$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft File: i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json) Hash identifier: aFbBhL6MRMRSSOZt9V7AdfeQQzfeUDqgqYo8YSoiy84= Subject key identifier: 47:47:C1:F1:3B:90:21:48:7B:3D:CE:94:E4:34:48:41:BD:5A:19:EE Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D Certificate issuer: /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Certificate serial: 078A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft Manifest number: 077D Signing time: Sun 20 Jul 2025 21:38:13 +0000 Manifest this update: Sun 20 Jul 2025 21:38:13 +0000 Manifest next update: Sun 27 Jul 2025 21:38:13 +0000 Files and hashes: 1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: R2BvkKLBFlbEwXf6IVBhUKhIjsp6nrS/TWcYAYkMG4s=) 2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: 8WBXx40LoIwub2WeF3ccrcQG4fq4wKZ7IVrDku/6ikQ=) 3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: faL6wM9GsLMo9++JSpEkUSiwl7+QPEuIOOkR0NTNngU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1930 (0x78a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Validity Not Before: Jul 20 21:38:13 2025 GMT Not After : Jul 27 21:38:13 2025 GMT Subject: CN=687d61c5-5049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:2d:e3:f2:e4:46:e1:15:51:29:1d:af:80: 67:d7:cb:17:2c:46:e9:d2:7d:cc:02:01:bd:65:3f: 94:90:74:25:e4:fe:6a:ce:b7:0d:96:63:5e:86:f5: 37:bb:00:97:b2:1c:13:61:1a:fb:66:b6:25:0c:84: 1a:9e:0d:be:aa:ab:ee:29:6d:15:5f:ff:2f:93:d6: bd:66:90:82:13:17:86:1d:e9:8d:d5:c0:9b:fb:b1: 9f:a2:a4:b8:bf:2c:0e:33:8b:fa:33:04:d0:5e:c4: 43:81:90:6b:7b:c6:b5:d8:19:f6:e2:27:a9:b1:49: b0:2f:30:5c:9c:70:96:fe:8b:6e:23:f0:ca:11:3f: 1c:3c:21:1b:cc:c4:a2:94:22:33:4c:56:c0:19:e5: 81:73:f9:8a:75:38:14:ba:e2:87:ae:0d:dc:f0:fd: c9:64:2d:1a:27:ad:46:43:a6:5c:54:c7:83:f9:28: 9b:bb:ca:9a:79:a8:b8:35:86:dc:2f:9c:31:3c:03: 40:bd:79:2a:22:17:27:d5:8d:c4:bc:f1:1a:8b:73: 6c:f6:c6:3c:d6:3b:99:27:f7:84:a8:fe:53:03:8d: d0:0a:8a:01:93:36:a5:68:25:11:ac:50:7b:b8:8c: 5d:6f:61:7c:76:a6:d4:9c:60:9d:4b:3f:71:42:a4: 74:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:47:C1:F1:3B:90:21:48:7B:3D:CE:94:E4:34:48:41:BD:5A:19:EE X509v3 Authority Key Identifier: keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b3:1f:36:8a:1c:a7:38:25:d6:b0:77:8a:4e:d1:1c:7d:b4: e8:5d:dd:f4:2b:cc:ba:93:26:fb:6a:3b:37:fa:ad:74:12:15: 9b:9a:e1:3c:68:8e:47:b7:36:42:5d:7b:e6:30:c6:a5:c5:fe: c0:73:ab:27:18:f9:a7:1b:c2:11:8a:96:bd:21:cc:a6:9a:46: 54:fb:5d:b7:55:37:ca:82:19:b8:72:8f:7f:31:63:56:8b:87: 59:12:4b:0e:26:7f:90:6f:6f:b3:41:2c:54:8b:87:98:c8:5d: 5b:db:9c:9b:56:35:e6:6e:c2:6d:9f:d3:c5:1e:a5:fb:6f:fd: 49:73:e4:2a:30:40:c6:50:e9:5b:48:9a:d6:be:4f:3c:ae:a2: 56:43:cb:ec:3d:9a:31:73:3d:84:ec:8b:f6:06:ad:04:c1:31: 61:57:23:0e:ad:60:2b:2a:37:28:09:61:40:cb:f7:a0:c4:37: f8:05:b4:d8:88:ae:6a:67:11:b6:d9:80:ee:fa:f3:e8:df:ff: e5:ae:fd:3f:33:df:bb:e2:ca:37:ba:ac:3c:93:2d:d4:e6:64: 77:cd:ab:0d:75:6d:04:13:62:3f:d2:2e:e0:8b:29:3f:c6:bb: 2b:69:8c:22:d0:73:ae:67:ec:b0:98:2f:b6:d1:7a:b6:2e:4b: 39:f5:a9:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3RTQxMTAvBgNVBAUTKDhCREE4QTFGRTA3QjQ2QzMzMDYzMDQ2QTcyNUVBQjg1 NjQyQjlDMkQwHhcNMjUwNzIwMjEzODEzWhcNMjUwNzI3MjEzODEzWjAYMRYwFAYD VQQDEw02ODdkNjFjNS01MDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQYt4/LkRuEVUSkdr4Bn18sXLEbp0n3MAgG9ZT+UkHQl5P5qzrcNlmNehvU3 uwCXshwTYRr7ZrYlDIQang2+qqvuKW0VX/8vk9a9ZpCCExeGHemN1cCb+7GfoqS4 vywOM4v6MwTQXsRDgZBre8a12Bn24iepsUmwLzBcnHCW/otuI/DKET8cPCEbzMSi lCIzTFbAGeWBc/mKdTgUuuKHrg3c8P3JZC0aJ61GQ6ZcVMeD+Sibu8qaeai4NYbc L5wxPANAvXkqIhcn1Y3EvPEai3Ns9sY81juZJ/eEqP5TA43QCooBkzalaCURrFB7 uIxdb2F8dqbUnGCdSz9xQqR0CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdHwfE7 kCFIez3OlOQ0SEG9WhnuMB8GA1UdIwQYMBaAFIvaih/ge0bDMGMEanJeq4VkK5wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzdFNC8zNkZCMTE0NDFE NUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1JzTXdZd1JxY2w2cmhXUXJu QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5cUtILUI3UnNNd1l3UnFjbDZyaFdRcm5DMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzdFNC8zNkZCMTE0NDFENUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1Jz TXdZd1JxY2w2cmhXUXJuQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKsx82ihynOCXWsHeKTtEcfbToXd30K8y6kyb7ajs3+q10EhWbmuE8 aI5HtzZCXXvmMMalxf7Ac6snGPmnG8IRipa9IcymmkZU+123VTfKghm4co9/MWNW i4dZEksOJn+Qb2+zQSxUi4eYyF1b25ybVjXmbsJtn9PFHqX7b/1Jc+QqMEDGUOlb SJrWvk88rqJWQ8vsPZoxcz2E7Iv2Bq0EwTFhVyMOrWArKjcoCWFAy/egxDf4BbTY iK5qZxG22YDu+vPo3//lrv0/M9+74so3uqw8ky3U5mR3zasNdW0EE2I/0i7giyk/ xrsraYwi0HOuZ+ywmC+20Xq2Lks59an8 -----END CERTIFICATE-----Generated at Mon Jul 21 12:45:21 2025 by rpki-client