$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft File: 9htN6lh5mctuFcVAieTbmD0BuxA.mft (raw, json) Hash identifier: +5kBTQvVYKyBmHeoRO1phSiEYryb/438KHIfQL2n+JA= Subject key identifier: AE:A1:BF:E6:CE:38:BC:B4:7F:1F:5B:18:20:64:24:70:9F:CC:10:C0 Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10 Certificate issuer: /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10 Certificate serial: 08A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft Manifest number: 1426 Signing time: Thu 18 Sep 2025 19:13:09 +0000 Manifest this update: Thu 18 Sep 2025 19:13:09 +0000 Manifest next update: Thu 25 Sep 2025 19:13:09 +0000 Files and hashes: 1: 9htN6lh5mctuFcVAieTbmD0BuxA.crl (hash: Q22OanPHaxnwImdqPgiQ7kEM7HQmW7eAAdNowlzvB4U=) 2: 336BD320CA6111EA97DD3439C4F9AE02.roa (hash: pBil4YvB7UVloyu8DhnduF+muuJFikEsjN7164UGvgI=) 3: 341C7414CA6111EA97DD3439C4F9AE02.roa (hash: h5frQG89R9e/TKYUgyXgA4IPep2flQE62K3sYBLnEpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315, serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10 Validity Not Before: Sep 18 19:13:09 2025 GMT Not After : Sep 25 19:13:09 2025 GMT Subject: CN=68cc59c5-b736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:3a:0b:2e:57:73:66:4f:c5:6b:db:71:9e: f7:b4:10:58:02:55:a2:cd:06:0c:1c:8c:b1:84:11: a3:0d:d9:58:43:1f:10:d4:40:16:33:25:cb:ad:18: 2d:22:1d:40:af:fb:c8:c8:c9:24:44:21:1e:92:94: 71:26:49:4e:50:71:b8:31:95:e7:3d:d7:64:3f:17: 41:ef:52:2b:e1:7d:6a:39:74:7f:ab:3c:12:9a:58: c6:65:b8:59:5e:4e:ac:2e:d9:7b:50:53:03:12:00: ad:f7:33:eb:dd:30:87:da:7b:6d:c3:01:5e:81:33: 0c:65:5f:aa:9c:d6:5c:bd:0d:43:a0:24:09:5c:b9: e9:a9:1b:69:2c:b2:54:5c:9e:c7:3a:32:46:ba:30: 88:7f:dc:08:61:85:8c:9f:cd:6e:26:28:d8:ad:bb: 9c:9b:bb:87:e9:60:61:ac:cb:17:d4:66:b5:de:19: 5f:cb:2d:36:fa:8c:63:66:4c:8a:8d:ca:60:59:a4: cf:9b:ab:32:e4:8b:82:8c:6d:9c:a5:c9:eb:e6:a7: 2e:3a:6d:93:60:ef:01:a6:47:b3:fd:2c:75:b1:12: b1:a6:00:b5:6d:bd:87:db:a6:74:86:a7:26:92:21: 49:04:56:4d:0b:00:18:f9:0c:76:0b:67:1d:b0:99: 12:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A1:BF:E6:CE:38:BC:B4:7F:1F:5B:18:20:64:24:70:9F:CC:10:C0 X509v3 Authority Key Identifier: keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:38:1a:87:1d:32:0e:71:da:47:f5:4a:35:12:ca:64:61:a5: 50:8c:2d:7e:6a:b1:80:07:32:6b:59:35:b0:93:18:3d:b9:3d: 64:4d:a6:51:37:83:ca:ba:07:e6:b3:68:34:dc:9e:40:1f:0a: ad:f0:b8:e6:08:03:f5:1c:37:02:f6:6b:f2:83:0d:a5:97:53: 52:b4:55:90:d9:78:11:86:9a:06:1c:3d:37:2c:27:7d:63:77: 45:da:a9:f8:74:ab:e9:c4:32:9c:2a:15:6d:26:6e:73:9c:da: ca:78:a6:02:b0:ca:5e:e3:1e:9f:79:c0:53:09:19:ad:eb:cb: 12:e7:b6:69:c2:72:9c:eb:1d:dd:de:f8:e0:3b:33:ca:65:1d: 6f:9f:1b:34:6e:3f:63:71:03:a7:95:b0:56:c6:87:ee:3a:97: 4b:ea:69:a3:f0:29:cd:36:d8:2a:48:f4:79:85:01:f3:3d:08: 3a:51:a7:0a:3a:19:40:92:81:dc:81:47:8a:b7:ac:86:60:8f: 21:c6:62:99:b1:1c:2b:58:f2:bc:70:35:9a:1f:16:12:0c:74: f6:67:d2:c0:20:f6:2e:24:36:0a:03:a0:ae:c0:f3:68:96:e0: 6e:c2:51:b8:e9:01:fa:12:86:9e:a3:8d:ec:5d:9e:3e:e2:cc: d1:fb:77:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKEY2MUI0REVBNTg3OTk5Q0I2RTE1QzU0MDg5RTREQjk4 M0QwMUJCMTAwHhcNMjUwOTE4MTkxMzA5WhcNMjUwOTI1MTkxMzA5WjAYMRYwFAYD VQQDEw02OGNjNTljNS1iNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1s6Cy5Xc2ZPxWvbcZ73tBBYAlWizQYMHIyxhBGjDdlYQx8Q1EAWMyXLrRgt Ih1Ar/vIyMkkRCEekpRxJklOUHG4MZXnPddkPxdB71Ir4X1qOXR/qzwSmljGZbhZ Xk6sLtl7UFMDEgCt9zPr3TCH2nttwwFegTMMZV+qnNZcvQ1DoCQJXLnpqRtpLLJU XJ7HOjJGujCIf9wIYYWMn81uJijYrbucm7uH6WBhrMsX1Ga13hlfyy02+oxjZkyK jcpgWaTPm6sy5IuCjG2cpcnr5qcuOm2TYO8Bpkez/Sx1sRKxpgC1bb2H26Z0hqcm kiFJBFZNCwAY+Qx2C2cdsJkSYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6hv+bO OLy0fx9bGCBkJHCfzBDAMB8GA1UdIwQYMBaAFPYbTepYeZnLbhXFQInk25g9AbsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1jdHVGY1ZBaWVUYm1EMEJ1 eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlodE42bGg1bWN0dUZjVkFpZVRibUQwQnV4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1j dHVGY1ZBaWVUYm1EMEJ1eEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCOBqHHTIOcdpH9Uo1EspkYaVQjC1+arGABzJrWTWwkxg9uT1kTaZR N4PKugfms2g03J5AHwqt8LjmCAP1HDcC9mvygw2ll1NStFWQ2XgRhpoGHD03LCd9 Y3dF2qn4dKvpxDKcKhVtJm5znNrKeKYCsMpe4x6fecBTCRmt68sS57ZpwnKc6x3d 3vjgOzPKZR1vnxs0bj9jcQOnlbBWxofuOpdL6mmj8CnNNtgqSPR5hQHzPQg6UacK OhlAkoHcgUeKt6yGYI8hxmKZsRwrWPK8cDWaHxYSDHT2Z9LAIPYuJDYKA6CuwPNo luBuwlG46QH6Eoaeo43sXZ4+4szR+3d3 -----END CERTIFICATE-----Generated at Thu Sep 18 22:16:30 2025 by rpki-client