$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json) Hash identifier: /cDPS70elpXiBxK09lXePbxVygcec5ads0ck4VJigaw= Subject key identifier: C7:C5:78:10:69:B8:1E:E2:4E:E5:3C:79:F7:FE:29:94:4F:7C:69:D3 Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Certificate serial: 0C5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft Manifest number: 0C56 Signing time: Sun 20 Jul 2025 18:33:45 +0000 Manifest this update: Sun 20 Jul 2025 18:33:44 +0000 Manifest next update: Sun 27 Jul 2025 18:33:44 +0000 Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: CgSvbLEnWV6DyOP+ZQRONzDp+hTqDjPLElRYvH89kvs=) 2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: fzV6mKN4RsRKk9FHAZNWKpTQRTVNAoWs1ftj78Q3KMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50FB, serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Validity Not Before: Jul 20 18:33:44 2025 GMT Not After : Jul 27 18:33:44 2025 GMT Subject: CN=687d3689-aa68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:ea:38:88:16:b6:57:a9:9e:da:e8:68:53: 0c:77:7b:99:14:ab:0f:5a:f3:f6:dc:3c:01:5e:6f: 98:57:d1:5e:ec:4c:0d:6f:d4:75:fb:6d:27:a9:8d: b7:f1:32:22:8b:a6:31:55:9f:17:d6:1d:35:57:97: a0:74:8a:20:e8:a8:d6:db:8e:84:24:27:7a:ee:21: 3d:17:93:c5:8b:41:09:70:4f:ca:c7:64:cd:d1:71: d3:ed:31:80:21:7e:e5:d9:21:da:05:a5:a3:9d:b8: 3c:7a:bf:59:b0:cd:1b:4b:c9:87:d8:88:3c:75:84: c3:42:9d:e3:4f:03:9f:8e:20:e3:0a:c1:a5:95:13: 9f:44:c2:9a:a8:63:1e:4e:f5:eb:05:25:6d:2a:2f: 8b:60:88:d7:ee:b0:78:d1:bb:5b:09:9b:b5:30:19: df:e8:da:cc:6d:94:74:b7:76:d1:58:7c:25:ae:3c: e9:5b:59:b9:bd:fe:06:d5:9d:5d:08:81:50:e0:0a: 98:1f:2e:3c:61:e1:97:24:ec:55:dc:6f:22:7c:97: 59:32:91:a4:03:06:91:3f:94:14:25:a9:55:ed:5b: 5b:23:0b:27:82:c5:e6:1f:8e:6d:eb:47:7e:27:86: f1:dc:fb:50:2f:94:ed:a6:36:b9:17:03:90:e2:21: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C5:78:10:69:B8:1E:E2:4E:E5:3C:79:F7:FE:29:94:4F:7C:69:D3 X509v3 Authority Key Identifier: keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:47:ea:5b:ea:88:b7:30:20:51:26:f1:58:27:28:3a:cc:d6: e6:f9:a9:ff:77:0d:70:2f:0d:db:89:e1:d8:f4:c4:0e:31:d8: f9:56:c6:44:95:63:dc:0d:2a:e9:17:1a:01:0b:72:18:bc:9b: 44:7b:95:37:5b:97:e3:08:28:dc:1f:3b:a4:22:72:a3:6b:ff: 24:bb:03:a3:2d:16:ea:cb:d0:f3:c2:5e:60:69:30:2a:3a:9d: ce:a0:89:b0:8d:76:c0:53:3c:4f:66:be:08:a5:cc:05:4d:7e: 9d:27:26:5a:31:a7:1f:73:02:2d:61:38:97:f0:8a:66:bc:22: 49:84:21:a0:3f:b1:6b:63:50:eb:ea:57:e7:d2:78:7e:0b:e7: 3a:64:03:cc:1b:4d:df:27:57:4a:7e:80:01:e5:60:c9:fd:1c: e6:2c:c0:ad:a0:38:75:b4:f0:7b:f8:bb:53:26:c5:42:b7:11: eb:56:d1:53:8f:f5:ef:4e:cf:89:97:95:e7:dc:51:36:31:8d: 12:80:46:2c:00:aa:ce:99:90:ba:89:d5:9e:dd:d4:f3:fc:fa: 34:a6:68:b4:1a:d8:4f:0d:5c:05:c6:a9:2b:cd:45:18:3f:94: 2f:9f:88:d5:45:d1:ba:1b:b9:ea:16:09:39:0c:c4:cb:cf:1f: a2:41:7a:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwRkIxMTAvBgNVBAUTKEQ0Q0Y1RjA5NjczNkYyNEVBMjQxMDc5MkE2MDNDREJB REQ4MjdEQ0QwHhcNMjUwNzIwMTgzMzQ0WhcNMjUwNzI3MTgzMzQ0WjAYMRYwFAYD VQQDEw02ODdkMzY4OS1hYTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4rqOIgWtlepntroaFMMd3uZFKsPWvP23DwBXm+YV9Fe7EwNb9R1+20nqY23 8TIii6YxVZ8X1h01V5egdIog6KjW246EJCd67iE9F5PFi0EJcE/Kx2TN0XHT7TGA IX7l2SHaBaWjnbg8er9ZsM0bS8mH2Ig8dYTDQp3jTwOfjiDjCsGllROfRMKaqGMe TvXrBSVtKi+LYIjX7rB40btbCZu1MBnf6NrMbZR0t3bRWHwlrjzpW1m5vf4G1Z1d CIFQ4AqYHy48YeGXJOxV3G8ifJdZMpGkAwaRP5QUJalV7VtbIwsngsXmH45t60d+ J4bx3PtQL5Ttpja5FwOQ4iFfjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfFeBBp uB7iTuU8eff+KZRPfGnTMB8GA1UdIwQYMBaAFNTPXwlnNvJOokEHkqYDzbrdgn3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBGQi8yNTdCQjJDNDA3 MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhrNmlRUWVTcGdQTnV0MkNm YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFNOWZDV2MyOGs2aVFRZVNwZ1BOdXQyQ2ZjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBGQi8yNTdCQjJDNDA3MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhr NmlRUWVTcGdQTnV0MkNmYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWR+pb6oi3MCBRJvFYJyg6zNbm+an/dw1wLw3bieHY9MQOMdj5VsZE lWPcDSrpFxoBC3IYvJtEe5U3W5fjCCjcHzukInKja/8kuwOjLRbqy9Dzwl5gaTAq Op3OoImwjXbAUzxPZr4IpcwFTX6dJyZaMacfcwItYTiX8IpmvCJJhCGgP7FrY1Dr 6lfn0nh+C+c6ZAPMG03fJ1dKfoAB5WDJ/RzmLMCtoDh1tPB7+LtTJsVCtxHrVtFT j/XvTs+Jl5Xn3FE2MY0SgEYsAKrOmZC6idWe3dTz/Po0pmi0GthPDVwFxqkrzUUY P5Qvn4jVRdG6G7nqFgk5DMTLzx+iQXpa -----END CERTIFICATE-----Generated at Mon Jul 21 08:04:42 2025 by rpki-client