$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: FCwUhuxDi1BLMqkA6vmlq1Ek7oenyCy+C2nvpPiOLSo= Subject key identifier: 23:DE:83:EC:34:A4:79:F1:01:71:0B:FB:D8:0D:26:38:AC:75:14:45 Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: 011E Signing time: Wed 17 Sep 2025 05:48:15 +0000 Manifest this update: Wed 17 Sep 2025 05:48:15 +0000 Manifest next update: Wed 24 Sep 2025 05:48:15 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: qzdU85tBxkn7EpXHlnwBatqE43G0Kb6QDFHXLWSBcPg=) 2: EEC42F86232311EFAF815012C4F9AE02.roa (hash: dmDX5d8Ee6EDnk/9c9IbholerFQLcJ0sPLUNE3zziAE=) 3: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: +l7KzNw3VW+RHOqRN7o7MYFbDiz9Uue5nL0WGR6JFyA=) 4: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: UX1cRz51Yc/EPgI7Avdxh/+oTCoX8i2QidlgdW8Epmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: Sep 17 05:48:15 2025 GMT Not After : Sep 24 05:48:15 2025 GMT Subject: CN=68ca4b9f-7dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:1e:d2:77:e6:d3:df:d2:62:86:d5:1e:40: bb:ed:f1:a9:d4:02:4e:a3:66:e9:63:5f:76:45:5f: 14:ad:16:3f:e4:02:c2:0f:9c:ab:93:50:b1:55:b8: b6:94:c5:eb:78:8d:15:25:f1:2e:06:87:9c:ee:7e: df:ee:99:d1:9e:fe:0c:6c:4e:b9:4b:99:96:be:dc: 66:10:96:83:a2:63:60:b2:5a:a8:5e:da:61:4c:f3: 58:fd:c6:11:a6:1d:6c:45:8b:5f:36:45:83:63:3e: 2c:74:13:ba:2b:56:ca:43:b2:db:e6:f2:fb:79:d9: 40:fd:e5:9a:80:32:3d:03:af:2b:41:5e:e0:d0:d2: d3:01:9f:7d:53:c9:d1:22:3b:79:89:24:be:a6:ab: fc:06:6d:6c:6a:61:23:e7:8b:9c:72:34:7e:ed:4a: 56:ed:03:2b:b0:db:5b:87:c3:4d:3b:33:36:11:bb: d0:c4:f5:2a:af:ee:8b:12:4b:b8:d8:4f:9b:63:9c: 17:84:f3:8d:69:31:36:75:bb:5c:2e:e5:4e:34:93: 29:9a:21:80:eb:9a:6f:6a:e3:34:90:09:58:56:98: ab:66:16:f0:57:79:66:c9:87:48:9a:c7:e3:4a:87: 2d:94:b6:3f:26:cd:da:29:06:3a:2a:63:16:08:64: 8e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DE:83:EC:34:A4:79:F1:01:71:0B:FB:D8:0D:26:38:AC:75:14:45 X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:aa:9f:f0:23:bb:ac:3e:e1:16:28:69:e1:89:ea:21:eb:04: d4:92:c0:9b:d3:5b:c3:38:1e:90:94:c6:b7:4e:3d:99:aa:8b: 99:55:09:c1:55:d2:7d:e1:f6:79:83:1d:1b:c8:7c:58:25:76: 9d:d6:94:8d:70:7d:bc:9d:c8:1d:ef:66:28:f8:02:c2:ad:6a: 7e:84:df:b3:d7:20:8c:8a:19:e5:e1:69:68:83:67:c6:1f:af: 74:10:a0:d2:9c:c2:96:21:b9:77:68:6a:88:8b:cd:85:b3:4f: 9b:ef:ca:d7:95:20:6b:dd:a3:ac:79:03:a2:e5:c4:70:52:e7: 46:5e:83:63:4b:08:2f:f9:70:10:16:55:1f:9a:d4:2f:cb:44: 2b:0a:68:f8:c9:43:e4:b3:2c:f7:3f:d9:93:78:ca:cc:f1:a3: 90:12:5a:82:9c:76:df:dd:54:f6:8a:37:19:59:e7:2c:82:66: 5d:b3:d2:a0:9a:f6:ac:2e:8d:8a:2e:3a:4c:1d:34:23:93:f2: ee:1b:b6:ec:2d:d1:e1:b6:01:9c:78:55:72:a1:d1:21:c8:fc: d4:5a:8e:01:de:ad:d8:4b:3e:5e:21:b0:d9:ec:d5:08:78:e5: 09:c7:ad:65:10:9f:dd:2b:fa:c5:cf:64:7d:2c:3c:cb:15:9e: f4:bc:11:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjUwOTE3MDU0ODE1WhcNMjUwOTI0MDU0ODE1WjAYMRYwFAYD VQQDEw02OGNhNGI5Zi03ZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0I8e0nfm09/SYobVHkC77fGp1AJOo2bpY192RV8UrRY/5ALCD5yrk1CxVbi2 lMXreI0VJfEuBoec7n7f7pnRnv4MbE65S5mWvtxmEJaDomNgslqoXtphTPNY/cYR ph1sRYtfNkWDYz4sdBO6K1bKQ7Lb5vL7edlA/eWagDI9A68rQV7g0NLTAZ99U8nR Ijt5iSS+pqv8Bm1samEj54uccjR+7UpW7QMrsNtbh8NNOzM2EbvQxPUqr+6LEku4 2E+bY5wXhPONaTE2dbtcLuVONJMpmiGA65pvauM0kAlYVpirZhbwV3lmyYdImsfj SoctlLY/Js3aKQY6KmMWCGSONQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPeg+w0 pHnxAXEL+9gNJjisdRRFMB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaqp/wI7usPuEWKGnhieoh6wTUksCb01vDOB6QlMa3Tj2ZqouZVQnB VdJ94fZ5gx0byHxYJXad1pSNcH28ncgd72Yo+ALCrWp+hN+z1yCMihnl4Wlog2fG H690EKDSnMKWIbl3aGqIi82Fs0+b78rXlSBr3aOseQOi5cRwUudGXoNjSwgv+XAQ FlUfmtQvy0QrCmj4yUPksyz3P9mTeMrM8aOQElqCnHbf3VT2ijcZWecsgmZds9Kg mvasLo2KLjpMHTQjk/LuG7bsLdHhtgGceFVyodEhyPzUWo4B3q3YSz5eIbDZ7NUI eOUJx61lEJ/dK/rFz2R9LDzLFZ70vBE6 -----END CERTIFICATE-----Generated at Thu Sep 18 22:16:43 2025 by rpki-client