$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft File: 9FwPT0Z84VduXunkHlV28DSMRqc.mft (raw, json) Hash identifier: oQBXAo8nnUt6OQbRI9DUiiDFS0mx8UIWdNOvfrQwPB4= Subject key identifier: C2:BB:98:05:8E:A5:CA:9B:15:EC:DE:90:B7:D3:F4:A4:EC:55:4F:E7 Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0AB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft Manifest number: 09FF Signing time: Fri 18 Jul 2025 20:25:54 +0000 Manifest this update: Fri 18 Jul 2025 20:25:54 +0000 Manifest next update: Fri 25 Jul 2025 20:25:54 +0000 Files and hashes: 1: 9FwPT0Z84VduXunkHlV28DSMRqc.crl (hash: FhH0o6h1X+eVrM33q2gNpJwa74iHESbmY+ngwPWqRd4=) 2: 432BA1EC4D9011EC868F7186C4F9AE02.roa (hash: URaJZHDWPMBf4oTpXlSjA8N1epCCwA1he1DiC+P+VDQ=) 3: 91AB3450299911EDA389EC34C4F9AE02.roa (hash: dzTViCZ69Dd+v01VTdq8e2RvEYU1N06uBHk7UaC//2M=) 4: 30612F364BE411F09B3BB887C4F9AE02.roa (hash: eklJ7FzTn9mZj0/tgQ82yry1nIlD8nEbavqJJ/O2CPk=) 5: 427B2B004D9011EC868F7186C4F9AE02.roa (hash: E5HlYcC49Xvi6kpaq7+gL20czR33gGRvU+n3elbC34U=) 6: 83055A0E474911F0B811BF25C4F9AE02.roa (hash: EgTKA48l6DJiUoxXTbkGxqr3tInWHU28hOBokEssk+8=) 7: 5B8CDC02351211F09D579B64C4F9AE02.roa (hash: 1bAgWcJLlliVR0f1esq/e37v/i+ofAYAVlxnxD5PONo=) 8: A39B6FF862F411F0BEE28D40C4F9AE02.roa (hash: QHiQOUM7/mRH7sTtyfvxCvPzx8wZnFYTYpcXuimTIRc=) 9: 4F7540B64BE311F096B8CE67C4F9AE02.roa (hash: jCc2/9qAzsxKeS4WJR+FVeuqaWwB8WeG7jjEO6HnLws=) 10: 2D973430340E11EDB5E9BC42C4F9AE02.roa (hash: KM7uZ8V4nYgH56XPrIsS0TU+lQ74o7PGoNp9plcuH2g=) 11: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (hash: dtNfz/Keg7w+1A/MihzHZVUhq163+ywM42QNcaI/10Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2742 (0xab6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Jul 18 20:25:54 2025 GMT Not After : Jul 25 20:25:54 2025 GMT Subject: CN=687aadd2-a238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:e1:e7:7f:67:b0:ea:c4:cc:3b:cf:b6:c1: e1:c9:8b:e4:16:9d:39:d4:21:6b:c1:42:52:b9:84: 72:0e:66:1d:6d:9e:00:71:e7:8e:9c:4a:36:a0:4f: 57:ac:59:09:ac:fd:16:db:59:a4:44:3a:09:45:bf: 0e:a8:89:0f:c5:bf:d1:be:c4:86:71:65:5c:29:cd: a0:14:81:ed:e4:3c:28:53:05:32:d8:50:c6:56:c1: 42:f3:cc:03:b4:31:0c:09:f0:2a:5e:0d:73:89:d2: 95:49:1f:96:77:5c:53:4d:70:95:8a:c7:af:61:d4: e5:dd:0e:38:2f:12:20:07:2a:80:c5:16:e3:33:fa: 53:b6:1b:46:fb:86:ee:a4:35:af:b7:f9:3e:c4:35: fb:2b:60:43:53:17:17:8d:53:fe:8e:d8:f2:43:ba: 0e:3d:12:11:37:f4:92:36:b7:6d:7b:30:37:be:1e: 49:b5:4b:03:03:79:35:4d:a9:9f:b8:f4:fa:2a:b1: 88:49:1d:f9:1a:2f:c7:5c:8f:9f:21:96:7e:75:65: a3:a3:a8:de:eb:98:57:40:f5:37:00:7a:1d:6d:40: a1:b6:db:5c:dd:8b:33:94:f2:96:a0:1f:ec:b8:f9: 41:0d:cf:da:3a:59:1d:92:65:1f:78:38:7c:c2:9f: ad:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BB:98:05:8E:A5:CA:9B:15:EC:DE:90:B7:D3:F4:A4:EC:55:4F:E7 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:eb:8c:9a:9c:02:f5:f4:c8:86:a9:70:3e:6a:42:99:0a:a0: 2b:d9:1d:6b:ad:ea:13:45:ff:03:76:45:c6:ef:7e:ed:26:c5: 29:9b:2c:72:14:a6:91:6e:87:de:0a:97:dc:f2:07:43:57:e0: 81:27:4f:79:1e:19:e5:70:22:30:ea:3f:4e:ac:7f:ff:32:84: 9c:51:52:b3:59:bf:2e:62:90:e4:26:cb:59:fb:52:19:00:8b: 32:82:49:d5:de:c7:7c:12:2f:93:b1:8b:5a:80:0c:87:c8:67: a0:69:05:37:b9:b2:a2:42:cd:df:28:96:73:26:47:6a:fe:83: 45:72:42:02:32:de:76:df:97:3d:8f:0c:6c:d3:76:01:46:60: 59:91:01:a3:9c:1d:5d:34:16:21:b7:2f:1c:9c:f6:6f:d1:3e: 08:3c:99:ab:9d:31:72:d8:bc:b9:39:07:b5:bc:37:a3:f9:f0: 28:08:fc:3b:67:cf:da:ba:d7:05:94:7f:0e:51:c8:9e:9f:43: 4a:98:cb:8c:d9:09:e8:6e:75:0b:06:9d:71:0f:d9:3b:ce:6a: 9c:5e:1a:91:33:be:6f:c0:57:13:e9:a9:6d:64:b2:bd:04:13: 66:32:97:00:50:be:18:48:24:65:79:eb:6b:45:75:59:84:c0: 21:ae:f0:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjUwNzE4MjAyNTU0WhcNMjUwNzI1MjAyNTU0WjAYMRYwFAYD VQQDEw02ODdhYWRkMi1hMjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvvh539nsOrEzDvPtsHhyYvkFp051CFrwUJSuYRyDmYdbZ4AceeOnEo2oE9X rFkJrP0W21mkRDoJRb8OqIkPxb/RvsSGcWVcKc2gFIHt5DwoUwUy2FDGVsFC88wD tDEMCfAqXg1zidKVSR+Wd1xTTXCVisevYdTl3Q44LxIgByqAxRbjM/pTthtG+4bu pDWvt/k+xDX7K2BDUxcXjVP+jtjyQ7oOPRIRN/SSNrdtezA3vh5JtUsDA3k1Tamf uPT6KrGISR35Gi/HXI+fIZZ+dWWjo6je65hXQPU3AHodbUChtttc3YszlPKWoB/s uPlBDc/aOlkdkmUfeDh8wp+tkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMK7mAWO pcqbFezekLfT9KTsVU/nMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDE3Mi81OTc2MTI2NDlFNEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRW ZHVYdW5rSGxWMjhEU01ScWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe64yanAL19MiGqXA+akKZCqAr2R1rreoTRf8DdkXG737tJsUpmyxy FKaRbofeCpfc8gdDV+CBJ095HhnlcCIw6j9OrH//MoScUVKzWb8uYpDkJstZ+1IZ AIsygknV3sd8Ei+TsYtagAyHyGegaQU3ubKiQs3fKJZzJkdq/oNFckICMt5235c9 jwxs03YBRmBZkQGjnB1dNBYhty8cnPZv0T4IPJmrnTFy2Ly5OQe1vDej+fAoCPw7 Z8/autcFlH8OUcien0NKmMuM2QnobnULBp1xD9k7zmqcXhqRM75vwFcT6altZLK9 BBNmMpcAUL4YSCRleetrRXVZhMAhrvDk -----END CERTIFICATE-----Generated at Sun Jul 20 18:56:54 2025 by rpki-client