$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: eVNi9DZ+vxNRUZrIJKHQE8Z/Ymn+mohUDA8nOqMllgY= Subject key identifier: 0B:A7:06:FB:E6:AB:CC:30:D3:F3:58:A0:F5:23:84:A8:10:B6:AE:B1 Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 0A09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 09F9 Signing time: Fri 18 Jul 2025 16:15:38 +0000 Manifest this update: Fri 18 Jul 2025 16:15:38 +0000 Manifest next update: Fri 25 Jul 2025 16:15:38 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: MURqaG1Uccq4dJY2v3OR5jfj6bmjrqabyZOZPKVOCgs=) 2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=) 3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2569 (0xa09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Validity Not Before: Jul 18 16:15:38 2025 GMT Not After : Jul 25 16:15:38 2025 GMT Subject: CN=687a732a-98cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:73:c8:27:4f:31:98:30:10:87:85:8f:91:5a: 4b:f9:91:d1:01:b2:d4:25:2f:f1:2c:e1:f1:6d:c2: c2:7f:16:e4:0f:f8:d3:1a:03:51:e2:46:5c:22:8c: af:86:5a:f0:9b:29:4e:eb:cc:91:3c:d8:80:10:97: c2:5d:1c:eb:fd:52:e4:d1:d8:37:91:49:d9:a3:fa: 1d:82:e3:5f:73:13:3e:2e:b7:22:af:2d:29:2a:b6: 24:c2:7a:ab:f8:c1:a8:a3:2c:10:5a:6f:82:c1:9e: 3a:cc:8d:56:af:9e:75:a0:f3:57:eb:7f:98:bd:d7: c2:80:a9:cb:6e:31:d0:c5:b2:d1:0d:5d:4f:1d:1c: bc:0d:3f:14:9f:fe:cf:ae:2d:43:14:fe:df:56:86: 02:ac:91:6c:72:e5:f2:41:a0:7c:dd:ea:7e:b2:57: c9:1f:05:9a:20:11:19:16:f5:a9:c2:2d:ef:15:a3: f8:b8:49:65:cb:8e:66:18:ca:0b:e3:3b:ac:d5:95: 28:05:b9:ce:6e:ac:ce:84:18:54:8d:29:2d:ef:62: 99:2b:f1:a7:51:43:b6:b4:e8:bc:08:26:cb:d2:04: 99:ba:d3:b3:d3:94:e1:a5:11:18:5a:52:a7:73:89: 0f:99:63:d0:1f:cf:8c:ed:af:ed:d6:a3:e5:82:05: 14:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A7:06:FB:E6:AB:CC:30:D3:F3:58:A0:F5:23:84:A8:10:B6:AE:B1 X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:73:fe:49:9e:9a:da:01:f7:8e:6b:92:e2:b8:69:60:56:51: 5f:c4:de:4c:6d:39:11:b2:0f:48:72:51:46:7c:55:3a:18:36: 98:60:df:0c:1b:3a:48:f1:54:70:d6:e3:65:b3:73:b9:44:3b: ce:c5:76:44:54:1c:bd:8b:1a:a3:e1:1b:e3:ff:5f:9c:61:2a: fb:e5:d6:dd:0d:3e:90:47:ee:4c:8e:58:33:60:66:3f:6a:fb: bc:f9:ff:8a:35:23:5b:04:92:24:3f:8e:a0:5f:43:79:69:75: 5d:f0:e3:6d:ce:03:d0:a0:88:eb:15:b8:b5:b2:99:65:f5:a4: 91:b3:e7:04:c4:96:77:50:97:93:ed:44:bf:6b:21:6f:22:f2: b0:ac:08:f1:48:18:e8:17:78:e8:61:c5:be:ce:57:af:f7:50: e2:07:1c:16:9f:db:67:16:63:3b:e3:f8:e3:a1:10:f2:e4:b6: 5c:8b:fe:9f:a2:13:76:9b:36:00:3b:25:d3:5b:46:b2:3b:8b: e0:39:c2:0e:a6:8c:e4:36:de:e2:33:2f:f3:b0:f1:3d:57:82: 76:58:67:47:cb:6e:20:4b:17:c8:6b:bb:25:2a:ff:d4:69:02: cd:ed:44:dd:48:70:ed:0b:cf:cc:ab:21:f5:0f:72:e6:4b:c4: 08:b0:8e:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjUwNzE4MTYxNTM4WhcNMjUwNzI1MTYxNTM4WjAYMRYwFAYD VQQDEw02ODdhNzMyYS05OGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XPIJ08xmDAQh4WPkVpL+ZHRAbLUJS/xLOHxbcLCfxbkD/jTGgNR4kZcIoyv hlrwmylO68yRPNiAEJfCXRzr/VLk0dg3kUnZo/odguNfcxM+Lrciry0pKrYkwnqr +MGooywQWm+CwZ46zI1Wr551oPNX63+YvdfCgKnLbjHQxbLRDV1PHRy8DT8Un/7P ri1DFP7fVoYCrJFscuXyQaB83ep+slfJHwWaIBEZFvWpwi3vFaP4uElly45mGMoL 4zus1ZUoBbnObqzOhBhUjSkt72KZK/GnUUO2tOi8CCbL0gSZutOz05ThpREYWlKn c4kPmWPQH8+M7a/t1qPlggUU8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAunBvvm q8ww0/NYoPUjhKgQtq6xMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+c/5JnpraAfeOa5LiuGlgVlFfxN5MbTkRsg9IclFGfFU6GDaYYN8M GzpI8VRw1uNls3O5RDvOxXZEVBy9ixqj4Rvj/1+cYSr75dbdDT6QR+5MjlgzYGY/ avu8+f+KNSNbBJIkP46gX0N5aXVd8ONtzgPQoIjrFbi1spll9aSRs+cExJZ3UJeT 7US/ayFvIvKwrAjxSBjoF3joYcW+zlev91DiBxwWn9tnFmM74/jjoRDy5LZci/6f ohN2mzYAOyXTW0ayO4vgOcIOpozkNt7iMy/zsPE9V4J2WGdHy24gSxfIa7slKv/U aQLN7UTdSHDtC8/MqyH1D3LmS8QIsI5w -----END CERTIFICATE-----Generated at Sun Jul 20 09:59:30 2025 by rpki-client