$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft File: 70llBmvaJCursGhbwuat2fdWM_0.mft (raw, json) Hash identifier: aFMZ7opdrtZQIRrbn8bd4p983V01xlYXvulQCFeNnRc= Subject key identifier: 95:8C:4D:FA:13:08:4D:0C:F4:97:F6:CF:8E:C8:62:41:F5:06:84:03 Authority key identifier: EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD Certificate issuer: /CN=A91FE9B1/serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD Certificate serial: 0614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft Manifest number: 060F Signing time: Thu 18 Sep 2025 23:08:23 +0000 Manifest this update: Thu 18 Sep 2025 23:08:22 +0000 Manifest next update: Thu 25 Sep 2025 23:08:22 +0000 Files and hashes: 1: 70llBmvaJCursGhbwuat2fdWM_0.crl (hash: LKSiTpC3gEagevkCR/u6XOtgxuXOUCgOXNBe7UroXqI=) 2: 02157718B9DF11EBA8BE9876C4F9AE02.roa (hash: mRSjwQDsA2Ity8Ke/pKlCSea6N3rjwOrxrJxPkM3a1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1556 (0x614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9B1, serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD Validity Not Before: Sep 18 23:08:22 2025 GMT Not After : Sep 25 23:08:22 2025 GMT Subject: CN=68cc90e7-c9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:8e:5f:eb:a8:cf:81:be:40:d2:17:0e:18: e4:25:2b:8c:d4:75:60:40:36:cb:42:63:27:b2:cc: c7:fd:21:9c:6a:11:0a:11:18:e5:17:eb:b2:f2:86: 5e:8e:06:03:f1:57:8f:6d:36:3a:5a:d3:f3:9c:65: 0b:68:ef:b3:65:3c:50:e3:75:f2:bd:e4:c1:97:52: f4:cb:a3:4c:ed:8d:8f:06:fc:d6:54:1b:a9:75:39: 3a:66:c6:23:4b:30:e8:e0:bb:16:28:01:f7:51:2e: 67:bc:6c:5f:33:07:f8:d9:f2:93:90:88:1c:f5:c6: bb:ce:47:cf:87:38:a7:15:f7:39:f6:88:04:a3:c1: 66:13:10:39:3f:44:49:46:b3:b6:51:b6:3d:ca:76: 14:38:9c:41:b7:0d:4a:2d:99:de:6b:1d:0c:c3:cb: 44:d1:7b:41:06:47:a6:4e:bd:5d:5e:8b:14:b3:16: 2d:f4:5d:ae:15:57:dc:80:e5:ce:1c:0f:ff:92:e4: d3:7a:99:9d:39:0a:6b:06:60:e9:fb:13:5e:ad:a2: 89:44:fd:97:bb:e0:4b:b7:12:34:76:c0:f5:0f:62: 66:61:b6:51:f8:ac:76:d3:f0:3f:ad:a9:d2:3e:6f: da:14:80:25:90:3f:ef:d6:97:76:4c:88:78:1c:b2: e9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8C:4D:FA:13:08:4D:0C:F4:97:F6:CF:8E:C8:62:41:F5:06:84:03 X509v3 Authority Key Identifier: keyid:EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:c1:83:5e:96:33:67:d5:72:f5:ab:53:ae:b8:7f:23:ff:ea: ca:c7:5e:8c:60:6c:03:5b:63:b7:5e:23:9c:b0:78:b4:07:78: 4d:68:50:2b:c3:0c:2b:00:b8:ab:a4:e5:59:78:0e:4b:14:2b: e9:83:b6:c6:0b:c9:96:7f:0c:f4:05:17:a7:56:0a:e7:d3:5b: 97:58:46:f5:4c:a0:13:31:88:80:0e:88:51:e1:74:30:ae:61: 14:b5:69:d9:e0:31:64:95:0d:69:0d:38:34:38:86:2a:0b:c3: 0d:69:ed:60:85:2d:e7:7a:54:5a:24:dd:88:2b:8c:fa:68:0f: ba:b0:29:df:c2:e4:05:b9:33:8c:4c:38:24:25:96:60:59:f7: 8a:fa:dd:a3:5e:d8:e2:cf:18:c9:74:aa:32:1d:f4:23:2f:2d: a6:c5:24:22:ae:b9:50:a9:cc:38:e3:dc:b4:19:df:b6:61:04: df:3a:eb:f4:9e:0f:76:a7:45:45:8e:f7:7b:a6:ee:85:52:64: 33:cb:3d:14:55:05:80:b3:83:09:e1:58:5a:fa:6b:0a:f3:1d: bb:73:64:89:87:c0:d4:47:2e:46:40:ab:ea:75:12:01:84:34: bd:63:fd:e3:7d:72:65:57:b6:96:da:c6:7f:99:2c:d9:49:d0: 44:0e:07:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5QjExMTAvBgNVBAUTKEVGNDk2NTA2NkJEQTI0MkJBQkIwNjg1QkMyRTZBREQ5 Rjc1NjMzRkQwHhcNMjUwOTE4MjMwODIyWhcNMjUwOTI1MjMwODIyWjAYMRYwFAYD VQQDEw02OGNjOTBlNy1jOWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzGOX+uoz4G+QNIXDhjkJSuM1HVgQDbLQmMnsszH/SGcahEKERjlF+uy8oZe jgYD8VePbTY6WtPznGULaO+zZTxQ43XyveTBl1L0y6NM7Y2PBvzWVBupdTk6ZsYj SzDo4LsWKAH3US5nvGxfMwf42fKTkIgc9ca7zkfPhzinFfc59ogEo8FmExA5P0RJ RrO2UbY9ynYUOJxBtw1KLZneax0Mw8tE0XtBBkemTr1dXosUsxYt9F2uFVfcgOXO HA//kuTTepmdOQprBmDp+xNeraKJRP2Xu+BLtxI0dsD1D2JmYbZR+Kx20/A/ranS Pm/aFIAlkD/v1pd2TIh4HLLpJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWMTfoT CE0M9Jf2z47IYkH1BoQDMB8GA1UdIwQYMBaAFO9JZQZr2iQrq7BoW8Lmrdn3VjP9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlCMS81QkI5RTAwQUI5 REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpDdXJzR2hid3VhdDJmZFdN XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwbGxCbXZhSkN1cnNHaGJ3dWF0MmZkV01fMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlCMS81QkI5RTAwQUI5REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpD dXJzR2hid3VhdDJmZFdNXzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRwYNeljNn1XL1q1OuuH8j/+rKx16MYGwDW2O3XiOcsHi0B3hNaFAr wwwrALirpOVZeA5LFCvpg7bGC8mWfwz0BRenVgrn01uXWEb1TKATMYiADohR4XQw rmEUtWnZ4DFklQ1pDTg0OIYqC8MNae1ghS3nelRaJN2IK4z6aA+6sCnfwuQFuTOM TDgkJZZgWfeK+t2jXtjizxjJdKoyHfQjLy2mxSQirrlQqcw449y0Gd+2YQTfOuv0 ng92p0VFjvd7pu6FUmQzyz0UVQWAs4MJ4Vha+msK8x27c2SJh8DURy5GQKvqdRIB hDS9Y/3jfXJlV7aW2sZ/mSzZSdBEDgdx -----END CERTIFICATE-----Generated at Fri Sep 19 13:42:37 2025 by rpki-client