$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: c1W4uaKNQ9o9AGpJvzpgdHkfr+pBuNMgey5/R/wMFoQ= Subject key identifier: 65:EB:6A:9B:A3:88:AB:23:6C:F7:5F:6C:17:90:8F:69:D5:91:F1:67 Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: A0 Signing time: Sat 19 Jul 2025 06:27:59 +0000 Manifest this update: Sat 19 Jul 2025 06:27:59 +0000 Manifest next update: Sat 26 Jul 2025 06:27:59 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: kleN8A9uTURQiAk7FMcvIKUOdd0LfdZ8U++KAmKRaVo=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: SORlAdQ9FssMHlMIfPwfvKAJ6kXMG+aUvNMZPsDTNq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: Jul 19 06:27:59 2025 GMT Not After : Jul 26 06:27:59 2025 GMT Subject: CN=687b3aef-6c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:32:6f:74:8e:0c:70:9b:d8:28:f2:0f:f6:8c: a7:62:15:ad:12:35:ac:bd:b7:23:c8:95:f8:f2:6d: 6b:79:7a:b2:54:d4:b8:cf:7a:4e:e5:34:2d:e6:a2: a8:af:4f:fb:78:31:62:e3:94:2a:0e:2e:cf:d5:89: 76:30:4f:fd:f5:1e:e1:68:56:99:b3:ad:57:02:fb: a6:c1:2b:5f:f8:f2:b1:37:01:6c:33:39:39:ed:64: 38:93:a0:f4:fe:a0:19:fd:40:00:31:ea:14:d6:19: a4:79:6b:7f:57:c7:73:ec:b0:48:d0:08:07:c3:34: 28:64:a8:64:ee:36:0c:0f:e9:10:db:6c:60:d1:15: e6:ad:0b:67:b2:a6:5f:8f:22:34:4b:80:b1:6c:a6: b6:d7:ff:d2:fd:c9:70:c0:c0:39:1a:7a:d9:08:68: b7:54:42:bc:d5:77:2b:39:95:2b:17:bb:46:0a:3b: f0:72:a9:64:5d:f3:9a:90:71:19:8e:f8:7e:86:83: 77:c9:0e:29:a0:ab:3d:db:b5:5c:66:80:1a:32:36: 9c:d4:44:a6:40:26:05:3e:01:13:85:0a:ab:ca:0f: 02:5f:19:36:df:65:07:f8:b8:f0:fe:52:36:be:68: fa:12:eb:6e:71:69:21:6c:6b:97:7f:e8:bc:aa:a4: 44:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EB:6A:9B:A3:88:AB:23:6C:F7:5F:6C:17:90:8F:69:D5:91:F1:67 X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:90:a4:e9:9a:65:cf:80:5d:14:77:ff:6e:57:8b:a1:b7:8f: 7e:f5:c4:2a:5c:9d:4a:5e:5f:de:3a:33:4a:7e:13:3a:7e:5f: 42:95:32:41:4c:95:96:84:6d:7e:ec:62:de:ff:3b:c2:52:4a: d2:1f:fa:5f:93:8e:13:11:47:ba:36:f2:6e:54:a2:17:be:c2: de:6b:be:9f:d2:60:23:08:03:5d:85:43:2c:89:e4:cb:49:ec: ad:25:40:fd:c7:0e:7c:4f:41:75:20:68:22:2b:71:85:15:71: 3a:50:1e:2f:d6:02:ae:da:2b:29:03:ff:ac:5f:e1:d6:9a:37: 71:46:e0:00:63:44:aa:f2:89:f9:8f:5a:38:70:11:39:8f:1b: c6:34:c5:b4:7f:36:dc:e4:12:24:91:98:95:4d:16:42:38:6d: ae:51:2c:5d:20:1b:f3:e1:2b:cc:67:0c:64:e9:1b:f3:76:84: 4c:e2:4d:13:0b:73:27:2a:9f:d0:35:29:58:81:9f:53:70:7c: e4:bf:b4:0b:cf:0f:c3:88:05:8a:6b:90:28:be:df:66:5a:6b: 84:13:da:10:20:dd:95:d3:30:b0:a1:6c:d4:95:cd:3e:de:4a: 34:d3:a7:0b:59:f7:7a:4a:7a:5c:42:d8:32:1a:c1:87:78:c7: 17:5b:dc:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKEY5Q0Q3MEU3NjJCRTY5NUY0QkE0OTAyQUEyMEI5NDBG NzcwQTA2MzgwHhcNMjUwNzE5MDYyNzU5WhcNMjUwNzI2MDYyNzU5WjAYMRYwFAYD VQQDEw02ODdiM2FlZi02YzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzJvdI4McJvYKPIP9oynYhWtEjWsvbcjyJX48m1reXqyVNS4z3pO5TQt5qKo r0/7eDFi45QqDi7P1Yl2ME/99R7haFaZs61XAvumwStf+PKxNwFsMzk57WQ4k6D0 /qAZ/UAAMeoU1hmkeWt/V8dz7LBI0AgHwzQoZKhk7jYMD+kQ22xg0RXmrQtnsqZf jyI0S4CxbKa21//S/clwwMA5GnrZCGi3VEK81XcrOZUrF7tGCjvwcqlkXfOakHEZ jvh+hoN3yQ4poKs927VcZoAaMjac1ESmQCYFPgEThQqryg8CXxk232UH+Ljw/lI2 vmj6EutucWkhbGuXf+i8qqREsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXrapuj iKsjbPdfbBeQj2nVkfFnMB8GA1UdIwQYMBaAFPnNcOdivmlfS6SQKqILlA93CgY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9DNzZGOTJDMDZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFWOUxwSkFxb2d1VUQzY0tC amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0JqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9DNzZGOTJDMDZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFW OUxwSkFxb2d1VUQzY0tCamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMkKTpmmXPgF0Ud/9uV4uht49+9cQqXJ1KXl/eOjNKfhM6fl9ClTJB TJWWhG1+7GLe/zvCUkrSH/pfk44TEUe6NvJuVKIXvsLea76f0mAjCANdhUMsieTL SeytJUD9xw58T0F1IGgiK3GFFXE6UB4v1gKu2ispA/+sX+HWmjdxRuAAY0Sq8on5 j1o4cBE5jxvGNMW0fzbc5BIkkZiVTRZCOG2uUSxdIBvz4SvMZwxk6RvzdoRM4k0T C3MnKp/QNSlYgZ9TcHzkv7QLzw/DiAWKa5Aovt9mWmuEE9oQIN2V0zCwoWzUlc0+ 3ko006cLWfd6SnpcQtgyGsGHeMcXW9xz -----END CERTIFICATE-----Generated at Sun Jul 20 07:34:14 2025 by rpki-client