$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft File: gmtEdLxvTzvkC151EfEFyuf-jAw.mft (raw, json) Hash identifier: xp+zO65JHkw0GtxzsjOOcdGRkZI++X4zXnoUaXwcQHo= Subject key identifier: 54:94:CD:0D:43:67:05:3F:52:ED:87:C3:AC:5D:48:5B:12:5C:5B:32 Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C Certificate issuer: /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft Manifest number: 1B Signing time: Fri 05 Sep 2025 08:29:50 +0000 Manifest this update: Fri 05 Sep 2025 08:29:49 +0000 Manifest next update: Fri 12 Sep 2025 08:29:49 +0000 Files and hashes: 1: gmtEdLxvTzvkC151EfEFyuf-jAw.crl (hash: /BSQY0mnazlHzmomiUuW2QCWBCAChNubhFDi0XpWYyM=) 2: B92859F46EF611F0BEAA5130C4F9AE02.roa (hash: KxrlmGdN300w3GzZo2NWvwcNeTUF77b4vkK7jJtow4Y=) 3: 90BDD67E6EF611F0B80A0E30C4F9AE02.roa (hash: YAsradZ2aJS18fpOaKgFCMVexkVrOXolStNUtaxy12E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C Validity Not Before: Sep 5 08:29:49 2025 GMT Not After : Sep 12 08:29:49 2025 GMT Subject: CN=68ba9f7e-5023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:3c:d3:df:38:4b:ed:2e:7f:35:b7:e4:fa: 81:80:b0:e6:c2:50:6a:42:fa:c9:ad:27:4a:e6:5f: aa:d5:f0:f8:b5:8e:ac:ad:8e:70:63:0a:ec:60:aa: 4a:2d:c7:f7:f3:37:d7:1b:d2:fe:b7:5f:aa:38:69: 63:1f:bd:68:29:ff:05:c1:57:5e:c1:89:97:8c:50: 93:d3:c6:bb:24:cb:3e:8c:31:00:a2:9e:16:14:d3: 81:de:a6:67:d9:e7:37:19:47:70:55:ed:20:27:5f: e2:d7:df:ce:91:9c:b0:05:f9:95:aa:fc:45:28:b3: 64:f9:f6:80:41:41:1d:78:f2:fb:cd:83:cb:c9:3c: 64:4a:00:4e:6a:45:96:55:e4:44:22:e0:9a:35:f3: 81:a6:2d:fa:67:0b:3e:d4:7e:bd:f5:18:71:4f:f3: 56:3a:21:15:bf:46:ef:fd:2d:da:f0:36:3d:97:d4: d5:57:d6:89:28:96:cd:bd:48:f3:32:f7:94:07:cb: cb:2e:c4:15:ae:1a:fd:8b:af:dc:5c:af:02:15:e6: 1f:97:90:25:53:3e:ad:af:cf:e2:d7:cf:0b:d3:56: b6:4d:2b:9e:9a:0e:ed:58:84:02:79:2f:c9:19:25: c1:d1:18:7a:8e:dd:2a:63:de:d8:83:48:82:97:f9: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:94:CD:0D:43:67:05:3F:52:ED:87:C3:AC:5D:48:5B:12:5C:5B:32 X509v3 Authority Key Identifier: keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e3:87:5b:01:21:ff:50:1a:c4:49:42:9d:e3:1b:fc:59:e9: 23:93:a2:ae:78:9c:83:72:59:b4:c2:9e:1b:a8:87:67:f3:3d: 08:73:f0:d2:9d:32:70:42:27:84:97:c7:b4:56:ef:f6:69:05: b3:6b:47:0e:55:15:6f:02:6f:ed:53:7c:a3:b7:f5:1b:d8:5f: fe:76:b9:fc:b2:82:56:42:69:59:59:8e:af:d5:c8:ac:c9:1e: 8a:48:96:c9:83:58:2b:3d:24:32:bf:69:44:bb:80:6b:57:48: 3d:36:26:cb:15:b1:65:71:4c:48:83:63:ac:70:c8:8c:ef:dd: 6a:80:a9:5d:3a:8a:f4:ea:34:e7:17:8f:c7:20:07:36:53:f8: 00:da:86:53:72:79:78:1c:9e:87:8b:f3:fa:ba:2f:30:f5:b4: 62:78:9b:2f:fa:5e:11:d5:55:a0:9c:18:98:ce:0b:d0:1a:1e: d5:3d:e3:32:28:b2:c2:b2:48:d7:da:89:33:c5:b8:5c:56:58: 48:20:f4:09:a9:d2:43:21:9c:dd:75:ec:60:58:cf:ef:59:28: b9:ad:e0:58:a7:af:d6:e1:38:f2:56:47:4a:b5:3b:1a:d4:d8: 82:79:bc:d8:5c:7d:84:15:dc:c0:6c:70:80:cf:35:a6:b9:52: 9f:b2:ad:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUIzQzExMC8GA1UEBRMoODI2QjQ0NzRCQzZGNEYzQkU0MEI1RTc1MTFGMTA1Q0FF N0ZFOEMwQzAeFw0yNTA5MDUwODI5NDlaFw0yNTA5MTIwODI5NDlaMBgxFjAUBgNV BAMTDTY4YmE5ZjdlLTUwMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7dTzT3zhL7S5/Nbfk+oGAsObCUGpC+smtJ0rmX6rV8Pi1jqytjnBjCuxgqkot x/fzN9cb0v63X6o4aWMfvWgp/wXBV17BiZeMUJPTxrskyz6MMQCinhYU04HepmfZ 5zcZR3BV7SAnX+LX386RnLAF+ZWq/EUos2T59oBBQR148vvNg8vJPGRKAE5qRZZV 5EQi4Jo184GmLfpnCz7Ufr31GHFP81Y6IRW/Ru/9LdrwNj2X1NVX1okols29SPMy 95QHy8suxBWuGv2Lr9xcrwIV5h+XkCVTPq2vz+LXzwvTVrZNK56aDu1YhAJ5L8kZ JcHRGHqO3Spj3tiDSIKX+Xe/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVJTNDUNn BT9S7YfDrF1IWxJcWzIwHwYDVR0jBBgwFoAUgmtEdLxvTzvkC151EfEFyuf+jAww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQjNDLzk5MUVBREZFNjk0 QTExRjBBNzc0MUE0M0M0RjlBRTAyL2dtdEVkTHh2VHp2a0MxNTFFZkVGeXVmLWpB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ210RWRMeHZUenZrQzE1MUVmRUZ5dWYtakF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB QjNDLzk5MUVBREZFNjk0QTExRjBBNzc0MUE0M0M0RjlBRTAyL2dtdEVkTHh2VHp2 a0MxNTFFZkVGeXVmLWpBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGPjh1sBIf9QGsRJQp3jG/xZ6SOToq54nINyWbTCnhuoh2fzPQhz8NKd MnBCJ4SXx7RW7/ZpBbNrRw5VFW8Cb+1TfKO39RvYX/52ufyyglZCaVlZjq/VyKzJ HopIlsmDWCs9JDK/aUS7gGtXSD02JssVsWVxTEiDY6xwyIzv3WqAqV06ivTqNOcX j8cgBzZT+ADahlNyeXgcnoeL8/q6LzD1tGJ4my/6XhHVVaCcGJjOC9AaHtU94zIo ssKySNfaiTPFuFxWWEgg9Amp0kMhnN117GBYz+9ZKLmt4Finr9bhOPJWR0q1OxrU 2IJ5vNhcfYQV3MBscIDPNaa5Up+yrUU= -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:19 2025 by rpki-client