$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft File: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft (raw, json) Hash identifier: MrZvEivlDg/h5Z3tscvETfzr4WmJwnLQJD3y9PhdK+0= Subject key identifier: 49:3A:85:D0:2A:BE:81:2B:94:48:F9:F3:A5:B2:21:E9:93:F8:CB:62 Authority key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 Certificate issuer: /CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft Manifest number: F7 Signing time: Mon 21 Jul 2025 05:32:27 +0000 Manifest this update: Mon 21 Jul 2025 05:32:27 +0000 Manifest next update: Mon 28 Jul 2025 05:32:27 +0000 Files and hashes: 1: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl (hash: kqRykleAFQbyELt5FdF6nKsUTts42p7w3d9vs5BRYBQ=) 2: DAC9D5960C7E11EF9A189E18C4F9AE02.roa (hash: cLX/WlgP7K24ucXGUUtpNzmDrPk9vKJrsn64OyHEFQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2F80, serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Validity Not Before: Jul 21 05:32:27 2025 GMT Not After : Jul 28 05:32:27 2025 GMT Subject: CN=687dd0eb-f23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:29:da:24:23:78:e3:d6:2e:5c:c0:50:33: 7a:e2:49:4b:c1:26:5d:f3:84:2d:d5:7e:f2:df:a5: ba:07:9e:f1:ec:89:2d:09:e3:79:ec:9c:b8:8d:22: 34:58:c6:73:4c:a9:6f:86:7e:13:0c:b2:20:b9:f1: be:3e:33:5e:ce:f6:fe:11:e5:47:8c:d7:f9:c4:26: 84:af:54:aa:d9:13:39:cb:0c:8e:f5:36:04:0b:a4: f2:6b:b6:4f:15:dc:39:ea:e9:af:eb:7b:42:dc:81: 4c:61:f3:0e:fe:af:1b:44:a0:15:22:f1:81:cf:fa: b0:e5:a9:eb:64:03:b4:61:bc:7c:08:2b:c2:c2:54: 8c:f3:25:6a:9e:ef:f6:ec:6b:2f:14:6c:0a:cb:45: 5b:da:38:3c:92:e0:3f:c9:7f:d3:3f:be:f5:98:6e: e3:17:c8:38:44:a9:64:42:4c:ce:8b:6b:74:4f:d2: 67:ce:f6:33:3b:eb:82:a4:87:a4:7a:c5:0e:57:3f: 9d:2a:ee:e6:25:85:bc:5d:8f:c1:2e:99:da:82:7a: 09:b2:a4:e6:10:a3:1a:e4:b5:ed:83:4f:02:f2:35: c0:84:80:71:1e:eb:ae:2b:d6:d4:cf:25:4d:06:c3: 1f:6e:1d:b9:0e:f7:7a:4f:d3:51:53:af:75:0c:40: af:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3A:85:D0:2A:BE:81:2B:94:48:F9:F3:A5:B2:21:E9:93:F8:CB:62 X509v3 Authority Key Identifier: keyid:F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7a:28:f2:e4:f8:97:36:c5:1b:27:cd:8f:c6:6a:f1:72:fa: 78:c7:be:f5:c6:3e:12:a7:a4:46:9f:f7:06:b0:44:ba:51:f3: c5:c6:a8:9d:04:31:11:8f:3a:a3:2f:24:f3:40:0b:0a:51:76: ae:30:99:9c:df:1d:d6:7d:35:36:df:9e:b3:8a:e5:19:66:5b: 07:e7:b4:eb:35:9a:2d:41:30:66:02:67:61:e9:0b:12:7c:43: ca:8c:cc:b2:65:a9:39:52:55:b1:be:b7:76:dd:4f:5b:5e:43: dd:67:93:13:a9:f1:d4:32:69:2c:44:4e:35:0f:64:bd:94:1b: ca:67:e2:09:28:61:94:c6:42:57:6e:db:ba:54:48:dd:ac:b4: b8:be:ac:c5:3b:5b:0d:80:ac:a3:1f:d6:93:d1:b2:fe:6f:b3: ac:86:33:da:fa:ba:15:78:9c:a4:b1:43:ef:5b:1d:78:52:d1: 9d:9d:e7:a7:70:08:92:45:da:1f:95:c7:1f:47:ce:57:7f:e1: 5f:a0:d3:5a:3e:58:45:8e:94:ae:e3:94:53:e1:8e:fd:de:f5: fc:b6:5a:c5:39:64:a1:8f:33:86:2c:63:8e:7a:34:1f:0e:50: f3:2a:5b:45:26:8d:f5:23:51:04:ae:58:a5:8f:e5:f7:ba:9a: 82:fc:ae:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJGODAxMTAvBgNVBAUTKEY0MTBDNDgzQTRDOEM5MTZGRkQ0Q0Y0MjBDNEMxMTA4 ODk3OTg4OTEwHhcNMjUwNzIxMDUzMjI3WhcNMjUwNzI4MDUzMjI3WjAYMRYwFAYD VQQDEw02ODdkZDBlYi1mMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpgp2iQjeOPWLlzAUDN64klLwSZd84Qt1X7y36W6B57x7IktCeN57Jy4jSI0 WMZzTKlvhn4TDLIgufG+PjNezvb+EeVHjNf5xCaEr1Sq2RM5ywyO9TYEC6Tya7ZP Fdw56umv63tC3IFMYfMO/q8bRKAVIvGBz/qw5anrZAO0Ybx8CCvCwlSM8yVqnu/2 7GsvFGwKy0Vb2jg8kuA/yX/TP771mG7jF8g4RKlkQkzOi2t0T9JnzvYzO+uCpIek esUOVz+dKu7mJYW8XY/BLpnagnoJsqTmEKMa5LXtg08C8jXAhIBxHuuuK9bUzyVN BsMfbh25Dvd6T9NRU691DECvxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEk6hdAq voErlEj586WyIemT+MtiMB8GA1UdIwQYMBaAFPQQxIOkyMkW/9TPQgxMEQiJeYiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkY4MC85NEM1NEI4MDAz OTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlSYl8xTTlDREV3UkNJbDVp SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCREVnNlRJeVJiXzFNOUNERXdSQ0lsNWlKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkY4MC85NEM1NEI4MDAzOTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlS Yl8xTTlDREV3UkNJbDVpSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBceijy5PiXNsUbJ82Pxmrxcvp4x771xj4Sp6RGn/cGsES6UfPFxqid BDERjzqjLyTzQAsKUXauMJmc3x3WfTU2356ziuUZZlsH57TrNZotQTBmAmdh6QsS fEPKjMyyZak5UlWxvrd23U9bXkPdZ5MTqfHUMmksRE41D2S9lBvKZ+IJKGGUxkJX btu6VEjdrLS4vqzFO1sNgKyjH9aT0bL+b7OshjPa+roVeJyksUPvWx14UtGdneen cAiSRdoflccfR85Xf+FfoNNaPlhFjpSu45RT4Y793vX8tlrFOWShjzOGLGOOejQf DlDzKltFJo31I1EErlilj+X3upqC/K6n -----END CERTIFICATE-----Generated at Mon Jul 21 07:19:36 2025 by rpki-client