$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: tw1LOU1qEWc3PGfChHeNN4saVQSorRJhuWd6CMfxVRI= Subject key identifier: D6:55:61:34:6E:38:8D:73:B5:C6:B9:D6:26:3C:E9:35:64:5D:0A:D1 Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: D8 Signing time: Tue 09 Sep 2025 05:54:26 +0000 Manifest this update: Tue 09 Sep 2025 05:54:25 +0000 Manifest next update: Tue 16 Sep 2025 05:54:25 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: ME6cC/6B/q/+MnhzpAnlBgtknMtFAUJ7uKKcjHIdBNs=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: Vji2bwj5pG0AmszlyVBCPumUcxu21MvYnK8Tx2Nah1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: Sep 9 05:54:25 2025 GMT Not After : Sep 16 05:54:25 2025 GMT Subject: CN=68bfc112-2c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:2f:6e:17:be:fd:52:40:c7:60:0f:3e:bb: 0c:f1:7b:0c:4b:3d:79:43:a0:2a:f8:ce:85:81:5a: 7a:a6:92:8d:01:66:b8:fd:71:c5:d8:81:12:a3:8d: 1b:15:27:15:86:1f:b0:83:d2:84:ff:57:c5:e1:1d: 86:fa:33:0f:2a:0f:a8:dd:9a:a9:66:0a:b0:17:f5: e5:75:e1:b9:6c:a8:01:a0:06:d0:b5:2c:18:7a:4a: 8e:27:0b:f2:3a:a4:cd:35:c2:7e:56:a3:71:2a:86: be:8c:e1:9d:71:62:a2:96:f2:5a:23:0a:5e:a2:24: f7:f6:0b:6b:0e:ae:83:d1:33:74:65:4f:44:1b:c9: a4:71:8c:43:92:55:6c:b8:bb:2e:5c:22:3a:18:49: 62:30:5a:07:13:56:ac:63:0d:37:5d:26:58:b6:a6: c2:4b:01:40:7d:dd:90:d3:12:bf:43:64:59:8e:08: fa:0a:d9:21:ab:10:dc:f9:15:37:56:b1:b3:be:ff: 6d:13:8c:e6:51:ef:96:6f:78:f9:1b:b5:1d:15:72: e8:55:d8:3f:b5:62:aa:4c:25:3c:00:70:59:08:7b: 61:97:ff:36:82:67:e8:85:36:53:4a:53:49:51:89: 40:e0:c6:85:93:9c:0a:67:02:26:a2:39:ba:71:6e: a7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:55:61:34:6E:38:8D:73:B5:C6:B9:D6:26:3C:E9:35:64:5D:0A:D1 X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:fd:fd:7e:e9:e4:b3:59:20:3e:e7:37:18:75:dc:f3:3c:b0: 9c:97:00:07:50:aa:8b:1f:77:08:2d:bc:95:46:72:37:7b:e6: c3:2f:a7:38:b6:17:0d:ee:82:73:69:d5:36:18:b5:1a:e9:b5: bc:70:0a:df:7d:7a:fd:93:cb:1a:f0:79:a6:5b:54:0f:a3:28: 76:78:3d:7f:67:25:9a:4f:7a:16:9b:6b:ce:bc:11:2f:5c:05: 9f:32:3e:ff:91:f4:fb:9d:b5:e8:9a:49:a3:a9:61:7f:6a:aa: 20:67:bc:7a:47:4e:85:0d:cc:1a:e5:32:07:04:7f:a4:ca:ef: f6:88:d5:fa:d5:17:6e:7d:92:ea:d0:8f:fc:12:a5:bb:b3:54: f8:fb:ca:98:7d:74:69:24:15:6a:37:b5:06:c1:a4:11:32:c2: ed:fc:ea:66:83:a4:b1:1b:7f:31:27:15:23:b3:fd:ad:d5:65: b1:64:b8:25:d8:d8:78:40:ae:8f:f3:0d:d8:3f:d5:d0:35:fe: 13:4e:0b:98:fb:3d:b1:ae:50:66:51:05:1f:61:2c:6e:05:1c: 0f:e8:17:73:32:4b:9c:ee:66:a6:0e:ce:31:fc:a0:78:64:d6: 33:3f:23:11:99:01:ed:93:87:6f:80:0e:ef:fb:22:e9:70:86: 59:98:5b:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjUwOTA5MDU1NDI1WhcNMjUwOTE2MDU1NDI1WjAYMRYwFAYD VQQDEw02OGJmYzExMi0yYzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDQvbhe+/VJAx2APPrsM8XsMSz15Q6Aq+M6FgVp6ppKNAWa4/XHF2IESo40b FScVhh+wg9KE/1fF4R2G+jMPKg+o3ZqpZgqwF/XldeG5bKgBoAbQtSwYekqOJwvy OqTNNcJ+VqNxKoa+jOGdcWKilvJaIwpeoiT39gtrDq6D0TN0ZU9EG8mkcYxDklVs uLsuXCI6GEliMFoHE1asYw03XSZYtqbCSwFAfd2Q0xK/Q2RZjgj6CtkhqxDc+RU3 VrGzvv9tE4zmUe+Wb3j5G7UdFXLoVdg/tWKqTCU8AHBZCHthl/82gmfohTZTSlNJ UYlA4MaFk5wKZwImojm6cW6nwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZVYTRu OI1ztca51iY86TVkXQrRMB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ/f1+6eSzWSA+5zcYddzzPLCclwAHUKqLH3cILbyVRnI3e+bDL6c4 thcN7oJzadU2GLUa6bW8cArffXr9k8sa8HmmW1QPoyh2eD1/ZyWaT3oWm2vOvBEv XAWfMj7/kfT7nbXomkmjqWF/aqogZ7x6R06FDcwa5TIHBH+kyu/2iNX61RdufZLq 0I/8EqW7s1T4+8qYfXRpJBVqN7UGwaQRMsLt/Opmg6SxG38xJxUjs/2t1WWxZLgl 2Nh4QK6P8w3YP9XQNf4TTguY+z2xrlBmUQUfYSxuBRwP6BdzMkuc7mamDs4x/KB4 ZNYzPyMRmQHtk4dvgA7v+yLpcIZZmFu4 -----END CERTIFICATE-----Generated at Tue Sep 9 18:16:18 2025 by rpki-client