$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json) Hash identifier: VysOa/6I+csaXfKHZNHJ4qCkiU5eULfVLLeXSWv+E3Q= Subject key identifier: F7:64:1E:67:2B:9B:99:F0:E6:FC:76:CA:C0:22:59:0A:AA:94:8C:3F Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 34C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft Manifest number: 34BE Signing time: Mon 08 Sep 2025 15:02:22 +0000 Manifest this update: Mon 08 Sep 2025 15:02:22 +0000 Manifest next update: Mon 15 Sep 2025 15:02:22 +0000 Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: UXnLsXuWClB4Dw+ozStY65xlX7LrebmIlf7pzmHaxf8=) 2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: JdQUVUw03f+72nj/VMFdFXWPwrE8S++NWd90s/zu6jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 15:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13507 (0x34c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Sep 8 15:02:22 2025 GMT Not After : Sep 15 15:02:22 2025 GMT Subject: CN=68beeffe-2fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:90:bb:e6:32:36:d9:b6:ce:ef:3a:c3:39: 5e:52:63:03:33:b0:19:fb:51:9a:04:70:76:8e:9b: 5d:a2:02:18:a1:1b:b6:a0:23:55:0c:d4:85:9c:ec: 77:b5:af:4c:7b:26:4e:78:68:e8:9c:0b:8d:ea:14: e2:d2:ed:dc:5e:d8:d3:d7:e8:bc:81:4e:3f:02:92: bd:b0:22:34:7e:48:d4:28:85:56:c9:a3:00:2d:53: 24:e2:20:96:36:34:f1:4c:13:23:6e:eb:92:a0:99: aa:92:9d:a6:b2:ff:c3:b1:ba:11:8d:12:d0:c6:62: 1e:2c:e3:ec:e2:6d:e5:5a:33:e1:e4:df:53:56:8d: 28:fa:46:fd:4b:ca:19:51:99:f5:3a:0e:91:ea:6b: 1c:21:08:5e:70:3b:35:5b:73:91:8c:5e:10:53:8c: 0c:19:a2:9e:c9:40:e3:6c:b8:b2:05:a4:24:90:d3: d4:cd:9e:70:57:c2:37:1b:d7:6b:82:b6:6c:01:57: e4:d0:ad:72:5c:3b:16:0d:ad:7e:f6:32:dc:fc:b5: a4:0b:8c:a8:71:6d:b3:ac:ee:8f:fb:06:fc:81:18: 02:fa:a6:ec:49:74:2e:75:ad:bc:7f:39:3c:05:80: 61:d3:71:f5:79:ea:c0:2d:91:8c:03:93:5f:4d:09: 42:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:64:1E:67:2B:9B:99:F0:E6:FC:76:CA:C0:22:59:0A:AA:94:8C:3F X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c0:8d:6a:6e:47:36:0b:3a:f7:c1:84:ba:bd:79:6f:a9:76: 2e:4e:15:d7:24:c4:ae:0e:19:f2:57:be:86:d3:22:00:0e:1e: 81:f2:45:77:02:e3:46:b7:03:30:41:5b:8d:f7:22:30:0a:09: ab:a4:70:04:b4:66:73:ee:5b:ce:e2:82:8c:97:47:30:fa:75: e1:5f:b6:04:0c:d7:ea:f2:f1:1a:8c:dc:75:8a:6a:8d:f1:fc: 1b:e2:5f:07:0d:df:1d:55:8a:20:e0:04:b6:b9:f1:88:d7:5e: bb:1b:77:5d:b9:64:aa:75:fb:42:51:36:bb:98:c2:70:29:02: 36:23:60:a5:04:6d:af:9f:b7:ba:cc:7e:9e:55:13:b8:02:d5: 96:a6:87:c5:b1:0d:bf:ee:29:0b:ef:59:e8:08:c2:03:b8:30: 44:b1:c4:05:3c:87:5e:c2:73:c7:66:30:51:6b:d6:fe:8a:7e: c8:81:dc:53:d0:d1:6b:a2:12:8d:0d:e4:b9:1f:aa:81:a9:55: 08:8d:7d:19:ab:5c:a5:27:82:0f:fe:4e:80:ed:c4:d1:dc:13: 6a:9a:1c:a2:6f:f5:52:06:08:65:4e:54:60:8d:6d:7f:7e:13: 77:46:a6:be:9c:3a:42:98:91:c2:67:4e:ee:ee:63:bc:d1:ec: 21:bc:1e:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjUwOTA4MTUwMjIyWhcNMjUwOTE1MTUwMjIyWjAYMRYwFAYD VQQDEw02OGJlZWZmZS0yZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwseQu+YyNtm2zu86wzleUmMDM7AZ+1GaBHB2jptdogIYoRu2oCNVDNSFnOx3 ta9MeyZOeGjonAuN6hTi0u3cXtjT1+i8gU4/ApK9sCI0fkjUKIVWyaMALVMk4iCW NjTxTBMjbuuSoJmqkp2msv/DsboRjRLQxmIeLOPs4m3lWjPh5N9TVo0o+kb9S8oZ UZn1Og6R6mscIQhecDs1W3ORjF4QU4wMGaKeyUDjbLiyBaQkkNPUzZ5wV8I3G9dr grZsAVfk0K1yXDsWDa1+9jLc/LWkC4yocW2zrO6P+wb8gRgC+qbsSXQuda28fzk8 BYBh03H1eerALZGMA5NfTQlCwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdkHmcr m5nw5vx2ysAiWQqqlIw/MB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy81MkZDQzY0ODFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlB MW1LQ0t2NjVBVmNBYmc5QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbwI1qbkc2Czr3wYS6vXlvqXYuThXXJMSuDhnyV76G0yIADh6B8kV3 AuNGtwMwQVuN9yIwCgmrpHAEtGZz7lvO4oKMl0cw+nXhX7YEDNfq8vEajNx1imqN 8fwb4l8HDd8dVYog4AS2ufGI1167G3dduWSqdftCUTa7mMJwKQI2I2ClBG2vn7e6 zH6eVRO4AtWWpofFsQ2/7ikL71noCMIDuDBEscQFPIdewnPHZjBRa9b+in7IgdxT 0NFrohKNDeS5H6qBqVUIjX0Zq1ylJ4IP/k6A7cTR3BNqmhyib/VSBghlTlRgjW1/ fhN3Rqa+nDpCmJHCZ07u7mO80ewhvB7c -----END CERTIFICATE-----Generated at Tue Sep 9 16:32:01 2025 by rpki-client