$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json) Hash identifier: XSrRBMUZw5MOH/Vyf0tbkDaBnPqvle20KJUWBatiXlQ= Subject key identifier: C1:E9:BE:C0:8C:AA:66:CC:26:F7:69:BB:A9:32:E7:B0:A7:5D:E1:D6 Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Certificate serial: 046C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft Manifest number: 0462 Signing time: Fri 19 Sep 2025 00:35:22 +0000 Manifest this update: Fri 19 Sep 2025 00:35:22 +0000 Manifest next update: Fri 26 Sep 2025 00:35:22 +0000 Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: cR7+t0Rhuo6nduGj/vkBfNCgMceZp/cR3fsbqluqPy8=) 2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: IyhV9MGtQ1VyJp3y60dauCI+itu5hIIH24D+SkqtwwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Validity Not Before: Sep 19 00:35:22 2025 GMT Not After : Sep 26 00:35:22 2025 GMT Subject: CN=68cca54a-c899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:82:13:f2:87:ec:5a:16:1e:bb:b3:18:b8: a4:b2:ae:6b:d1:02:3c:89:c5:64:26:63:45:85:17: 44:3c:94:9f:ed:a7:55:34:c4:93:7f:32:06:64:8d: 05:89:f3:1c:8a:e4:6e:20:76:ac:39:8a:e1:5b:de: eb:df:23:d1:7f:8c:ac:cc:ce:c9:93:b3:bf:00:26: 7f:7a:c1:43:a0:40:9c:89:97:1e:53:c8:00:64:df: 90:b0:9c:25:b6:cc:f0:02:f6:60:44:b9:ff:5f:fb: b9:e5:44:fb:e7:10:64:0f:15:81:ce:a9:cf:3d:5c: 17:86:08:04:ea:fd:63:68:69:0d:c7:0b:4d:e5:ac: 9d:6e:34:6b:54:9a:b1:7e:78:4a:be:da:10:c1:09: 2b:9d:41:94:bc:50:ee:b4:0d:7c:e4:3d:f7:32:07: ff:5f:e0:84:b6:4b:a4:42:84:f9:f9:ce:c1:dc:ed: 55:8a:2a:27:78:e0:08:53:df:55:be:16:64:40:e5: 95:26:02:49:49:da:cb:23:9b:31:dd:ed:52:e2:6d: 7e:bd:39:70:37:b2:a7:45:26:b3:c2:b2:53:9e:e4: 4e:4d:d8:80:34:37:68:e2:3c:fd:6e:7d:01:13:e6: b1:3f:ef:56:64:ec:7c:59:0c:03:10:40:22:28:02: f2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E9:BE:C0:8C:AA:66:CC:26:F7:69:BB:A9:32:E7:B0:A7:5D:E1:D6 X509v3 Authority Key Identifier: keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:9d:e1:07:ad:e8:0a:26:36:f7:68:0f:6c:b3:28:1b:bc:68: 66:4e:69:ba:a1:2c:4c:97:bf:ac:e2:3c:42:68:7f:d4:e1:53: 9d:e6:30:f8:98:57:a0:75:d0:bc:b0:08:44:4c:46:9c:97:eb: 0b:0e:15:78:8a:33:f8:ca:1e:f3:29:93:1e:c7:0f:74:56:a0: 85:82:75:48:f5:6d:fe:c8:48:20:c9:36:a4:50:e9:24:e7:53: 0a:84:b3:f7:b7:5a:7e:71:0c:bb:bf:ba:44:bf:52:c9:de:8f: 5c:73:af:bf:3e:21:0a:82:80:cd:8b:ea:83:25:66:67:4c:04: e6:9b:b1:08:12:0f:6e:f1:48:65:32:61:b2:fc:31:96:aa:2e: 3d:e0:50:14:56:91:36:80:49:26:ef:52:be:c0:d3:6c:3b:6e: 42:fb:13:56:0c:4f:c1:0f:04:39:86:cd:42:4a:0b:6f:96:eb: 8f:03:ef:78:4d:58:f6:ce:b5:9e:4d:e4:73:ea:7f:1a:09:0c: d9:a0:50:8b:78:4c:7f:fa:32:d5:f1:c6:2b:36:01:10:88:0a: 29:02:e5:e8:00:fc:17:c9:9a:ee:4e:72:73:0e:9c:c1:cb:e7: cc:65:f3:2d:81:a9:c4:4d:11:39:5c:89:5c:a3:50:65:8d:c0: 9d:e5:52:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0 QUE4RDZBQTEwHhcNMjUwOTE5MDAzNTIyWhcNMjUwOTI2MDAzNTIyWjAYMRYwFAYD VQQDEw02OGNjYTU0YS1jODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstmCE/KH7FoWHruzGLiksq5r0QI8icVkJmNFhRdEPJSf7adVNMSTfzIGZI0F ifMciuRuIHasOYrhW97r3yPRf4yszM7Jk7O/ACZ/esFDoECciZceU8gAZN+QsJwl tszwAvZgRLn/X/u55UT75xBkDxWBzqnPPVwXhggE6v1jaGkNxwtN5aydbjRrVJqx fnhKvtoQwQkrnUGUvFDutA185D33Mgf/X+CEtkukQoT5+c7B3O1ViioneOAIU99V vhZkQOWVJgJJSdrLI5sx3e1S4m1+vTlwN7KnRSazwrJTnuROTdiANDdo4jz9bn0B E+axP+9WZOx8WQwDEEAiKALyLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHpvsCM qmbMJvdpu6ky57CnXeHWMB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2 NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4 WXlUWWVZSjk4eXBLcU5hcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoneEHregKJjb3aA9ssygbvGhmTmm6oSxMl7+s4jxCaH/U4VOd5jD4 mFegddC8sAhETEacl+sLDhV4ijP4yh7zKZMexw90VqCFgnVI9W3+yEggyTakUOkk 51MKhLP3t1p+cQy7v7pEv1LJ3o9cc6+/PiEKgoDNi+qDJWZnTATmm7EIEg9u8Uhl MmGy/DGWqi494FAUVpE2gEkm71K+wNNsO25C+xNWDE/BDwQ5hs1CSgtvluuPA+94 TVj2zrWeTeRz6n8aCQzZoFCLeEx/+jLV8cYrNgEQiAopAuXoAPwXyZruTnJzDpzB y+fMZfMtganETRE5XIlco1BljcCd5VII -----END CERTIFICATE-----Generated at Fri Sep 19 03:58:08 2025 by rpki-client