$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft File: c9kAkk5wFUjm4yA4gPbAlypMKRo.mft (raw, json) Hash identifier: DmXVUBUY5CC7GHfd7xUpUWBCYCSnPxtVRaq0hs1R/2c= Subject key identifier: 75:D9:4C:22:C9:CB:81:01:A1:9C:35:32:96:06:AE:97:9C:42:7B:F5 Authority key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A Certificate issuer: /CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft Manifest number: 94 Signing time: Sat 19 Jul 2025 06:37:35 +0000 Manifest this update: Sat 19 Jul 2025 06:37:34 +0000 Manifest next update: Sat 26 Jul 2025 06:37:34 +0000 Files and hashes: 1: c9kAkk5wFUjm4yA4gPbAlypMKRo.crl (hash: hz+kp47YdIQGZROdUsT9kQtatTyTN1n65JVIiW826no=) 2: 5440C4C8848111EF9F3ECE34C4F9AE02.roa (hash: 3hnmn/EG7rhYM2a7/Cnm16lA4qC355sf3kWBw8CmIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E72, serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Validity Not Before: Jul 19 06:37:34 2025 GMT Not After : Jul 26 06:37:34 2025 GMT Subject: CN=687b3d2e-6178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:18:ee:08:50:8c:c9:63:ba:12:ad:3e:29: c9:33:6f:f4:68:c1:73:1d:9a:82:81:84:3e:16:e4: d2:71:4d:4c:68:f3:1a:42:78:aa:f7:4e:38:22:43: 9b:5a:97:0d:03:f0:3e:a9:7e:ed:88:5b:39:30:5b: 5b:64:69:aa:19:87:30:df:ca:89:0c:a1:49:e1:16: b6:8c:6f:fd:32:b7:9b:e1:8b:88:2a:2f:b3:b3:9e: 40:0b:81:a3:55:b2:a6:05:22:15:9d:a3:d0:00:83: c0:d3:4b:b1:6c:74:46:b7:66:29:61:f3:6b:5d:78: 44:7e:53:a6:62:34:f4:40:a0:ab:b0:c7:8b:c2:b2: f1:f7:95:89:1e:1e:76:43:2f:ae:5c:99:84:c2:ac: 1b:c8:43:89:7f:fe:25:4b:0c:0d:2c:f1:c0:fa:41: 2c:1c:0b:b8:1a:26:57:5f:c2:52:f6:70:36:da:eb: 72:27:e2:82:57:8c:aa:24:aa:46:99:7f:16:ff:4f: 53:cd:88:d8:78:fc:10:90:3a:af:83:de:fd:bc:d7: aa:52:5b:4b:19:30:b3:da:e6:e8:3f:83:a8:4b:a2: 12:c1:04:08:f2:ee:6e:4b:7b:60:ac:bd:46:2a:76: 15:83:80:87:0b:b3:f2:f2:f2:ae:1d:90:d8:37:47: 78:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D9:4C:22:C9:CB:81:01:A1:9C:35:32:96:06:AE:97:9C:42:7B:F5 X509v3 Authority Key Identifier: keyid:73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e9:7d:0b:53:29:90:99:d6:e8:60:57:6c:88:a1:c2:dc:c3: 76:57:ce:c9:a7:c3:fd:66:38:68:e7:d6:f1:0b:af:d3:5c:4a: ef:67:9f:41:9e:2f:df:1d:5f:34:6f:23:40:fb:20:26:f1:a1: f8:56:d2:ed:ca:e0:24:e4:49:e8:3f:81:f5:38:5d:36:eb:a8: 93:5d:26:c0:9c:aa:26:6c:12:91:0b:cf:86:fb:95:9c:08:c1: 81:12:a5:6c:4f:cc:b2:d4:48:27:3f:79:58:55:e4:73:50:c5: bb:ea:88:b2:c2:86:98:73:51:85:07:64:70:d1:39:42:ea:af: 23:36:a6:ce:57:91:62:53:54:6e:6c:58:04:d0:b5:83:e1:40: da:a1:d6:4c:18:ce:5a:ea:75:3f:75:21:5b:bc:d9:c7:77:28: 6a:9b:fd:f5:7f:7c:1f:2d:c9:6b:bd:1e:12:2f:70:dd:39:89: 72:60:60:0a:ea:ae:7e:91:ce:2e:79:3d:84:c9:7c:e2:7e:40: 38:7d:c6:4c:87:fc:18:e0:80:d4:fa:d7:ec:d9:97:65:2a:47: 26:91:e6:42:c0:d5:f5:68:50:12:6f:ee:7a:f5:ac:13:32:c6: 24:65:c8:18:5e:c8:92:c9:14:2f:58:1b:c6:64:9c:14:da:8d: f6:f6:82:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFNzIxMTAvBgNVBAUTKDczRDkwMDkyNEU3MDE1NDhFNkUzMjAzODgwRjZDMDk3 MkE0QzI5MUEwHhcNMjUwNzE5MDYzNzM0WhcNMjUwNzI2MDYzNzM0WjAYMRYwFAYD VQQDEw02ODdiM2QyZS02MTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwusY7ghQjMljuhKtPinJM2/0aMFzHZqCgYQ+FuTScU1MaPMaQniq9044IkOb WpcNA/A+qX7tiFs5MFtbZGmqGYcw38qJDKFJ4Ra2jG/9Mreb4YuIKi+zs55AC4Gj VbKmBSIVnaPQAIPA00uxbHRGt2YpYfNrXXhEflOmYjT0QKCrsMeLwrLx95WJHh52 Qy+uXJmEwqwbyEOJf/4lSwwNLPHA+kEsHAu4GiZXX8JS9nA22utyJ+KCV4yqJKpG mX8W/09TzYjYePwQkDqvg979vNeqUltLGTCz2uboP4OoS6ISwQQI8u5uS3tgrL1G KnYVg4CHC7Py8vKuHZDYN0d4kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXZTCLJ y4EBoZw1MpYGrpecQnv1MB8GA1UdIwQYMBaAFHPZAJJOcBVI5uMgOID2wJcqTCka MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU3Mi9FNkI0NDkwMjg0 ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZVam00eUE0Z1BiQWx5cE1L Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M5a0FrazV3RlVqbTR5QTRnUGJBbHlwTUtSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU3Mi9FNkI0NDkwMjg0ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZV am00eUE0Z1BiQWx5cE1LUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn6X0LUymQmdboYFdsiKHC3MN2V87Jp8P9Zjho59bxC6/TXErvZ59B ni/fHV80byNA+yAm8aH4VtLtyuAk5EnoP4H1OF0266iTXSbAnKombBKRC8+G+5Wc CMGBEqVsT8yy1EgnP3lYVeRzUMW76oiywoaYc1GFB2Rw0TlC6q8jNqbOV5FiU1Ru bFgE0LWD4UDaodZMGM5a6nU/dSFbvNnHdyhqm/31f3wfLclrvR4SL3DdOYlyYGAK 6q5+kc4ueT2EyXzifkA4fcZMh/wY4IDU+tfs2ZdlKkcmkeZCwNX1aFASb+569awT MsYkZcgYXsiSyRQvWBvGZJwU2o329oJy -----END CERTIFICATE-----Generated at Sun Jul 20 03:42:12 2025 by rpki-client