$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: t76IIKbtUTN2W8gbCzPcPjhXUw7gu7pWeKqo/p2H5pc= Subject key identifier: E0:15:FA:E6:4F:81:56:76:73:C4:C6:6D:1F:0E:0D:80:4E:F1:24:FD Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 018A Signing time: Mon 21 Jul 2025 03:37:20 +0000 Manifest this update: Mon 21 Jul 2025 03:37:20 +0000 Manifest next update: Mon 28 Jul 2025 03:37:20 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: GlQJ7d+Zf0eh7nfyCLtB1mpieCJk82qR/NHsO3H/ygk=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: 6xfHA0xOfSf1bsWXYgETgvu/Qg0LpdZ4QedkQYTwxII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: Jul 21 03:37:20 2025 GMT Not After : Jul 28 03:37:20 2025 GMT Subject: CN=687db5f0-b848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:94:ab:e5:14:41:a6:48:18:98:75:ba:db: 10:3c:cc:46:85:83:6e:3f:ef:d8:11:8c:a8:b7:db: c3:23:1f:78:cd:49:cf:8e:20:04:23:00:75:cf:9b: 1a:49:6a:c1:3b:6f:5c:f0:27:91:94:5b:2c:34:4d: 60:ad:45:8b:fc:5b:42:a7:06:10:39:ca:39:ac:79: 1e:3b:79:be:b2:c0:67:80:40:05:3f:a4:86:4a:3d: 19:be:ba:25:af:a4:37:07:25:f0:b2:5e:7c:22:12: f8:85:1a:ce:bf:d4:33:fd:ad:f5:5a:81:27:bb:1a: 5e:fe:80:f3:84:b5:8d:35:ad:fb:10:67:32:c9:61: d1:f8:4e:dc:6a:72:73:51:57:a4:51:76:b1:f3:c0: b0:0c:01:f2:d7:88:a0:39:a1:9c:28:7b:cb:26:ca: 4d:4e:79:72:68:fe:e1:1b:57:63:5d:91:eb:99:2a: a3:57:fb:66:00:44:f0:da:30:13:95:00:15:53:9e: 89:e4:41:14:a3:a7:01:b8:eb:a5:85:e7:ac:88:22: 86:21:ce:a6:bd:71:fd:d6:9c:4b:92:01:fe:a9:2f: aa:21:a0:38:6a:f7:35:14:51:4f:6b:0f:20:f8:34: 2f:d5:99:1d:f2:28:62:84:3b:65:03:7a:68:8e:c2: 42:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:15:FA:E6:4F:81:56:76:73:C4:C6:6D:1F:0E:0D:80:4E:F1:24:FD X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7d:68:d6:21:50:ac:5a:9b:f1:7f:e3:20:68:96:1c:0b:89: 28:56:6a:d9:32:9e:20:25:63:e5:3f:82:fa:1e:a8:ff:d7:3b: 77:7b:28:ee:3e:1a:6f:27:e5:f9:29:94:92:05:1b:2c:b9:6a: bc:bb:3b:e5:f5:df:1d:fb:d9:0e:09:4d:31:9a:1f:c9:be:10: 1d:05:6e:0a:1b:f8:27:80:a6:f8:ce:59:3f:d0:98:d4:af:35: 73:5b:84:20:28:1c:9a:6a:ff:84:d1:d5:eb:c8:68:49:2d:6f: d9:81:67:33:d4:51:54:07:72:66:a8:cd:15:2c:be:ad:fa:77: fe:3d:19:e3:98:ab:d0:ee:cd:66:b9:c1:ff:57:38:7e:d4:83: 64:4b:00:f5:10:c8:dd:9f:5f:ce:c5:82:45:fa:3f:49:c0:0e: 0f:a9:c6:22:52:61:28:22:14:39:dc:e5:0d:25:44:e1:ed:80: 64:ce:b2:85:26:87:80:7a:bb:e9:eb:d2:fa:54:f0:a3:da:3a: 35:8c:5f:88:3a:30:26:7b:06:b0:6b:f7:ef:2b:36:c9:a0:86: e1:3b:c1:b9:85:a5:be:cc:64:58:0d:ff:75:8b:48:52:34:5f: 93:22:92:83:ed:77:c0:c4:38:17:88:b1:66:06:99:fc:80:10: 95:a7:5e:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjUwNzIxMDMzNzIwWhcNMjUwNzI4MDMzNzIwWjAYMRYwFAYD VQQDEw02ODdkYjVmMC1iODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoiUq+UUQaZIGJh1utsQPMxGhYNuP+/YEYyot9vDIx94zUnPjiAEIwB1z5sa SWrBO29c8CeRlFssNE1grUWL/FtCpwYQOco5rHkeO3m+ssBngEAFP6SGSj0Zvrol r6Q3ByXwsl58IhL4hRrOv9Qz/a31WoEnuxpe/oDzhLWNNa37EGcyyWHR+E7canJz UVekUXax88CwDAHy14igOaGcKHvLJspNTnlyaP7hG1djXZHrmSqjV/tmAETw2jAT lQAVU56J5EEUo6cBuOulheesiCKGIc6mvXH91pxLkgH+qS+qIaA4avc1FFFPaw8g +DQv1Zkd8ihihDtlA3pojsJCUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAV+uZP gVZ2c8TGbR8ODYBO8ST9MB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrfWjWIVCsWpvxf+MgaJYcC4koVmrZMp4gJWPlP4L6Hqj/1zt3eyju PhpvJ+X5KZSSBRssuWq8uzvl9d8d+9kOCU0xmh/JvhAdBW4KG/gngKb4zlk/0JjU rzVzW4QgKByaav+E0dXryGhJLW/ZgWcz1FFUB3JmqM0VLL6t+nf+PRnjmKvQ7s1m ucH/Vzh+1INkSwD1EMjdn1/OxYJF+j9JwA4PqcYiUmEoIhQ53OUNJUTh7YBkzrKF JoeAervp69L6VPCj2jo1jF+IOjAmewawa/fvKzbJoIbhO8G5haW+zGRYDf91i0hS NF+TIpKD7XfAxDgXiLFmBpn8gBCVp17N -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:52 2025 by rpki-client