$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json) Hash identifier: hNvieT1aPBwpHQwfJ/zpaF1256uwztillsN+FY41Lg8= Subject key identifier: F8:1A:01:14:5C:77:BA:8E:15:0C:54:4A:6F:D1:2B:22:1E:9C:60:A4 Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft Manifest number: 014F Signing time: Wed 17 Sep 2025 04:52:55 +0000 Manifest this update: Wed 17 Sep 2025 04:52:55 +0000 Manifest next update: Wed 24 Sep 2025 04:52:55 +0000 Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: I0OLnIfNAAM4mioilnXvx0YY4a6gLHG9ckiCn3kBOMY=) 2: D4F8CEB8FE4211EF958ABE3BC4F9AE02.roa (hash: e+itOOHa2GS7haggfAySbnRHvgH3I9TscI3l9ZgslXk=) 3: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: pCYjff74rDvqaSSHh6b2YJXJxIU8kNQvxw7uQ6aFFQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Validity Not Before: Sep 17 04:52:55 2025 GMT Not After : Sep 24 04:52:55 2025 GMT Subject: CN=68ca3ea7-f5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:e8:52:87:91:51:63:98:e0:04:86:93:26: e7:9d:69:55:88:a6:05:f6:ab:fb:66:56:cf:f6:52: da:de:cc:8f:8e:5d:88:d8:46:73:6c:ef:8b:78:10: 29:96:57:f6:f4:4f:65:9a:3a:6a:49:2b:6a:5e:cc: 83:7e:97:f5:b2:ab:c8:f5:30:13:1f:83:34:0c:a3: 05:ce:e7:8a:fa:ef:88:97:51:77:d3:61:bb:ba:d3: 56:b1:6b:97:9d:41:a6:b9:e2:76:ac:c3:3d:fb:b0: cb:ac:de:04:46:a7:00:2d:2a:34:3d:83:95:0e:29: ab:44:5d:72:bb:a8:94:21:9d:03:6f:d4:eb:16:08: 87:84:f4:cb:f1:ef:a5:94:fc:23:c8:18:f0:7b:62: 2e:68:af:db:f7:14:34:b0:20:74:f4:82:d5:b4:e7: 24:df:e0:61:cf:3c:ec:de:4d:17:5a:4b:b6:2c:dd: 28:d0:fb:8d:2b:e6:b5:e2:eb:5d:e9:4d:10:fa:5c: 87:78:7d:a0:69:34:cd:b4:53:fd:60:11:ba:ed:f9: 7e:fa:f2:26:de:9a:4f:41:1e:bd:0c:b3:3c:f6:8d: f5:17:d8:d4:db:d7:04:1d:33:e3:4d:62:3c:a7:7a: d2:28:6e:23:78:c1:02:5a:cc:ad:63:15:e0:b6:ba: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1A:01:14:5C:77:BA:8E:15:0C:54:4A:6F:D1:2B:22:1E:9C:60:A4 X509v3 Authority Key Identifier: keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:be:68:c3:cd:26:13:c8:eb:8a:8f:44:1f:bb:f4:d2:65:4b: b9:42:d9:8f:12:b3:19:ec:e1:6d:b2:21:1f:21:09:95:dd:ad: aa:49:04:56:d7:9f:f4:35:26:e1:7f:fe:84:ef:df:07:fe:76: e2:3e:62:42:78:b0:e5:7f:ee:bd:d9:1d:50:64:2d:29:ad:41: ca:cb:ae:5b:7d:2c:29:bf:f2:e4:b1:36:40:28:01:3f:98:de: cf:71:24:c2:e7:6a:e4:c5:49:69:53:9b:35:89:7c:1c:0d:ef: cd:f0:33:bb:c0:67:97:b0:68:5a:1d:b1:21:6c:c6:b1:07:51: 41:de:0f:6b:fc:b9:ce:d9:59:ac:65:ec:af:91:c2:de:14:9c: 95:4a:c2:b4:49:71:51:68:bd:02:9f:ad:35:fb:30:4d:4f:f8: a1:10:cd:29:f0:5a:ac:b2:50:28:de:16:a9:2e:5f:1e:8a:3a: 2a:6a:3c:b9:ea:45:09:60:54:96:6d:54:91:62:6b:8a:59:94: 97:d6:b6:a8:eb:f9:e7:45:db:40:96:e7:37:db:0f:32:93:6d: 21:8b:fd:06:72:3f:40:70:da:11:1e:72:f1:27:92:1c:4e:6d: 1f:56:04:a5:ad:c5:02:cc:01:ff:ef:cb:65:6f:8f:0b:38:56: a6:9e:c3:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4 MDgwRTk3MzAwHhcNMjUwOTE3MDQ1MjU1WhcNMjUwOTI0MDQ1MjU1WjAYMRYwFAYD VQQDEw02OGNhM2VhNy1mNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyroUoeRUWOY4ASGkybnnWlViKYF9qv7ZlbP9lLa3syPjl2I2EZzbO+LeBAp llf29E9lmjpqSStqXsyDfpf1sqvI9TATH4M0DKMFzueK+u+Il1F302G7utNWsWuX nUGmueJ2rMM9+7DLrN4ERqcALSo0PYOVDimrRF1yu6iUIZ0Db9TrFgiHhPTL8e+l lPwjyBjwe2IuaK/b9xQ0sCB09ILVtOck3+Bhzzzs3k0XWku2LN0o0PuNK+a14utd 6U0Q+lyHeH2gaTTNtFP9YBG67fl++vIm3ppPQR69DLM89o31F9jU29cEHTPjTWI8 p3rSKG4jeMECWsytYxXgtroZbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgaARRc d7qOFQxUSm/RKyIenGCkMB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE eVFBUFpmY0Z5VzZBZ09sekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7vmjDzSYTyOuKj0Qfu/TSZUu5QtmPErMZ7OFtsiEfIQmV3a2qSQRW 15/0NSbhf/6E798H/nbiPmJCeLDlf+692R1QZC0prUHKy65bfSwpv/LksTZAKAE/ mN7PcSTC52rkxUlpU5s1iXwcDe/N8DO7wGeXsGhaHbEhbMaxB1FB3g9r/LnO2Vms ZeyvkcLeFJyVSsK0SXFRaL0Cn601+zBNT/ihEM0p8FqsslAo3hapLl8eijoqajy5 6kUJYFSWbVSRYmuKWZSX1rao6/nnRdtAluc32w8yk20hi/0Gcj9AcNoRHnLxJ5Ic Tm0fVgSlrcUCzAH/78tlb48LOFamnsMy -----END CERTIFICATE-----Generated at Thu Sep 18 22:09:14 2025 by rpki-client