$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: haBPbS0/kybHbeiK5e0Kzm9ok8ApYGAK8IjGy/fwzY8= Subject key identifier: 95:72:C9:67:08:1C:76:38:02:C5:C1:6F:AD:3D:F2:AE:4E:1A:AF:3F Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 067E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 0666 Signing time: Mon 08 Sep 2025 22:39:07 +0000 Manifest this update: Mon 08 Sep 2025 22:39:07 +0000 Manifest next update: Mon 15 Sep 2025 22:39:07 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: TG539xBewqeUhxX10JYw80j/AmmrLkyaajCpS2lFXgo=) 2: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: P0BhZPNBq4fF0iWoLAGwiGCR4fuUazibBS/DViNXhlI=) 3: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: 6bWPYL9HlnXbgKm1pf8hjZDzf0KdOhZ+kEEuV8xvMnc=) 4: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: GSq2aTh4Ighs8Kd5WfNm9bR33IhLvfkn/9rz4nvZ37o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1662 (0x67e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: Sep 8 22:39:07 2025 GMT Not After : Sep 15 22:39:07 2025 GMT Subject: CN=68bf5b0b-59cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d6:6e:db:59:43:1e:fd:69:52:5d:61:44:13: e5:34:c3:b0:39:2d:87:13:90:c6:47:ad:a0:8d:00: 05:08:85:a9:76:df:ab:0b:1e:ee:de:32:78:dc:aa: f9:86:88:38:6b:02:e8:db:0a:b1:8d:d2:e0:1b:73: 6f:9d:2a:17:eb:fa:d8:10:bc:79:80:35:3e:0d:3d: 68:aa:2e:cf:eb:5f:6c:5d:46:8e:c7:4a:a9:71:17: 1c:6d:14:7e:a5:88:85:74:ca:d6:cc:a0:82:32:7a: 9c:18:52:e7:8f:10:36:2e:84:97:aa:41:2d:50:c5: 64:c9:eb:c5:59:83:15:62:34:89:9f:00:11:39:28: 4f:07:a0:0e:1c:2f:42:c1:78:c7:01:1e:c6:24:4b: f3:96:c2:1d:09:9e:6b:cf:a8:e1:47:c0:45:84:77: de:47:61:47:4f:8c:63:8c:aa:5d:06:db:19:87:f5: 4e:87:38:44:5b:07:96:c0:50:9d:4c:11:5d:0a:fb: da:09:73:e0:c3:d4:4f:98:a0:3f:bf:1c:2c:85:b3: a3:54:78:e9:39:08:02:59:5a:bb:aa:c9:4e:11:67: 93:e4:7c:a1:9e:cf:50:53:a2:8c:85:2d:40:fb:3b: d0:e2:e2:c1:44:ff:f3:60:40:4c:ec:2a:a1:a9:8e: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:72:C9:67:08:1C:76:38:02:C5:C1:6F:AD:3D:F2:AE:4E:1A:AF:3F X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:24:40:e7:fe:95:ae:f5:78:42:27:02:0f:04:cb:da:e0:d0: c9:b3:14:41:75:90:36:6f:a8:d2:1d:5a:68:a2:7a:85:f7:ee: e6:bc:29:71:e5:28:11:53:61:bf:97:ed:26:e4:0f:ee:d6:59: 5f:dd:59:76:4d:b3:6a:32:fa:b6:e1:0e:7c:84:4c:04:90:48: 39:4d:28:7a:fa:0d:ee:e0:22:31:2a:9d:fc:5a:73:83:3a:6e: d4:01:b0:6b:61:1e:f1:c9:cd:98:4b:ff:3b:d0:fc:21:6b:0c: 29:44:fc:9a:1c:15:4e:e0:6d:d5:64:e4:d8:d5:8d:c4:52:86: 65:7d:21:dd:aa:00:a2:83:78:b5:77:ea:12:0c:d3:16:19:8b: cb:a3:6d:6f:cc:01:e2:8d:be:b3:90:e5:8c:31:5b:a6:4e:67: 92:2b:b9:58:4f:48:d4:f0:8b:97:c8:c9:a8:1e:f5:11:29:c9: 16:16:09:39:6f:53:24:9c:d5:f4:72:a9:af:57:97:91:de:22: 58:b7:af:c3:71:bb:73:d3:b4:27:cb:cd:3a:f8:ee:cd:7e:04: 1e:f6:3a:45:67:e3:06:fc:02:e5:89:ba:76:20:13:72:4e:c2: a3:fb:e3:c0:ee:cb:d7:30:4f:5c:a7:59:4d:99:58:54:89:06: 35:45:8a:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjUwOTA4MjIzOTA3WhcNMjUwOTE1MjIzOTA3WjAYMRYwFAYD VQQDEw02OGJmNWIwYi01OWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dZu21lDHv1pUl1hRBPlNMOwOS2HE5DGR62gjQAFCIWpdt+rCx7u3jJ43Kr5 hog4awLo2wqxjdLgG3NvnSoX6/rYELx5gDU+DT1oqi7P619sXUaOx0qpcRccbRR+ pYiFdMrWzKCCMnqcGFLnjxA2LoSXqkEtUMVkyevFWYMVYjSJnwAROShPB6AOHC9C wXjHAR7GJEvzlsIdCZ5rz6jhR8BFhHfeR2FHT4xjjKpdBtsZh/VOhzhEWweWwFCd TBFdCvvaCXPgw9RPmKA/vxwshbOjVHjpOQgCWVq7qslOEWeT5Hyhns9QU6KMhS1A +zvQ4uLBRP/zYEBM7CqhqY5CSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVyyWcI HHY4AsXBb6098q5OGq8/MB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSJEDn/pWu9XhCJwIPBMva4NDJsxRBdZA2b6jSHVpoonqF9+7mvClx 5SgRU2G/l+0m5A/u1llf3Vl2TbNqMvq24Q58hEwEkEg5TSh6+g3u4CIxKp38WnOD Om7UAbBrYR7xyc2YS/870PwhawwpRPyaHBVO4G3VZOTY1Y3EUoZlfSHdqgCig3i1 d+oSDNMWGYvLo21vzAHijb6zkOWMMVumTmeSK7lYT0jU8IuXyMmoHvURKckWFgk5 b1MknNX0cqmvV5eR3iJYt6/Dcbtz07Qny806+O7NfgQe9jpFZ+MG/ALlibp2IBNy TsKj++PA7svXME9cp1lNmVhUiQY1RYp+ -----END CERTIFICATE-----Generated at Tue Sep 9 15:14:21 2025 by rpki-client