$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json) Hash identifier: qIU0T8/w8BNZVr8xZS2mZw46CFUOtkyHe3cTGVI9aYo= Subject key identifier: 8A:38:D7:B9:EA:A6:FC:76:74:C1:1B:17:C3:36:7D:50:4F:BE:80:96 Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Certificate serial: 0BB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft Manifest number: 0BB2 Signing time: Sun 20 Jul 2025 19:02:08 +0000 Manifest this update: Sun 20 Jul 2025 19:02:08 +0000 Manifest next update: Sun 27 Jul 2025 19:02:08 +0000 Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: PhYPdcQXBfOFNSRG4BwLsur07OSl+0k4RIHRdJt+Hm0=) 2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: iz8rOu7sc7+N3/1kzdgDjJg5F86O0Z4mGrtUPPC8sj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3001 (0xbb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Validity Not Before: Jul 20 19:02:08 2025 GMT Not After : Jul 27 19:02:08 2025 GMT Subject: CN=687d3d30-25c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:5b:b4:d1:e3:e4:0c:54:86:08:15:7f:29: 37:62:58:24:ea:98:51:5f:14:91:51:83:10:e2:3f: cf:6c:97:5e:4a:e3:a2:7e:c0:d4:7c:39:3e:6c:c6: df:67:c2:ac:b6:bb:09:f4:2f:2d:38:00:8b:21:50: 05:ec:3d:fb:16:29:50:7c:66:38:eb:96:f5:a5:bb: d7:04:2f:1c:f4:ca:9b:64:6c:6a:0c:ea:e5:06:fc: 22:00:ec:4a:16:d8:0d:3c:0e:84:cd:05:75:c6:d7: 96:ad:38:22:6c:3d:6a:1c:9d:ab:f5:46:a0:0f:f8: 80:82:c9:6d:e2:df:70:24:d7:35:b7:40:36:f1:5e: 46:f7:c4:96:12:6e:85:83:11:9d:b5:6e:14:10:b7: 94:a5:1a:02:a3:b8:5a:45:2d:59:9f:c6:4c:9b:cb: 42:05:8b:78:9c:28:62:66:e5:60:e5:f0:03:67:a4: 32:07:52:c2:83:63:fe:98:ce:bb:97:50:8d:4a:c8: 88:81:0c:72:6b:7f:08:c5:73:a2:c8:d3:96:08:5f: a3:ca:31:2b:24:56:1e:83:1f:0c:d7:b9:46:1a:15: 42:cf:3e:a9:51:11:51:60:59:61:16:9f:b5:b1:6f: e9:8a:0a:95:12:d1:eb:aa:86:9d:77:f8:ae:a3:57: 65:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:38:D7:B9:EA:A6:FC:76:74:C1:1B:17:C3:36:7D:50:4F:BE:80:96 X509v3 Authority Key Identifier: keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2c:fd:2f:af:69:e5:7a:2d:51:c7:6c:d4:20:e3:21:71:8f: 2d:40:29:c7:05:65:0a:fe:f0:56:96:b6:3c:e1:b9:c3:ac:6a: f0:56:3e:81:ae:f9:ea:35:26:2e:5e:3a:96:4b:ee:e2:3d:e6: 68:2a:3c:af:4c:a5:a2:8d:2d:0f:cf:5e:b1:3b:52:78:61:d6: 9e:b3:9a:a8:ce:85:9f:6d:a2:94:0d:c6:3b:63:d7:01:d9:11: d6:9d:7c:92:ad:d3:2c:60:51:fb:79:4b:94:86:2d:3f:29:31: 7b:28:fe:de:93:f6:42:18:7d:45:b7:e1:1f:04:99:6e:c0:aa: 20:6f:74:78:05:23:5a:11:a3:75:4c:86:dd:1c:0e:80:ba:12: 8c:59:5c:9e:51:76:94:4d:a9:7e:dc:c2:0b:39:ac:1a:d0:82: 5c:5f:66:6b:ad:31:eb:c2:e1:93:6a:e7:a5:1c:19:e9:55:a3: e0:13:f0:c7:19:e9:94:65:22:30:6c:28:8c:f8:f0:35:62:95: b4:ac:b5:33:24:4b:0a:4b:18:ae:9d:16:ff:2d:e8:c3:ca:6e: 1c:94:f5:eb:f7:de:37:56:f7:85:d2:5d:64:12:fa:ba:4f:4d: 0c:8a:c8:b1:cf:27:1f:8a:6e:43:1b:73:cb:4e:3f:7f:ff:f9: 63:ca:c6:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1 RDNDRDQ2RTMwHhcNMjUwNzIwMTkwMjA4WhcNMjUwNzI3MTkwMjA4WjAYMRYwFAYD VQQDEw02ODdkM2QzMC0yNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvdbtNHj5AxUhggVfyk3Ylgk6phRXxSRUYMQ4j/PbJdeSuOifsDUfDk+bMbf Z8KstrsJ9C8tOACLIVAF7D37FilQfGY465b1pbvXBC8c9MqbZGxqDOrlBvwiAOxK FtgNPA6EzQV1xteWrTgibD1qHJ2r9UagD/iAgslt4t9wJNc1t0A28V5G98SWEm6F gxGdtW4UELeUpRoCo7haRS1Zn8ZMm8tCBYt4nChiZuVg5fADZ6QyB1LCg2P+mM67 l1CNSsiIgQxya38IxXOiyNOWCF+jyjErJFYegx8M17lGGhVCzz6pURFRYFlhFp+1 sW/pigqVEtHrqoadd/iuo1dlCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo417nq pvx2dMEbF8M2fVBPvoCWMB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2 MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfLP0vr2nlei1Rx2zUIOMhcY8tQCnHBWUK/vBWlrY84bnDrGrwVj6B rvnqNSYuXjqWS+7iPeZoKjyvTKWijS0Pz16xO1J4Ydaes5qozoWfbaKUDcY7Y9cB 2RHWnXySrdMsYFH7eUuUhi0/KTF7KP7ek/ZCGH1Ft+EfBJluwKogb3R4BSNaEaN1 TIbdHA6AuhKMWVyeUXaUTal+3MILOawa0IJcX2ZrrTHrwuGTauelHBnpVaPgE/DH GemUZSIwbCiM+PA1YpW0rLUzJEsKSxiunRb/LejDym4clPXr9943VveF0l1kEvq6 T00Misixzycfim5DG3PLTj9///ljysbo -----END CERTIFICATE-----Generated at Mon Jul 21 06:53:32 2025 by rpki-client