$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: XAIzGTQoRpqt3q/12fngsPi6l0jgoPYg7AaC8DrtaFs= Subject key identifier: F2:47:7A:AA:75:BD:BC:86:86:64:06:13:9D:85:92:24:43:71:0F:A3 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 080C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 07EA Signing time: Fri 18 Jul 2025 21:20:46 +0000 Manifest this update: Fri 18 Jul 2025 21:20:45 +0000 Manifest next update: Fri 25 Jul 2025 21:20:45 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: TcY+HUTpklco7KT/EefMWK3GHwjuRZpyLYk7tJqQ5ow=) 2: BF07B0DA16AF11F08B8C4061C4F9AE02.roa (hash: m5fvUWDyLmphSj+hveftDjH5v8ZvHtc3dCRNArmrofc=) 3: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: RVujGjgRtNml2s4B1MbyglZHc1wuuQ8z+GSwbNfvR2o=) 4: 1070E6CA9A8311EF8BE0F826C4F9AE02.roa (hash: 5usMHuwC29/GKSbCm/Fabiikjfpjet0V04t/dPRj3vM=) 5: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: AjNKnPWs+wQxA57p7oeqhPGR6IMIStHtSJ7A+NHTTwU=) 6: 38BE1074FC0F11EA8DEF4D28C4F9AE02.roa (hash: iWWPKNMJez26/4BW7/wljyQN/N1JrdnLJYQsd0J35V0=) 7: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: vJqvl3p3GZGjPo1+bFOu/lz3UGNmQtiNtsOQmfP7QoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Jul 18 21:20:45 2025 GMT Not After : Jul 25 21:20:45 2025 GMT Subject: CN=687abaad-3838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0d:4d:e8:d3:94:f7:e6:cb:f2:34:f0:e9:a0: e7:4e:cd:3e:c0:55:bc:a0:24:f5:55:36:f9:87:71: 04:41:f9:d9:1d:31:42:19:e5:0f:66:f0:8d:30:42: 2f:55:f6:24:ee:43:4f:b7:4b:2e:79:ba:28:1a:ff: 20:e6:fd:d5:fa:3f:6a:55:c3:2e:27:ca:20:4e:33: 84:cb:25:4b:d4:23:13:c5:43:b4:80:39:5a:3e:db: 42:a8:1c:39:70:d9:f5:fa:65:57:b2:70:12:06:57: c4:b1:bd:de:6e:7d:98:32:69:52:22:46:f0:a2:f2: 97:5d:38:0e:fb:b2:67:10:35:37:c8:d8:0f:be:32: d6:6e:79:07:77:ae:30:91:a4:b4:f4:5c:fb:b1:39: 62:dc:55:df:e2:21:74:28:96:bd:95:0c:25:01:bd: dd:64:75:0a:06:8f:50:38:e0:48:00:c4:f3:59:af: 83:aa:cc:d6:42:2f:ad:55:af:86:51:32:50:5a:26: 58:93:75:b1:5c:2c:6c:c6:98:67:f3:8d:aa:7c:27: ad:4f:69:b6:0b:96:3a:86:e8:3b:79:16:a2:8a:36: 36:48:d2:39:8b:78:86:99:19:8a:9a:21:40:88:d4: 92:c3:ef:2f:d9:a1:d0:55:9a:69:e9:c5:5d:e7:85: 3a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:47:7A:AA:75:BD:BC:86:86:64:06:13:9D:85:92:24:43:71:0F:A3 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:12:83:49:62:41:9e:90:ba:b5:79:04:75:bb:1e:22:53:6d: 4a:5a:1d:32:b3:4b:08:a5:88:82:60:bc:5a:3e:c6:e5:8e:72: 32:0a:28:57:45:78:1e:73:50:78:32:40:06:93:dd:39:95:ce: 8a:45:cd:f8:f1:c3:5a:fa:3a:ee:40:25:a4:92:92:c8:51:f0: 97:86:58:ac:40:7b:3a:a9:92:8e:13:dd:a1:91:0c:ad:5a:43: 16:bf:b1:e3:f5:a2:67:4a:af:da:01:29:91:0f:c6:fd:ab:97: 0b:b0:13:1d:bb:e9:67:db:8c:a4:da:a6:90:d1:ea:18:64:7e: 49:b5:63:45:92:c7:85:e5:1d:0c:1f:1c:4b:d8:bf:b6:63:da: 2d:5a:63:19:6a:e8:0c:76:a4:2f:11:2b:c4:51:eb:78:6f:0d: 1e:c3:48:d3:b2:e3:2a:e9:14:65:db:f1:41:b0:4b:26:7e:a8: 1a:f2:1e:b1:89:4c:b3:b9:63:e8:45:0d:6a:28:e1:82:00:8f: f5:2f:31:e7:79:0b:a7:7c:48:0d:77:6e:70:e2:1d:72:aa:8b: 79:a6:ac:e5:2f:26:29:8e:81:2b:22:d2:7c:16:6b:07:f2:58: f9:03:06:d0:8c:6a:a5:5b:53:2d:55:21:80:6a:6a:9d:95:96: 4f:f8:9f:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjUwNzE4MjEyMDQ1WhcNMjUwNzI1MjEyMDQ1WjAYMRYwFAYD VQQDEw02ODdhYmFhZC0zODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Q1N6NOU9+bL8jTw6aDnTs0+wFW8oCT1VTb5h3EEQfnZHTFCGeUPZvCNMEIv VfYk7kNPt0suebooGv8g5v3V+j9qVcMuJ8ogTjOEyyVL1CMTxUO0gDlaPttCqBw5 cNn1+mVXsnASBlfEsb3ebn2YMmlSIkbwovKXXTgO+7JnEDU3yNgPvjLWbnkHd64w kaS09Fz7sTli3FXf4iF0KJa9lQwlAb3dZHUKBo9QOOBIAMTzWa+DqszWQi+tVa+G UTJQWiZYk3WxXCxsxphn842qfCetT2m2C5Y6hug7eRaiijY2SNI5i3iGmRmKmiFA iNSSw+8v2aHQVZpp6cVd54U6FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJHeqp1 vbyGhmQGE52FkiRDcQ+jMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmEoNJYkGekLq1eQR1ux4iU21KWh0ys0sIpYiCYLxaPsbljnIyCihX RXgec1B4MkAGk905lc6KRc348cNa+jruQCWkkpLIUfCXhlisQHs6qZKOE92hkQyt WkMWv7Hj9aJnSq/aASmRD8b9q5cLsBMdu+ln24yk2qaQ0eoYZH5JtWNFkseF5R0M HxxL2L+2Y9otWmMZaugMdqQvESvEUet4bw0ew0jTsuMq6RRl2/FBsEsmfqga8h6x iUyzuWPoRQ1qKOGCAI/1LzHneQunfEgNd25w4h1yqot5pqzlLyYpjoErItJ8FmsH 8lj5AwbQjGqlW1MtVSGAamqdlZZP+J+r -----END CERTIFICATE-----Generated at Sun Jul 20 10:03:00 2025 by rpki-client