$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: 7WB4Hza1jnMCpkjyehB/CFAPLJLX2QX81AuKcYncU/M= Subject key identifier: 57:47:F8:65:2A:8C:BA:3C:67:5C:93:6A:7F:85:FE:0A:B3:D0:B8:68 Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 154F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 1542 Signing time: Tue 22 Jul 2025 16:56:34 +0000 Manifest this update: Tue 22 Jul 2025 16:56:33 +0000 Manifest next update: Tue 29 Jul 2025 16:56:33 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: s6lJImzBea6PrMt7K3mC964GRGONZOX2LZM611QQwTA=) 2: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: tCvJCiKT1CxBWkl8Ab7Cnl377oruRnl6LjKbMrrQtv8=) 3: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: tik1gv8xWyjalWVShAfgsNZP/VovqqNlmgUqnA0wMDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 16:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5455 (0x154f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Jul 22 16:56:33 2025 GMT Not After : Jul 29 16:56:33 2025 GMT Subject: CN=687fc2c1-7dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:5e:ed:2a:e5:f0:25:fa:38:71:77:a9:08: b0:59:3b:27:3f:c7:dc:cd:ab:1a:c1:3c:1f:0b:4f: 7c:eb:fd:19:94:e9:3d:f0:4c:fc:55:06:32:c5:df: 10:e4:3e:74:42:ba:09:a4:3f:ef:ed:c7:e1:f6:e8: da:70:bc:15:57:cb:e4:a3:28:ef:92:68:51:cf:18: 66:f2:24:51:56:f5:4f:3c:43:02:52:6c:ac:53:0a: 6f:e0:4c:26:1b:3e:e2:27:bc:61:1e:cc:6d:df:29: 98:3b:b7:25:26:db:27:63:56:c4:94:81:e1:cb:a1: 52:7f:97:bc:1c:ec:fc:42:7a:f8:c8:13:46:f3:8b: 44:02:c7:91:27:e8:2c:85:d7:ff:28:bd:07:91:d6: 22:fd:b6:0f:d7:7a:3e:51:ae:45:57:eb:a5:26:0d: d1:e3:50:bf:92:5d:c2:aa:d7:5f:60:a7:70:c6:f3: 00:f6:aa:1a:bd:dc:6b:79:8c:cf:15:55:13:84:d9: 7d:e8:ac:2c:7c:22:1b:a8:63:38:d0:99:e0:cb:81: ab:87:a1:4b:95:bd:f0:b9:88:e8:ec:0b:a7:b8:2a: 5a:35:ba:24:7b:e0:d6:d3:1a:e3:da:02:e0:a3:0e: d7:92:76:b2:05:f1:c9:c4:ad:3f:d8:51:51:f6:79: 73:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:47:F8:65:2A:8C:BA:3C:67:5C:93:6A:7F:85:FE:0A:B3:D0:B8:68 X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:8f:7a:36:61:0b:b8:85:b3:84:8d:81:5e:bf:b7:62:45:be: af:50:30:74:fd:4f:ee:7a:73:96:01:d6:82:e3:aa:4b:68:77: 23:31:ef:bd:b3:29:51:fa:b3:b2:cb:d1:d9:f0:b7:1f:94:18: a3:77:03:b1:3c:96:8f:37:e2:b4:ed:e8:f9:85:24:b0:70:9a: 61:aa:cd:d2:b7:9d:fa:cf:97:87:51:66:02:38:e2:3d:77:13: 81:5b:d5:e3:a0:39:6e:95:73:a5:27:dc:84:ca:88:74:09:61: 3f:3b:80:a5:01:65:51:93:d0:c3:25:bf:b0:68:03:0a:be:b2: 14:62:d9:6a:be:e7:24:d5:6f:05:0c:a2:52:9d:73:de:22:19: cc:7a:d2:31:48:a4:63:58:04:0d:26:41:0f:3a:7f:08:15:1b: 84:1b:d3:b2:cf:71:d2:0f:6e:2b:07:46:b9:cb:fb:e3:dd:c1: f8:60:27:27:fc:25:d8:ae:0c:a2:c8:10:76:df:0d:42:dc:ed: 3f:2e:0c:79:77:2c:10:89:13:2c:f7:02:db:29:8d:83:58:9e: cc:36:03:6c:01:0c:c6:08:4b:2b:4c:73:31:78:b5:06:35:93: cc:98:33:f7:ae:5b:69:10:f5:5f:a9:30:db:2a:fc:ef:6a:5b: 2f:4c:62:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjUwNzIyMTY1NjMzWhcNMjUwNzI5MTY1NjMzWjAYMRYwFAYD VQQDEw02ODdmYzJjMS03ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDle7Srl8CX6OHF3qQiwWTsnP8fczasawTwfC0986/0ZlOk98Ez8VQYyxd8Q 5D50QroJpD/v7cfh9ujacLwVV8vkoyjvkmhRzxhm8iRRVvVPPEMCUmysUwpv4Ewm Gz7iJ7xhHsxt3ymYO7clJtsnY1bElIHhy6FSf5e8HOz8Qnr4yBNG84tEAseRJ+gs hdf/KL0HkdYi/bYP13o+Ua5FV+ulJg3R41C/kl3CqtdfYKdwxvMA9qoavdxreYzP FVUThNl96KwsfCIbqGM40Jngy4Grh6FLlb3wuYjo7AunuCpaNboke+DW0xrj2gLg ow7XknayBfHJxK0/2FFR9nlzTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdH+GUq jLo8Z1yTan+F/gqz0LhoMB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHj3o2YQu4hbOEjYFev7diRb6vUDB0/U/uenOWAdaC46pLaHcjMe+9 sylR+rOyy9HZ8LcflBijdwOxPJaPN+K07ej5hSSwcJphqs3St536z5eHUWYCOOI9 dxOBW9XjoDlulXOlJ9yEyoh0CWE/O4ClAWVRk9DDJb+waAMKvrIUYtlqvuck1W8F DKJSnXPeIhnMetIxSKRjWAQNJkEPOn8IFRuEG9Oyz3HSD24rB0a5y/vj3cH4YCcn /CXYrgyiyBB23w1C3O0/Lgx5dywQiRMs9wLbKY2DWJ7MNgNsAQzGCEsrTHMxeLUG NZPMmDP3rltpEPVfqTDbKvzvalsvTGJ9 -----END CERTIFICATE-----Generated at Wed Jul 23 12:20:28 2025 by rpki-client