$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft File: RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft (raw, json) Hash identifier: yIHUQ5jfbvJQT3hxpnIpMe4ekTwHQjbFDBQAoENANGQ= Subject key identifier: E6:63:D0:FD:C6:9A:31:15:8F:0D:19:C1:CE:D3:DA:F1:95:C6:14:86 Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 Certificate issuer: /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft Manifest number: 0293 Signing time: Mon 21 Jul 2025 01:53:44 +0000 Manifest this update: Mon 21 Jul 2025 01:53:43 +0000 Manifest next update: Mon 28 Jul 2025 01:53:43 +0000 Files and hashes: 1: RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl (hash: FyQ9Mcz0jPLBAEVwyolassCwh4++/AklyCJhHnSHJCY=) 2: D470449E0E4411ED9C0F5B45C4F9AE02.roa (hash: 9zqxhpOangW9769mdxLoJSN4Rv/Y8CMGWvMe+D0Ah7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78A7, serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Validity Not Before: Jul 21 01:53:43 2025 GMT Not After : Jul 28 01:53:43 2025 GMT Subject: CN=687d9da8-ceed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:6a:39:e8:aa:9d:a2:9e:f8:42:dc:02:98: a2:83:1e:bf:04:d1:ea:97:9e:1b:95:23:45:da:98: 4f:44:26:e6:24:7f:a7:41:7e:68:74:23:64:5e:75: 90:50:5d:af:54:38:a6:fe:82:d5:fc:e2:26:73:e0: 4c:0c:4f:c0:76:42:34:99:92:13:09:78:9e:26:ed: af:12:24:b1:c6:22:ed:52:cf:ae:e3:55:2c:fb:ef: 10:d7:ad:0a:3c:10:bf:82:ed:93:1d:54:eb:2c:5f: 85:df:e5:4d:a5:cb:93:67:11:5f:d5:09:14:df:ef: 13:fd:25:8b:c1:95:ed:95:d9:0f:de:99:94:a4:67: c7:34:b4:04:ba:88:31:dc:aa:70:d2:31:96:98:f7: a9:79:72:88:05:31:f3:61:5e:b2:df:57:c4:6d:d0: da:34:00:d0:86:09:6a:60:75:d3:ad:d9:86:0b:f6: eb:30:c0:4d:88:2b:c6:14:f9:11:eb:38:bb:d2:a2: 99:f8:ba:36:bb:6f:41:e4:21:43:24:12:33:3f:3d: 43:32:cd:6a:45:d8:33:79:b4:e3:31:68:6b:50:76: 2a:7b:42:41:7b:02:90:97:d5:ba:d3:6c:58:ad:c3: bc:c9:0f:18:98:e1:8c:b0:24:ad:82:0f:fb:d2:03: 5e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:63:D0:FD:C6:9A:31:15:8F:0D:19:C1:CE:D3:DA:F1:95:C6:14:86 X509v3 Authority Key Identifier: keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:76:44:74:3d:02:d3:ea:5c:2e:01:d6:25:84:66:03:db:07: 51:b1:6d:92:db:6f:06:ba:f8:82:28:85:ea:e4:8f:7c:63:7a: 71:35:65:07:4e:29:c7:60:e0:2e:c5:c5:ba:c8:ac:58:1d:78: d4:fc:c5:20:d4:cd:e8:61:15:1f:35:4e:a8:45:b1:04:f0:4e: 5a:c3:95:cc:f2:6e:2c:43:16:69:74:43:fb:84:af:f5:34:0b: 3b:2b:d5:e0:25:c6:7b:ce:6d:be:39:60:c5:db:08:b5:cc:91: 61:e2:fc:55:dc:a6:de:df:f7:22:11:36:46:63:eb:ed:4a:93: f5:e6:b9:73:8a:00:78:61:d0:73:92:f4:0a:0a:8c:8c:cb:9d: aa:f8:b8:1c:9d:34:9b:72:c2:03:06:28:bf:cb:06:ca:3b:f6: 2f:61:37:72:37:3f:e2:39:fb:14:11:f1:cb:d9:da:df:9e:f8: d2:a2:18:b9:69:bc:8e:06:9f:8b:05:aa:1e:71:40:39:63:2d: 04:e4:9f:3c:5c:80:6a:08:42:0b:5a:da:38:cd:68:87:a5:6a: f5:62:bc:82:f9:ac:38:c9:72:b4:7c:65:1f:1c:d6:67:1b:d6: 2a:f5:7e:1d:92:f7:ba:58:d7:5f:a4:ba:7d:79:94:d9:38:6d: 86:25:ea:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4QTcxMTAvBgNVBAUTKDQ1MzM3REM1RTQ4MzlFNDk4MTkxMjlERUEyQTk0NjFC MDIxQ0QxOTAwHhcNMjUwNzIxMDE1MzQzWhcNMjUwNzI4MDE1MzQzWjAYMRYwFAYD VQQDEw02ODdkOWRhOC1jZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+lqOeiqnaKe+ELcApiigx6/BNHql54blSNF2phPRCbmJH+nQX5odCNkXnWQ UF2vVDim/oLV/OImc+BMDE/AdkI0mZITCXieJu2vEiSxxiLtUs+u41Us++8Q160K PBC/gu2THVTrLF+F3+VNpcuTZxFf1QkU3+8T/SWLwZXtldkP3pmUpGfHNLQEuogx 3Kpw0jGWmPepeXKIBTHzYV6y31fEbdDaNADQhglqYHXTrdmGC/brMMBNiCvGFPkR 6zi70qKZ+Lo2u29B5CFDJBIzPz1DMs1qRdgzebTjMWhrUHYqe0JBewKQl9W602xY rcO8yQ8YmOGMsCStgg/70gNe7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZj0P3G mjEVjw0Zwc7T2vGVxhSGMB8GA1UdIwQYMBaAFEUzfcXkg55JgZEp3qKpRhsCHNGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy8xMDRCMTk0NjBD QkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5rbUJrU25lb3FsR0d3SWMw WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JUTjl4ZVNEbmttQmtTbmVvcWxHR3dJYzBaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzhBNy8xMDRCMTk0NjBDQkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5r bUJrU25lb3FsR0d3SWMwWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvdkR0PQLT6lwuAdYlhGYD2wdRsW2S228GuviCKIXq5I98Y3pxNWUH TinHYOAuxcW6yKxYHXjU/MUg1M3oYRUfNU6oRbEE8E5aw5XM8m4sQxZpdEP7hK/1 NAs7K9XgJcZ7zm2+OWDF2wi1zJFh4vxV3Kbe3/ciETZGY+vtSpP15rlzigB4YdBz kvQKCoyMy52q+LgcnTSbcsIDBii/ywbKO/YvYTdyNz/iOfsUEfHL2drfnvjSohi5 abyOBp+LBaoecUA5Yy0E5J88XIBqCEILWto4zWiHpWr1YryC+aw4yXK0fGUfHNZn G9Yq9X4dkve6WNdfpLp9eZTZOG2GJeos -----END CERTIFICATE-----Generated at Tue Jul 22 05:10:29 2025 by rpki-client