$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: 8FRsefBcsjwEkBz1Cbv/LbLQ6iPeT4l5EK1uPL2+0f8= Subject key identifier: AA:D7:A6:3D:D1:7D:26:5F:C7:F7:94:D1:5E:04:A8:C3:E3:CB:A5:32 Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 08C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 08C7 Signing time: Sun 20 Jul 2025 20:33:50 +0000 Manifest this update: Sun 20 Jul 2025 20:33:50 +0000 Manifest next update: Sun 27 Jul 2025 20:33:50 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: r3aY4ynENpkvH2SP+4APBbskxd0OcLIhnAxVbir1LbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: Jul 20 20:33:50 2025 GMT Not After : Jul 27 20:33:50 2025 GMT Subject: CN=687d52ae-f50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:7e:90:5e:14:17:72:fa:59:21:f9:d2:5a: 69:08:5c:d6:f3:66:16:37:6b:19:98:ba:83:dd:5f: 5f:ea:2d:c0:c9:98:70:74:19:0b:1a:80:0c:0b:9a: f9:3a:84:6d:29:49:91:f0:1e:c3:35:78:d4:07:d5: 97:87:73:fa:38:16:68:8d:dc:34:45:de:45:4a:8d: ef:46:fc:7e:43:55:89:98:96:6f:b7:4a:2c:52:3a: 8b:17:e0:8d:3d:5d:ea:eb:2b:30:77:ff:44:ad:e6: ec:64:f2:75:30:2c:be:9c:bd:79:13:9e:0f:6d:e7: 29:3d:17:9c:d4:c5:46:06:ea:df:b3:a3:26:fa:8c: 09:cb:cf:85:8d:b8:2c:3a:46:ab:38:3d:00:dd:c4: 55:71:9b:90:3c:78:da:68:46:a2:40:6f:d3:11:87: 56:70:65:81:4f:c9:f6:1b:65:0b:1c:ff:fd:48:da: e0:53:33:5a:88:d9:53:88:db:a5:fd:fe:d2:53:31: 0a:02:a2:b3:c8:9a:12:28:51:18:82:58:c1:52:f1: b7:1e:99:37:67:1c:80:87:16:24:98:f3:11:22:8d: 60:fb:0a:0c:ef:cf:91:6e:3a:74:47:33:e7:24:42: 61:85:7c:a9:9f:96:87:a5:0a:7e:5a:37:ed:72:f7: 97:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D7:A6:3D:D1:7D:26:5F:C7:F7:94:D1:5E:04:A8:C3:E3:CB:A5:32 X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:20:57:43:13:5e:22:fa:02:36:19:78:f1:02:1c:55:e4:a8: 7e:1c:d9:84:d5:a2:7b:79:d4:9a:69:97:56:52:ef:81:db:e5: a3:b2:26:6d:bb:a6:e0:0a:26:fd:a2:76:cc:a3:69:3d:57:a8: 1a:26:2c:09:68:a0:82:85:f8:3d:d8:5c:24:a0:3c:38:d4:5f: 66:4b:09:99:d3:0d:e4:4e:80:7b:ad:85:13:e0:ad:8d:1e:7b: a0:99:67:a2:cc:68:ca:17:79:60:f5:35:e9:cc:9a:c7:db:28: d5:23:72:34:eb:0d:7a:71:4f:97:cf:90:a0:dc:a8:78:95:85: 0d:cc:94:d0:c3:b9:49:ba:dd:0e:fa:e3:f6:0b:a2:13:1a:d3: 4e:aa:70:be:68:5a:43:8e:74:4e:45:0d:e4:4a:e7:70:6f:09: cf:25:85:20:59:14:8f:ee:a8:17:d7:c3:33:9f:bd:d0:1c:d1: 3c:a3:2f:a9:67:b7:64:92:7d:8e:dc:19:5a:08:44:0a:6d:6c: cf:bb:50:85:66:f3:2a:7d:c1:0a:8f:45:7e:fb:b6:e4:ea:a5: 15:fe:9e:2e:2d:51:5e:c2:6a:0d:2c:2d:a9:38:ac:81:cf:eb: 63:21:99:6d:65:14:dd:ed:ef:83:0e:9f:6b:6b:d5:c4:7a:a4: 2f:3e:7b:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjUwNzIwMjAzMzUwWhcNMjUwNzI3MjAzMzUwWjAYMRYwFAYD VQQDEw02ODdkNTJhZS1mNTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/R+kF4UF3L6WSH50lppCFzW82YWN2sZmLqD3V9f6i3AyZhwdBkLGoAMC5r5 OoRtKUmR8B7DNXjUB9WXh3P6OBZojdw0Rd5FSo3vRvx+Q1WJmJZvt0osUjqLF+CN PV3q6yswd/9ErebsZPJ1MCy+nL15E54PbecpPRec1MVGBurfs6Mm+owJy8+Fjbgs OkarOD0A3cRVcZuQPHjaaEaiQG/TEYdWcGWBT8n2G2ULHP/9SNrgUzNaiNlTiNul /f7SUzEKAqKzyJoSKFEYgljBUvG3Hpk3ZxyAhxYkmPMRIo1g+woM78+Rbjp0RzPn JEJhhXypn5aHpQp+WjftcveXiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrXpj3R fSZfx/eU0V4EqMPjy6UyMB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgIFdDE14i+gI2GXjxAhxV5Kh+HNmE1aJ7edSaaZdWUu+B2+WjsiZt u6bgCib9onbMo2k9V6gaJiwJaKCChfg92FwkoDw41F9mSwmZ0w3kToB7rYUT4K2N HnugmWeizGjKF3lg9TXpzJrH2yjVI3I06w16cU+Xz5Cg3Kh4lYUNzJTQw7lJut0O +uP2C6ITGtNOqnC+aFpDjnRORQ3kSudwbwnPJYUgWRSP7qgX18Mzn73QHNE8oy+p Z7dkkn2O3BlaCEQKbWzPu1CFZvMqfcEKj0V++7bk6qUV/p4uLVFewmoNLC2pOKyB z+tjIZltZRTd7e+DDp9ra9XEeqQvPnt7 -----END CERTIFICATE-----Generated at Mon Jul 21 13:27:04 2025 by rpki-client