$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft File: 9US5wrG96hw7N0NIuNFeNn5qD0I.mft (raw, json) Hash identifier: f2Cg0L6CWxmq4Zqj+okbsXv5nBxpw4Xs/kspgBlgGX4= Subject key identifier: 4E:EA:19:80:23:75:AA:EC:55:6C:A5:6B:F0:4E:82:D4:E3:FA:FA:7F Authority key identifier: F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42 Certificate issuer: /CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42 Certificate serial: 0769 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft Manifest number: 08A7 Signing time: Fri 18 Jul 2025 21:50:39 +0000 Manifest this update: Fri 18 Jul 2025 21:50:39 +0000 Manifest next update: Fri 25 Jul 2025 21:50:39 +0000 Files and hashes: 1: 9US5wrG96hw7N0NIuNFeNn5qD0I.crl (hash: P/esucWmB9RUJWmJHAB0vQPUsVKLzXGco4VRufkhdJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91139AB, serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42 Validity Not Before: Jul 18 21:50:39 2025 GMT Not After : Jul 25 21:50:39 2025 GMT Subject: CN=687ac1af-68c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:76:43:36:66:f9:f2:d2:54:24:ee:7e:a5: 1b:d0:84:1c:7d:5f:5f:97:6e:18:ab:5f:46:17:f1: 60:18:52:77:96:a7:70:81:36:40:cc:83:e3:db:1d: 02:ee:45:23:a1:a3:0d:ec:97:af:04:e3:95:16:65: 20:80:ce:af:da:17:ec:a0:6d:52:4b:4c:4d:9c:ba: 1e:49:1a:3e:8e:f0:f8:34:ab:c3:3a:3e:bd:be:9e: 33:1d:b5:9c:ec:46:29:88:a4:8f:03:96:70:1c:5b: ab:de:75:02:49:73:9d:c0:36:26:69:06:5e:8d:c4: e8:28:5a:4f:04:13:ae:47:c5:46:9a:69:2f:13:0a: 0f:9b:27:d4:ac:62:bf:66:8a:5e:f0:30:c8:66:4b: 30:6b:b4:0e:fa:e7:8a:b2:44:de:09:d4:c4:90:ce: 2b:74:89:ba:2e:39:16:ec:51:e3:59:ac:07:9c:67: 51:f3:ae:82:d4:8a:c9:46:89:0e:e2:27:e1:a1:c4: 88:75:de:24:ad:a5:20:7f:bd:f7:62:fa:d7:16:a2: e8:e6:2d:5a:df:32:c5:78:c4:ee:56:da:9b:7d:aa: ba:11:cf:f7:8e:7c:83:be:e6:11:b5:42:5d:1d:c2: 7e:7b:32:96:01:f8:ca:e1:db:c4:9f:00:1a:e4:89: 0b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EA:19:80:23:75:AA:EC:55:6C:A5:6B:F0:4E:82:D4:E3:FA:FA:7F X509v3 Authority Key Identifier: keyid:F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:1f:d2:d6:4d:69:dc:78:75:67:88:e0:e1:9a:b1:bb:e4:03: 2b:20:1a:be:55:fd:9f:b1:31:df:53:d5:a1:d0:7f:c6:d9:e8: 54:59:16:a8:32:9c:d7:0f:9e:0c:25:db:e6:a9:3c:f9:8a:cd: c3:35:1c:b5:da:68:67:62:9c:60:b0:ef:22:c0:89:7e:64:06: 6e:42:be:57:07:7b:51:a8:ee:6c:46:15:af:ed:9c:4c:92:c8: 5d:4e:1f:89:a9:0d:e7:e4:46:7a:6e:91:98:01:65:89:c0:c8: d5:fb:42:12:63:53:cc:26:71:22:3d:85:4b:49:e7:ed:22:2c: b0:ff:f2:ec:fe:a8:9b:8c:84:12:7e:ae:b4:ae:5d:25:92:ac: c6:fb:8e:f1:8d:0d:e6:35:31:b5:47:af:a6:23:fc:64:d4:fa: c8:f0:86:62:06:dd:26:13:74:7f:43:74:41:d3:1e:4d:c9:c1: dd:32:d6:ea:3a:95:60:0c:e1:34:4e:0f:98:53:92:6e:01:b6: cc:ec:4c:2e:9d:d6:bb:57:d2:2b:5b:e6:f4:de:01:0b:bb:f3: 4d:be:df:6d:4e:d4:e9:67:39:88:0e:b6:2a:25:40:90:d6:a8: 47:0d:ac:8b:4a:b7:41:7e:f6:ac:f9:35:9d:77:57:f2:40:90: 93:ef:76:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5QUIxMTAvBgNVBAUTKEY1NDRCOUMyQjFCREVBMUMzQjM3NDM0OEI4RDE1RTM2 N0U2QTBGNDIwHhcNMjUwNzE4MjE1MDM5WhcNMjUwNzI1MjE1MDM5WjAYMRYwFAYD VQQDEw02ODdhYzFhZi02OGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvp2QzZm+fLSVCTufqUb0IQcfV9fl24Yq19GF/FgGFJ3lqdwgTZAzIPj2x0C 7kUjoaMN7JevBOOVFmUggM6v2hfsoG1SS0xNnLoeSRo+jvD4NKvDOj69vp4zHbWc 7EYpiKSPA5ZwHFur3nUCSXOdwDYmaQZejcToKFpPBBOuR8VGmmkvEwoPmyfUrGK/ Zope8DDIZkswa7QO+ueKskTeCdTEkM4rdIm6LjkW7FHjWawHnGdR866C1IrJRokO 4ifhocSIdd4kraUgf733YvrXFqLo5i1a3zLFeMTuVtqbfaq6Ec/3jnyDvuYRtUJd HcJ+ezKWAfjK4dvEnwAa5IkLawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7qGYAj darsVWyla/BOgtTj+vp/MB8GA1UdIwQYMBaAFPVEucKxveocOzdDSLjRXjZ+ag9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzlBQi8xNThENDkwNjI1 NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZodzdOME5JdU5GZU5uNXFE MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVUzV3ckc5Nmh3N04wTkl1TkZlTm41cUQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzlBQi8xNThENDkwNjI1NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZo dzdOME5JdU5GZU5uNXFEMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEH9LWTWnceHVniODhmrG75AMrIBq+Vf2fsTHfU9Wh0H/G2ehUWRao MpzXD54MJdvmqTz5is3DNRy12mhnYpxgsO8iwIl+ZAZuQr5XB3tRqO5sRhWv7ZxM kshdTh+JqQ3n5EZ6bpGYAWWJwMjV+0ISY1PMJnEiPYVLSeftIiyw//Ls/qibjIQS fq60rl0lkqzG+47xjQ3mNTG1R6+mI/xk1PrI8IZiBt0mE3R/Q3RB0x5NycHdMtbq OpVgDOE0Tg+YU5JuAbbM7Ewunda7V9IrW+b03gELu/NNvt9tTtTpZzmIDrYqJUCQ 1qhHDayLSrdBfvas+TWdd1fyQJCT73Z5 -----END CERTIFICATE-----Generated at Sun Jul 20 03:34:16 2025 by rpki-client