$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft File: u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json) Hash identifier: YyRXpY1VCAXTYjAwLJphhqicN7s3I1VnMgk0kXRz4Q8= Subject key identifier: AF:09:60:FA:83:21:17:3E:08:34:6E:D5:B4:4F:0C:4A:1D:0B:18:74 Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 Certificate issuer: /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Certificate serial: 0924 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft Manifest number: 091E Signing time: Fri 18 Jul 2025 20:30:16 +0000 Manifest this update: Fri 18 Jul 2025 20:30:16 +0000 Manifest next update: Fri 25 Jul 2025 20:30:16 +0000 Files and hashes: 1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: C50TO8dMnVQbn3XLkD9UDJxj43I/OYa9xWsDr6DsH20=) 2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: 1XpEnw/JwEEBYh3nZmy2aqDGrwdu6fQDgmNMuCskbDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2340 (0x924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B824, serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Validity Not Before: Jul 18 20:30:16 2025 GMT Not After : Jul 25 20:30:16 2025 GMT Subject: CN=687aaed8-5397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:52:81:5a:80:e7:30:02:af:4b:36:97:35: f5:a1:71:32:19:a5:22:6a:c7:52:4c:ad:e7:67:d8: 4b:34:54:17:36:5e:0f:88:18:90:83:cf:31:93:a9: 87:2d:77:47:c5:71:a4:ef:1d:be:07:54:bf:43:9b: 31:e2:f7:cd:89:39:ec:6b:98:f3:43:69:fa:92:24: 6b:64:df:b2:d1:86:f4:8f:8f:7c:8e:ca:b4:1a:aa: b6:f5:b9:22:ff:ed:55:3f:ed:68:8b:aa:fc:7f:26: 74:96:76:28:0f:12:37:48:8c:3f:9b:19:6e:e4:95: d2:ef:17:1c:fb:b0:92:14:9d:32:42:78:5d:e3:a8: 1e:be:ac:c7:b8:af:03:d3:67:2d:fe:3b:27:e7:70: fd:9a:1b:ae:22:64:3c:89:a3:8d:c7:e0:03:f0:ba: a8:15:25:26:5a:96:6d:b0:97:66:46:3e:04:b4:eb: ff:cb:c8:9b:3d:6e:10:0a:bc:a5:4c:0d:a5:ab:b4: c4:08:a8:1a:be:1e:8a:92:52:aa:05:13:b0:81:5f: 76:76:6e:8a:a5:a4:a9:d1:b4:eb:d1:76:cd:8f:35: 28:f6:e3:5d:a7:bf:a3:f9:f7:a0:8e:72:a1:b3:71: f1:df:99:1a:29:d3:4e:04:4f:91:9b:16:58:cc:49: cc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:09:60:FA:83:21:17:3E:08:34:6E:D5:B4:4F:0C:4A:1D:0B:18:74 X509v3 Authority Key Identifier: keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:d5:f3:3b:d2:b7:6d:d3:cd:8b:81:ba:d5:03:b9:8e:88:92: 92:4f:54:49:ef:d1:b3:7c:84:58:ec:06:80:2a:f7:35:ad:21: ff:31:d0:5a:95:d1:ad:ad:42:b4:81:cc:08:1f:6f:ec:f9:03: d4:31:f1:83:81:c7:66:1d:71:3b:fd:62:91:23:0b:74:5f:91: 40:5a:a0:36:42:d0:8c:be:03:c0:f4:12:ab:99:d1:b7:fa:f0: 8d:f4:4e:d8:b8:8a:0a:b7:6a:58:0a:98:da:b3:8b:9b:9e:96: 28:82:27:d4:85:d4:ea:1d:5e:e0:81:b6:1e:a6:6d:00:94:80: 20:2c:63:be:a7:ce:2e:c7:0e:42:eb:83:ae:aa:13:3f:d6:6e: a8:bd:6b:f3:08:0e:19:9a:0f:ae:38:c9:62:52:5d:0d:97:37: 9a:a8:ef:7b:91:5b:64:3f:d7:3d:53:68:ae:74:50:07:6c:e5: 19:7f:94:3e:2d:52:e7:c2:bb:d7:0e:00:b1:ce:fa:fe:4d:99: 33:9f:d8:cf:e3:22:45:92:6c:12:17:18:ab:a9:05:47:c2:33: 23:a5:26:c9:c8:e8:20:00:14:ef:e6:10:88:b4:da:05:12:1d: 5e:f7:3d:2c:18:fd:8c:6f:36:ef:54:a9:77:07:a3:45:5b:9a: cf:e7:18:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI4MjQxMTAvBgNVBAUTKEJCREI3QkQwQjhFOTY1NkU3MUUxOTk0RTE5NjE4NzQ1 NzA4RkNFRjEwHhcNMjUwNzE4MjAzMDE2WhcNMjUwNzI1MjAzMDE2WjAYMRYwFAYD VQQDEw02ODdhYWVkOC01Mzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsptSgVqA5zACr0s2lzX1oXEyGaUiasdSTK3nZ9hLNFQXNl4PiBiQg88xk6mH LXdHxXGk7x2+B1S/Q5sx4vfNiTnsa5jzQ2n6kiRrZN+y0Yb0j498jsq0Gqq29bki /+1VP+1oi6r8fyZ0lnYoDxI3SIw/mxlu5JXS7xcc+7CSFJ0yQnhd46gevqzHuK8D 02ct/jsn53D9mhuuImQ8iaONx+AD8LqoFSUmWpZtsJdmRj4EtOv/y8ibPW4QCryl TA2lq7TECKgavh6KklKqBROwgV92dm6KpaSp0bTr0XbNjzUo9uNdp7+j+fegjnKh s3Hx35kaKdNOBE+RmxZYzEnMDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8JYPqD IRc+CDRu1bRPDEodCxh0MB8GA1UdIwQYMBaAFLvbe9C46WVuceGZThlhh0Vwj87x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjgyNC83MzRCQUQxNkE2 QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpXNXg0WmxPR1dHSFJYQ1B6 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5dDcwTGpwWlc1eDRabE9HV0dIUlhDUHp2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjgyNC83MzRCQUQxNkE2QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpX NXg0WmxPR1dHSFJYQ1B6dkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB1fM70rdt082LgbrVA7mOiJKST1RJ79GzfIRY7AaAKvc1rSH/MdBa ldGtrUK0gcwIH2/s+QPUMfGDgcdmHXE7/WKRIwt0X5FAWqA2QtCMvgPA9BKrmdG3 +vCN9E7YuIoKt2pYCpjas4ubnpYogifUhdTqHV7ggbYepm0AlIAgLGO+p84uxw5C 64OuqhM/1m6ovWvzCA4Zmg+uOMliUl0NlzeaqO97kVtkP9c9U2iudFAHbOUZf5Q+ LVLnwrvXDgCxzvr+TZkzn9jP4yJFkmwSFxirqQVHwjMjpSbJyOggABTv5hCItNoF Eh1e9z0sGP2MbzbvVKl3B6NFW5rP5xhR -----END CERTIFICATE-----Generated at Sun Jul 20 11:03:30 2025 by rpki-client