$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft File: t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json) Hash identifier: 6wMkF+Lt5TZLZFz4j9YWYL7o6HUSn2YDYJwQE5jigks= Subject key identifier: 8C:83:D2:E4:B7:02:80:AC:58:D5:38:68:D0:71:07:31:98:2F:81:97 Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 Certificate issuer: /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Certificate serial: 0966 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft Manifest number: 0960 Signing time: Thu 18 Sep 2025 20:23:16 +0000 Manifest this update: Thu 18 Sep 2025 20:23:16 +0000 Manifest next update: Thu 25 Sep 2025 20:23:16 +0000 Files and hashes: 1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: Y9Npjcx7IMuKhIeFhaYkPny7F3EMUFj71MmGT7ZwknA=) 2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: CHvHnzrsNRtyF0f1bsjGZNNk/7bOq09fS+B9V5tsdBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2406 (0x966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FED7C, serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Validity Not Before: Sep 18 20:23:16 2025 GMT Not After : Sep 25 20:23:16 2025 GMT Subject: CN=68cc6a34-4331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a8:d4:18:b4:4b:c3:6e:9c:df:8d:f2:09:54: 6a:f7:10:38:20:8a:38:a2:80:ae:67:b3:5e:f1:ae: 3f:92:19:98:7d:7a:67:a7:3e:7c:a4:58:85:d5:49: 13:be:2b:4c:08:00:f9:d8:ff:81:be:8c:36:a1:1e: 72:ac:e5:d7:3a:cf:58:68:d9:8d:8f:d1:26:ef:51: 2a:79:b0:ab:e8:48:19:3a:d1:44:95:46:8b:c3:50: 0a:6e:3e:2a:46:a8:76:d2:04:e9:97:40:d6:11:f8: 3b:9b:95:50:50:ad:19:5f:a5:bb:c2:28:13:13:55: c7:41:34:06:97:64:40:f9:eb:90:ab:60:ba:24:e3: 35:94:8e:c3:2f:39:38:c9:95:e3:c2:69:be:29:08: 96:d9:45:59:0d:0d:3c:7f:14:a6:44:ed:67:28:52: 06:32:b9:40:83:bc:df:65:16:7e:2e:f1:f9:3d:de: fa:91:e9:ea:d7:0a:42:5d:d0:d1:55:1e:4a:82:c4: 7c:83:d1:03:20:94:ed:c2:ce:6d:1e:2c:52:78:2b: f1:25:d7:48:47:62:30:8a:fc:ac:88:8c:e2:c1:48: 53:8a:e1:53:cf:2a:db:57:0f:31:ec:05:41:8d:b5: 59:1e:1c:d1:5a:04:1e:15:6e:23:68:cf:21:09:ee: 71:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:83:D2:E4:B7:02:80:AC:58:D5:38:68:D0:71:07:31:98:2F:81:97 X509v3 Authority Key Identifier: keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c5:08:ef:ff:55:3f:24:2b:32:62:bb:66:0e:c7:c4:f2:11: eb:41:50:2d:86:d9:14:b8:2e:7e:a5:5f:e5:7f:76:25:83:e2: 2b:7f:78:b2:5e:eb:87:14:b9:b1:7e:7f:56:3b:17:6c:12:b4: 2f:5a:ca:3a:2b:f8:d6:98:ba:af:fd:2d:a2:33:3c:a4:0b:87: 49:60:a2:1a:88:5e:7a:bc:91:be:5f:75:15:74:1f:da:df:4d: 2d:40:8f:63:b5:96:e5:20:ac:3f:69:99:a3:e5:76:a9:8c:0e: 67:81:e1:6d:0f:a5:e6:ef:de:e2:7e:d1:a6:a6:bd:eb:70:d5: cd:68:33:4a:2a:4f:3f:79:ae:43:e5:a1:b9:84:bc:be:6f:e8: 3e:ce:55:85:c9:bc:64:4b:72:81:5f:f7:46:68:c9:62:82:93: e8:2e:96:6c:67:3f:97:69:33:88:7b:c9:96:1e:db:42:2d:33: 8d:1f:81:6b:27:7d:39:a4:92:f5:44:a0:4d:ae:ad:e7:66:d0: 0e:4c:5b:b2:25:97:db:d4:75:d8:48:82:4b:f2:fa:fb:27:06: de:7b:90:1d:67:e5:77:97:07:12:4e:ba:64:67:73:08:75:98: 6f:49:0b:d9:ec:cb:ab:42:7a:3a:16:f8:51:ca:58:06:5a:d8: 7d:c2:aa:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVEN0MxMTAvBgNVBAUTKEI3RDNFQjYxQ0MwMjhDMzhCRkQzRjdBMjgwRjM2OTA0 Njg2NTVCMDYwHhcNMjUwOTE4MjAyMzE2WhcNMjUwOTI1MjAyMzE2WjAYMRYwFAYD VQQDEw02OGNjNmEzNC00MzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqjUGLRLw26c343yCVRq9xA4IIo4ooCuZ7Ne8a4/khmYfXpnpz58pFiF1UkT vitMCAD52P+Bvow2oR5yrOXXOs9YaNmNj9Em71EqebCr6EgZOtFElUaLw1AKbj4q Rqh20gTpl0DWEfg7m5VQUK0ZX6W7wigTE1XHQTQGl2RA+euQq2C6JOM1lI7DLzk4 yZXjwmm+KQiW2UVZDQ08fxSmRO1nKFIGMrlAg7zfZRZ+LvH5Pd76kenq1wpCXdDR VR5KgsR8g9EDIJTtws5tHixSeCvxJddIR2IwivysiIziwUhTiuFTzyrbVw8x7AVB jbVZHhzRWgQeFW4jaM8hCe5xmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyD0uS3 AoCsWNU4aNBxBzGYL4GXMB8GA1UdIwQYMBaAFLfT62HMAow4v9P3ooDzaQRoZVsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUQ3Qy9GRkQzQjNGRTlG RjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pEaV8wX2VpZ1BOcEJHaGxX d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5UHJZY3dDakRpXzBfZWlnUE5wQkdobFd3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUQ3Qy9GRkQzQjNGRTlGRjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pE aV8wX2VpZ1BOcEJHaGxXd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMxQjv/1U/JCsyYrtmDsfE8hHrQVAthtkUuC5+pV/lf3Ylg+Irf3iy XuuHFLmxfn9WOxdsErQvWso6K/jWmLqv/S2iMzykC4dJYKIaiF56vJG+X3UVdB/a 300tQI9jtZblIKw/aZmj5XapjA5ngeFtD6Xm797iftGmpr3rcNXNaDNKKk8/ea5D 5aG5hLy+b+g+zlWFybxkS3KBX/dGaMligpPoLpZsZz+XaTOIe8mWHttCLTONH4Fr J305pJL1RKBNrq3nZtAOTFuyJZfb1HXYSIJL8vr7Jwbee5AdZ+V3lwcSTrpkZ3MI dZhvSQvZ7MurQno6FvhRylgGWth9wqqG -----END CERTIFICATE-----Generated at Fri Sep 19 02:49:41 2025 by rpki-client