$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft File: 0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json) Hash identifier: T3UIfe8rJNd+Bx8yWe6IPu6cNOOCxL1Ht7zA5SQ0uTA= Subject key identifier: 33:B3:35:85:CA:BC:A0:EF:00:D9:B0:14:89:7E:9E:A5:B6:6B:14:E5 Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 Certificate issuer: /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft Manifest number: 0184 Signing time: Sat 23 Aug 2025 03:40:38 +0000 Manifest this update: Sat 23 Aug 2025 03:40:38 +0000 Manifest next update: Sat 30 Aug 2025 03:40:38 +0000 Files and hashes: 1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: CNnUMf0pTXK5K2/jOwbbp5BPcvFu4Usl+qQ5cI9eqlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91402E0, serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Validity Not Before: Aug 23 03:40:38 2025 GMT Not After : Aug 30 03:40:38 2025 GMT Subject: CN=68a93836-0c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:36:27:27:4d:01:26:16:a1:03:7f:27:eb:78: df:b7:9d:35:c4:bd:87:83:d5:3a:e7:15:eb:0c:1e: 39:1e:a9:f7:5d:f3:1e:ee:21:f0:f3:79:50:6c:d7: b5:a0:2a:ff:a2:fc:18:7a:a8:47:76:78:d2:11:6c: 98:bf:cc:aa:3d:b4:a0:4a:58:03:b6:9e:ac:5a:2b: d8:9e:8d:4f:d8:61:0a:dc:68:74:67:2f:c8:5b:44: b3:a1:0d:a8:ec:69:fd:7a:c6:97:d4:fa:2a:13:41: 08:07:95:f0:da:56:ca:93:21:72:ed:71:51:bc:e1: 1c:07:42:a6:d8:7e:90:50:8d:2c:99:6d:83:0e:4d: 39:21:00:ae:d2:9e:e7:0c:1b:fb:7c:94:8d:2a:1d: 26:f6:4f:76:5f:8f:f3:b0:4d:ed:1e:8c:88:71:e8: 68:6e:a1:8e:63:b9:62:da:e8:b0:16:3c:a1:3b:9d: 64:9a:f6:c8:50:22:94:5d:30:c9:98:1d:6d:0e:cf: eb:8d:c5:26:d1:c7:9a:11:83:3a:23:9c:bf:d0:25: f3:83:af:69:1a:bc:81:4f:92:5a:1d:66:57:48:c7: 22:3c:1b:61:9c:b9:c2:14:53:67:46:5a:3e:fa:ca: c1:c5:4a:fc:86:fb:90:f9:f8:c7:6d:ff:eb:23:9f: 57:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B3:35:85:CA:BC:A0:EF:00:D9:B0:14:89:7E:9E:A5:B6:6B:14:E5 X509v3 Authority Key Identifier: keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:04:e7:24:dd:bc:e2:a9:6a:b5:b4:bc:0c:82:76:75:14:40: 7f:80:86:75:3c:c9:17:5a:0c:fe:ff:bb:53:e7:9a:d5:1e:8a: 47:f8:dc:bd:09:f1:2c:4f:50:f3:8b:96:db:68:71:37:82:8b: fd:cb:b5:71:fb:81:a2:49:b5:1b:f1:36:bc:f0:8e:1f:e0:ee: 70:ba:59:14:59:8c:bf:f0:3f:7f:4a:1c:8b:00:b1:3c:bd:c7: f3:d3:c5:39:40:12:3b:a2:1b:ef:33:fc:7a:7a:80:07:b5:e3: ea:34:12:1a:65:a2:2d:0d:6c:ae:7d:28:ef:64:bf:bd:1e:77: 1d:43:af:0f:0a:31:bd:52:09:32:f1:93:2b:69:6f:ea:20:c1: a0:0c:fe:88:09:03:79:c5:fa:b7:7f:58:c7:ec:f3:c7:ac:6d: 80:69:23:31:31:90:75:a1:70:9d:dd:c2:e0:7a:1c:99:be:72: 2e:87:9b:a7:59:e3:4d:ba:2a:e9:77:87:5a:af:1c:70:ce:2b: b2:fc:eb:0e:82:bf:b6:7c:01:46:5b:18:c3:23:eb:36:1b:95: d9:08:4e:ab:05:1a:d6:91:e3:ff:ac:d2:ca:14:4e:a9:53:8e: de:40:45:30:db:e8:8a:64:db:c0:e2:86:e8:be:4a:e9:87:75: c2:b6:28:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyRTAxMTAvBgNVBAUTKEQzMTQ3RDhEMjdBOUFEMURDQjgyMzQ3RjE0NEIwODU1 RTA1NUUxQTAwHhcNMjUwODIzMDM0MDM4WhcNMjUwODMwMDM0MDM4WjAYMRYwFAYD VQQDEw02OGE5MzgzNi0wYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjYnJ00BJhahA38n63jft501xL2Hg9U65xXrDB45Hqn3XfMe7iHw83lQbNe1 oCr/ovwYeqhHdnjSEWyYv8yqPbSgSlgDtp6sWivYno1P2GEK3Gh0Zy/IW0SzoQ2o 7Gn9esaX1PoqE0EIB5Xw2lbKkyFy7XFRvOEcB0Km2H6QUI0smW2DDk05IQCu0p7n DBv7fJSNKh0m9k92X4/zsE3tHoyIcehobqGOY7li2uiwFjyhO51kmvbIUCKUXTDJ mB1tDs/rjcUm0ceaEYM6I5y/0CXzg69pGryBT5JaHWZXSMciPBthnLnCFFNnRlo+ +srBxUr8hvuQ+fjHbf/rI59XuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOzNYXK vKDvANmwFIl+nqW2axTlMB8GA1UdIwQYMBaAFNMUfY0nqa0dy4I0fxRLCFXgVeGg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJFMC9BQTZCRjQ0MDJC NTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJSM0xnalJfRkVzSVZlQlY0 YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4UjlqU2VwclIzTGdqUl9GRXNJVmVCVjRhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDJFMC9BQTZCRjQ0MDJCNTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJS M0xnalJfRkVzSVZlQlY0YUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0BOck3bziqWq1tLwMgnZ1FEB/gIZ1PMkXWgz+/7tT55rVHopH+Ny9 CfEsT1Dzi5bbaHE3gov9y7Vx+4GiSbUb8Ta88I4f4O5wulkUWYy/8D9/ShyLALE8 vcfz08U5QBI7ohvvM/x6eoAHtePqNBIaZaItDWyufSjvZL+9HncdQ68PCjG9Ugky 8ZMraW/qIMGgDP6ICQN5xfq3f1jH7PPHrG2AaSMxMZB1oXCd3cLgehyZvnIuh5un WeNNuirpd4darxxwziuy/OsOgr+2fAFGWxjDI+s2G5XZCE6rBRrWkeP/rNLKFE6p U47eQEUw2+iKZNvA4obovkrph3XCtii6 -----END CERTIFICATE-----Generated at Sat Aug 23 13:52:38 2025 by rpki-client