$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft File: 9BP1HYe7_0sKQQchh0duvgfTYb8.mft (raw, json) Hash identifier: hEqfdt1clZSJDnZRHw2T6LKw04LC8LLWPPdTApk58wU= Subject key identifier: 28:59:78:D7:D3:C6:59:8B:78:A4:53:16:43:35:AD:AB:5C:64:4D:91 Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF Certificate issuer: /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft Manifest number: F6 Signing time: Fri 25 Jul 2025 05:29:23 +0000 Manifest this update: Fri 25 Jul 2025 05:29:22 +0000 Manifest next update: Fri 01 Aug 2025 05:29:22 +0000 Files and hashes: 1: 9BP1HYe7_0sKQQchh0duvgfTYb8.crl (hash: 7XdIaMyhtxA6i55zaE15tOhuubatxC+R8hrW27ZPiq0=) 2: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (hash: zOrZe+jWeFBIsL39iLL8vvCILEMIHLBZ3vsTVrAh2HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 05:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC3, serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Validity Not Before: Jul 25 05:29:22 2025 GMT Not After : Aug 1 05:29:22 2025 GMT Subject: CN=68831633-817d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:c2:52:5b:ec:2d:e4:19:c9:68:16:bc:33: 5b:b8:63:e9:b4:dc:3c:c5:25:86:52:74:54:8b:df: 68:47:69:d5:23:fc:4f:02:ae:ca:7b:3f:42:cd:84: 10:f1:05:36:92:17:d7:d6:bf:ac:77:d1:0c:97:2c: 5a:e7:14:bc:8b:1d:41:79:13:82:4f:a3:51:3f:cd: 7b:e7:45:f7:f0:6c:3e:bb:15:19:a6:2e:56:4a:5b: ce:92:9e:9b:ac:8c:91:c7:e0:6d:6b:32:8e:1e:ca: 41:71:d3:81:6c:07:c4:fb:81:cc:4f:c7:15:e4:a0: 5a:35:e4:2f:e6:c0:ef:d3:67:e3:45:a3:c4:fd:1c: 29:2f:53:09:c9:eb:88:ca:a7:1b:6f:9d:4c:03:2f: a7:c7:f2:7e:70:be:c9:16:a7:c3:26:25:4b:29:61: 1d:94:ab:1d:49:aa:cc:cc:c1:8b:56:28:78:57:35: 32:ce:c9:b1:78:cc:fd:05:26:8c:66:dc:fe:4d:1c: 8c:f1:07:26:24:f7:ba:20:cd:2c:6e:0a:e7:2a:59: cb:27:54:85:4a:a0:55:2d:22:97:af:15:a2:ef:48: d6:8c:f5:2a:37:3f:fb:97:1e:be:27:8a:f7:e3:03: fb:0c:94:8a:c1:e7:6b:d4:7a:39:7c:72:87:f0:10: e6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:59:78:D7:D3:C6:59:8B:78:A4:53:16:43:35:AD:AB:5C:64:4D:91 X509v3 Authority Key Identifier: keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:e6:63:ee:7e:36:6b:78:2e:44:27:cb:7a:40:56:52:44:c6: 1a:39:3c:b3:75:ac:5e:5d:7a:46:75:cc:7d:a3:eb:ec:0c:12: 46:63:86:99:33:42:e6:e7:a7:c4:3a:cf:46:7c:13:b3:11:58: f6:62:e5:ec:1a:98:bb:6d:94:85:5b:07:9a:48:7d:2a:af:95: 32:2b:eb:13:cc:54:17:a1:0c:20:47:1f:5e:0a:8b:bc:87:b7: 9b:2a:57:cf:18:b7:95:f8:ab:59:45:c3:5c:f0:86:6a:b1:86: 67:c6:c9:d1:3b:59:1a:18:05:a9:56:cf:e0:68:23:6e:8a:4a: b5:52:87:e8:2e:47:42:20:b2:37:f5:b9:66:d3:cd:4c:5f:bd: 26:9c:cb:16:bb:07:1d:6b:f8:51:d6:ae:59:bb:b8:7b:6f:34: de:5b:58:9a:83:13:d0:95:e5:5e:1f:88:0c:70:dc:4e:8e:6e: f1:8e:83:79:45:56:9d:17:26:5c:b0:c1:e8:b5:df:e9:01:0e: c0:86:af:b8:6f:9f:92:b7:b8:f4:3c:a2:07:85:13:16:91:1d: 45:00:ac:00:e9:fa:1b:29:01:8a:7e:97:42:72:c1:0e:43:54: 06:71:bc:d7:16:f2:18:50:c5:f1:1a:aa:bf:42:5f:09:72:05: e4:bd:c6:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzMxMTAvBgNVBAUTKEY0MTNGNTFEODdCQkZGNEIwQTQxMDcyMTg3NDc2RUJF MDdEMzYxQkYwHhcNMjUwNzI1MDUyOTIyWhcNMjUwODAxMDUyOTIyWjAYMRYwFAYD VQQDEw02ODgzMTYzMy04MTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArO3CUlvsLeQZyWgWvDNbuGPptNw8xSWGUnRUi99oR2nVI/xPAq7Kez9CzYQQ 8QU2khfX1r+sd9EMlyxa5xS8ix1BeROCT6NRP81750X38Gw+uxUZpi5WSlvOkp6b rIyRx+BtazKOHspBcdOBbAfE+4HMT8cV5KBaNeQv5sDv02fjRaPE/RwpL1MJyeuI yqcbb51MAy+nx/J+cL7JFqfDJiVLKWEdlKsdSarMzMGLVih4VzUyzsmxeMz9BSaM Ztz+TRyM8QcmJPe6IM0sbgrnKlnLJ1SFSqBVLSKXrxWi70jWjPUqNz/7lx6+J4r3 4wP7DJSKwedr1Ho5fHKH8BDm4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChZeNfT xlmLeKRTFkM1ratcZE2RMB8GA1UdIwQYMBaAFPQT9R2Hu/9LCkEHIYdHbr4H02G/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDMy8yNEI4RTI1OEVF N0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18wc0tRUWNoaDBkdXZnZlRZ YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCUDFIWWU3XzBzS1FRY2hoMGR1dmdmVFliOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDMy8yNEI4RTI1OEVFN0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18w c0tRUWNoaDBkdXZnZlRZYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu5mPufjZreC5EJ8t6QFZSRMYaOTyzdaxeXXpGdcx9o+vsDBJGY4aZ M0Lm56fEOs9GfBOzEVj2YuXsGpi7bZSFWweaSH0qr5UyK+sTzFQXoQwgRx9eCou8 h7ebKlfPGLeV+KtZRcNc8IZqsYZnxsnRO1kaGAWpVs/gaCNuikq1UofoLkdCILI3 9blm081MX70mnMsWuwcda/hR1q5Zu7h7bzTeW1iagxPQleVeH4gMcNxOjm7xjoN5 RVadFyZcsMHotd/pAQ7Ahq+4b5+St7j0PKIHhRMWkR1FAKwA6fobKQGKfpdCcsEO Q1QGcbzXFvIYUMXxGqq/Ql8JcgXkvcYa -----END CERTIFICATE-----Generated at Sat Jul 26 07:38:02 2025 by rpki-client