$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft File: fJ9yIp7REllMdyLTwhtRBeKfxIo.mft (raw, json) Hash identifier: WbE5ppnmC/cv060nT/ewQ/xrZE1q8DIdm90MsNZjcMA= Subject key identifier: A2:8E:24:6E:A2:45:46:57:44:CA:5C:8E:83:05:C0:78:84:67:1C:8C Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A Certificate issuer: /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft Manifest number: 01A2 Signing time: Wed 17 Sep 2025 03:53:28 +0000 Manifest this update: Wed 17 Sep 2025 03:53:27 +0000 Manifest next update: Wed 24 Sep 2025 03:53:27 +0000 Files and hashes: 1: fJ9yIp7REllMdyLTwhtRBeKfxIo.crl (hash: m9T1osSmcYmYVSWZnAAbJpPduxsf1mXITUnK3zZCEvU=) 2: 0D99319006F011EFA8C8D445C4F9AE02.roa (hash: A4DVK+hVAcm077tOI0UtMRITW1ft4Rq073mjOE1b4lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77AD, serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Validity Not Before: Sep 17 03:53:27 2025 GMT Not After : Sep 24 03:53:27 2025 GMT Subject: CN=68ca30b8-4bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:64:39:38:64:e9:7e:05:10:af:37:cf:c2:54: 35:7e:53:c4:d4:cc:78:a7:44:7e:6e:0f:6d:91:49: fa:39:fe:3d:a4:11:c8:4e:85:6e:7e:64:97:17:d1: 8b:d0:1a:a5:4c:28:1a:0d:35:78:d0:78:d0:42:8f: 29:b8:d0:aa:b4:48:81:b4:64:5a:0f:3d:61:64:a4: 65:7c:d1:30:fc:67:ff:1c:58:00:23:da:5d:d6:8f: a3:98:ea:13:cd:6b:55:91:6b:d0:a3:ff:49:0e:73: cd:94:be:66:c2:02:9f:35:d2:25:e9:a1:8d:30:e7: 23:92:05:c8:87:63:95:18:24:b2:24:f0:97:c0:4c: c4:00:bd:fc:a1:a2:aa:35:4d:54:dd:ed:b8:aa:e1: 03:cd:34:35:b7:4b:71:6f:83:c0:76:b2:fe:03:c8: 23:d0:d2:31:ac:63:c3:af:b7:b2:09:c5:b0:72:5e: d0:af:04:87:ac:f3:a3:73:b6:75:36:a4:8e:0f:de: da:bd:27:c9:bb:91:0b:f6:6a:88:c8:d2:e8:7b:85: f2:bf:ef:b1:98:29:bc:6e:ea:46:f3:fe:af:12:48: 01:3a:4f:fd:4b:de:b0:51:3b:58:ae:45:42:c9:f8: 19:0c:e0:e6:05:9c:28:82:a8:6c:64:7e:db:92:0f: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8E:24:6E:A2:45:46:57:44:CA:5C:8E:83:05:C0:78:84:67:1C:8C X509v3 Authority Key Identifier: keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c1:84:39:73:eb:8b:e2:3c:ac:82:71:db:46:ea:40:f9:10: 0f:e2:56:93:b0:b1:db:f3:53:9a:e8:37:50:49:1a:0b:3a:ae: 62:a1:93:03:6c:21:40:1f:85:e2:0a:97:5e:11:6d:eb:01:3e: 01:82:85:3b:47:d5:6b:53:f7:01:90:ed:c7:c3:78:88:41:e0: d3:99:38:74:01:03:da:e8:1e:7d:db:a7:82:ec:52:c6:7b:71: f1:9e:df:ca:10:38:51:76:9c:9b:ae:7b:51:ea:06:c2:c8:79: f8:6b:c1:ed:52:75:c0:9f:9c:b1:9d:ff:a0:92:1a:bb:01:f2: 51:38:00:a8:93:0e:45:88:5a:26:63:0c:da:3b:cc:b8:b8:5c: 9d:4f:c5:68:5a:ac:a4:a1:7d:ab:b5:1a:2c:35:5e:e1:b8:c3: 21:79:bf:9d:90:23:a3:23:af:31:fc:c8:5c:f2:41:58:14:c8: 1b:9e:18:42:87:e7:6c:4f:31:10:64:c8:5d:c1:b3:fa:75:12: ae:cf:0f:5f:78:ca:67:d9:b2:24:65:14:0c:43:f2:35:6d:d8: 4d:57:45:ff:e0:85:df:09:2c:8e:01:1d:43:01:e3:10:72:9e: 89:fb:5e:79:c1:a4:4a:bc:01:91:5d:e6:db:cf:8d:b7:9d:66: 6f:66:a8:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3QUQxMTAvBgNVBAUTKDdDOUY3MjIyOUVEMTEyNTk0Qzc3MjJEM0MyMUI1MTA1 RTI5RkM0OEEwHhcNMjUwOTE3MDM1MzI3WhcNMjUwOTI0MDM1MzI3WjAYMRYwFAYD VQQDEw02OGNhMzBiOC00YmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22Q5OGTpfgUQrzfPwlQ1flPE1Mx4p0R+bg9tkUn6Of49pBHIToVufmSXF9GL 0BqlTCgaDTV40HjQQo8puNCqtEiBtGRaDz1hZKRlfNEw/Gf/HFgAI9pd1o+jmOoT zWtVkWvQo/9JDnPNlL5mwgKfNdIl6aGNMOcjkgXIh2OVGCSyJPCXwEzEAL38oaKq NU1U3e24quEDzTQ1t0txb4PAdrL+A8gj0NIxrGPDr7eyCcWwcl7QrwSHrPOjc7Z1 NqSOD97avSfJu5EL9mqIyNLoe4Xyv++xmCm8bupG8/6vEkgBOk/9S96wUTtYrkVC yfgZDODmBZwogqhsZH7bkg9k7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKOJG6i RUZXRMpcjoMFwHiEZxyMMB8GA1UdIwQYMBaAFHyfciKe0RJZTHci08IbUQXin8SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdBRC9DRTZDMjM3QTIw QTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVsbE1keUxUd2h0UkJlS2Z4 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKOXlJcDdSRWxsTWR5TFR3aHRSQmVLZnhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdBRC9DRTZDMjM3QTIwQTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVs bE1keUxUd2h0UkJlS2Z4SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtwYQ5c+uL4jysgnHbRupA+RAP4laTsLHb81Oa6DdQSRoLOq5ioZMD bCFAH4XiCpdeEW3rAT4BgoU7R9VrU/cBkO3Hw3iIQeDTmTh0AQPa6B5926eC7FLG e3Hxnt/KEDhRdpybrntR6gbCyHn4a8HtUnXAn5yxnf+gkhq7AfJROACokw5FiFom YwzaO8y4uFydT8VoWqykoX2rtRosNV7huMMheb+dkCOjI68x/Mhc8kFYFMgbnhhC h+dsTzEQZMhdwbP6dRKuzw9feMpn2bIkZRQMQ/I1bdhNV0X/4IXfCSyOAR1DAeMQ cp6J+155waRKvAGRXebbz423nWZvZqgc -----END CERTIFICATE-----Generated at Fri Sep 19 03:41:16 2025 by rpki-client