$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: iQswUVx8PuXfoQqAz8OfGkia8akIY7UvwcnXMHFNiww= Subject key identifier: B5:04:43:07:29:88:17:8B:51:C1:D6:FE:3B:58:19:23:99:38:A6:AF Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: EC Signing time: Sun 07 Sep 2025 05:47:25 +0000 Manifest this update: Sun 07 Sep 2025 05:47:24 +0000 Manifest next update: Sun 14 Sep 2025 05:47:24 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: 8qqmwhfdyHhR/VpN8dcGsof1Q2XltR3iExCeD6MHQf8=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: 2wSZlJkEVODTCB+anJmD5JlJEQTA220xHKcLvDnH+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Sep 7 05:47:24 2025 GMT Not After : Sep 14 05:47:24 2025 GMT Subject: CN=68bd1c6c-a9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1b:80:16:88:cf:66:f3:1b:37:c5:87:64:89: 17:fb:e0:5d:38:bb:22:74:2f:c1:01:d1:8c:36:5f: 90:27:61:03:9f:0a:43:2b:91:c5:88:20:81:27:b7: 5a:76:73:31:b4:97:df:1d:3e:79:9c:63:87:c9:51: 0a:a6:f0:17:77:bf:fb:88:cb:cf:11:80:27:46:0d: 7c:9f:b4:d5:34:14:bc:82:0c:a2:9a:cb:0f:f7:c9: aa:e1:ea:dd:20:b7:42:58:68:f0:b2:6b:39:5c:f5: 13:4f:77:04:a8:b3:f2:17:d8:93:6b:19:3f:e8:93: 2c:a0:e1:fc:b8:47:ac:36:c8:64:b0:62:ac:cd:2d: a7:86:0e:b7:ec:be:03:49:76:f0:49:13:fb:ba:ee: 47:95:99:a4:20:f0:2a:14:33:89:7a:64:4f:5f:31: c5:3a:b8:d3:a4:23:c0:75:15:1d:33:4c:8b:5c:d0: 4d:41:b5:11:49:a4:ac:6b:01:fd:85:66:80:c7:c0: d5:c6:fe:95:c9:07:a2:e1:0f:74:c0:e1:5b:9d:bf: 08:71:cb:75:53:e6:e3:6b:74:99:d1:5c:b2:6f:40: a2:ad:99:7c:7f:ea:9c:29:06:31:c1:f8:90:67:b1: de:14:f8:13:68:1b:bb:e6:bf:54:a8:1f:16:27:b8: f1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:04:43:07:29:88:17:8B:51:C1:D6:FE:3B:58:19:23:99:38:A6:AF X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ec:39:ea:a1:37:fa:8c:d5:91:0d:0f:e2:7f:f3:e7:e4:0b: f9:9f:f8:bf:b3:a6:a0:8d:bf:7b:55:2c:c4:b4:f5:66:38:0e: 8b:2c:43:74:fd:26:96:e0:62:43:fe:e4:4a:8d:9a:02:08:07: 7d:12:d3:c7:da:d0:7d:da:26:04:3a:fb:e0:c6:ff:64:ab:75: cd:a2:d8:03:69:da:11:6e:ac:6e:c8:07:16:f0:3e:48:76:18: a4:b9:b7:a8:4f:f4:26:a5:89:ff:c8:3e:aa:57:ab:c3:40:17: a0:4c:00:70:95:c8:73:23:d0:00:6c:3d:fc:6d:06:5c:b2:7e: e3:43:da:89:36:0f:41:89:91:b3:b0:c0:e7:11:9c:f2:15:9e: 2d:e1:ca:ec:23:6c:41:1d:c3:35:6d:6b:56:20:aa:7a:79:bd: c3:87:d1:83:82:eb:29:ee:92:e3:aa:44:48:e6:1e:fb:6b:5b: 7b:f2:67:22:d2:0a:9d:6e:e4:69:ca:15:60:27:83:67:10:78: 32:90:40:c4:f5:70:bf:46:31:06:bd:7d:83:5f:7f:81:09:00: 00:08:c2:0f:54:3a:3f:8a:22:6a:86:f9:a8:e1:06:67:38:42: 77:c3:e3:a0:2e:aa:b0:b0:3e:4b:94:20:4a:b9:f8:5d:c0:e2: 78:1a:cf:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDA5QzM2QkM2NURFNzJBMDQxNDdGOUQ3MjIwQkRCQThE NTI1RDE1NjQwHhcNMjUwOTA3MDU0NzI0WhcNMjUwOTE0MDU0NzI0WjAYMRYwFAYD VQQDEw02OGJkMWM2Yy1hOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BuAFojPZvMbN8WHZIkX++BdOLsidC/BAdGMNl+QJ2EDnwpDK5HFiCCBJ7da dnMxtJffHT55nGOHyVEKpvAXd7/7iMvPEYAnRg18n7TVNBS8ggyimssP98mq4erd ILdCWGjwsms5XPUTT3cEqLPyF9iTaxk/6JMsoOH8uEesNshksGKszS2nhg637L4D SXbwSRP7uu5HlZmkIPAqFDOJemRPXzHFOrjTpCPAdRUdM0yLXNBNQbURSaSsawH9 hWaAx8DVxv6VyQei4Q90wOFbnb8Icct1U+bja3SZ0Vyyb0CirZl8f+qcKQYxwfiQ Z7HeFPgTaBu75r9UqB8WJ7jxRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUEQwcp iBeLUcHW/jtYGSOZOKavMB8GA1UdIwQYMBaAFAnDa8Zd5yoEFH+dciC9uo1SXRVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy9BMzk3QTNFNDI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktnUVVmNTF5SUwyNmpWSmRG V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy9BMzk3QTNFNDI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktn UVVmNTF5SUwyNmpWSmRGV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL7DnqoTf6jNWRDQ/if/Pn5Av5n/i/s6agjb97VSzEtPVmOA6LLEN0 /SaW4GJD/uRKjZoCCAd9EtPH2tB92iYEOvvgxv9kq3XNotgDadoRbqxuyAcW8D5I dhikubeoT/QmpYn/yD6qV6vDQBegTABwlchzI9AAbD38bQZcsn7jQ9qJNg9BiZGz sMDnEZzyFZ4t4crsI2xBHcM1bWtWIKp6eb3Dh9GDgusp7pLjqkRI5h77a1t78mci 0gqdbuRpyhVgJ4NnEHgykEDE9XC/RjEGvX2DX3+BCQAACMIPVDo/iiJqhvmo4QZn OEJ3w+OgLqqwsD5LlCBKufhdwOJ4Gs/U -----END CERTIFICATE-----Generated at Mon Sep 8 18:55:47 2025 by rpki-client