$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft File: MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json) Hash identifier: JkbIyHlaeWC2O9/awjYmXf7YDehz4ZvhXEWdZoS53mU= Subject key identifier: 82:5D:D1:D1:19:A1:82:CB:9C:BC:16:F4:DA:77:D1:95:52:CE:AF:E9 Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 Certificate issuer: /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft Manifest number: A9 Signing time: Sat 19 Jul 2025 06:21:36 +0000 Manifest this update: Sat 19 Jul 2025 06:21:36 +0000 Manifest next update: Sat 26 Jul 2025 06:21:35 +0000 Files and hashes: 1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: 2sut2S4wewZS1l3t+5NgnzLMPlh1zRdyYU6WSccucLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Validity Not Before: Jul 19 06:21:36 2025 GMT Not After : Jul 26 06:21:35 2025 GMT Subject: CN=687b3970-6df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:94:d5:9f:f7:3f:c0:d1:16:ce:77:d9:64:bf: 14:d0:26:31:dc:71:29:28:07:1b:fc:47:ad:df:a3: 65:8e:f2:64:29:88:96:5d:5e:1b:d6:76:8e:a9:ba: 6c:61:a9:3a:98:a5:52:d0:af:f3:27:59:41:0c:2f: 4d:9d:6b:19:a9:12:ce:28:42:56:74:74:fc:8a:86: af:6c:c0:42:d0:66:ed:67:73:72:00:96:28:d4:5b: d8:8e:57:24:de:a6:1f:50:15:70:81:4a:0b:0f:36: 0e:96:d2:a2:7d:1c:47:3d:09:8d:20:da:86:f9:f8: 6c:15:8e:70:9d:6b:b2:cd:83:a4:a1:11:cf:d6:39: c9:c0:95:30:3b:af:4d:83:d4:71:20:89:e4:f3:6a: 44:f0:46:ef:a9:e9:7e:c3:0e:4f:a1:b4:ce:7e:2a: 90:94:74:c4:81:0f:a9:7d:4b:8c:27:a9:3d:c3:62: 00:36:b2:35:8a:59:47:3d:36:6c:80:f4:40:10:d1: 8b:ac:ef:6e:85:1e:0b:61:2b:36:c5:34:2a:c1:8d: e9:82:c2:1a:ca:6d:8b:9f:4c:f0:21:80:f0:ea:29: 72:52:0c:77:f0:8b:e6:7f:17:c2:4d:ca:a8:13:5e: 9b:0f:58:59:af:a4:4c:fd:88:b5:cf:b8:f2:d9:41: e0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5D:D1:D1:19:A1:82:CB:9C:BC:16:F4:DA:77:D1:95:52:CE:AF:E9 X509v3 Authority Key Identifier: keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:ae:0f:00:71:bb:a2:c9:69:03:7f:3d:f6:69:dd:0a:e9:85: 99:3c:ed:52:a2:7e:3b:27:56:0c:07:df:a3:cd:09:17:7b:4a: e8:f8:12:47:fb:c0:42:bc:b8:5b:cf:79:36:39:bc:4d:d3:0d: c6:15:93:dc:d9:c0:1c:3a:35:8a:d4:52:33:5c:70:d8:56:a3: bb:6c:f0:c7:ce:bf:1b:9c:1c:13:8c:5d:77:97:39:93:4c:b2: 96:d6:8d:b0:d2:0a:d4:69:b3:80:91:6a:61:82:f4:d6:02:44: d7:ec:16:bd:ca:c6:7e:28:07:ee:21:82:72:46:38:a0:0a:1d: 3b:75:97:db:d6:4d:f9:b3:79:49:ed:f2:d6:58:e9:4d:5f:09: 8e:14:2c:f1:11:57:43:6e:9d:c3:88:2c:fe:c9:e2:45:b3:f2: b2:ea:a6:ee:c0:e4:79:19:4a:64:b9:b9:7b:8a:cc:ba:d5:ff: 12:05:9e:1f:00:a0:a0:21:a8:84:ee:8d:90:b5:1c:dd:74:86: 93:bb:ab:7d:ee:04:ea:20:1b:e1:27:2e:85:59:66:66:67:4f: cf:d5:01:1c:80:fc:18:aa:da:c2:35:8f:3e:06:00:67:77:9a: 29:6a:8a:a9:d1:c9:02:0b:e8:15:b3:1a:b4:a3:d4:8d:77:d7: 19:36:12:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKDMyN0I4RTgzRDU0QkE2OUQ3QzM1QzZBMzQ0NDdEMUIx QjAxMUQ5NjYwHhcNMjUwNzE5MDYyMTM2WhcNMjUwNzI2MDYyMTM1WjAYMRYwFAYD VQQDEw02ODdiMzk3MC02ZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45TVn/c/wNEWznfZZL8U0CYx3HEpKAcb/Eet36NljvJkKYiWXV4b1naOqbps Yak6mKVS0K/zJ1lBDC9NnWsZqRLOKEJWdHT8ioavbMBC0GbtZ3NyAJYo1FvYjlck 3qYfUBVwgUoLDzYOltKifRxHPQmNINqG+fhsFY5wnWuyzYOkoRHP1jnJwJUwO69N g9RxIInk82pE8Ebvqel+ww5PobTOfiqQlHTEgQ+pfUuMJ6k9w2IANrI1illHPTZs gPRAENGLrO9uhR4LYSs2xTQqwY3pgsIaym2Ln0zwIYDw6ilyUgx38IvmfxfCTcqo E16bD1hZr6RM/Yi1z7jy2UHgBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJd0dEZ oYLLnLwW9Np30ZVSzq/pMB8GA1UdIwQYMBaAFDJ7joPVS6adfDXGo0RH0bGwEdlm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xQTEwNkNEMDYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBwMThOY2FqUkVmUnNiQVIy V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01udU9nOVZMcHAxOE5jYWpSRWZSc2JBUjJXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xQTEwNkNEMDYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBw MThOY2FqUkVmUnNiQVIyV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFrg8AcbuiyWkDfz32ad0K6YWZPO1Son47J1YMB9+jzQkXe0ro+BJH +8BCvLhbz3k2ObxN0w3GFZPc2cAcOjWK1FIzXHDYVqO7bPDHzr8bnBwTjF13lzmT TLKW1o2w0grUabOAkWphgvTWAkTX7Ba9ysZ+KAfuIYJyRjigCh07dZfb1k35s3lJ 7fLWWOlNXwmOFCzxEVdDbp3DiCz+yeJFs/Ky6qbuwOR5GUpkubl7isy61f8SBZ4f AKCgIaiE7o2QtRzddIaTu6t97gTqIBvhJy6FWWZmZ0/P1QEcgPwYqtrCNY8+BgBn d5opaoqp0ckCC+gVsxq0o9SNd9cZNhIR -----END CERTIFICATE-----Generated at Mon Jul 21 05:50:27 2025 by rpki-client