$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json) Hash identifier: YuvA4ccRNhKh+W+i/VjA2gUVfzgjZC+5MfRypLJ7bMo= Subject key identifier: 0A:FF:F8:D2:E9:0F:EB:13:46:D0:69:19:40:FD:41:5A:AC:83:B4:7A Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft Manifest number: 34A8 Signing time: Fri 18 Jul 2025 14:50:15 +0000 Manifest this update: Fri 18 Jul 2025 14:50:15 +0000 Manifest next update: Fri 25 Jul 2025 14:50:15 +0000 Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: 0T9Xd6MjfxG0FjnaFExd6I/9Sviot4EvNCYe7lCV1Cw=) 2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: t/NnMy3xpmssx9DBTqRefxAqemELZw1L5Qwj8l5jaiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Validity Not Before: Jul 18 14:50:15 2025 GMT Not After : Jul 25 14:50:15 2025 GMT Subject: CN=687a5f27-71d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ac:d4:38:a2:aa:f7:c8:c7:3a:91:65:76:4d: b0:1d:41:00:7f:da:fc:fe:ce:21:3d:9f:62:e8:7f: 68:ff:7c:77:1e:7d:09:1d:3d:0b:a8:71:e4:c1:fa: d4:13:5b:27:93:17:2b:71:65:8c:ae:4d:89:7a:f5: 8f:60:48:da:04:07:9e:67:ad:6f:6b:64:d4:3a:4c: 0a:a4:7b:c5:47:09:ff:e3:69:98:95:e3:a6:33:0b: f6:4b:82:7f:af:ab:a4:20:8a:fa:15:95:9c:d3:44: 09:86:44:fa:b9:29:92:44:1f:76:51:1c:82:69:67: 7f:95:0d:95:21:43:6e:35:bd:fb:e5:a0:55:2f:93: ac:6b:44:87:52:85:92:b7:80:dd:0b:97:61:3c:0f: 47:bb:3d:9c:51:bf:09:99:bc:0f:0c:5a:9c:9b:4d: 3a:f6:04:15:64:6a:fa:c8:b5:a6:be:37:e2:b2:4d: 46:24:be:df:75:03:a8:57:68:f5:07:57:79:e7:47: 99:c4:05:c0:f1:15:6d:b4:59:36:57:b6:9b:98:83: 6f:e5:5f:a8:ca:f8:d3:31:7e:12:78:cf:38:9d:46: 65:43:2d:36:f3:88:84:35:da:f7:30:4d:d6:6d:f1: 57:eb:9a:11:ea:e7:c2:a0:bb:d7:98:14:6d:ea:6d: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FF:F8:D2:E9:0F:EB:13:46:D0:69:19:40:FD:41:5A:AC:83:B4:7A X509v3 Authority Key Identifier: keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:7c:e3:53:fa:70:be:c5:7e:6b:0e:ac:7e:81:93:47:c6:e8: f5:ee:bb:de:7e:3f:e0:0d:bb:58:31:55:05:ec:d6:e0:35:75: 76:50:3e:41:4d:07:3a:c6:f1:1f:4e:a1:a0:e9:f9:4d:53:ab: 63:99:14:26:eb:6d:21:6b:d7:6d:ff:6d:b9:a6:03:1c:89:03: f3:d4:ab:d3:26:00:88:fc:56:bb:e7:f6:80:d2:0f:4b:fb:52: 59:dc:5f:9c:e3:84:b4:5c:c6:b7:a7:b9:5f:d2:16:c2:b8:0d: c7:2c:bc:45:e8:fd:e6:8e:5f:f0:d8:46:50:c2:d4:24:d4:83: ff:61:2d:4b:b0:8b:2b:8d:fe:f6:5c:ed:29:3c:a5:d8:10:bf: 08:e9:3d:62:f7:46:61:ae:4f:87:0a:20:99:eb:da:23:6e:5a: da:f9:43:24:18:0d:d8:24:4c:59:fb:55:ed:75:07:35:ad:0b: 32:1e:22:46:db:a2:4a:39:7c:aa:9b:72:56:c9:34:b3:21:c5: 91:6f:5b:c0:16:cc:32:42:4b:42:4f:fa:aa:57:fd:8a:20:91: d5:1c:53:b6:d9:dc:83:4a:af:95:b6:3b:8d:17:22:0e:f7:0c: 9d:de:f8:50:2a:f0:34:77:82:98:66:d5:68:e9:d1:16:fe:76: d7:7e:ba:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG QUIyQzc2MTIwHhcNMjUwNzE4MTQ1MDE1WhcNMjUwNzI1MTQ1MDE1WjAYMRYwFAYD VQQDEw02ODdhNWYyNy03MWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16zUOKKq98jHOpFldk2wHUEAf9r8/s4hPZ9i6H9o/3x3Hn0JHT0LqHHkwfrU E1snkxcrcWWMrk2JevWPYEjaBAeeZ61va2TUOkwKpHvFRwn/42mYleOmMwv2S4J/ r6ukIIr6FZWc00QJhkT6uSmSRB92URyCaWd/lQ2VIUNuNb375aBVL5Osa0SHUoWS t4DdC5dhPA9Huz2cUb8JmbwPDFqcm0069gQVZGr6yLWmvjfisk1GJL7fdQOoV2j1 B1d550eZxAXA8RVttFk2V7abmINv5V+oyvjTMX4SeM84nUZlQy0284iENdr3ME3W bfFX65oR6ufCoLvXmBRt6m3KZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAr/+NLp D+sTRtBpGUD9QVqsg7R6MB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN alRfaUFJSnFpa242c3NkaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjfONT+nC+xX5rDqx+gZNHxuj17rvefj/gDbtYMVUF7NbgNXV2UD5B TQc6xvEfTqGg6flNU6tjmRQm620ha9dt/225pgMciQPz1KvTJgCI/Fa75/aA0g9L +1JZ3F+c44S0XMa3p7lf0hbCuA3HLLxF6P3mjl/w2EZQwtQk1IP/YS1LsIsrjf72 XO0pPKXYEL8I6T1i90Zhrk+HCiCZ69ojblra+UMkGA3YJExZ+1XtdQc1rQsyHiJG 26JKOXyqm3JWyTSzIcWRb1vAFswyQktCT/qqV/2KIJHVHFO22dyDSq+VtjuNFyIO 9wyd3vhQKvA0d4KYZtVo6dEW/nbXfrpT -----END CERTIFICATE-----Generated at Sun Jul 20 06:35:09 2025 by rpki-client