$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json) Hash identifier: 38BNlMESL/hKz2EpcHPKtZ021e7JWbKzLRBCUcB3KWM= Subject key identifier: 54:33:D9:7A:2E:04:75:E6:2C:61:BF:B1:EF:94:67:0B:FB:3A:0E:96 Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft Manifest number: 9C Signing time: Wed 03 Sep 2025 07:02:44 +0000 Manifest this update: Wed 03 Sep 2025 07:02:43 +0000 Manifest next update: Wed 10 Sep 2025 07:02:43 +0000 Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: sktu1Te4UrAWHVFWqDZ6rmpKdCWn5S43f5GTapiAANQ=) 2: 42F359D22DE211F0A991F83DC4F9AE02.roa (hash: GS7VGsIuP00slQDLOowlxynsnmpTUaLEp1HD+LKtTww=) 3: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: ak2PMRQUjFtffexIQ55kAPaMfx+wqf8bsH7hFH3Plx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: Sep 3 07:02:43 2025 GMT Not After : Sep 10 07:02:43 2025 GMT Subject: CN=68b7e813-c9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6d:92:0a:33:94:a3:37:18:94:f3:6d:2f:dc: 5d:33:b1:53:1f:21:6c:0e:46:31:48:a2:b9:f3:12: 1c:5f:94:ec:38:0d:ac:d2:8a:86:a0:25:fc:75:73: 40:4d:08:0a:40:eb:cd:39:18:f4:65:9e:18:3a:a3: 56:94:b6:ac:e3:89:ea:86:5d:db:1d:e2:e9:91:86: 15:39:8c:83:18:63:ff:c4:00:c2:b5:95:af:a7:a0: cf:d7:dc:e7:f0:4d:a1:60:b0:b3:27:bb:6c:e7:07: de:ae:73:c6:1f:7b:6b:ca:45:34:bd:4b:57:df:c0: a8:0f:f2:aa:78:dc:56:3d:6c:a3:ba:c1:c3:e8:30: 8d:0f:6a:77:5d:71:34:52:c2:83:ac:53:82:0c:62: 5a:a9:c6:ac:90:9a:8e:00:b9:8b:77:c5:9b:b9:54: 37:cd:bf:31:1c:3b:a2:53:6f:fe:7e:3c:42:d9:d9: 58:eb:20:93:42:82:e5:5c:80:9a:45:1c:87:5f:c9: c9:52:56:2b:7b:ec:a6:21:bd:71:22:77:d7:50:8d: 00:68:f1:cd:b3:40:f4:e8:9b:4e:b9:c1:fc:51:fc: 0c:c2:f3:15:c8:16:43:c1:10:47:20:23:88:37:4e: 2d:30:91:5c:ac:5a:d4:f5:6a:e0:c1:46:72:7b:2d: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:33:D9:7A:2E:04:75:E6:2C:61:BF:B1:EF:94:67:0B:FB:3A:0E:96 X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f9:9d:42:bb:e1:10:a0:1d:a1:87:32:39:15:03:f7:65:e5: 44:7d:d9:57:59:71:60:f6:9a:ab:90:39:39:df:69:33:ad:e6: 17:54:67:7b:c2:bb:19:54:d0:19:0d:95:ea:2e:85:71:72:65: c6:75:4e:9d:ce:95:72:4a:3a:2e:93:d4:ba:c5:1e:bc:b8:d9: 1b:90:50:6e:74:0f:a3:ca:38:20:a4:42:73:da:69:55:32:cd: 6b:0d:b8:06:46:1a:81:c5:02:e5:91:76:5b:24:54:32:1d:5b: 23:f7:d3:52:22:72:3b:83:d1:12:51:8d:6d:b8:10:a9:80:b8: 3f:de:de:30:54:84:5b:9d:ae:fd:16:13:da:0d:39:ef:e0:ce: eb:3f:59:6f:4f:54:b8:12:20:88:2f:dc:84:ec:06:e4:a7:33: 87:75:20:21:2c:d7:0b:a6:8a:07:b5:dc:92:3b:8b:f1:01:4e: 09:bf:b1:ad:9b:9c:9d:00:7e:db:21:9c:53:8c:08:64:d4:b3: 96:f4:a7:6a:18:3b:70:90:af:04:30:91:d8:74:b3:74:0b:b6: c6:ec:60:32:eb:89:d0:9c:a5:ad:71:cb:7a:17:ab:50:f7:87: 1e:61:08:aa:3c:4c:6c:92:64:51:d7:5d:4c:a3:26:9f:44:95: 16:74:f5:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKERGNUZFMjFCN0M5NTUyMTU5MzQ0NzE3OTREOEIwNzA2 NjNEMkIzNEUwHhcNMjUwOTAzMDcwMjQzWhcNMjUwOTEwMDcwMjQzWjAYMRYwFAYD VQQDEw02OGI3ZTgxMy1jOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA722SCjOUozcYlPNtL9xdM7FTHyFsDkYxSKK58xIcX5TsOA2s0oqGoCX8dXNA TQgKQOvNORj0ZZ4YOqNWlLas44nqhl3bHeLpkYYVOYyDGGP/xADCtZWvp6DP19zn 8E2hYLCzJ7ts5wfernPGH3trykU0vUtX38CoD/KqeNxWPWyjusHD6DCND2p3XXE0 UsKDrFOCDGJaqcaskJqOALmLd8WbuVQ3zb8xHDuiU2/+fjxC2dlY6yCTQoLlXICa RRyHX8nJUlYre+ymIb1xInfXUI0AaPHNs0D06JtOucH8UfwMwvMVyBZDwRBHICOI N04tMJFcrFrU9WrgwUZyey3mlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQz2Xou BHXmLGG/se+UZwv7Og6WMB8GA1UdIwQYMBaAFN9f4ht8lVIVk0RxeU2LBwZj0rNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84MDJBRTY0NkEy NzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVoV1RSSEY1VFlzSEJtUFNz MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3MwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84MDJBRTY0NkEyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVo V1RSSEY1VFlzSEJtUFNzMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS+Z1Cu+EQoB2hhzI5FQP3ZeVEfdlXWXFg9pqrkDk532kzreYXVGd7 wrsZVNAZDZXqLoVxcmXGdU6dzpVySjouk9S6xR68uNkbkFBudA+jyjggpEJz2mlV Ms1rDbgGRhqBxQLlkXZbJFQyHVsj99NSInI7g9ESUY1tuBCpgLg/3t4wVIRbna79 FhPaDTnv4M7rP1lvT1S4EiCIL9yE7AbkpzOHdSAhLNcLpooHtdySO4vxAU4Jv7Gt m5ydAH7bIZxTjAhk1LOW9KdqGDtwkK8EMJHYdLN0C7bG7GAy64nQnKWtcct6F6tQ 94ceYQiqPExskmRR111MoyafRJUWdPUi -----END CERTIFICATE-----Generated at Thu Sep 4 15:53:23 2025 by rpki-client