$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft File: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json) Hash identifier: dABzcRaW81tnZrBpAEU1WxkC83tdGPEJ6L9NmnbEHVw= Subject key identifier: DE:45:F2:09:B2:7D:8E:C5:54:7D:3D:A7:3F:41:A5:B4:F3:C2:CC:E9 Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Certificate serial: 052B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft Manifest number: 0525 Signing time: Sat 26 Jul 2025 23:50:27 +0000 Manifest this update: Sat 26 Jul 2025 23:50:26 +0000 Manifest next update: Sat 02 Aug 2025 23:50:26 +0000 Files and hashes: 1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: bI2v5hPb1Sq5MNMrcrJWYdYuXbIU7WVhC1jBv04aTig=) 2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: GBlJBvL9mw9TcJgwkIpDEFzq0c16HJn6FF84wJKDCP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 23:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1323 (0x52b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852BA, serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Validity Not Before: Jul 26 23:50:26 2025 GMT Not After : Aug 2 23:50:26 2025 GMT Subject: CN=688569c2-6549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f4:00:ad:91:51:44:81:4d:7a:16:b2:c4:91: 14:ec:29:cb:aa:cf:9d:f2:70:af:a3:9f:e9:18:4a: f7:08:6a:b8:84:ef:fd:93:dd:2f:f0:96:93:7f:20: b3:45:a7:64:8f:d0:50:de:3f:2b:e4:d4:bc:05:1b: 03:e1:55:6c:cf:d5:4e:6d:2e:b0:12:f8:81:c8:c5: d6:b9:76:b7:1a:c1:02:b4:e3:9c:95:eb:78:87:8f: df:d5:78:bc:d9:95:57:0c:5e:60:c4:70:b0:c1:77: 68:b1:ce:9d:b9:ae:4d:80:ae:7c:6b:4e:61:3c:ff: d8:97:69:6a:62:b4:76:3e:20:ae:b3:36:1a:ec:72: aa:b1:61:d3:5b:d2:5e:76:fd:7d:ec:0d:43:c5:80: 2e:49:12:f9:5b:52:72:e9:0b:1c:e5:74:b9:9e:3f: f0:37:4e:ee:ac:e6:1b:7e:21:76:70:c1:20:98:5f: 5b:0d:31:ff:70:36:a9:7f:80:93:0b:e5:b2:9c:79: 06:93:c1:56:03:52:1e:d7:a8:96:0f:21:82:5e:10: eb:ae:60:87:5a:84:da:de:9b:6b:1f:d4:60:98:49: 69:61:81:2f:8e:04:b3:0d:e6:17:9d:75:eb:d8:76: 8b:d5:7b:f2:88:2f:dc:c5:7f:89:cc:fe:2b:9f:79: 8c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:45:F2:09:B2:7D:8E:C5:54:7D:3D:A7:3F:41:A5:B4:F3:C2:CC:E9 X509v3 Authority Key Identifier: keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b4:f2:1d:e9:0e:30:60:f7:13:05:f5:75:bd:ce:aa:91:58: 06:a0:96:a2:ee:22:87:09:24:f6:45:94:c8:10:fe:06:10:e4: fe:2d:d1:f5:13:45:d8:f7:84:c1:42:ff:38:f4:7e:5a:61:3a: f7:9c:94:72:45:e4:6a:b2:5d:67:77:0a:81:1f:e2:65:83:19: 1b:4f:09:6d:ab:0a:be:18:4e:ef:1f:0a:5d:97:b2:2e:a6:12: c8:87:fb:db:cc:ac:c9:64:0e:0c:f8:d6:cc:4c:f2:ac:6e:69: a7:be:93:de:1d:e6:42:83:e4:00:8d:b3:0e:55:62:81:13:f9: 06:80:dd:fa:d1:76:cc:76:0e:ce:76:1b:21:0a:a9:7c:e2:2f: 82:b9:a8:0b:02:88:c9:0a:45:31:49:22:e9:1c:59:a1:24:03: fe:9e:c9:7c:a0:7c:3a:6a:b4:a4:7e:e7:9c:3a:64:9d:2a:74: 90:6e:af:91:f7:29:96:94:de:e4:bf:60:bb:31:d9:34:b5:91: 42:24:ae:72:62:48:ee:87:9d:82:48:32:1b:26:23:a9:e8:c7: 3f:5a:b2:93:58:56:41:2e:29:ac:f8:84:32:07:06:25:6a:1c: a6:b5:52:66:5e:09:2a:25:5c:86:1a:b3:36:3a:b5:f3:e1:7f: 01:1b:5e:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5 RDBBMTdBNEQwHhcNMjUwNzI2MjM1MDI2WhcNMjUwODAyMjM1MDI2WjAYMRYwFAYD VQQDEw02ODg1NjljMi02NTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPQArZFRRIFNehayxJEU7CnLqs+d8nCvo5/pGEr3CGq4hO/9k90v8JaTfyCz Radkj9BQ3j8r5NS8BRsD4VVsz9VObS6wEviByMXWuXa3GsECtOOclet4h4/f1Xi8 2ZVXDF5gxHCwwXdosc6dua5NgK58a05hPP/Yl2lqYrR2PiCuszYa7HKqsWHTW9Je dv197A1DxYAuSRL5W1Jy6Qsc5XS5nj/wN07urOYbfiF2cMEgmF9bDTH/cDapf4CT C+WynHkGk8FWA1Ie16iWDyGCXhDrrmCHWoTa3ptrH9RgmElpYYEvjgSzDeYXnXXr 2HaL1XvyiC/cxX+JzP4rn3mMOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5F8gmy fY7FVH09pz9BpbTzwszpMB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJCQS84NTY1MTdDMDBCQ0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpU ZDJIVGlZRmRQSjZkQ2hlazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8tPId6Q4wYPcTBfV1vc6qkVgGoJai7iKHCST2RZTIEP4GEOT+LdH1 E0XY94TBQv849H5aYTr3nJRyReRqsl1ndwqBH+JlgxkbTwltqwq+GE7vHwpdl7Iu phLIh/vbzKzJZA4M+NbMTPKsbmmnvpPeHeZCg+QAjbMOVWKBE/kGgN360XbMdg7O dhshCql84i+CuagLAojJCkUxSSLpHFmhJAP+nsl8oHw6arSkfuecOmSdKnSQbq+R 9ymWlN7kv2C7Mdk0tZFCJK5yYkjuh52CSDIbJiOp6Mc/WrKTWFZBLims+IQyBwYl ahymtVJmXgkqJVyGGrM2OrXz4X8BG162 -----END CERTIFICATE-----Generated at Mon Jul 28 02:10:06 2025 by rpki-client