$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft File: g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft (raw, json) Hash identifier: 9iL1mOynImlCaEHbVMetl9iDTmQnOKdnKSmC0CZGyq0= Subject key identifier: 0C:D5:AB:DB:23:7F:3C:F8:9A:EF:59:9E:24:3E:87:FC:CE:91:D9:0E Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Certificate serial: 0763 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft Manifest number: 06DC Signing time: Tue 22 Jul 2025 22:57:57 +0000 Manifest this update: Tue 22 Jul 2025 22:57:56 +0000 Manifest next update: Tue 29 Jul 2025 22:57:56 +0000 Files and hashes: 1: g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl (hash: 7YPFaRrojeIpsZmrr5RHCtP8Y1g+f0WDRHfQiDgLyiY=) 2: 756E0BBCEAE711EE88CD8641C4F9AE02.roa (hash: AIYT1vtMWjn+gqf3bfo7gJUDe3tZqbxGWI5bPkWziTI=) 3: 993EAAD4522911EFA600C035C4F9AE02.roa (hash: FzKAZQfiNEIYTCeHngxWX8UUMPxm6y5RIZ18Vk8J8K4=) 4: 9AE082EC318D11F0A159DF79C4F9AE02.roa (hash: Oyh0Hiv3Vf5S5+UetNdK3rc6KfUP/uHh89s91fbOt9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 22:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1891 (0x763) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Validity Not Before: Jul 22 22:57:56 2025 GMT Not After : Jul 29 22:57:56 2025 GMT Subject: CN=68801774-9874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b2:a1:1c:83:07:9e:e1:e2:a4:04:b7:19:3c: 64:24:0b:f8:c1:b3:9a:d7:75:92:1d:aa:a9:e9:9b: 6e:d6:2f:c5:e4:d9:1b:b8:07:6d:b9:01:dc:54:23: e8:25:0d:cc:1c:d2:72:2b:0e:cf:44:db:95:29:1c: 15:ee:3e:3a:ca:d7:2f:be:f2:5b:e9:13:ac:7d:29: 79:ed:86:e0:91:66:b7:6f:3c:52:20:66:af:f5:f1: dc:6d:b4:30:3a:1a:f3:d7:fa:64:4a:b7:55:4f:ca: a2:44:6c:5a:d6:1d:79:32:19:a5:46:f4:76:fc:e4: 7d:35:5d:78:38:59:e8:bf:f4:f2:8e:38:bb:77:5d: 84:9d:14:06:50:d6:20:30:3b:2c:85:ae:e7:2c:48: 87:d4:df:13:b5:f3:fe:9e:30:43:ab:82:84:86:0c: b6:b1:85:3f:9a:aa:e9:66:8c:39:ab:86:1e:5e:8a: fb:0c:8f:a7:c5:2b:2e:3f:13:f3:4b:a9:06:fe:1a: a2:57:3d:39:b2:11:60:d8:e3:cc:d1:d2:73:07:d1: 1c:b9:6d:8f:53:bb:83:cc:99:b0:72:32:37:51:03: d5:5f:ef:a9:17:54:e3:76:98:c0:26:00:f4:37:c6: b1:3e:a9:e5:8e:9f:b0:e0:5e:9d:75:22:9a:59:6e: 0e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D5:AB:DB:23:7F:3C:F8:9A:EF:59:9E:24:3E:87:FC:CE:91:D9:0E X509v3 Authority Key Identifier: keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:1b:e1:5f:ef:d1:73:a8:65:ed:22:dd:27:40:53:08:f0:e6: 9c:c6:9e:a5:80:54:2d:7a:9d:20:55:d5:45:ec:d6:b1:69:7e: a1:2f:65:4e:be:35:e5:e3:82:89:d4:7e:1e:07:a7:b2:15:72: 2b:29:aa:ff:77:6a:84:50:d7:a4:99:de:58:d5:f2:3e:32:9d: 21:46:ae:74:e5:df:2d:ac:5c:a7:3c:bd:0d:b3:4d:74:e9:32: 1c:2f:ca:c4:59:47:c6:ea:3b:f4:13:b8:98:45:b9:a2:08:cc: de:9c:19:e4:f8:56:bb:06:e6:72:93:2f:45:cf:bb:d0:61:f0: 06:8b:51:eb:af:b5:35:49:65:21:a1:39:da:29:ba:78:61:e0: d6:57:8f:ed:54:c5:a0:67:86:09:ad:7a:18:a6:bf:1e:2a:ed: 61:74:11:74:a6:fb:36:d2:ae:be:46:a1:85:5a:ce:6b:cd:e8: c9:07:6e:5d:e8:1f:29:db:9e:0a:31:b8:cc:3b:e4:d5:8e:ac: 77:36:c7:4e:da:4d:05:ac:da:ec:a7:9a:bb:3f:e4:94:d1:af: 49:68:1a:39:ef:49:71:31:97:06:1f:36:ed:6d:fd:36:0c:63: 2d:c8:00:51:3f:56:85:26:d3:af:ba:2f:df:38:10:26:9e:96: cf:3f:fa:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE QzdFNjA2MUUwHhcNMjUwNzIyMjI1NzU2WhcNMjUwNzI5MjI1NzU2WjAYMRYwFAYD VQQDEw02ODgwMTc3NC05ODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLKhHIMHnuHipAS3GTxkJAv4wbOa13WSHaqp6Ztu1i/F5NkbuAdtuQHcVCPo JQ3MHNJyKw7PRNuVKRwV7j46ytcvvvJb6ROsfSl57YbgkWa3bzxSIGav9fHcbbQw Ohrz1/pkSrdVT8qiRGxa1h15MhmlRvR2/OR9NV14OFnov/Tyjji7d12EnRQGUNYg MDssha7nLEiH1N8TtfP+njBDq4KEhgy2sYU/mqrpZow5q4YeXor7DI+nxSsuPxPz S6kG/hqiVz05shFg2OPM0dJzB9EcuW2PU7uDzJmwcjI3UQPVX++pF1TjdpjAJgD0 N8axPqnljp+w4F6ddSKaWW4OJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzVq9sj fzz4mu9ZniQ+h/zOkdkOMB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2 N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTZCNy85NUVGN0RCQTk2N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFa MGpTMFJXMXZablhjZm1CaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsG+Ff79FzqGXtIt0nQFMI8Oacxp6lgFQtep0gVdVF7NaxaX6hL2VO vjXl44KJ1H4eB6eyFXIrKar/d2qEUNekmd5Y1fI+Mp0hRq505d8trFynPL0Ns010 6TIcL8rEWUfG6jv0E7iYRbmiCMzenBnk+Fa7BuZyky9Fz7vQYfAGi1Hrr7U1SWUh oTnaKbp4YeDWV4/tVMWgZ4YJrXoYpr8eKu1hdBF0pvs20q6+RqGFWs5rzejJB25d 6B8p254KMbjMO+TVjqx3NsdO2k0FrNrsp5q7P+SU0a9JaBo570lxMZcGHzbtbf02 DGMtyABRP1aFJtOvui/fOBAmnpbPP/o9 -----END CERTIFICATE-----Generated at Thu Jul 24 17:44:10 2025 by rpki-client