$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft File: cOaM6FoDjZ4wcEODfKbmsaZglu4.mft (raw, json) Hash identifier: D//6zM3iewz7NPpPA50uTUktTW3IKckV8HYGjY8cxVg= Subject key identifier: 06:96:17:74:22:BC:90:04:13:08:DE:1B:07:B0:86:8E:E0:09:14:24 Authority key identifier: 70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE Certificate issuer: /CN=A91F6ADE/serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft Manifest number: 04BA Signing time: Fri 19 Sep 2025 00:14:58 +0000 Manifest this update: Fri 19 Sep 2025 00:14:58 +0000 Manifest next update: Fri 26 Sep 2025 00:14:58 +0000 Files and hashes: 1: cOaM6FoDjZ4wcEODfKbmsaZglu4.crl (hash: 5OGHS10MsF29OwC/szuA4/g3oJTw1UnQVFXktUbGmY0=) 2: FD0DCDCA41E111EC98FA0C0AC4F9AE02.roa (hash: CzraaquDZ9Uo+Rh3T+BRvbMkjKbruCD1g9kPUW6icAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6ADE, serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Validity Not Before: Sep 19 00:14:58 2025 GMT Not After : Sep 26 00:14:58 2025 GMT Subject: CN=68cca082-4909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:fb:1e:29:cb:3d:10:0d:ff:e9:55:0f:70: e3:62:8a:44:22:0a:a6:55:12:3c:e0:1d:80:3c:71: 3a:46:31:fe:38:98:16:6c:e1:8c:dc:05:09:f9:83: 3c:bc:ff:5b:fe:65:d5:a1:5c:02:a9:38:b9:cf:a6: 4d:da:6e:a9:94:f6:9f:e7:88:09:a8:f6:f8:43:91: 19:4e:68:81:8f:b3:9a:c8:6a:17:2c:f9:8e:9d:a5: dc:07:e9:46:ad:c9:f0:f9:9b:3a:17:4d:e4:9f:5e: d6:e3:5f:25:68:50:5d:24:90:3b:88:03:76:51:d6: 52:d4:db:d5:f7:87:e2:5b:47:87:8f:94:d6:11:f6: 63:30:0c:f0:64:c7:6e:84:11:0c:c8:f8:41:41:3e: bc:1a:4b:c1:b9:35:17:de:d2:04:6f:62:63:57:d2: 9e:a3:92:b7:d9:54:e0:7e:72:9d:a8:4d:79:e6:4b: 3a:1c:4b:88:84:c7:e4:74:59:68:ea:6f:7a:59:10: c6:50:8e:d6:2a:dc:24:6d:b8:e3:ef:01:70:79:29: d9:7a:cb:2e:66:99:92:dd:b3:a7:b7:31:f6:90:8f: f8:b1:b7:4d:ba:2a:1c:b0:14:be:98:36:95:c0:5e: 7d:3d:ee:d3:97:e9:8e:99:a4:4e:ea:74:52:bf:2b: b4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:96:17:74:22:BC:90:04:13:08:DE:1B:07:B0:86:8E:E0:09:14:24 X509v3 Authority Key Identifier: keyid:70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7a:05:b9:5b:f2:f9:0a:57:64:ed:9a:3a:b0:19:20:ad:17: 38:62:cd:21:3e:5e:4a:12:29:5e:a5:9f:7e:50:eb:52:24:93: 7d:d0:4d:a5:3e:9f:46:49:d7:d8:92:9f:7d:ea:c7:c7:64:d9: de:a0:38:45:60:01:57:5b:19:46:bd:38:95:26:48:f5:33:84: e1:d5:1b:89:f2:6e:ba:0b:8e:05:bd:01:95:39:5c:ec:81:7d: ef:57:1b:ef:ef:42:54:a0:56:a9:a1:50:98:ad:33:81:14:fc: b2:96:4a:6d:80:2c:7c:4f:62:22:de:76:45:9b:51:94:33:4d: 2e:66:49:2b:f4:7a:b4:30:64:3a:b5:39:d9:de:31:5d:9f:1e: 3a:51:a4:98:d3:4f:48:2a:19:b7:4f:0c:56:62:c8:22:3f:0e: 72:83:90:e7:a0:e6:d6:71:7f:52:ce:9c:12:60:87:78:35:75: db:b3:e8:a2:5f:df:77:c3:03:f5:13:98:71:03:a1:25:17:fa: 74:d6:a0:08:d1:37:e1:4f:7a:a2:8c:31:5f:b1:d8:16:a7:2f: b0:25:5b:3f:01:70:df:6b:da:96:93:9c:62:98:71:f1:0b:82: b3:61:ab:e5:44:b3:51:32:8f:0d:9c:44:f4:f9:f3:54:24:0e: 8f:c0:81:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBREUxMTAvBgNVBAUTKDcwRTY4Q0U4NUEwMzhEOUUzMDcwNDM4MzdDQTZFNkIx QTY2MDk2RUUwHhcNMjUwOTE5MDAxNDU4WhcNMjUwOTI2MDAxNDU4WjAYMRYwFAYD VQQDEw02OGNjYTA4Mi00OTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArF77HinLPRAN/+lVD3DjYopEIgqmVRI84B2APHE6RjH+OJgWbOGM3AUJ+YM8 vP9b/mXVoVwCqTi5z6ZN2m6plPaf54gJqPb4Q5EZTmiBj7OayGoXLPmOnaXcB+lG rcnw+Zs6F03kn17W418laFBdJJA7iAN2UdZS1NvV94fiW0eHj5TWEfZjMAzwZMdu hBEMyPhBQT68GkvBuTUX3tIEb2JjV9Keo5K32VTgfnKdqE155ks6HEuIhMfkdFlo 6m96WRDGUI7WKtwkbbjj7wFweSnZessuZpmS3bOntzH2kI/4sbdNuiocsBS+mDaV wF59Pe7Tl+mOmaRO6nRSvyu0YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaWF3Qi vJAEEwjeGwewho7gCRQkMB8GA1UdIwQYMBaAFHDmjOhaA42eMHBDg3ym5rGmYJbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFERS8yODczOUQzQTQx REYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpaNHdjRU9EZktibXNhWmds dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPYU02Rm9Ealo0d2NFT0RmS2Jtc2FaZ2x1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFERS8yODczOUQzQTQxREYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpa NHdjRU9EZktibXNhWmdsdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALegW5W/L5Cldk7Zo6sBkgrRc4Ys0hPl5KEilepZ9+UOtSJJN90E2l Pp9GSdfYkp996sfHZNneoDhFYAFXWxlGvTiVJkj1M4Th1RuJ8m66C44FvQGVOVzs gX3vVxvv70JUoFapoVCYrTOBFPyylkptgCx8T2Ii3nZFm1GUM00uZkkr9Hq0MGQ6 tTnZ3jFdnx46UaSY009IKhm3TwxWYsgiPw5yg5DnoObWcX9SzpwSYId4NXXbs+ii X993wwP1E5hxA6ElF/p01qAI0TfhT3qijDFfsdgWpy+wJVs/AXDfa9qWk5ximHHx C4KzYavlRLNRMo8NnET0+fNUJA6PwIGc -----END CERTIFICATE-----Generated at Fri Sep 19 08:28:23 2025 by rpki-client