$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft File: grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json) Hash identifier: t1LaCflWeKbSJy2HEU0R54Tw21r+ItkCkyrR+HBeHR8= Subject key identifier: 1A:E8:21:24:52:2D:FB:BC:6E:B3:BF:A1:EF:75:65:6C:4E:E2:32:DC Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D Certificate issuer: /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Certificate serial: 0DB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft Manifest number: 0DAE Signing time: Thu 18 Sep 2025 18:04:43 +0000 Manifest this update: Thu 18 Sep 2025 18:04:43 +0000 Manifest next update: Thu 25 Sep 2025 18:04:43 +0000 Files and hashes: 1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: exvFeTafoOfLO5T7QJlyf7RLoUCHpxA/ZdNaQqVMgZI=) 2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: Kl+qHWqwPNXr+jNBmlZ54bsne4TIDTa38/cYe+iBa+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3509 (0xdb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Validity Not Before: Sep 18 18:04:43 2025 GMT Not After : Sep 25 18:04:43 2025 GMT Subject: CN=68cc49bb-d929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4e:45:91:b7:bf:48:e3:a3:ef:8a:02:d1:7a: 8e:3c:16:34:88:7a:37:57:9d:99:84:3e:ab:b0:89: 5d:20:47:2e:46:37:89:2e:4e:07:78:08:b9:da:85: 41:81:fb:2e:b5:89:a5:ee:5b:22:64:b3:a3:e4:49: 12:1a:fa:40:f7:00:18:d8:7c:b3:e0:f8:4d:41:2d: b8:6b:db:d9:f5:b7:61:db:d3:32:20:82:b7:eb:33: a6:98:7e:f1:c5:41:89:2c:1f:03:3a:b3:97:5b:32: 9f:c5:5a:a7:3b:1c:06:44:40:43:61:c1:6d:4a:6b: e8:54:19:5c:5c:a8:64:95:8c:58:65:ab:ed:58:67: c5:ee:9c:ba:e2:9b:f3:c9:f1:fb:5b:3c:c5:6b:44: e9:38:5f:72:39:11:e2:d4:c4:40:b4:20:83:71:08: 59:da:e1:c5:63:c0:5a:03:7d:5d:f9:88:25:d4:f4: 38:7e:eb:02:dc:16:05:2f:6c:7f:05:06:94:c0:32: c7:74:6c:0a:b6:e8:87:5f:28:71:23:ac:d6:26:09: e0:9c:5d:c7:28:0a:74:09:79:15:01:47:1d:6d:12: 96:36:34:e2:a9:47:48:86:75:2a:5f:47:74:d1:24: 6d:bb:18:f5:ce:31:40:62:8d:ed:6f:b3:17:3e:52: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E8:21:24:52:2D:FB:BC:6E:B3:BF:A1:EF:75:65:6C:4E:E2:32:DC X509v3 Authority Key Identifier: keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:f9:b1:d6:3f:24:c7:77:57:27:63:15:ab:f7:68:67:ec:51: 2a:f0:d0:00:04:57:e8:db:f3:e4:65:02:d7:9e:f0:50:13:0c: 58:c4:7a:a7:ba:44:ee:ce:3c:07:12:54:38:83:32:bf:1c:8b: d7:e1:65:ae:16:fe:75:1d:cc:f0:95:ad:e3:79:34:f1:f3:33: a1:27:23:ef:05:f4:2c:ac:eb:58:03:99:96:ba:20:67:c8:e5: ba:df:0f:95:f6:2b:54:f9:85:8d:ef:1c:26:0c:57:29:a6:99: ef:29:06:33:a7:e8:89:13:d6:48:9d:4e:f7:13:16:dc:b9:40: fc:ab:34:9c:68:ff:c8:56:c0:8f:18:32:b8:c1:10:c2:d0:df: dd:85:62:14:bb:f6:b7:3c:2a:e1:87:ca:2b:c8:df:6c:d5:d8: 80:28:12:2f:e2:ca:ce:31:63:0e:45:77:bf:7e:d7:19:df:b1: 1c:43:45:52:a1:b0:e3:d5:34:07:ab:4e:18:36:f6:3f:00:9b: cf:20:d7:bf:13:39:0c:d4:57:c6:ee:36:80:87:2f:bb:b3:fc: c6:c1:7d:54:6c:ed:15:66:3b:81:bb:17:e5:f7:a7:5e:cb:b0: b6:14:a9:f6:ad:b1:aa:d0:ec:6c:26:09:0f:02:66:f4:3a:b7: 66:81:84:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkExMTAvBgNVBAUTKDgyQjNENEE1OTZCQjk3ODg1NUExNTVDQUFGQThCMjYy NTMzMERFOEQwHhcNMjUwOTE4MTgwNDQzWhcNMjUwOTI1MTgwNDQzWjAYMRYwFAYD VQQDEw02OGNjNDliYi1kOTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyk5Fkbe/SOOj74oC0XqOPBY0iHo3V52ZhD6rsIldIEcuRjeJLk4HeAi52oVB gfsutYml7lsiZLOj5EkSGvpA9wAY2Hyz4PhNQS24a9vZ9bdh29MyIIK36zOmmH7x xUGJLB8DOrOXWzKfxVqnOxwGREBDYcFtSmvoVBlcXKhklYxYZavtWGfF7py64pvz yfH7WzzFa0TpOF9yORHi1MRAtCCDcQhZ2uHFY8BaA31d+Ygl1PQ4fusC3BYFL2x/ BQaUwDLHdGwKtuiHXyhxI6zWJgngnF3HKAp0CXkVAUcdbRKWNjTiqUdIhnUqX0d0 0SRtuxj1zjFAYo3tb7MXPlIwoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBroISRS Lfu8brO/oe91ZWxO4jLcMB8GA1UdIwQYMBaAFIKz1KWWu5eIVaFVyq+osmJTMN6N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyQS9GM0I1MkU3MkM4 NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0aFZvVlhLcjZpeVlsTXcz bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyUFVwWmE3bDRoVm9WWEtyNml5WWxNdzNvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyQS9GM0I1MkU3MkM4NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0 aFZvVlhLcjZpeVlsTXczbzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy+bHWPyTHd1cnYxWr92hn7FEq8NAABFfo2/PkZQLXnvBQEwxYxHqn ukTuzjwHElQ4gzK/HIvX4WWuFv51Hczwla3jeTTx8zOhJyPvBfQsrOtYA5mWuiBn yOW63w+V9itU+YWN7xwmDFcpppnvKQYzp+iJE9ZInU73ExbcuUD8qzScaP/IVsCP GDK4wRDC0N/dhWIUu/a3PCrhh8oryN9s1diAKBIv4srOMWMORXe/ftcZ37EcQ0VS obDj1TQHq04YNvY/AJvPINe/EzkM1FfG7jaAhy+7s/zGwX1UbO0VZjuBuxfl96de y7C2FKn2rbGq0OxsJgkPAmb0OrdmgYQ7 -----END CERTIFICATE-----Generated at Thu Sep 18 22:12:30 2025 by rpki-client