d1:c0:9b:90:74:92:79:32:c9:9e: ad:25:56:f8:97:3b:39:e2:e4:71:bf:d8:c5:85:6a: 2f:46:be:37:cc:db:de:74:fc:0b:bd:3c:80:66:de: 90:c6:08:e8:f9:53:55:78:56:eb:96:35:a5:bd:f3: 44:c6:6d:ba:56:06:33:75:4f:52:1a:91:93:dc:45: 8e:20:6d:0b:c4:77:78:f4:87:1d:b0:c1:bd:d6:90: 10:f6:88:8a:71:7e:c6:9c:ca:35:97:14:2c:90:d9: 64:67:f3:9a:6a:59:ab:98:af:a3:76:3c:b9:40:d3: 42:ed:70:2a:0b:5f:a2:55:4f:6c:dd:41:2e:9f:37: 24:50:a4:ef:80:bc:d2:9b:46:87:1a:66:a8:fc:de: 05:dd:c7:b7:53:a9:ce:6e:15:31:11:a2:3d:c7:86: d9:ab:93:27:03:9b:09:99:b1:9f:c4:42:f7:55:17: 38:1c:1c:69:2a:7a:13:81:d8:a3:80:08:1d:c6:74: c0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:40:E4:08:0A:A1:DD:78:9C:B1:C5:51:B1:1D:F2:08:75:45:E3:8B X509v3 Authority Key Identifier: keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:05:f9:ea:63:d0:5b:27:d1:cc:c1:1d:ff:d0:b3:6f:d2:99: 0a:dd:f6:f6:4c:c4:55:ae:2d:e0:10:f1:d5:ac:0b:14:ec:72: a7:3b:1f:b2:b4:83:20:87:64:2c:7e:82:25:b3:ea:1d:cd:ee: 6a:cd:47:97:9c:9e:26:dc:bb:34:80:7f:2c:e7:a1:89:7a:8f: c1:59:fd:f2:34:d1:0c:10:9b:da:b7:b8:10:15:41:0b:bb:1e: 06:8e:0e:54:2f:de:97:5f:43:ef:1f:98:60:f5:94:29:cc:ac: 32:20:e9:1c:e1:08:8b:07:79:a0:0a:f7:42:ef:e6:da:29:56: 9b:32:12:79:41:8e:3f:84:37:25:e6:32:c6:e6:8c:f4:6e:65: 76:2f:8a:8f:2f:4c:50:09:2b:45:9e:89:ac:99:01:04:3f:47: 7a:14:f5:aa:a5:c4:81:63:ed:b7:0f:35:0d:bd:b7:e2:2d:36: 1f:1b:14:ad:94:d4:f5:be:e2:b4:c7:4f:bb:f4:5f:16:76:93: 7b:7c:1f:c7:70:6c:e9:11:18:ef:8d:60:66:98:c3:55:f5:56: d2:41:37:30:92:24:dc:64:7f:d7:aa:a6:9d:67:a1:43:aa:ff: 52:06:cc:49:37:e7:67:b8:f9:33:4e:f4:20:2a:f1:a8:b8:9e: 6b:4e:b8:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwOTkxMTAvBgNVBAUTKEIwRjQ3QTY5NkFDRDc3Qzc0QTM0NzNDNENEMTcxREEz NzIxQ0VDRDAwHhcNMjUwOTE3MDAwOTUxWhcNMjUwOTI0MDAwOTUxWjAYMRYwFAYD VQQDEw02OGM5ZmM0Zi05NWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WNoRgiMj2jHoMOwT9ymxYQOBkAfFU3hfor1T/vnRe4tbTSdrqMffSqNcn4e 7TDqz74EAlBhp2+mPBMpwnVz2dHAm5B0knkyyZ6tJVb4lzs54uRxv9jFhWovRr43 zNvedPwLvTyAZt6Qxgjo+VNVeFbrljWlvfNExm26VgYzdU9SGpGT3EWOIG0LxHd4 9IcdsMG91pAQ9oiKcX7GnMo1lxQskNlkZ/OaalmrmK+jdjy5QNNC7XAqC1+iVU9s 3UEunzckUKTvgLzSm0aHGmao/N4F3ce3U6nObhUxEaI9x4bZq5MnA5sJmbGfxEL3 VRc4HBxpKnoTgdijgAgdxnTAWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtA5AgK od14nLHFUbEd8gh1ReOLMB8GA1UdIwQYMBaAFLD0emlqzXfHSjRzxM0XHaNyHOzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA5OS9FQjRFRkJDNjMx NUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4ZEtOSFBFelJjZG8zSWM3 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NQUjZhV3JOZDhkS05IUEV6UmNkbzNJYzdOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA5OS9FQjRFRkJDNjMxNUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4 ZEtOSFBFelJjZG8zSWM3TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkBfnqY9BbJ9HMwR3/0LNv0pkK3fb2TMRVri3gEPHVrAsU7HKnOx+y tIMgh2QsfoIls+odze5qzUeXnJ4m3Ls0gH8s56GJeo/BWf3yNNEMEJvat7gQFUEL ux4Gjg5UL96XX0PvH5hg9ZQpzKwyIOkc4QiLB3mgCvdC7+baKVabMhJ5QY4/hDcl 5jLG5oz0bmV2L4qPL0xQCStFnomsmQEEP0d6FPWqpcSBY+23DzUNvbfiLTYfGxSt lNT1vuK0x0+79F8WdpN7fB/HcGzpERjvjWBmmMNV9VbSQTcwkiTcZH/XqqadZ6FD qv9SBsxJN+dnuPkzTvQgKvGouJ5rTrgE -----END CERTIFICATE-----Generated at Thu Sep 18 23:26:31 2025 by rpki-client