$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json) Hash identifier: 9sgRoVNKRGiMkOWSroJ3k2G5xUij1lVQ30/7h6gTejM= Subject key identifier: 6E:4A:D1:69:A4:68:85:3C:DE:DD:E5:B2:4D:72:D9:80:6D:ED:C9:A1 Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft Manifest number: 0123 Signing time: Mon 21 Jul 2025 05:10:55 +0000 Manifest this update: Mon 21 Jul 2025 05:10:55 +0000 Manifest next update: Mon 28 Jul 2025 05:10:55 +0000 Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: 4RpIpUJWaJiwsoIugJhj9G2gfOCjziwz6HdUMbXFm0g=) 2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: lgKxQZBfyyGJs2ybuFT3lxPMvRUJgCHgG0F2ANjIDdA=) 3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: sWbEBie3r4Rs9tqZdxaTO4p/g0MLaIAVIR769Fluhr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Validity Not Before: Jul 21 05:10:55 2025 GMT Not After : Jul 28 05:10:55 2025 GMT Subject: CN=687dcbdf-6530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:6f:c3:53:50:2e:98:eb:32:04:da:c0:f0: 80:7f:2f:0c:2b:a0:6d:b0:7a:2f:70:a7:ce:63:e8: d8:af:2b:c1:ed:79:e3:4b:7e:99:7f:40:4a:ae:a6: 6c:65:ca:b2:d5:a7:45:90:14:e0:1f:7c:a9:b1:e8: 76:eb:bf:a6:af:f8:cf:60:8d:7c:e4:9c:2c:5f:bc: 0c:d0:78:79:16:36:02:1e:09:55:fd:0b:66:63:05: 61:b1:d2:a7:50:9a:45:f4:61:49:fe:09:22:59:ef: c9:02:77:4c:a8:dc:27:7a:2a:ba:45:e9:cd:cb:f3: 47:99:10:80:6e:30:ca:86:ce:3c:09:d7:a8:eb:88: d0:81:5c:e2:0d:92:d9:ea:2d:f1:ba:7c:01:84:bb: 13:3a:6a:ae:49:83:49:76:ca:71:8f:43:31:01:00: 38:a7:59:96:7d:a3:49:9d:e4:fd:77:71:87:59:58: ba:6f:b3:71:77:bf:f2:30:97:a1:ea:0e:62:44:07: 87:65:fc:41:3a:c0:bb:a6:d2:72:c6:89:fa:5b:ae: 25:c3:3e:b5:98:ca:de:21:1d:93:f3:58:a1:39:29: df:4e:a6:cf:42:9c:a6:a0:6a:19:c4:ba:6f:b1:b7: 16:5b:c0:93:6a:19:a2:cf:95:7a:70:83:1e:a4:1c: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4A:D1:69:A4:68:85:3C:DE:DD:E5:B2:4D:72:D9:80:6D:ED:C9:A1 X509v3 Authority Key Identifier: keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:2e:85:fe:88:74:64:5c:e2:89:0d:a6:64:31:98:65:25:e8: 3c:ab:96:0c:f1:40:d9:45:e8:1f:fb:9d:cc:09:a0:26:10:1b: 2e:d4:ec:97:69:6c:3e:c3:39:35:f7:86:3c:fc:f9:1d:3b:e3: fc:b5:e7:b9:f0:53:ed:7e:db:9e:8f:76:5d:c4:d1:b4:13:c6: 71:ce:ad:fc:c5:17:11:e7:98:b4:47:cc:9d:a5:71:a8:1c:51: 1a:fc:7c:94:6b:d8:6b:0c:14:5e:4b:7b:de:ca:ca:bd:55:e6: e9:8d:d6:c7:57:9c:b3:fb:c5:cf:03:b6:46:4f:4b:5c:ab:c7: 75:71:7d:77:b1:24:56:76:3f:50:d7:8b:f8:cb:91:90:f8:e8: c6:4a:f4:6c:0f:88:fa:1c:f2:37:c2:5e:fd:be:06:92:58:8e: aa:86:20:76:92:4e:55:2a:07:38:fe:39:41:9b:36:49:45:f0: 6c:f9:16:b8:f3:2e:09:c5:6f:26:ec:57:26:b7:ea:48:33:0e: 5f:be:9f:b5:60:71:a8:da:f0:c8:16:95:ea:83:32:1d:fa:70: 13:21:09:9a:dc:47:dd:80:ee:a0:c5:58:ec:06:fa:40:45:8d: 34:e2:46:4a:a2:f1:a9:19:21:14:c3:a9:fa:45:0e:ce:f7:12: 75:2b:63:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw Q0UwQzI5RkEwHhcNMjUwNzIxMDUxMDU1WhcNMjUwNzI4MDUxMDU1WjAYMRYwFAYD VQQDEw02ODdkY2JkZi02NTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYlvw1NQLpjrMgTawPCAfy8MK6BtsHovcKfOY+jYryvB7XnjS36Zf0BKrqZs Zcqy1adFkBTgH3ypseh267+mr/jPYI185JwsX7wM0Hh5FjYCHglV/QtmYwVhsdKn UJpF9GFJ/gkiWe/JAndMqNwneiq6RenNy/NHmRCAbjDKhs48Cdeo64jQgVziDZLZ 6i3xunwBhLsTOmquSYNJdspxj0MxAQA4p1mWfaNJneT9d3GHWVi6b7Nxd7/yMJeh 6g5iRAeHZfxBOsC7ptJyxon6W64lwz61mMreIR2T81ihOSnfTqbPQpymoGoZxLpv sbcWW8CTahmiz5V6cIMepByORQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5K0Wmk aIU83t3lsk1y2YBt7cmhMB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU MzVaUzlidGlTT1FNNE1LZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWLoX+iHRkXOKJDaZkMZhlJeg8q5YM8UDZRegf+53MCaAmEBsu1OyX aWw+wzk194Y8/PkdO+P8tee58FPtftuej3ZdxNG0E8Zxzq38xRcR55i0R8ydpXGo HFEa/HyUa9hrDBReS3veysq9VebpjdbHV5yz+8XPA7ZGT0tcq8d1cX13sSRWdj9Q 14v4y5GQ+OjGSvRsD4j6HPI3wl79vgaSWI6qhiB2kk5VKgc4/jlBmzZJRfBs+Ra4 8y4JxW8m7Fcmt+pIMw5fvp+1YHGo2vDIFpXqgzId+nATIQma3EfdgO6gxVjsBvpA RY004kZKovGpGSEUw6n6RQ7O9xJ1K2Oy -----END CERTIFICATE-----Generated at Mon Jul 21 12:43:36 2025 by rpki-client