$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json) Hash identifier: y7ju6CFasimnvlU9OtfyMe4BYulsSrNy5+aZT8jYMy8= Subject key identifier: CF:C1:9B:B1:DC:F6:F5:B1:FD:9F:1F:81:7B:69:45:E7:36:86:3B:BF Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft Manifest number: BC Signing time: Tue 09 Sep 2025 06:02:45 +0000 Manifest this update: Tue 09 Sep 2025 06:02:45 +0000 Manifest next update: Tue 16 Sep 2025 06:02:45 +0000 Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: l/tcwIUb2d0xZxATsBXeyysHYYbtoyAy0kMUDsykYHY=) 2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: oPt/hUSuzgl3vf6IekNSVwLM4HNHGT76iBnF/i7Fi6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: Sep 9 06:02:45 2025 GMT Not After : Sep 16 06:02:45 2025 GMT Subject: CN=68bfc305-2a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:c4:a2:ce:35:3b:26:e5:60:b3:e6:ec:92: c1:cd:0e:59:7e:d0:84:0f:77:9a:3c:3f:fc:ee:00: 71:2a:e5:1b:d0:1b:79:17:3c:f8:4e:b7:a5:cb:8f: 08:7b:b9:69:2e:45:fe:e8:64:d7:b6:1c:ce:53:fa: 65:26:6f:2d:4d:4f:56:53:34:c5:26:bb:c4:cd:c1: e0:ca:e8:28:e8:2e:97:87:c9:cb:88:87:ae:27:d3: 42:e8:ad:14:2b:42:dd:e3:1f:03:c8:25:66:0c:c3: 34:6f:fe:40:5e:fd:55:6f:fd:fa:66:b8:4f:ae:f4: 95:74:47:67:30:7f:5b:62:26:3e:03:52:78:0f:66: ec:83:21:cf:20:60:48:ba:30:f4:6e:57:ae:54:bf: ec:34:e9:42:5f:8b:86:45:d6:ee:93:8e:f6:bb:ee: 91:be:31:e2:03:0a:a8:99:97:22:01:b7:60:f9:ad: 8b:8b:52:36:58:58:c3:7e:5a:15:35:a3:77:3b:fb: 5a:46:ad:44:18:20:cc:f6:99:59:84:2a:f2:b5:13: 81:54:94:b7:4a:b4:6c:c9:9e:d5:91:be:f6:61:a5: 4a:0e:c0:21:5e:b4:0e:b4:19:b7:ea:b7:94:11:8e: 02:f6:03:26:fe:e7:a7:f1:eb:e0:51:88:e9:b1:ba: a9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C1:9B:B1:DC:F6:F5:B1:FD:9F:1F:81:7B:69:45:E7:36:86:3B:BF X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c8:c9:bc:1b:db:80:b2:45:75:dc:9b:a9:3a:05:30:05:57: 5d:86:49:33:c9:f2:54:3f:52:1f:e3:1d:e8:ca:72:e5:37:7f: 49:fa:f8:0a:ef:de:df:32:f7:ac:ab:1f:0a:21:49:7c:aa:3a: 38:cd:c4:71:32:cf:1c:08:9d:7c:6d:f3:df:a8:00:77:bd:63: 89:a3:45:14:3f:c9:00:1c:61:e5:c9:f0:b3:15:e2:56:66:48: f1:64:27:1d:cc:59:3d:c1:cb:33:a1:c0:9a:c3:bf:ad:b1:c8: a8:df:dc:b8:1c:50:65:5b:41:45:94:ec:7e:f4:ed:8b:d1:e5: 59:81:06:b8:4d:46:5e:d8:24:7a:3a:b8:ec:74:f4:75:89:cc: ab:3b:bd:b6:3a:ff:20:fc:d9:33:d8:e2:3f:e0:bb:1c:69:15: c5:53:7e:64:1c:f3:ad:69:cf:63:87:98:ff:a9:d2:47:a6:51: ba:94:b3:0b:eb:8e:b6:0d:20:24:88:90:c2:19:88:15:09:02: a7:77:8c:a6:32:62:de:c0:23:47:48:84:5e:13:2b:07:30:91: cf:dd:97:3b:53:dc:76:be:b9:16:6d:4f:f7:6e:cd:54:d5:e6: 5e:ec:08:7a:f8:df:b7:69:e3:83:36:25:e5:95:27:ce:0f:f4: d8:e5:a8:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx NjMwOUMxNzcwHhcNMjUwOTA5MDYwMjQ1WhcNMjUwOTE2MDYwMjQ1WjAYMRYwFAYD VQQDEw02OGJmYzMwNS0yYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9vEos41OyblYLPm7JLBzQ5ZftCED3eaPD/87gBxKuUb0Bt5Fzz4Trely48I e7lpLkX+6GTXthzOU/plJm8tTU9WUzTFJrvEzcHgyugo6C6Xh8nLiIeuJ9NC6K0U K0Ld4x8DyCVmDMM0b/5AXv1Vb/36ZrhPrvSVdEdnMH9bYiY+A1J4D2bsgyHPIGBI ujD0bleuVL/sNOlCX4uGRdbuk472u+6RvjHiAwqomZciAbdg+a2Li1I2WFjDfloV NaN3O/taRq1EGCDM9plZhCrytROBVJS3SrRsyZ7Vkb72YaVKDsAhXrQOtBm36reU EY4C9gMm/uen8evgUYjpsbqpNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/Bm7Hc 9vWx/Z8fgXtpRec2hju/MB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlEOS9GNTYwMzdBNjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhB TUNVdzNSTVhSQ01XTUp3WGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNyMm8G9uAskV13JupOgUwBVddhkkzyfJUP1If4x3oynLlN39J+vgK 797fMvesqx8KIUl8qjo4zcRxMs8cCJ18bfPfqAB3vWOJo0UUP8kAHGHlyfCzFeJW ZkjxZCcdzFk9wcszocCaw7+tscio39y4HFBlW0FFlOx+9O2L0eVZgQa4TUZe2CR6 OrjsdPR1icyrO722Ov8g/Nkz2OI/4LscaRXFU35kHPOtac9jh5j/qdJHplG6lLML 6462DSAkiJDCGYgVCQKnd4ymMmLewCNHSIReEysHMJHP3Zc7U9x2vrkWbU/3bs1U 1eZe7Ah6+N+3aeODNiXllSfOD/TY5aim -----END CERTIFICATE-----Generated at Tue Sep 9 13:17:30 2025 by rpki-client