$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft File: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft (raw, json) Hash identifier: 0Pi439R42bR257ILpV6YPzMCFisjQu0O0Zqx6/lYEzY= Subject key identifier: 40:CA:58:3A:6B:C3:FA:5E:74:13:93:2C:50:15:46:39:2F:87:46:04 Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft Manifest number: 0663 Signing time: Thu 18 Sep 2025 22:51:00 +0000 Manifest this update: Thu 18 Sep 2025 22:51:00 +0000 Manifest next update: Thu 25 Sep 2025 22:51:00 +0000 Files and hashes: 1: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl (hash: RF0IfVsEiFu5SFmkSxc0hbJje4B5/ZMxbZ231YbshC0=) 2: 2F320256981611EB904AF150C4F9AE02.roa (hash: zydBQ6+XzPsP0D5XfuooCO12kFS+89HKhQ6kY0lGz0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF84F, serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Validity Not Before: Sep 18 22:51:00 2025 GMT Not After : Sep 25 22:51:00 2025 GMT Subject: CN=68cc8cd4-e911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d8:ce:ca:4e:91:1b:cc:4b:8b:b5:f0:88:e9: 5d:fa:d7:b9:a8:99:7d:d5:3f:6c:26:b4:88:f0:8c: 33:0e:b0:ec:36:5c:5b:0f:64:5f:9c:50:d8:21:e1: 20:b4:a0:3e:5b:00:f2:31:ed:d4:58:c9:9d:24:07: c6:11:e3:73:f4:83:c7:ce:90:46:15:43:c4:fe:4f: f3:db:62:1e:d6:ef:9f:36:cd:9a:4b:2e:d5:8c:48: ef:97:88:af:89:e8:d9:d9:08:1d:db:88:99:5e:20: bb:80:cb:2b:46:79:e4:ee:fe:e4:de:e1:71:33:3d: f5:9a:41:75:fc:42:d1:81:c7:12:8e:08:31:8d:26: 26:34:4a:a3:97:61:3f:81:20:4b:55:f5:11:35:d9: 58:e7:f4:ba:4a:8d:d2:36:32:79:2c:d4:7e:fd:5e: 09:e1:9f:16:47:97:71:e6:ba:07:c9:8a:be:e4:76: 77:ca:65:dc:bd:a8:14:30:87:2b:80:6a:6b:b1:b3: 30:85:61:00:ae:a2:4b:c4:21:48:49:75:73:64:39: 8f:0d:3f:6b:53:d5:93:af:84:0b:c4:c3:f0:da:0c: f6:a6:a1:9f:8d:8c:b1:52:d5:b7:19:78:33:39:a4: 4b:d1:5c:d1:29:6d:5d:b9:40:d2:51:c2:c1:c6:03: 38:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CA:58:3A:6B:C3:FA:5E:74:13:93:2C:50:15:46:39:2F:87:46:04 X509v3 Authority Key Identifier: keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:28:58:e4:bf:5e:97:18:d2:9b:91:9a:93:02:25:2e:0c:b7: 5d:f1:54:71:47:a9:7e:5d:df:d6:0a:aa:38:64:39:a1:ae:0b: 7a:54:cf:eb:25:6e:d8:86:c0:ff:95:05:3a:a7:f6:8c:0e:df: 3c:79:d8:87:60:89:34:d7:ae:8b:bf:70:b6:80:d8:4b:f2:38: a6:8c:27:c7:52:59:d0:6e:64:5b:18:3e:79:4a:c8:60:45:a5: f6:b5:a2:0f:3e:fd:54:3f:e0:6b:98:c1:82:1f:7f:a9:8a:3a: fa:ef:82:93:3e:70:67:aa:81:2c:d6:79:7e:4c:fa:12:55:b2: 44:c3:be:af:21:81:dc:77:1e:58:08:b6:21:fd:c1:16:d5:30: 25:0c:9a:ae:4a:11:8d:0c:8b:9a:9a:fb:41:81:a7:05:16:cf: b6:0c:52:d3:ff:03:5f:f3:01:c1:ff:94:d2:bc:a1:57:87:79: 90:d0:19:26:f8:6a:4a:13:a8:3b:14:5e:53:a0:e2:83:df:89: d8:fd:ec:5a:58:18:14:ec:07:3b:8b:6e:e7:ee:e1:00:35:38: 9e:5a:41:40:e1:7f:96:b1:c3:eb:c8:5e:fd:2d:02:01:ef:48: b8:57:d1:4b:14:9d:f1:4a:d8:35:f7:d8:70:28:81:31:76:db: 1b:4b:bd:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY4NEYxMTAvBgNVBAUTKDcxNDFDMzE5QkI0NEJGQkNERTMzODJCM0JCNjkxMjY1 Rjk1RDMwOUYwHhcNMjUwOTE4MjI1MTAwWhcNMjUwOTI1MjI1MTAwWjAYMRYwFAYD VQQDEw02OGNjOGNkNC1lOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdjOyk6RG8xLi7XwiOld+te5qJl91T9sJrSI8IwzDrDsNlxbD2RfnFDYIeEg tKA+WwDyMe3UWMmdJAfGEeNz9IPHzpBGFUPE/k/z22Ie1u+fNs2aSy7VjEjvl4iv iejZ2Qgd24iZXiC7gMsrRnnk7v7k3uFxMz31mkF1/ELRgccSjggxjSYmNEqjl2E/ gSBLVfURNdlY5/S6So3SNjJ5LNR+/V4J4Z8WR5dx5roHyYq+5HZ3ymXcvagUMIcr gGprsbMwhWEArqJLxCFISXVzZDmPDT9rU9WTr4QLxMPw2gz2pqGfjYyxUtW3GXgz OaRL0VzRKW1duUDSUcLBxgM4qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDKWDpr w/pedBOTLFAVRjkvh0YEMB8GA1UdIwQYMBaAFHFBwxm7RL+83jOCs7tpEmX5XTCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg0Ri9ERDQ4N0E1Qzk4 MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3emVNNEt6dTJrU1pmbGRN SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVSERHYnRFdjd6ZU00S3p1MmtTWmZsZE1KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjg0Ri9ERDQ4N0E1Qzk4MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3 emVNNEt6dTJrU1pmbGRNSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGKFjkv16XGNKbkZqTAiUuDLdd8VRxR6l+Xd/WCqo4ZDmhrgt6VM/r JW7YhsD/lQU6p/aMDt88ediHYIk0166Lv3C2gNhL8jimjCfHUlnQbmRbGD55Sshg RaX2taIPPv1UP+BrmMGCH3+pijr674KTPnBnqoEs1nl+TPoSVbJEw76vIYHcdx5Y CLYh/cEW1TAlDJquShGNDIuamvtBgacFFs+2DFLT/wNf8wHB/5TSvKFXh3mQ0Bkm +GpKE6g7FF5ToOKD34nY/exaWBgU7Ac7i27n7uEANTieWkFA4X+WscPryF79LQIB 70i4V9FLFJ3xStg199hwKIExdtsbS70W -----END CERTIFICATE-----Generated at Fri Sep 19 00:58:46 2025 by rpki-client