$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft File: asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json) Hash identifier: TVDhrPlU0U+6JpQ/fPSYfe/I8BeJfvfu8VBCoL/HT1c= Subject key identifier: 01:E3:6E:89:CF:92:56:23:96:DD:45:3C:6C:99:C4:F7:E2:25:40:73 Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Certificate serial: 108C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft Manifest number: 1084 Signing time: Thu 18 Sep 2025 17:31:12 +0000 Manifest this update: Thu 18 Sep 2025 17:31:12 +0000 Manifest next update: Thu 25 Sep 2025 17:31:12 +0000 Files and hashes: 1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: UfRMkCfVG4Yg3Ln5Ik/6VVXqcQXZnaKpcO5KsUIgXCc=) 2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: P8zT0PniKGyPQKuaO/6cEK/Iz5vptBwIg6UXjylLbdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4236 (0x108c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Validity Not Before: Sep 18 17:31:12 2025 GMT Not After : Sep 25 17:31:12 2025 GMT Subject: CN=68cc41e0-1c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:c9:2f:3d:2a:b3:2b:fa:9f:90:21:70:af: 30:6a:b3:d4:13:bb:66:88:98:96:c0:6e:57:c8:e1: c8:b8:83:7f:24:94:be:20:ea:e9:d3:f2:89:ff:d6: 96:04:37:4c:cc:77:b3:0b:aa:49:12:84:f1:fe:7e: cf:28:7c:ed:a2:2e:67:7d:13:c2:99:c3:95:3d:d5: f2:a1:78:76:2b:14:45:8f:7f:5a:f4:11:0e:ad:7d: 18:8a:44:26:5c:b1:ed:84:37:6c:80:da:29:f6:1a: f9:ed:94:bd:da:13:97:ee:65:06:26:a9:e4:8c:14: 93:1f:61:1f:e0:86:36:8c:66:c7:a9:0f:04:c7:e9: 8f:19:6e:b4:db:1d:90:2f:32:d6:b6:d5:e9:92:d3: 7b:c0:99:1d:e8:8d:2c:36:3f:12:20:50:47:85:a3: ad:0c:66:d4:d5:92:d9:3a:30:c1:25:46:9c:38:49: 7c:a1:a8:1c:c6:3c:c3:6f:df:dc:37:d1:14:8f:3b: 1e:d6:06:82:96:25:b2:7d:ba:54:42:05:35:2d:59: f2:5c:93:83:70:4e:70:6d:d4:eb:e8:b8:f6:5a:9f: 48:36:b0:c9:19:23:19:93:54:b6:28:d2:5c:36:b9: 06:3d:a4:e0:39:9f:2f:e4:57:00:a2:21:a1:84:c1: ea:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E3:6E:89:CF:92:56:23:96:DD:45:3C:6C:99:C4:F7:E2:25:40:73 X509v3 Authority Key Identifier: keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:2a:95:9f:f2:2f:8b:68:37:5b:51:1f:f2:cd:cb:b5:ed:d0: f2:c7:38:22:e5:c8:23:e1:10:9f:72:72:39:e2:86:92:57:e5: f4:e0:fd:de:9e:2f:88:8a:ee:1f:2d:f6:9b:d2:36:17:6f:ae: 86:86:8f:ff:ca:5a:a7:ab:bd:ad:2a:93:78:ef:08:85:21:06: fb:7c:68:4b:6f:de:aa:7e:eb:3e:24:f1:60:c2:fb:7c:d9:08: 8c:28:ec:4d:03:ff:f4:8f:0f:fc:b1:17:7f:70:2e:72:c8:d0: ad:0f:56:62:dd:67:0d:23:88:fc:aa:38:d6:f8:b2:e9:3a:c5: c8:28:fb:41:7b:04:d3:21:9f:02:e7:6a:9e:f6:ef:35:c9:4f: 32:a4:c8:1b:34:54:5f:cc:ab:9d:7b:c9:6d:4b:05:99:30:c8: 2a:70:90:29:2b:e9:5e:fa:fa:8f:7f:d7:2b:7d:76:19:65:9e: 80:1e:d2:2a:98:85:0f:d2:e7:03:d4:ae:46:37:9b:6d:dd:99: 17:a7:03:ed:f1:1d:79:ce:23:c8:8a:b8:76:cd:53:4a:9b:9c: 2d:ef:d5:9e:18:94:8f:0c:f8:7c:89:cc:a6:fe:2e:c6:67:28: f0:af:86:22:c2:55:ca:d8:8f:27:82:8c:63:92:2e:9f:9a:f5: ff:c0:04:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMxQTcxMTAvBgNVBAUTKDZBQzc3OTc0REZFNDUwODA3MzVDREI5MDY2QTdFMjQ2 OTYwNDkyQjcwHhcNMjUwOTE4MTczMTEyWhcNMjUwOTI1MTczMTEyWjAYMRYwFAYD VQQDEw02OGNjNDFlMC0xYzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlurJLz0qsyv6n5AhcK8warPUE7tmiJiWwG5XyOHIuIN/JJS+IOrp0/KJ/9aW BDdMzHezC6pJEoTx/n7PKHztoi5nfRPCmcOVPdXyoXh2KxRFj39a9BEOrX0YikQm XLHthDdsgNop9hr57ZS92hOX7mUGJqnkjBSTH2Ef4IY2jGbHqQ8Ex+mPGW602x2Q LzLWttXpktN7wJkd6I0sNj8SIFBHhaOtDGbU1ZLZOjDBJUacOEl8oagcxjzDb9/c N9EUjzse1gaCliWyfbpUQgU1LVnyXJODcE5wbdTr6Lj2Wp9INrDJGSMZk1S2KNJc NrkGPaTgOZ8v5FcAoiGhhMHqWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHjbonP klYjlt1FPGyZxPfiJUBzMB8GA1UdIwQYMBaAFGrHeXTf5FCAc1zbkGan4kaWBJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzFBNy83QjBCNjc4NDM5 QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJQnpYTnVRWnFmaVJwWUVr cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzZDVkTl9rVUlCelhOdVFacWZpUnBZRWtyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzFBNy83QjBCNjc4NDM5QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJ QnpYTnVRWnFmaVJwWUVrcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAKpWf8i+LaDdbUR/yzcu17dDyxzgi5cgj4RCfcnI54oaSV+X04P3e ni+Iiu4fLfab0jYXb66Gho//ylqnq72tKpN47wiFIQb7fGhLb96qfus+JPFgwvt8 2QiMKOxNA//0jw/8sRd/cC5yyNCtD1Zi3WcNI4j8qjjW+LLpOsXIKPtBewTTIZ8C 52qe9u81yU8ypMgbNFRfzKude8ltSwWZMMgqcJApK+le+vqPf9crfXYZZZ6AHtIq mIUP0ucD1K5GN5tt3ZkXpwPt8R15ziPIirh2zVNKm5wt79WeGJSPDPh8icym/i7G Zyjwr4YiwlXK2I8ngoxjki6fmvX/wART -----END CERTIFICATE-----Generated at Thu Sep 18 22:16:14 2025 by rpki-client