$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: fBxxeY97ca6yGu8oIlNHEoA8Agazg+7LMG7rJTljWt4= Subject key identifier: 33:F5:EA:D1:E1:E0:A3:6E:EB:BD:66:FC:CB:4C:04:CC:F4:D4:E5:0E Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 0114 Signing time: Tue 09 Sep 2025 05:02:08 +0000 Manifest this update: Tue 09 Sep 2025 05:02:08 +0000 Manifest next update: Tue 16 Sep 2025 05:02:08 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: wTcmmj8osZerK6ZxNXWy+DLstOvDyJEhudJW3kc30+s=) 2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G/0ezw6yoaaHjsn46sx4sKQROwS7T0PMQPxdtMKah+o=) 3: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: E9ObZNoyKAzjoiJfjRSwt1+kDOZ+xsFeoybdq6vQ22E=) 4: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: pdzJ5okYmWLfXDpKnMd4R/Lx/tQtmRyHcTZA/k863ZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Sep 9 05:02:08 2025 GMT Not After : Sep 16 05:02:08 2025 GMT Subject: CN=68bfb4d0-a22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:cd:9b:8e:33:0f:38:8c:53:da:b3:4b:8f: fb:65:4a:ab:8d:b0:be:69:46:7e:02:47:c7:06:e9: 89:df:67:f0:74:1d:46:ef:28:bc:d7:42:fd:e8:47: f2:61:e6:fe:95:3b:78:93:11:f7:da:ce:e0:f6:ab: 1e:11:d6:14:76:4c:b8:54:c8:ca:dc:61:f3:d6:42: 00:4d:91:86:ae:b2:83:95:ac:b4:52:65:b8:81:d2: 74:e6:06:fa:ca:43:e3:f6:18:85:4f:78:b0:91:a3: 7a:8b:a4:63:48:52:64:24:fd:38:5c:e1:6a:07:05: 53:2c:b6:10:63:77:2c:6d:0c:07:39:2b:78:21:7b: 8d:dc:bc:e9:9c:d6:78:16:68:f8:5f:13:55:43:32: 18:67:ec:1f:4a:27:6b:a1:bc:c3:5d:53:fa:59:a4: 45:f0:f1:3c:2f:cf:89:80:fe:46:2e:51:5b:f0:56: 5b:4d:a2:77:53:19:35:33:e0:a6:ec:8a:eb:89:5f: 28:89:c6:03:7e:88:f9:9d:4d:29:43:6c:8b:af:80: ad:bd:9d:55:a4:cf:6d:7f:1c:bf:ee:a2:12:d6:57: b5:7a:c0:09:55:4f:72:82:e7:2a:71:3f:fe:44:25: ad:50:96:5c:62:58:aa:bb:72:5c:a5:73:a9:f1:7d: 73:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F5:EA:D1:E1:E0:A3:6E:EB:BD:66:FC:CB:4C:04:CC:F4:D4:E5:0E X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a2:d2:83:33:f6:d9:b3:f5:af:0a:f2:04:32:a2:be:a4:d7: 66:fe:12:b6:51:a3:f3:f9:f8:37:19:da:ad:32:0e:bb:b1:b7: d4:5d:f6:d8:fa:60:67:ae:59:60:c4:d4:e5:9f:cb:ab:51:b8: 62:ac:33:be:7e:b3:a0:03:dc:d3:71:ed:9a:71:99:22:86:63: db:0b:d2:e4:04:71:1b:8b:78:6e:7e:cd:a0:ba:80:2a:44:a8: 11:e8:b1:26:b0:d8:31:4e:3c:ad:fb:d7:a4:d9:f8:fe:b1:0c: d6:5d:eb:64:5e:8a:63:13:d6:49:07:8e:b1:0c:3b:51:4e:bb: 1d:21:ca:e6:01:8a:cb:ac:c3:13:e0:3a:3b:76:b6:70:0d:d9: 1d:12:fd:c4:48:6e:84:3c:48:9c:b6:96:1b:31:66:0e:f2:ac: 76:c9:14:8c:d3:d3:3e:71:61:1e:c4:73:50:81:38:c4:d4:dc: 78:91:5d:13:07:2a:56:01:59:9b:35:0b:2f:c2:7b:a0:29:1f: 9d:5a:d5:e1:66:9e:f6:4f:c9:e9:b1:06:05:65:30:16:70:1c: ab:8c:1f:f1:a4:7d:1b:3a:07:08:4d:18:03:35:d3:9a:e4:15: ee:c3:44:12:7a:46:90:00:4c:a7:5d:63:20:d4:14:db:67:d6: 09:33:ab:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjUwOTA5MDUwMjA4WhcNMjUwOTE2MDUwMjA4WjAYMRYwFAYD VQQDEw02OGJmYjRkMC1hMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WDNm44zDziMU9qzS4/7ZUqrjbC+aUZ+AkfHBumJ32fwdB1G7yi810L96Efy Yeb+lTt4kxH32s7g9qseEdYUdky4VMjK3GHz1kIATZGGrrKDlay0UmW4gdJ05gb6 ykPj9hiFT3iwkaN6i6RjSFJkJP04XOFqBwVTLLYQY3csbQwHOSt4IXuN3LzpnNZ4 Fmj4XxNVQzIYZ+wfSidrobzDXVP6WaRF8PE8L8+JgP5GLlFb8FZbTaJ3Uxk1M+Cm 7IrriV8oicYDfoj5nU0pQ2yLr4CtvZ1VpM9tfxy/7qIS1le1esAJVU9ygucqcT/+ RCWtUJZcYliqu3JcpXOp8X1zSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDP16tHh 4KNu671m/MtMBMz01OUOMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWotKDM/bZs/WvCvIEMqK+pNdm/hK2UaPz+fg3GdqtMg67sbfUXfbY +mBnrllgxNTln8urUbhirDO+frOgA9zTce2acZkihmPbC9LkBHEbi3hufs2guoAq RKgR6LEmsNgxTjyt+9ek2fj+sQzWXetkXopjE9ZJB46xDDtRTrsdIcrmAYrLrMMT 4Do7drZwDdkdEv3ESG6EPEictpYbMWYO8qx2yRSM09M+cWEexHNQgTjE1Nx4kV0T BypWAVmbNQsvwnugKR+dWtXhZp72T8npsQYFZTAWcByrjB/xpH0bOgcITRgDNdOa 5BXuw0QSekaQAEynXWMg1BTbZ9YJM6vZ -----END CERTIFICATE-----Generated at Tue Sep 9 08:18:24 2025 by rpki-client