$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft File: 755Sv59IZcr4eHrZXObeT2R2hA0.mft (raw, json) Hash identifier: A2TSSNJBF5aGjISA+BPDdb1D8Gt5GGjSGNsZKmvZz8E= Subject key identifier: 96:F7:B7:B1:86:3A:B9:E3:CE:70:7B:03:48:7F:5A:71:43:BD:09:F4 Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D Certificate issuer: /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Certificate serial: 0AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft Manifest number: 0ABC Signing time: Thu 18 Sep 2025 19:42:30 +0000 Manifest this update: Thu 18 Sep 2025 19:42:29 +0000 Manifest next update: Thu 25 Sep 2025 19:42:29 +0000 Files and hashes: 1: 755Sv59IZcr4eHrZXObeT2R2hA0.crl (hash: eQxypwT1h13eRCZv53a0hV+80PRBOROCzS4Mg80R+gw=) 2: 9E1721445CFB11EAA377D527C4F9AE02.roa (hash: 8T6x03P3VxlYlJgx3O2lmpxNAgzgSpRVJPK28hDgG2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2757 (0xac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA4B, serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Validity Not Before: Sep 18 19:42:29 2025 GMT Not After : Sep 25 19:42:29 2025 GMT Subject: CN=68cc60a5-0332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:71:40:a8:f6:7b:39:2e:f7:b6:41:4a:66: b3:3e:38:5e:63:83:61:c8:e8:5a:98:64:da:49:8b: 71:a2:56:e4:00:0a:3c:66:2f:09:c5:59:4b:55:18: 08:fe:2c:4b:e5:ac:48:e4:53:64:90:67:c7:e4:da: 70:ea:0c:89:49:2e:3d:a4:be:ab:18:1d:a2:d3:58: e3:83:c7:bd:10:77:1c:73:ef:29:23:85:e1:36:1f: c2:27:e3:fd:29:c1:d7:c8:15:bf:cd:da:2c:5d:88: 6d:7d:be:2e:29:77:2f:a8:ba:6f:39:09:b7:86:30: de:86:65:bd:bf:b9:24:62:95:52:46:4b:ff:d5:60: 1d:65:57:fa:de:18:a0:67:04:a6:1e:8f:a8:2c:21: 07:dc:32:dc:e4:6b:74:ae:71:89:82:28:cd:b7:7c: 6c:2d:74:26:b7:98:10:e6:df:eb:33:a0:b1:c3:b9: 13:51:d5:2e:32:cf:c3:82:96:d0:a2:c2:35:74:8f: 24:64:de:e8:2f:1a:da:a9:a9:e3:7d:cf:62:50:61: 2c:78:71:69:9f:48:1d:25:5d:7f:c2:93:d8:5e:f6: 82:7d:f9:c9:39:f6:bb:cd:f5:a6:c0:99:fb:96:43: 90:0a:78:aa:ad:ab:d6:a4:17:43:45:71:f3:9e:fd: d7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F7:B7:B1:86:3A:B9:E3:CE:70:7B:03:48:7F:5A:71:43:BD:09:F4 X509v3 Authority Key Identifier: keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:57:15:12:4e:a8:c0:e3:61:f6:db:7e:43:7f:b0:d5:cf:33: 9e:6f:2e:9f:86:7b:63:66:2a:00:47:8d:a9:b8:5c:12:e7:f9: b1:7b:5d:18:8a:67:aa:f6:8d:8e:cf:8c:e6:1a:62:91:91:d3: 6a:cd:94:5c:ff:a0:cf:9e:86:9f:9a:2b:38:79:2e:05:a2:94: d4:b6:b2:23:4d:8f:89:20:97:0a:5d:f0:b5:ef:74:90:30:de: 10:b1:14:f0:07:fe:e5:3a:f3:91:14:90:8f:19:10:34:be:ec: 60:af:a0:81:5e:fb:1d:a7:d0:4d:36:28:16:a2:73:d2:a5:a8: 22:7b:91:52:75:99:3d:72:34:5a:e3:81:9b:dc:c3:42:5b:03: 06:43:aa:5d:ee:ab:1f:cd:99:26:ef:f0:e7:c2:b6:30:85:37: 7c:c3:90:d1:24:7f:1b:b9:65:df:2d:04:f5:5a:7d:6a:53:5c: 0a:39:f9:d3:f4:56:56:6a:13:12:c3:47:64:d1:b9:82:d7:20: 18:ef:16:d2:9b:7d:73:d7:d1:f0:20:aa:84:5b:3d:1b:92:ce: 19:b8:88:8d:1b:9d:82:1f:ac:b5:a6:15:ff:56:7a:29:71:21: a7:01:ad:e3:a8:48:26:de:81:e5:f6:00:f4:99:90:c4:7e:3f: bc:b0:6f:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBNEIxMTAvBgNVBAUTKEVGOUU1MkJGOUY0ODY1Q0FGODc4N0FEOTVDRTZERTRG NjQ3Njg0MEQwHhcNMjUwOTE4MTk0MjI5WhcNMjUwOTI1MTk0MjI5WjAYMRYwFAYD VQQDEw02OGNjNjBhNS0wMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoBxQKj2ezku97ZBSmazPjheY4NhyOhamGTaSYtxolbkAAo8Zi8JxVlLVRgI /ixL5axI5FNkkGfH5Npw6gyJSS49pL6rGB2i01jjg8e9EHccc+8pI4XhNh/CJ+P9 KcHXyBW/zdosXYhtfb4uKXcvqLpvOQm3hjDehmW9v7kkYpVSRkv/1WAdZVf63hig ZwSmHo+oLCEH3DLc5Gt0rnGJgijNt3xsLXQmt5gQ5t/rM6Cxw7kTUdUuMs/DgpbQ osI1dI8kZN7oLxraqanjfc9iUGEseHFpn0gdJV1/wpPYXvaCffnJOfa7zfWmwJn7 lkOQCniqravWpBdDRXHznv3XUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb3t7GG OrnjznB7A0h/WnFDvQn0MB8GA1UdIwQYMBaAFO+eUr+fSGXK+Hh62Vzm3k9kdoQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0E0Qi82RTY0QzQxMDVD RUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpjcjRlSHJaWE9iZVQyUjJo QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1NVN2NTlJWmNyNGVIclpYT2JlVDJSMmhBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0E0Qi82RTY0QzQxMDVDRUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpj cjRlSHJaWE9iZVQyUjJoQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxVxUSTqjA42H2235Df7DVzzOeby6fhntjZioAR42puFwS5/mxe10Y imeq9o2Oz4zmGmKRkdNqzZRc/6DPnoafmis4eS4FopTUtrIjTY+JIJcKXfC173SQ MN4QsRTwB/7lOvORFJCPGRA0vuxgr6CBXvsdp9BNNigWonPSpagie5FSdZk9cjRa 44Gb3MNCWwMGQ6pd7qsfzZkm7/DnwrYwhTd8w5DRJH8buWXfLQT1Wn1qU1wKOfnT 9FZWahMSw0dk0bmC1yAY7xbSm31z19HwIKqEWz0bks4ZuIiNG52CH6y1phX/Vnop cSGnAa3jqEgm3oHl9gD0mZDEfj+8sG/A -----END CERTIFICATE-----Generated at Fri Sep 19 02:33:07 2025 by rpki-client