$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft File: RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json) Hash identifier: AWzur09ElB73geZ8GqxuCkMCeT2Biin/w03hhvrWR1U= Subject key identifier: BD:0D:DD:15:C9:23:AE:53:3F:30:2A:44:8C:A1:E4:75:3D:19:65:A2 Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 Certificate issuer: /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft Manifest number: 0114 Signing time: Fri 19 Sep 2025 05:28:23 +0000 Manifest this update: Fri 19 Sep 2025 05:28:22 +0000 Manifest next update: Fri 26 Sep 2025 05:28:22 +0000 Files and hashes: 1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: GwEDLRXYm5uIL9RgadlRQOGMt8Eatg0wNtGnNAEsaFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 05:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Validity Not Before: Sep 19 05:28:22 2025 GMT Not After : Sep 26 05:28:22 2025 GMT Subject: CN=68cce9f7-5099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:29:fc:a0:67:40:88:bc:15:68:18:25:7a: 1c:6f:2c:02:c8:d1:9f:1a:57:eb:f2:e3:6d:a9:8b: f2:ee:2a:c3:11:e1:e2:0c:59:7b:86:b2:f1:68:d1: 5f:8c:56:d1:06:67:69:4d:00:a3:c5:3d:a4:44:c2: 24:7a:e7:ff:34:7c:49:fa:af:46:6a:7e:25:b2:7c: 3f:ad:b1:2f:fc:e5:c1:4f:a9:58:eb:fa:dd:3d:15: bc:fa:55:14:be:a4:23:f8:93:b9:8f:31:99:9d:cc: 59:25:dd:7b:1f:58:fa:72:3f:06:f8:30:ae:98:7c: 88:37:9c:49:d7:ea:7a:82:a7:c3:40:e0:d2:00:c0: ad:c8:3c:6c:5f:c8:40:72:02:31:96:cd:19:fa:41: 5c:e7:f2:62:da:b7:d9:34:97:15:95:9c:f8:88:2c: ca:99:a4:c4:d3:85:4f:21:43:50:a4:0d:84:16:02: ba:35:60:96:06:eb:4e:88:a3:66:67:b3:c6:c0:d8: a6:8b:bf:24:0f:9e:e2:e1:2e:c0:08:55:95:8f:9f: 76:04:a1:0a:20:81:38:b0:0d:1a:f4:0b:99:77:90: 96:97:65:47:3f:13:b7:2d:60:2c:99:f4:e1:bd:ef: aa:f4:ff:a4:95:38:23:65:9b:b4:8c:80:ea:25:cc: 91:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0D:DD:15:C9:23:AE:53:3F:30:2A:44:8C:A1:E4:75:3D:19:65:A2 X509v3 Authority Key Identifier: keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a7:df:3e:5c:37:57:6d:c5:72:4d:46:5c:43:3e:69:74:fb: 11:de:5c:62:4c:66:30:58:78:95:9b:0d:e4:98:aa:cb:62:86: b5:f0:18:4a:22:06:a9:04:45:3d:0e:77:90:e1:22:d8:bf:79: 45:7d:0a:e1:33:35:b5:42:a1:76:7c:aa:d2:cd:2b:00:4b:88: 1e:3c:5f:51:bf:95:7a:3f:3c:55:88:af:34:02:d2:d9:d8:cf: 65:06:16:03:9c:5a:bc:6c:8d:29:32:bd:1a:f4:27:cd:93:c2: 8e:1c:0b:81:16:ce:1b:94:3e:75:8d:a4:f3:eb:ad:cf:60:ba: fb:6f:56:3a:57:5f:cd:20:0d:91:2b:13:49:51:02:5e:9e:17: 9f:b5:b9:d3:b2:57:44:43:10:be:f9:06:e6:31:a1:57:69:2f: be:e3:62:47:19:12:5a:70:e7:20:43:ee:f5:f4:2a:6d:5e:a4: 55:9a:ac:23:1d:de:39:10:d4:b5:5c:ee:1d:5f:0e:09:9b:46: 18:2f:1c:c4:f8:1f:a7:e7:88:17:01:df:04:f4:1b:75:6c:96: 39:bc:07:0f:cc:19:14:09:8b:c3:cf:c4:bd:1d:5c:f9:2c:f0: 2f:51:81:4b:e6:77:a3:3e:12:57:ea:bc:24:eb:53:5c:b0:ce: db:1c:62:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDQ2RDdFM0IyNDI2NTBGNzVGODVDNDU4MTM1ODU4RENE OEM5OUMyMDMwHhcNMjUwOTE5MDUyODIyWhcNMjUwOTI2MDUyODIyWjAYMRYwFAYD VQQDEw02OGNjZTlmNy01MDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYsp/KBnQIi8FWgYJXocbywCyNGfGlfr8uNtqYvy7irDEeHiDFl7hrLxaNFf jFbRBmdpTQCjxT2kRMIkeuf/NHxJ+q9Gan4lsnw/rbEv/OXBT6lY6/rdPRW8+lUU vqQj+JO5jzGZncxZJd17H1j6cj8G+DCumHyIN5xJ1+p6gqfDQODSAMCtyDxsX8hA cgIxls0Z+kFc5/Ji2rfZNJcVlZz4iCzKmaTE04VPIUNQpA2EFgK6NWCWButOiKNm Z7PGwNimi78kD57i4S7ACFWVj592BKEKIIE4sA0a9AuZd5CWl2VHPxO3LWAsmfTh ve+q9P+klTgjZZu0jIDqJcyROwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0N3RXJ I65TPzAqRIyh5HU9GWWiMB8GA1UdIwQYMBaAFEbX47JCZQ91+FxFgTWFjc2MmcID MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zQUFDMEU1OEVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQzWDRYRVdCTllXTnpZeVp3 Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J0Zmpza0psRDNYNFhFV0JOWVdOell5WndnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zQUFDMEU1OEVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQz WDRYRVdCTllXTnpZeVp3Z00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVp98+XDdXbcVyTUZcQz5pdPsR3lxiTGYwWHiVmw3kmKrLYoa18BhK IgapBEU9DneQ4SLYv3lFfQrhMzW1QqF2fKrSzSsAS4gePF9Rv5V6PzxViK80AtLZ 2M9lBhYDnFq8bI0pMr0a9CfNk8KOHAuBFs4blD51jaTz663PYLr7b1Y6V1/NIA2R KxNJUQJenheftbnTsldEQxC++QbmMaFXaS++42JHGRJacOcgQ+719CptXqRVmqwj Hd45ENS1XO4dXw4Jm0YYLxzE+B+n54gXAd8E9Bt1bJY5vAcPzBkUCYvDz8S9HVz5 LPAvUYFL5nejPhJX6rwk61NcsM7bHGJu -----END CERTIFICATE-----Generated at Fri Sep 19 12:40:20 2025 by rpki-client