$ rpki-client -vvf rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft File: 9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft (raw, json) Hash identifier: +ASDCwV7BqYc8tmw6wbn+QjAdDd5cHJPMR3ksFzdhJM= Subject key identifier: C0:29:5D:42:5C:71:11:F7:56:80:B6:FE:BB:DC:B4:FA:E0:3E:CD:53 Authority key identifier: F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94 Certificate issuer: /CN=A91B734D/serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194 Certificate serial: 060A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft Manifest number: 05F9 Signing time: Sun 20 Jul 2025 23:05:07 +0000 Manifest this update: Sun 20 Jul 2025 23:05:07 +0000 Manifest next update: Sun 27 Jul 2025 23:05:07 +0000 Files and hashes: 1: 9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl (hash: S3QnX54OtFwqIPBYx/KK62IW5+hI497yJG08C4Pmqp8=) 2: E8C597A6CAC311EC910B8C20C4F9AE02.roa (hash: ca8WhLHbBa7EcZLiVkbwKc/O4N20Afp/5/zNnD+5YJY=) 3: DB5A14DED46911ECBA5B5F41C4F9AE02.roa (hash: AUr7V0EIgEALueuFSq5XM/MsO85yQ02h1CJnq/h0usU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1546 (0x60a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B734D, serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194 Validity Not Before: Jul 20 23:05:07 2025 GMT Not After : Jul 27 23:05:07 2025 GMT Subject: CN=687d7623-5c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:f9:14:9a:84:31:ec:56:76:be:eb:b7:2c: 18:37:29:12:8b:8a:e3:1a:0e:50:4f:56:f5:de:bc: ec:51:31:d6:a8:10:32:9e:5f:db:4e:ef:87:e1:ce: 0d:fc:ba:8c:a3:28:e9:74:31:70:33:7f:04:c5:f5: 8f:96:87:84:8a:54:16:60:9e:e7:64:f6:2f:ee:03: 62:ec:cb:bf:0b:1f:ea:e2:2c:f5:57:c4:35:c3:3f: ce:4d:d5:b5:ea:9c:d1:64:de:3b:bd:93:6e:d1:eb: 37:7f:1c:83:8e:2e:41:5e:71:cd:0a:25:6d:c6:57: 57:2c:54:ff:2b:0d:04:63:8f:9a:bb:9c:76:68:3f: c2:59:7c:6d:b4:c5:76:1f:b7:8a:d9:a9:c9:df:87: e6:52:d8:fe:4e:51:c0:9d:3b:fe:74:07:22:92:44: ba:16:38:d4:2a:c1:f4:cb:07:9e:8c:91:25:e8:9c: f2:4f:67:8a:9b:1b:d9:eb:78:b0:01:a2:86:27:de: 5e:97:bd:09:ac:60:81:b8:54:05:50:94:96:47:da: 66:f4:a4:b1:d7:8f:90:b2:d4:86:4d:4d:76:5b:49: 86:9b:c9:fd:11:b7:cd:ed:3c:85:ba:f2:f5:80:fa: fd:75:0f:d3:dd:9a:01:52:61:f4:a8:84:53:72:e3: 02:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:29:5D:42:5C:71:11:F7:56:80:B6:FE:BB:DC:B4:FA:E0:3E:CD:53 X509v3 Authority Key Identifier: keyid:F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:54:93:0f:b3:a8:05:2b:20:06:cc:52:bb:5d:fd:31:b1:26: 52:cc:1f:ee:f6:40:2f:ac:ea:8a:41:fd:45:53:f0:2b:59:a0: 3b:d3:3f:17:f7:20:5b:5d:d7:4f:41:4f:1f:ee:82:e8:ad:2c: 9d:f6:aa:8d:d8:d7:f1:6a:fc:63:22:eb:41:b7:8c:28:85:6c: 71:6d:13:4f:60:f1:23:12:c4:1c:63:ad:20:4d:81:4d:c0:3b: 52:7e:5f:c6:87:c0:00:58:24:04:8e:ce:bb:66:c4:19:8f:56: 29:a7:d7:bd:75:a3:c4:b0:e0:7c:f7:17:51:1a:12:92:84:5e: 85:54:45:be:d6:23:eb:0f:43:f0:f1:98:e5:e6:21:4c:c4:87: 9d:ef:72:ed:ca:e2:a8:e2:40:86:f6:16:59:15:90:87:79:36: 22:1b:b7:2c:26:fa:7f:9d:38:89:3e:96:bd:e2:7f:c3:f6:90: 4a:37:eb:7d:f4:41:e9:a7:d2:46:d6:4e:bf:19:32:d8:2e:86: 61:25:99:24:ef:c1:30:eb:a5:0a:61:a4:bb:52:7e:85:72:98: 0f:2c:fb:f8:20:10:33:62:c1:09:26:cd:a8:81:b3:bc:74:f3: d3:45:67:21:9c:05:ca:0c:0d:1e:da:c6:54:da:9e:33:ac:26: b6:90:8b:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjczNEQxMTAvBgNVBAUTKEY0QzMzMjQ1OEJFREM4NzhCOTZBMDdFMUUwODFFNUJG NEE5MUExOTQwHhcNMjUwNzIwMjMwNTA3WhcNMjUwNzI3MjMwNTA3WjAYMRYwFAYD VQQDEw02ODdkNzYyMy01Yzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUb5FJqEMexWdr7rtywYNykSi4rjGg5QT1b13rzsUTHWqBAynl/bTu+H4c4N /LqMoyjpdDFwM38ExfWPloeEilQWYJ7nZPYv7gNi7Mu/Cx/q4iz1V8Q1wz/OTdW1 6pzRZN47vZNu0es3fxyDji5BXnHNCiVtxldXLFT/Kw0EY4+au5x2aD/CWXxttMV2 H7eK2anJ34fmUtj+TlHAnTv+dAcikkS6FjjUKsH0yweejJEl6JzyT2eKmxvZ63iw AaKGJ95el70JrGCBuFQFUJSWR9pm9KSx14+QstSGTU12W0mGm8n9EbfN7TyFuvL1 gPr9dQ/T3ZoBUmH0qIRTcuMCbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMApXUJc cRH3VoC2/rvctPrgPs1TMB8GA1UdIwQYMBaAFPTDMkWL7ch4uWoH4eCB5b9KkaGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzM0RC8xMTU4NDMyNkI5 NEYxMUVCOUE2QUVGMzJDNEY5QUUwMi85TU15Ull2dHlIaTVhZ2ZoNElIbHYwcVJv WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNTXlSWXZ0eUhpNWFnZmg0SUhsdjBxUm9aUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzM0RC8xMTU4NDMyNkI5NEYxMUVCOUE2QUVGMzJDNEY5QUUwMi85TU15Ull2dHlI aTVhZ2ZoNElIbHYwcVJvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdVJMPs6gFKyAGzFK7Xf0xsSZSzB/u9kAvrOqKQf1FU/ArWaA70z8X 9yBbXddPQU8f7oLorSyd9qqN2NfxavxjIutBt4wohWxxbRNPYPEjEsQcY60gTYFN wDtSfl/Gh8AAWCQEjs67ZsQZj1Ypp9e9daPEsOB89xdRGhKShF6FVEW+1iPrD0Pw 8Zjl5iFMxIed73LtyuKo4kCG9hZZFZCHeTYiG7csJvp/nTiJPpa94n/D9pBKN+t9 9EHpp9JG1k6/GTLYLoZhJZkk78Ew66UKYaS7Un6FcpgPLPv4IBAzYsEJJs2ogbO8 dPPTRWchnAXKDA0e2sZU2p4zrCa2kIuk -----END CERTIFICATE-----Generated at Mon Jul 21 12:40:01 2025 by rpki-client