$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json) Hash identifier: NV/BDw1TJRVn2w7YPxh360S1Vw4Mrg4gJ1Wm6Y2fTyg= Subject key identifier: 14:24:98:2A:EC:BE:B6:59:D0:5B:C7:C7:C7:F4:8A:C0:D4:26:8D:4F Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE Certificate issuer: /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Certificate serial: 0B09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft Manifest number: 0AFB Signing time: Sun 20 Jul 2025 19:27:50 +0000 Manifest this update: Sun 20 Jul 2025 19:27:50 +0000 Manifest next update: Sun 27 Jul 2025 19:27:50 +0000 Files and hashes: 1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: 2iD85NDA6YM3c+aoDFMNY+oCnZm0kI0EeaP/nHKI+Hg=) 2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: ndMYLuFm1npGXhTqyafB2ux+qylKnhbABDCIs0+SmbQ=) 3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: DJ5UPh4W8eU78pV9FNPBPxM5RGyD7+r3WrHHI7kvMUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2825 (0xb09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Validity Not Before: Jul 20 19:27:50 2025 GMT Not After : Jul 27 19:27:50 2025 GMT Subject: CN=687d4336-9f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:0e:70:01:72:73:c1:dd:b6:f9:6e:ef:4b: 82:0a:87:2a:ef:d5:4f:76:50:ed:27:aa:b1:a9:e4: 03:12:ba:ec:be:ba:76:50:4d:92:fe:bc:de:47:a0: c1:89:59:70:3e:ed:52:e2:62:99:61:d6:37:2b:6d: ad:2f:db:20:fd:8e:70:b1:dc:73:d1:6c:c0:69:0a: fb:d7:18:8b:0d:9b:5f:ed:97:56:53:d3:43:dc:34: 16:3a:54:50:bf:4f:e3:e9:fb:4b:7d:54:20:b9:7c: 3c:05:b4:0e:d9:4f:27:fd:8b:7a:b1:44:a1:b1:d6: 80:ae:06:ca:0a:16:3a:c9:60:f4:dc:df:4b:f2:3b: 11:95:fa:fd:a8:b2:ec:8c:c4:48:8a:46:db:d0:80: 06:a2:88:45:4c:8c:4a:92:e5:8e:8e:b8:45:14:31: 26:d8:1c:ad:bc:d9:31:3e:52:bd:00:73:29:56:03: 1c:b0:6b:5c:e9:7a:4d:db:ef:ef:78:7a:df:da:e6: 20:97:26:f3:cc:7b:30:33:0d:e8:7f:6e:86:fb:01: 04:2b:c0:95:23:34:0c:94:03:fa:f9:3c:52:a3:2b: 3b:7f:12:82:26:95:ae:82:05:f7:54:52:a5:76:68: bd:fb:b6:0e:17:16:38:a5:b3:1b:d9:7c:d6:54:f8: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:24:98:2A:EC:BE:B6:59:D0:5B:C7:C7:C7:F4:8A:C0:D4:26:8D:4F X509v3 Authority Key Identifier: keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e1:86:83:41:03:4a:c7:b4:ae:ed:10:ca:4b:da:72:41:fc: a1:60:56:ac:4e:a3:30:e8:fb:e2:ce:90:ba:08:c0:dd:1a:ea: d2:d6:bb:42:d6:75:ed:80:55:22:e8:f2:ed:f4:e5:7d:e4:b2: a8:40:5d:89:46:9d:62:2f:1e:17:f8:e8:21:95:0e:f5:7c:70: 1e:f8:5c:a5:eb:d4:7e:f9:ed:24:08:22:c6:6b:49:96:f8:c6: 35:33:50:e7:79:b0:44:68:22:65:35:32:11:f4:88:0e:67:ec: 23:6f:35:12:71:6d:c8:36:8c:25:3e:1f:ea:ca:9a:34:5d:3f: 1e:34:a4:06:8e:0b:6a:04:f5:1b:86:28:6d:6f:11:98:2f:cd: 31:94:31:2f:89:9c:32:88:97:d7:a6:23:7d:af:3f:8d:9c:90: cc:5b:ca:5a:01:df:51:7d:3a:19:37:55:20:64:bc:27:ad:04: 36:cf:5f:2d:c5:04:ed:73:e1:f5:a1:89:56:66:d5:99:ee:90: fe:6b:0d:f7:b5:dc:57:0d:5b:c4:7f:4a:57:4a:d6:16:7f:f7: dc:02:d3:67:0c:4c:c7:16:5b:c8:6e:cb:d8:81:b7:96:33:da: 2e:77:74:1c:a7:2a:4d:d3:68:84:d8:a3:44:22:cd:1e:16:42: 60:5d:79:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFRjMxMTAvBgNVBAUTKEY2Q0IyRThFQkM3QTg5MkJGQTE1QzQ0N0IzOTgyNEEw NThDNzU1QUUwHhcNMjUwNzIwMTkyNzUwWhcNMjUwNzI3MTkyNzUwWjAYMRYwFAYD VQQDEw02ODdkNDMzNi05ZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxswOcAFyc8Hdtvlu70uCCocq79VPdlDtJ6qxqeQDErrsvrp2UE2S/rzeR6DB iVlwPu1S4mKZYdY3K22tL9sg/Y5wsdxz0WzAaQr71xiLDZtf7ZdWU9ND3DQWOlRQ v0/j6ftLfVQguXw8BbQO2U8n/Yt6sUShsdaArgbKChY6yWD03N9L8jsRlfr9qLLs jMRIikbb0IAGoohFTIxKkuWOjrhFFDEm2BytvNkxPlK9AHMpVgMcsGtc6XpN2+/v eHrf2uYglybzzHswMw3of26G+wEEK8CVIzQMlAP6+TxSoys7fxKCJpWuggX3VFKl dmi9+7YOFxY4pbMb2XzWVPiwoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQkmCrs vrZZ0FvHx8f0isDUJo1PMB8GA1UdIwQYMBaAFPbLLo68eokr+hXER7OYJKBYx1Wu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVGMy8yNTE5Q0RGMDQ5 MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlTdjZGY1JIczVna29GakhW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlzc3Vqcng2aVN2NkZjUkhzNWdrb0ZqSFZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVGMy8yNTE5Q0RGMDQ5MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlT djZGY1JIczVna29GakhWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB94YaDQQNKx7Su7RDKS9pyQfyhYFasTqMw6PvizpC6CMDdGurS1rtC 1nXtgFUi6PLt9OV95LKoQF2JRp1iLx4X+OghlQ71fHAe+Fyl69R++e0kCCLGa0mW +MY1M1DnebBEaCJlNTIR9IgOZ+wjbzUScW3INowlPh/qypo0XT8eNKQGjgtqBPUb hihtbxGYL80xlDEviZwyiJfXpiN9rz+NnJDMW8paAd9RfToZN1UgZLwnrQQ2z18t xQTtc+H1oYlWZtWZ7pD+aw33tdxXDVvEf0pXStYWf/fcAtNnDEzHFlvIbsvYgbeW M9oud3QcpypN02iE2KNEIs0eFkJgXXmZ -----END CERTIFICATE-----Generated at Mon Jul 21 12:42:48 2025 by rpki-client