$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft File: V9tCq56777_iEHP1AH_Ddixfuwg.mft (raw, json) Hash identifier: ACqpko+myCAmrWYEWFaIKoG6kYyW4VslbVM9jqeoJ04= Subject key identifier: B2:B9:85:7A:B1:33:4B:33:D9:30:84:36:DD:78:1B:FD:25:74:43:A0 Authority key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 Certificate issuer: /CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Certificate serial: 08B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft Manifest number: 08B2 Signing time: Sun 20 Jul 2025 20:36:54 +0000 Manifest this update: Sun 20 Jul 2025 20:36:54 +0000 Manifest next update: Sun 27 Jul 2025 20:36:54 +0000 Files and hashes: 1: V9tCq56777_iEHP1AH_Ddixfuwg.crl (hash: Wj70mB7uYDdwuWEcwwXaHK/QnWPUQJZDGusKvJZFyx8=) 2: 19EF4D1ABE5A11EDAA537748C4F9AE02.roa (hash: miZMhJRep9ETR17YW7gWoj6LqwgVkbNzRlMxX+ZmBhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2233 (0x8b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA297, serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Validity Not Before: Jul 20 20:36:54 2025 GMT Not After : Jul 27 20:36:54 2025 GMT Subject: CN=687d5366-c2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:af:bb:cf:db:b0:28:e5:04:7b:2d:a8:86: 06:8b:61:86:a0:91:2f:7f:a2:c2:ee:8f:6f:fc:9e: cc:5a:cd:44:60:bb:a1:cc:0d:91:81:c3:b6:45:fb: fc:70:7e:c2:01:ab:13:95:d0:62:5c:69:3c:dc:80: 7f:d6:13:83:53:a2:10:0f:b8:52:18:7b:15:62:78: 3e:90:be:19:e4:2a:27:47:06:3e:01:07:74:8f:5d: 0b:62:c2:ab:a2:71:6b:f9:c5:13:c7:39:b6:3d:e5: 00:03:91:31:fe:94:a7:ea:dd:70:c1:c5:88:51:64: c3:5a:9d:0e:8c:af:97:22:7d:85:fe:04:f5:f2:c9: 91:f2:53:87:1a:12:53:84:26:0d:45:0e:60:40:02: c1:84:50:e8:42:a7:b8:9d:6a:ae:78:6a:26:98:78: 1e:82:a2:33:3e:15:fc:53:4c:c7:19:c7:ca:0d:d0: 2e:d4:15:bd:ea:07:32:f0:e5:9c:7b:ba:56:4a:db: 30:50:ae:0b:e1:47:7c:43:50:ed:7a:dc:6c:40:e7: 3d:97:52:6e:31:7d:f1:d4:4a:9a:16:81:28:37:51: d9:c0:9e:8e:59:4e:79:64:52:58:62:ea:e5:33:b3: d7:4d:8e:84:3b:8e:e3:6e:0b:65:b6:61:c3:e7:17: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B9:85:7A:B1:33:4B:33:D9:30:84:36:DD:78:1B:FD:25:74:43:A0 X509v3 Authority Key Identifier: keyid:57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ab:7d:6e:a3:c9:1e:e2:c9:a7:83:8b:ab:16:82:de:5d:2e: c7:bc:6d:38:1e:f6:62:d3:55:be:91:cd:ff:99:9e:e9:4b:ea: ad:08:d4:d9:6a:bd:e5:4f:0e:c5:15:e9:6b:4d:2c:c3:7a:78: 02:fd:2e:f5:8a:5a:5e:c6:57:aa:16:a8:2a:70:22:a3:56:3b: a7:cd:2e:31:9c:8a:87:c5:c7:ae:ce:bc:fe:6a:61:88:6f:83: 31:89:e9:97:13:78:f7:0d:06:87:d5:1b:3b:38:22:b0:35:08: 3d:d8:5b:e4:9a:4a:de:5d:f4:de:d8:56:e0:51:5b:bc:3d:21: ae:75:8d:59:01:14:49:5f:61:26:ea:b9:ff:11:9d:86:ce:be: f8:74:d5:75:f6:6b:a8:6c:cd:28:03:f2:a7:15:a2:bb:3b:c5: 8b:12:40:c4:2f:51:49:d0:87:a0:1e:78:a9:ed:00:85:e0:8a: cc:cb:64:2c:7d:e8:ed:db:25:25:64:dd:77:e7:c4:b5:a8:ae: 60:1e:fd:dd:d3:14:ac:82:2a:05:ef:f1:6e:78:bc:82:af:cc: a5:5f:6b:1c:93:78:ff:d3:40:5d:cf:60:ad:b3:70:99:e1:bb: 3a:77:12:fd:97:f4:c8:63:8b:55:c9:b5:26:88:13:d9:9a:c9: c6:76:3e:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EyOTcxMTAvBgNVBAUTKDU3REI0MkFCOUVCQkVGQkZFMjEwNzNGNTAwN0ZDMzc2 MkM1RkJCMDgwHhcNMjUwNzIwMjAzNjU0WhcNMjUwNzI3MjAzNjU0WjAYMRYwFAYD VQQDEw02ODdkNTM2Ni1jMmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4ivu8/bsCjlBHstqIYGi2GGoJEvf6LC7o9v/J7MWs1EYLuhzA2RgcO2Rfv8 cH7CAasTldBiXGk83IB/1hODU6IQD7hSGHsVYng+kL4Z5ConRwY+AQd0j10LYsKr onFr+cUTxzm2PeUAA5Ex/pSn6t1wwcWIUWTDWp0OjK+XIn2F/gT18smR8lOHGhJT hCYNRQ5gQALBhFDoQqe4nWqueGommHgegqIzPhX8U0zHGcfKDdAu1BW96gcy8OWc e7pWStswUK4L4Ud8Q1DtetxsQOc9l1JuMX3x1EqaFoEoN1HZwJ6OWU55ZFJYYurl M7PXTY6EO47jbgtltmHD5xePvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK5hXqx M0sz2TCENt14G/0ldEOgMB8GA1UdIwQYMBaAFFfbQqueu++/4hBz9QB/w3YsX7sI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5Ny8yNEVEMjE1NkJD MjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3X2lFSFAxQUhfRGRpeGZ1 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y5dENxNTY3NzdfaUVIUDFBSF9EZGl4ZnV3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTI5Ny8yNEVEMjE1NkJDMjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3 X2lFSFAxQUhfRGRpeGZ1d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7q31uo8ke4smng4urFoLeXS7HvG04HvZi01W+kc3/mZ7pS+qtCNTZ ar3lTw7FFelrTSzDengC/S71ilpexleqFqgqcCKjVjunzS4xnIqHxceuzrz+amGI b4MxiemXE3j3DQaH1Rs7OCKwNQg92FvkmkreXfTe2FbgUVu8PSGudY1ZARRJX2Em 6rn/EZ2Gzr74dNV19muobM0oA/KnFaK7O8WLEkDEL1FJ0IegHnip7QCF4IrMy2Qs fejt2yUlZN1358S1qK5gHv3d0xSsgioF7/FueLyCr8ylX2sck3j/00Bdz2Cts3CZ 4bs6dxL9l/TIY4tVybUmiBPZmsnGdj4u -----END CERTIFICATE-----Generated at Mon Jul 21 13:12:14 2025 by rpki-client