$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft File: aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json) Hash identifier: iFRtekBaOj6jz33Ka1VH4tROoPiSMOlOx9sQXLdI8/A= Subject key identifier: 59:65:9E:79:5C:DB:28:0F:88:D3:9F:A1:4D:AB:3A:82:7B:EC:06:7F Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E Certificate issuer: /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Certificate serial: 0697 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft Manifest number: 0690 Signing time: Tue 16 Sep 2025 22:40:22 +0000 Manifest this update: Tue 16 Sep 2025 22:40:21 +0000 Manifest next update: Tue 23 Sep 2025 22:40:21 +0000 Files and hashes: 1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: VKBoeZdNHgiCxGGj4ByLOEe8CpTbmpQBuy90A+/AI2Q=) 2: 75AB03A2870B11EB88E44876C4F9AE02.roa (hash: 7qI+njWvbbh+KneeLcZmySdlxOhiGVsKeC65nMgeI7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 22:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1687 (0x697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Validity Not Before: Sep 16 22:40:21 2025 GMT Not After : Sep 23 22:40:21 2025 GMT Subject: CN=68c9e756-13e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:84:de:3b:d1:86:1c:61:71:2e:ba:2c:12: b7:a2:9f:80:0e:b7:96:aa:65:1e:b7:4e:02:f3:2f: d1:90:7b:43:40:7e:e8:ae:42:9a:b4:6a:51:3c:ce: 68:f5:9c:65:8b:b8:b8:94:70:0d:ba:54:33:13:4a: 08:4e:bf:47:a6:87:68:cf:2d:f9:fa:86:c5:64:e3: cf:3a:4b:9e:5e:8f:3f:b9:40:51:a0:86:3a:5a:65: b9:5e:33:c0:73:aa:0e:93:80:14:ff:20:33:32:28: 86:b6:c2:31:c0:8c:84:7a:ab:d4:25:50:39:bb:d8: 51:36:64:75:52:6f:40:80:eb:a9:09:5b:8e:6b:33: e6:24:6b:7a:35:35:37:f2:89:35:1f:8c:61:8e:c7: a6:80:f2:bc:c2:56:3b:ac:f7:76:4d:18:70:aa:b2: 6a:11:ac:26:d5:cf:9c:5b:9f:df:0b:77:b5:84:f2: bc:32:79:1a:bd:b7:f3:f0:12:7e:3d:10:97:c4:51: 1e:a1:b8:d4:5e:8f:d2:5f:2e:db:8c:1a:83:95:e6: 24:a5:d9:0d:63:4c:68:5e:25:52:2f:4f:77:47:ac: da:1e:79:a9:0e:28:7a:87:4b:a8:16:6d:bd:d3:6b: fc:d1:ed:a8:b3:58:5e:dc:b3:58:6a:27:27:a5:ef: 8f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:65:9E:79:5C:DB:28:0F:88:D3:9F:A1:4D:AB:3A:82:7B:EC:06:7F X509v3 Authority Key Identifier: keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8d:58:42:f8:e7:73:45:56:f9:a5:a5:b7:67:7b:a7:49:50: a9:a2:8b:df:f3:6d:19:1e:12:e6:77:75:cd:dc:04:71:65:26: 71:78:3e:ed:a0:47:92:9c:b2:c0:aa:d5:e8:3a:ef:a6:67:a9: c4:2f:22:ad:5a:37:c6:b6:9c:b5:73:30:8f:00:5b:f7:1e:bf: 2c:e2:da:85:e3:04:f5:0f:52:2d:40:5b:15:00:dc:50:12:46: 55:31:d4:0d:22:1d:11:b3:31:fb:4b:ae:c7:61:ad:da:fa:d9: ee:2d:00:b5:82:06:a3:84:9e:c2:05:6f:01:73:e7:da:19:99: bd:08:71:f9:a6:85:eb:3e:70:48:5c:36:3e:f2:82:fb:f3:5f: 53:ee:21:12:0a:de:8c:e0:4c:c2:f6:0a:83:c1:7f:97:11:8d: 05:f8:64:60:b2:a2:31:86:bd:3e:fe:7f:57:bb:f4:14:3e:c7: ed:ed:72:8e:aa:9a:03:2f:c7:00:7b:48:71:c5:4a:18:ed:df: e1:b0:1e:2e:7d:59:bb:e9:b2:3d:ae:b1:71:63:28:24:e9:f8: 0a:5c:ba:51:2d:db:07:bf:7d:c0:22:80:70:06:11:ad:25:ad: 64:4d:25:e3:cb:f7:56:d7:ff:be:c2:1e:4b:5d:a0:6e:a2:67: 71:2d:0a:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2MDUxMTAvBgNVBAUTKDY4MTg4NEMwQzc1NTdFNTI2RUYyQkM0RDFFNUFCQzMz NkFFMjdGOUUwHhcNMjUwOTE2MjI0MDIxWhcNMjUwOTIzMjI0MDIxWjAYMRYwFAYD VQQDEw02OGM5ZTc1Ni0xM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqryE3jvRhhxhcS66LBK3op+ADreWqmUet04C8y/RkHtDQH7orkKatGpRPM5o 9Zxli7i4lHANulQzE0oITr9Hpodozy35+obFZOPPOkueXo8/uUBRoIY6WmW5XjPA c6oOk4AU/yAzMiiGtsIxwIyEeqvUJVA5u9hRNmR1Um9AgOupCVuOazPmJGt6NTU3 8ok1H4xhjsemgPK8wlY7rPd2TRhwqrJqEawm1c+cW5/fC3e1hPK8Mnkavbfz8BJ+ PRCXxFEeobjUXo/SXy7bjBqDleYkpdkNY0xoXiVSL093R6zaHnmpDih6h0uoFm29 02v80e2os1he3LNYaicnpe+PzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFllnnlc 2ygPiNOfoU2rOoJ77AZ/MB8GA1UdIwQYMBaAFGgYhMDHVX5SbvK8TR5avDNq4n+e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTYwNS8zNjY2NkQ2RTg3 MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZsSnU4cnhOSGxxOE0ycmlm NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCaUV3TWRWZmxKdThyeE5IbHE4TTJyaWY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTYwNS8zNjY2NkQ2RTg3MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZs SnU4cnhOSGxxOE0ycmlmNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMjVhC+OdzRVb5paW3Z3unSVCpoovf820ZHhLmd3XN3ARxZSZxeD7t oEeSnLLAqtXoOu+mZ6nELyKtWjfGtpy1czCPAFv3Hr8s4tqF4wT1D1ItQFsVANxQ EkZVMdQNIh0RszH7S67HYa3a+tnuLQC1ggajhJ7CBW8Bc+faGZm9CHH5poXrPnBI XDY+8oL7819T7iESCt6M4EzC9gqDwX+XEY0F+GRgsqIxhr0+/n9Xu/QUPsft7XKO qpoDL8cAe0hxxUoY7d/hsB4ufVm76bI9rrFxYygk6fgKXLpRLdsHv33AIoBwBhGt Ja1kTSXjy/dW1/++wh5LXaBuomdxLQpl -----END CERTIFICATE-----Generated at Thu Sep 18 23:49:57 2025 by rpki-client