$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft File: CJy1orM7eG11SgfWgKnElBQmGeE.mft (raw, json) Hash identifier: 3rcz6ADFNOtErG7uoURIVR3xRnUrpI5dXlS9dsMIZQE= Subject key identifier: DC:4F:B9:3D:20:6F:78:80:88:2D:FF:4F:46:78:22:7C:B1:88:73:39 Authority key identifier: 08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1 Certificate issuer: /CN=A91D0C18/serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft Manifest number: A9 Signing time: Sat 19 Jul 2025 06:22:50 +0000 Manifest this update: Sat 19 Jul 2025 06:22:50 +0000 Manifest next update: Sat 26 Jul 2025 06:22:50 +0000 Files and hashes: 1: CJy1orM7eG11SgfWgKnElBQmGeE.crl (hash: axqY7ekP06B4mePNRrxfbq2Q/5nXXiL8VWZoTs6lRd0=) 2: EEE0092A646611EFA25D167EC4F9AE02.roa (hash: 2I1s5RbX9mRnDSwDS9XqFVY3yT7dmC+Kb1B8YfP6Dhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C18, serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1 Validity Not Before: Jul 19 06:22:50 2025 GMT Not After : Jul 26 06:22:50 2025 GMT Subject: CN=687b39ba-b0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:61:5e:ee:a3:9f:ba:68:d4:91:d7:6a:b7: ef:58:f6:b8:32:cb:a3:7c:ee:60:9c:35:8f:81:29: f0:25:83:4d:c9:c6:61:25:f7:d4:8f:e9:cc:ce:3c: 23:88:ae:60:52:dc:0f:32:78:ea:53:47:08:11:60: f0:0a:fa:e6:01:27:d1:d5:cd:fb:85:a1:40:13:d0: fe:7b:0b:ac:55:c7:3d:dc:88:ab:f0:37:29:ff:fc: 05:a8:c1:54:fd:06:ff:4b:65:f3:a9:27:fd:a5:ec: 1f:4f:bb:55:80:be:8a:f9:15:3e:e6:85:f4:b0:cd: 19:e8:fb:09:e8:d1:37:b1:9c:d0:2a:42:68:8e:53: d9:11:9c:00:b3:73:d2:77:f2:c3:39:28:f6:9c:41: 6c:82:63:20:69:17:bc:fd:96:5c:4c:e2:11:c9:a5: b8:c8:df:f8:29:04:32:5e:ac:dd:2c:8f:43:20:15: 7a:2f:c2:bb:e1:94:d1:9f:07:18:0e:b4:7b:eb:28: fe:ec:35:92:4e:1f:85:76:12:bb:3b:69:f1:26:7e: d0:29:c1:90:13:b1:dd:ba:e2:64:fa:b4:16:94:50: 22:fd:8d:31:c3:80:99:c1:ca:e4:78:21:e8:cb:28: a9:0e:a2:c9:49:9c:38:50:e0:b2:ff:f2:45:0d:94: 5f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4F:B9:3D:20:6F:78:80:88:2D:FF:4F:46:78:22:7C:B1:88:73:39 X509v3 Authority Key Identifier: keyid:08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:41:61:fc:4e:1b:f7:a6:a6:ed:68:a4:f8:3c:ef:01:67:68: 70:18:41:3e:c6:ce:3c:c6:68:5d:4e:67:76:a5:8b:91:2f:82: 0f:8d:29:50:71:d7:cf:f7:72:43:8b:ed:02:94:7e:f1:5a:03: 62:b5:52:92:95:c5:de:d4:94:ef:b5:e8:26:71:18:78:9f:08: d1:eb:a6:34:97:ef:af:f3:a4:3c:60:bd:98:9a:91:bb:c8:ba: 72:48:2a:8b:49:00:ec:a7:84:3b:2c:4b:eb:41:63:64:c2:14: 6c:ea:5d:46:ef:c4:34:aa:fe:55:7f:18:34:f3:80:ca:fd:10: b5:3f:ed:5c:90:9d:c6:3e:0d:bf:2e:3e:0e:2c:b9:34:b9:02: ad:70:64:28:0c:46:73:05:51:66:95:51:13:ff:ec:61:dd:ed: 1d:04:10:84:16:30:91:5a:e0:78:fd:ee:2c:56:f4:9d:73:3d: 4c:25:a5:ab:ac:de:a2:0a:a9:0b:ee:11:d4:5b:48:8e:7a:01: aa:30:cf:98:5f:9a:87:ab:c3:b3:39:35:f5:0e:8c:18:bf:9d: 99:ea:5a:1c:aa:f8:2d:9a:2c:f2:ca:5c:94:1e:2c:18:35:5c: 35:e4:19:e8:9b:25:5c:06:e4:ff:40:4c:ea:13:a4:f9:67:ac: e3:5b:b2:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTgxMTAvBgNVBAUTKDA4OUNCNUEyQjMzQjc4NkQ3NTRBMDdENjgwQTlDNDk0 MTQyNjE5RTEwHhcNMjUwNzE5MDYyMjUwWhcNMjUwNzI2MDYyMjUwWjAYMRYwFAYD VQQDEw02ODdiMzliYS1iMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlB9hXu6jn7po1JHXarfvWPa4MsujfO5gnDWPgSnwJYNNycZhJffUj+nMzjwj iK5gUtwPMnjqU0cIEWDwCvrmASfR1c37haFAE9D+ewusVcc93Iir8Dcp//wFqMFU /Qb/S2XzqSf9pewfT7tVgL6K+RU+5oX0sM0Z6PsJ6NE3sZzQKkJojlPZEZwAs3PS d/LDOSj2nEFsgmMgaRe8/ZZcTOIRyaW4yN/4KQQyXqzdLI9DIBV6L8K74ZTRnwcY DrR76yj+7DWSTh+FdhK7O2nxJn7QKcGQE7HduuJk+rQWlFAi/Y0xw4CZwcrkeCHo yyipDqLJSZw4UOCy//JFDZRfUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxPuT0g b3iAiC3/T0Z4InyxiHM5MB8GA1UdIwQYMBaAFAictaKzO3htdUoH1oCpxJQUJhnh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxOC82ODNCQTA5NjY0 NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9DSnkxb3JNN2VHMTFTZ2ZXZ0tuRWxCUW1H ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NKeTFvck03ZUcxMVNnZldnS25FbEJRbUdlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEMxOC82ODNCQTA5NjY0NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9DSnkxb3JNN2VH MTFTZ2ZXZ0tuRWxCUW1HZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBQWH8Thv3pqbtaKT4PO8BZ2hwGEE+xs48xmhdTmd2pYuRL4IPjSlQ cdfP93JDi+0ClH7xWgNitVKSlcXe1JTvtegmcRh4nwjR66Y0l++v86Q8YL2YmpG7 yLpySCqLSQDsp4Q7LEvrQWNkwhRs6l1G78Q0qv5Vfxg084DK/RC1P+1ckJ3GPg2/ Lj4OLLk0uQKtcGQoDEZzBVFmlVET/+xh3e0dBBCEFjCRWuB4/e4sVvSdcz1MJaWr rN6iCqkL7hHUW0iOegGqMM+YX5qHq8OzOTX1DowYv52Z6locqvgtmizyylyUHiwY NVw15BnomyVcBuT/QEzqE6T5Z6zjW7Jo -----END CERTIFICATE-----Generated at Sun Jul 20 07:32:19 2025 by rpki-client