$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft File: D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json) Hash identifier: uUFB0hXAP4xH/ThdwhbwkqaX9nIX72CJDlsJCNFbMwk= Subject key identifier: 8A:BA:B9:3D:30:9B:44:B0:96:32:2A:C1:48:EB:A6:DD:BE:6D:94:BF Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 Certificate issuer: /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft Manifest number: 34 Signing time: Sat 23 Aug 2025 07:50:53 +0000 Manifest this update: Sat 23 Aug 2025 07:50:53 +0000 Manifest next update: Sat 30 Aug 2025 07:50:53 +0000 Files and hashes: 1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: v/g4U3Awi0pA7TVPtl/jrU4JXx6s5NDQb8d6uxNIf14=) 2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: C2osSUSGXaoVQWIdcbrfsnLCIsFQre/GUrWQUTRuHn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Validity Not Before: Aug 23 07:50:53 2025 GMT Not After : Aug 30 07:50:53 2025 GMT Subject: CN=68a972dd-1bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:04:0b:24:87:b5:8d:87:23:72:bc:d6:df:b3: 9b:a5:1c:d5:9d:b7:90:c9:9f:ad:2a:4f:7b:4c:67: f9:7d:b6:c5:46:12:4e:17:77:e5:be:85:37:f2:f7: 4e:0e:ff:95:6e:75:6a:31:fc:e5:d0:b7:76:60:fe: df:a7:af:09:44:83:26:6d:c6:7f:06:69:b0:82:91: a8:f8:a3:76:63:b5:f6:80:98:33:9d:bb:59:2c:c5: 60:6a:64:56:2b:7e:c1:63:40:52:ba:d6:eb:62:b3: e7:7e:70:97:b7:60:b8:0f:2e:1c:03:af:05:98:b6: 82:54:b5:90:36:a1:5c:6b:5f:c5:32:28:66:36:af: 09:bd:77:12:f2:a0:50:45:d3:10:2d:69:70:a8:7e: 40:fe:ea:2e:d6:61:a0:27:e4:56:fe:66:04:de:8d: a5:a9:c6:ca:1b:d7:36:5d:e8:93:5f:da:ff:65:2e: de:47:59:06:16:dd:43:0e:1a:5e:e4:24:5c:a1:62: 34:70:96:50:9a:42:ba:f9:76:62:36:33:f8:65:6d: e5:b1:09:16:09:46:91:2b:c8:f1:c8:77:a4:a4:1e: 95:11:2d:ae:9c:d6:d7:6c:98:b7:21:94:82:02:c9: 8f:51:89:43:ec:f7:ba:89:e4:5c:f0:51:6e:b7:27: 70:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BA:B9:3D:30:9B:44:B0:96:32:2A:C1:48:EB:A6:DD:BE:6D:94:BF X509v3 Authority Key Identifier: keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5b:ae:57:22:9e:df:a9:5d:a5:9c:7d:ba:55:5e:1c:33:ac: f9:a1:77:ea:b3:84:5a:79:60:7e:cd:3a:19:0a:56:3d:38:6b: 0f:56:30:4c:69:33:f4:e7:86:0d:5c:0c:7b:5d:f7:33:f9:06: 83:bf:0e:b2:18:0f:d0:44:6b:71:2c:c6:cf:bc:d6:ed:a0:3a: 3c:79:ff:52:21:d5:f6:44:62:c8:f1:dc:3c:f9:1c:6a:9f:db: 1e:19:b5:6d:d5:e2:92:03:ba:1d:d6:23:9e:10:ee:a3:41:96: c4:cb:e0:85:b5:fc:45:d5:cc:8a:46:34:af:0f:79:bb:63:fa: bc:8e:86:0a:d2:bf:97:d7:5f:9e:88:8d:09:d4:c4:d7:7a:71: 1e:de:e5:27:ca:88:fc:fb:e7:08:e9:9e:9d:4d:e7:b9:eb:17: 12:ac:c2:8e:6e:79:21:3d:20:36:29:02:cf:23:ad:cf:14:bf: 07:82:cf:c0:20:12:35:21:e6:4d:60:da:6f:0a:43:9b:41:ce: d3:a2:98:35:e1:9c:a8:ed:34:55:f4:af:71:e7:12:b3:77:51: bf:7e:a6:49:b4:1d:8d:16:00:b8:c5:2a:32:ed:38:7f:c6:40: 92:85:4c:7f:a4:7a:e2:07:2a:5a:35:06:91:41:6f:71:48:e7: f0:52:0c:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTZDRjExMC8GA1UEBRMoMEZGRjcxNzk4MkQ5RTFEOTZGNEQ3RkM1MzExRUQzMjMy MzZCQTA5MzAeFw0yNTA4MjMwNzUwNTNaFw0yNTA4MzAwNzUwNTNaMBgxFjAUBgNV BAMTDTY4YTk3MmRkLTFiYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2BAskh7WNhyNyvNbfs5ulHNWdt5DJn60qT3tMZ/l9tsVGEk4Xd+W+hTfy904O /5VudWox/OXQt3Zg/t+nrwlEgyZtxn8GabCCkaj4o3ZjtfaAmDOdu1ksxWBqZFYr fsFjQFK61utis+d+cJe3YLgPLhwDrwWYtoJUtZA2oVxrX8UyKGY2rwm9dxLyoFBF 0xAtaXCofkD+6i7WYaAn5Fb+ZgTejaWpxsob1zZd6JNf2v9lLt5HWQYW3UMOGl7k JFyhYjRwllCaQrr5dmI2M/hlbeWxCRYJRpEryPHId6SkHpURLa6c1tdsmLchlIIC yY9RiUPs97qJ5FzwUW63J3BhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUirq5PTCb RLCWMirBSOum3b5tlL8wHwYDVR0jBBgwFoAUD/9xeYLZ4dlvTX/FMR7TIyNroJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NkNGLzAxMzkzNDk2MzEy RDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRsdlRYX0ZNUjdUSXlOcm9K TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRF85eGVZTFo0ZGx2VFhfRk1SN1RJeU5yb0pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NkNGLzAxMzkzNDk2MzEyRDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRs dlRYX0ZNUjdUSXlOcm9KTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1brlcint+pXaWcfbpVXhwzrPmhd+qzhFp5YH7NOhkKVj04aw9WMExp M/Tnhg1cDHtd9zP5BoO/DrIYD9BEa3Esxs+81u2gOjx5/1Ih1fZEYsjx3Dz5HGqf 2x4ZtW3V4pIDuh3WI54Q7qNBlsTL4IW1/EXVzIpGNK8Pebtj+ryOhgrSv5fXX56I jQnUxNd6cR7e5SfKiPz75wjpnp1N57nrFxKswo5ueSE9IDYpAs8jrc8UvweCz8Ag EjUh5k1g2m8KQ5tBztOimDXhnKjtNFX0r3HnErN3Ub9+pkm0HY0WALjFKjLtOH/G QJKFTH+keuIHKlo1BpFBb3FI5/BSDBQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:42:24 2025 by rpki-client