$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: OggDzfQMyu3zC2OaNTMaqf0D5fqj9fJfKlscWnRB6Nc= Subject key identifier: 93:38:80:92:B7:35:82:32:3C:4B:6E:84:DA:D9:7D:6F:AE:86:2B:F2 Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 09E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 09D9 Signing time: Fri 18 Jul 2025 20:09:53 +0000 Manifest this update: Fri 18 Jul 2025 20:09:52 +0000 Manifest next update: Fri 25 Jul 2025 20:09:52 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: 0x6rV7CcLvNiciuOAYt71tS0DVEZUlabL80aoo+UH2w=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: nTti14+ixHvCqHgk8IwtFdkQ1Ouiq6aL3zx3Hm8MMGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2529 (0x9e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: Jul 18 20:09:52 2025 GMT Not After : Jul 25 20:09:52 2025 GMT Subject: CN=687aaa11-35e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:60:d6:25:04:bd:f6:68:0d:75:d6:41:79:6c: 58:d9:ac:f3:8f:59:6e:18:fa:38:01:09:44:fd:1f: 75:95:1e:28:42:57:b8:fb:1d:17:bd:1c:01:a2:c0: 75:6f:16:e6:72:7a:7b:47:3d:f4:de:aa:6f:15:9c: cd:1d:08:ab:01:c4:ad:c5:d0:d3:7e:fe:6c:9f:9d: 58:7a:09:99:9a:a4:23:6a:c4:8e:9a:c4:93:2b:97: 43:80:f6:58:84:65:cf:37:97:a8:b6:55:df:b9:43: af:3b:46:e2:d0:af:4c:60:8d:7e:ae:8e:43:f7:b2: 7a:3c:55:b9:3c:8e:04:b5:ab:b4:80:75:29:33:7c: 08:58:20:3c:0c:aa:5d:87:54:77:82:64:9e:d3:10: dc:b9:3f:2c:19:9c:9e:e1:a7:f8:5f:e1:67:b8:28: 02:44:9f:49:21:81:a9:89:11:c9:c6:b6:b6:1c:b9: 09:7e:23:59:8a:07:a0:d6:4d:c4:3d:1d:6e:08:21: e1:0a:91:2b:45:eb:81:64:01:e7:d4:ec:b7:dd:73: 85:d9:d3:c3:17:da:38:df:ac:92:e7:17:d7:4c:48: fd:e0:b5:00:fd:8c:b9:9b:8c:f0:ca:bc:d7:09:cd: 25:d5:ee:fe:a9:03:d9:ec:08:09:27:75:84:bd:39: 29:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:38:80:92:B7:35:82:32:3C:4B:6E:84:DA:D9:7D:6F:AE:86:2B:F2 X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:36:79:8f:32:6a:38:32:c5:58:9b:47:e3:21:a4:76:27:94: 36:ca:5c:28:75:12:eb:91:dd:6d:a2:9d:c9:b8:bd:fe:a2:af: 42:97:dc:91:3e:1d:c5:21:a9:06:33:71:90:18:8a:7a:7b:c1: 13:1d:b1:c4:06:c8:1d:a0:82:49:84:06:27:85:da:a3:18:b0: 9d:d2:35:83:fb:d0:ff:b6:2a:6e:75:42:ec:b0:d0:07:61:d2: 04:40:cf:68:08:8f:a8:96:17:a5:97:7e:39:41:81:7e:06:18: ba:24:68:10:ef:8f:d9:78:21:d1:56:76:a8:48:5d:4c:04:12: f8:81:d5:e1:54:66:61:8a:ff:cc:be:47:16:4a:33:cf:e4:65: 04:f3:ad:b6:2c:66:17:c2:db:d4:d0:49:cd:01:72:44:b2:b2: 93:e8:18:06:30:7b:5f:e4:55:fa:e9:13:b6:09:cc:31:78:01: c8:02:98:77:94:eb:70:3b:05:59:2f:94:82:ef:eb:b8:ff:0f: 6b:20:3b:60:a2:a0:67:f4:62:02:58:73:60:f7:84:84:6f:1d: a1:d3:ce:4d:41:25:bf:06:52:32:b2:dd:c0:4c:d2:aa:32:8e: c4:97:42:0b:cd:f6:1e:f6:7e:67:c7:55:36:ad:a5:f2:5a:25: e9:f5:dd:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUwNzE4MjAwOTUyWhcNMjUwNzI1MjAwOTUyWjAYMRYwFAYD VQQDEw02ODdhYWExMS0zNWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWDWJQS99mgNddZBeWxY2azzj1luGPo4AQlE/R91lR4oQle4+x0XvRwBosB1 bxbmcnp7Rz303qpvFZzNHQirAcStxdDTfv5sn51YegmZmqQjasSOmsSTK5dDgPZY hGXPN5eotlXfuUOvO0bi0K9MYI1+ro5D97J6PFW5PI4Etau0gHUpM3wIWCA8DKpd h1R3gmSe0xDcuT8sGZye4af4X+FnuCgCRJ9JIYGpiRHJxra2HLkJfiNZigeg1k3E PR1uCCHhCpErReuBZAHn1Oy33XOF2dPDF9o436yS5xfXTEj94LUA/Yy5m4zwyrzX Cc0l1e7+qQPZ7AgJJ3WEvTkpRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJM4gJK3 NYIyPEtuhNrZfW+uhivyMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARNnmPMmo4MsVYm0fjIaR2J5Q2ylwodRLrkd1top3JuL3+oq9Cl9yR Ph3FIakGM3GQGIp6e8ETHbHEBsgdoIJJhAYnhdqjGLCd0jWD+9D/tipudULssNAH YdIEQM9oCI+olhell345QYF+Bhi6JGgQ74/ZeCHRVnaoSF1MBBL4gdXhVGZhiv/M vkcWSjPP5GUE8622LGYXwtvU0EnNAXJEsrKT6BgGMHtf5FX66RO2CcwxeAHIAph3 lOtwOwVZL5SC7+u4/w9rIDtgoqBn9GICWHNg94SEbx2h085NQSW/BlIyst3ATNKq Mo7El0ILzfYe9n5nx1U2raXyWiXp9d3g -----END CERTIFICATE-----Generated at Sun Jul 20 06:21:53 2025 by rpki-client