$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json) Hash identifier: iIwvpdF8xIeQhWgCxYY0KRDJVv28mR2LCc2lzvdAqek= Subject key identifier: 65:05:5A:97:5D:AF:89:43:C2:74:0D:D2:F0:C5:1A:E3:98:30:5F:33 Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft Manifest number: 1005 Signing time: Fri 18 Jul 2025 17:50:49 +0000 Manifest this update: Fri 18 Jul 2025 17:50:48 +0000 Manifest next update: Fri 25 Jul 2025 17:50:48 +0000 Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: q4CjrWT5wJ34h3LTeJAQwQFXtHUakT6W+2uijiLhmEo=) 2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: fxHGOyOyuB7YI5nNfKWHUK5b4ic8LKYtMZ7wxSPfXXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: Jul 18 17:50:48 2025 GMT Not After : Jul 25 17:50:48 2025 GMT Subject: CN=687a8979-028a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3b:1a:17:a4:84:e1:85:98:07:30:07:ed:a2: 7e:28:75:38:e1:b6:39:f4:34:9b:bd:e7:74:8c:1e: b1:c7:83:a9:c4:e7:91:56:f0:12:5a:20:b6:7e:4a: f4:a1:8a:1b:5c:6a:63:8f:a6:74:9f:e4:c9:6a:e5: f2:a9:70:1d:79:b3:0b:03:9d:8a:8c:51:44:65:85: 32:24:a0:9f:39:2d:18:6d:6b:e4:88:59:7e:67:54: a8:5f:9c:2e:bd:48:95:0c:6d:d6:89:9e:c5:97:01: df:78:92:78:c8:96:a5:cc:c6:c5:29:f7:bb:a6:28: 50:a9:3f:c3:a1:b5:23:df:50:dd:81:cc:b2:9d:3e: fa:d6:b0:26:c7:fa:70:d3:84:62:f5:a0:17:0d:e1: 6a:0b:0d:93:95:2f:95:3c:c8:1c:73:c3:62:16:6d: 07:9f:e6:14:1f:b7:29:31:64:e8:c5:bf:fc:ed:40: fa:fb:be:0b:0a:55:de:c9:17:73:01:04:85:c9:45: df:ec:90:68:66:1b:31:f1:1d:25:89:9e:7c:88:10: a0:1e:4b:52:44:8d:3f:68:fd:83:f3:32:7d:db:78: 41:e4:3f:4a:af:89:33:40:3f:8f:0f:3c:5a:81:e4: 73:a3:25:1f:d7:3d:3c:f4:a0:b7:f4:cf:5f:b3:70: a2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:05:5A:97:5D:AF:89:43:C2:74:0D:D2:F0:C5:1A:E3:98:30:5F:33 X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:9f:d4:2e:a2:be:7f:35:96:e1:3d:26:54:6d:74:c1:5e:e3: 16:f5:dc:68:ff:52:8c:84:62:bb:bb:b9:46:ce:9b:0a:87:4f: 8e:74:05:49:82:e8:30:9a:46:4d:5e:b6:16:ec:1d:41:5a:e9: 9a:5c:61:0f:de:9e:50:21:00:bc:b6:50:f0:12:5e:7c:d7:03: 5d:7f:c0:7d:2b:c2:0a:36:89:c8:db:54:f3:69:d3:0a:12:a8: d9:1a:92:ee:37:f3:d5:70:28:fe:7d:87:d1:23:6d:42:1f:85: 06:ea:a1:c1:b1:bb:1d:31:26:4c:40:2c:cb:48:05:5f:01:4a: 58:d9:12:4a:c2:a8:4b:42:f0:9b:54:c6:42:7d:00:27:fd:e6: 7e:f9:b5:e1:da:97:42:61:2d:31:15:4e:ed:7c:ae:b4:95:19: 03:27:ce:0a:b2:fd:14:84:be:c4:c1:0b:4b:18:5c:3a:b5:64: 8c:0c:b2:40:f4:49:98:65:14:d5:fe:d0:24:e6:60:e2:56:3e: e6:82:d2:d3:be:8c:77:d4:e6:18:27:72:e5:24:92:1c:fc:b5: bf:9f:48:03:66:e8:57:8e:a8:b6:dd:6a:00:86:16:b8:30:38: d8:00:e5:c6:0e:a3:5e:cd:7f:00:fb:8e:cb:77:e4:34:c5:39: e2:0c:e0:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE MkY2MjMxQTQwHhcNMjUwNzE4MTc1MDQ4WhcNMjUwNzI1MTc1MDQ4WjAYMRYwFAYD VQQDEw02ODdhODk3OS0wMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DsaF6SE4YWYBzAH7aJ+KHU44bY59DSbved0jB6xx4OpxOeRVvASWiC2fkr0 oYobXGpjj6Z0n+TJauXyqXAdebMLA52KjFFEZYUyJKCfOS0YbWvkiFl+Z1SoX5wu vUiVDG3WiZ7FlwHfeJJ4yJalzMbFKfe7pihQqT/DobUj31DdgcyynT761rAmx/pw 04Ri9aAXDeFqCw2TlS+VPMgcc8NiFm0Hn+YUH7cpMWToxb/87UD6+74LClXeyRdz AQSFyUXf7JBoZhsx8R0liZ58iBCgHktSRI0/aP2D8zJ923hB5D9Kr4kzQD+PDzxa geRzoyUf1z089KC39M9fs3CilwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUFWpdd r4lDwnQN0vDFGuOYMF8zMB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhp UU9FNVE1V2x6TVRTOWlNYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVn9Quor5/NZbhPSZUbXTBXuMW9dxo/1KMhGK7u7lGzpsKh0+OdAVJ gugwmkZNXrYW7B1BWumaXGEP3p5QIQC8tlDwEl581wNdf8B9K8IKNonI21TzadMK EqjZGpLuN/PVcCj+fYfRI21CH4UG6qHBsbsdMSZMQCzLSAVfAUpY2RJKwqhLQvCb VMZCfQAn/eZ++bXh2pdCYS0xFU7tfK60lRkDJ84Ksv0UhL7EwQtLGFw6tWSMDLJA 9EmYZRTV/tAk5mDiVj7mgtLTvox31OYYJ3LlJJIc/LW/n0gDZuhXjqi23WoAhha4 MDjYAOXGDqNezX8A+47Ld+Q0xTniDOCr -----END CERTIFICATE-----Generated at Sun Jul 20 07:57:58 2025 by rpki-client