$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: e4iL+59KyxYnCpw0ZcQY4wY1D2gJYwGAhBM3cqDZ5wM= Subject key identifier: 82:CE:5E:0D:39:74:8E:A3:A8:75:D7:52:AA:DB:11:B1:18:33:8D:E2 Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: 019F Signing time: Tue 09 Sep 2025 03:28:07 +0000 Manifest this update: Tue 09 Sep 2025 03:28:07 +0000 Manifest next update: Tue 16 Sep 2025 03:28:07 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: ve42BODz8Iepn72XxT63clGntp6gHwlQp1L7omFTinQ=) 2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: 7UGzCq6Cb6amiBq87W5KeE/DUZqLNVV6OVzp45wF3WQ=) 3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: ACKLgoePLs3Ke5FTi4aaIlytoIlfeMfpdj0hhLm4rHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: Sep 9 03:28:07 2025 GMT Not After : Sep 16 03:28:07 2025 GMT Subject: CN=68bf9ec7-090d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:14:33:bb:4c:99:91:2e:44:b9:76:af:8c: ff:da:3a:72:44:71:44:5a:10:3a:3d:70:0c:ab:20: 7b:2c:dd:78:1f:4a:82:1b:75:82:8b:af:83:4a:97: 47:aa:0a:5f:9a:2b:d8:bc:51:d6:18:4a:e8:ad:fd: 58:6a:6a:a6:4f:19:89:99:57:b2:e2:89:0a:7e:4f: ee:34:9f:fe:a8:ab:02:50:23:35:28:e8:ee:a0:56: 3c:59:b8:34:8c:a6:41:91:d6:18:1e:70:4f:a8:27: 35:7a:11:19:9e:3e:06:a5:ef:78:ab:af:06:d8:60: e1:44:c5:7a:98:ad:7c:04:61:6e:db:17:01:cf:b8: 36:6a:1b:a9:c5:b7:f1:67:87:9f:7b:77:a8:71:1c: e5:ab:1f:2f:e8:a9:96:b5:c0:6c:60:68:9d:21:8e: b9:5e:5f:da:8f:22:64:28:ef:d9:53:a3:58:74:17: 72:cd:7e:f8:3f:4a:36:d6:d2:6d:1f:03:ed:75:c7: 14:fe:d9:70:a8:75:0d:a0:d4:88:7a:bf:0c:56:66: b4:5b:d3:b3:35:6d:b6:db:e2:9f:3f:49:88:30:c8: 50:f9:cb:d5:ba:83:70:61:1b:42:0b:1f:d5:97:69: 8e:6e:20:3d:cc:87:95:24:81:ec:ed:98:5c:1a:27: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CE:5E:0D:39:74:8E:A3:A8:75:D7:52:AA:DB:11:B1:18:33:8D:E2 X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:58:3f:53:c4:e7:ad:94:4a:5f:84:4e:7b:d5:01:ce:0d:11: 60:16:af:33:3a:51:b9:22:d0:d7:7e:1c:cb:93:31:f4:28:95: 3b:83:fb:a5:04:73:85:50:ab:b7:80:35:40:60:c8:ed:7c:8a: f1:c8:40:90:ec:75:72:07:31:30:da:f1:80:9e:08:a9:ac:b8: 1e:f9:ca:2e:06:56:0c:10:cf:58:2c:dc:54:39:0f:56:75:cd: 3e:1b:ab:27:e7:5e:29:73:09:c5:3b:8e:e0:3e:61:90:a5:6a: 7a:f3:e9:f2:33:39:72:62:1b:7e:4c:31:de:8b:2e:3a:96:85: 8f:be:56:62:b9:b9:f8:8b:68:79:53:50:7c:45:04:53:f4:65: 48:60:3f:81:f9:4e:a3:8d:8d:dc:96:51:64:53:4a:f8:43:51: 57:5f:8b:7b:1e:3f:f6:83:68:51:fc:0d:17:fe:bb:3c:38:83: 62:c1:58:e3:d9:f7:49:a6:a9:97:64:e5:5a:6f:4d:f4:da:6b: 4a:85:c1:5b:c7:8f:bb:18:94:9f:c4:64:e3:01:c3:33:2e:da: 95:0f:dc:10:e4:72:84:6a:8f:77:23:68:cf:46:60:d9:0f:eb: ee:84:3d:c4:1a:e4:dd:51:f0:cc:14:51:ca:f8:03:95:fd:b2: d0:b3:38:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjUwOTA5MDMyODA3WhcNMjUwOTE2MDMyODA3WjAYMRYwFAYD VQQDEw02OGJmOWVjNy0wOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArK8UM7tMmZEuRLl2r4z/2jpyRHFEWhA6PXAMqyB7LN14H0qCG3WCi6+DSpdH qgpfmivYvFHWGErorf1YamqmTxmJmVey4okKfk/uNJ/+qKsCUCM1KOjuoFY8Wbg0 jKZBkdYYHnBPqCc1ehEZnj4Gpe94q68G2GDhRMV6mK18BGFu2xcBz7g2ahupxbfx Z4efe3eocRzlqx8v6KmWtcBsYGidIY65Xl/ajyJkKO/ZU6NYdBdyzX74P0o21tJt HwPtdccU/tlwqHUNoNSIer8MVma0W9OzNW222+KfP0mIMMhQ+cvVuoNwYRtCCx/V l2mObiA9zIeVJIHs7ZhcGidRnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILOXg05 dI6jqHXXUqrbEbEYM43iMB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjWD9TxOetlEpfhE571QHODRFgFq8zOlG5ItDXfhzLkzH0KJU7g/ul BHOFUKu3gDVAYMjtfIrxyECQ7HVyBzEw2vGAngiprLge+couBlYMEM9YLNxUOQ9W dc0+G6sn514pcwnFO47gPmGQpWp68+nyMzlyYht+TDHeiy46loWPvlZiubn4i2h5 U1B8RQRT9GVIYD+B+U6jjY3cllFkU0r4Q1FXX4t7Hj/2g2hR/A0X/rs8OINiwVjj 2fdJpqmXZOVab0302mtKhcFbx4+7GJSfxGTjAcMzLtqVD9wQ5HKEao93I2jPRmDZ D+vuhD3EGuTdUfDMFFHK+AOV/bLQsziU -----END CERTIFICATE-----Generated at Tue Sep 9 21:10:31 2025 by rpki-client