$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json) Hash identifier: q8e7ZoEL2G3q2fpJ78ap2n2Mut7adnogSrvyDARDUIY= Subject key identifier: 00:03:41:EA:84:4C:9A:69:1D:09:5B:80:A3:8C:7F:C5:3D:26:50:45 Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 Certificate issuer: /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft Manifest number: 0196 Signing time: Sat 19 Jul 2025 03:37:06 +0000 Manifest this update: Sat 19 Jul 2025 03:37:06 +0000 Manifest next update: Sat 26 Jul 2025 03:37:06 +0000 Files and hashes: 1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: wYlZQwvNxcStG6qsLZB0HGrnCX4YzLqUnsu+NJ7b/w0=) 2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: SdXEUbD7bDMQhTYpbl9h+rsPxGL65X2f3Ma+s3etM2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Validity Not Before: Jul 19 03:37:06 2025 GMT Not After : Jul 26 03:37:06 2025 GMT Subject: CN=687b12e2-6a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:44:14:a1:37:86:49:aa:16:4c:ce:75:a0:1f: 9c:8f:22:7e:f5:31:48:5e:16:ed:69:d0:64:fa:58: a0:12:7b:06:1a:c3:8d:8f:ba:9e:9d:c9:4b:ff:0f: ee:8a:c1:5b:8c:8e:d4:7a:4f:c8:e3:54:90:8f:89: be:a5:e0:ba:f4:ee:90:20:a4:26:28:c7:99:92:2c: 8f:66:70:85:28:94:5f:bc:ac:4f:95:d3:6b:9a:3a: 82:f8:d6:ad:d6:40:16:26:73:40:77:91:8e:7f:fd: ec:dc:8f:3c:9f:08:f5:3b:25:00:5f:20:f4:fb:43: d4:12:49:18:ae:47:20:14:d3:95:8e:6e:0f:ce:a0: 3d:d1:2d:e6:d4:da:b4:7c:b6:cc:4e:bd:40:05:dd: 9b:a6:fe:79:7f:9d:87:0f:79:ea:f4:51:f4:b0:71: c1:c8:5a:e7:d1:ce:e1:d8:01:54:16:12:1b:27:4a: 1e:19:81:3c:7a:d7:a6:e9:74:e5:44:bd:4b:60:29: b8:d3:ba:e9:36:5d:1f:10:f2:c0:4f:b8:46:b6:17: 95:4e:99:ce:c1:10:83:80:c1:ef:17:34:0a:74:44: 4e:1b:77:e7:48:20:82:e6:41:ec:2e:d0:71:b6:13: 70:39:ae:06:ae:f8:6e:1d:1e:a5:0f:11:73:fc:45: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:03:41:EA:84:4C:9A:69:1D:09:5B:80:A3:8C:7F:C5:3D:26:50:45 X509v3 Authority Key Identifier: keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:f3:0b:f1:83:93:f3:ce:f6:69:a8:ab:8c:4a:ac:6d:ea:61: 76:28:0f:45:39:38:6c:9e:d7:eb:64:56:f4:09:30:57:78:ea: bd:e4:e0:0c:0a:1b:a5:59:48:55:78:61:72:03:09:94:53:e7: 52:ca:83:ca:8d:53:29:8c:19:92:57:65:18:a9:1a:0a:0e:f6: 56:97:fe:cd:21:c5:8a:7a:74:6d:8f:46:36:e0:cc:c9:94:56: 60:d2:f4:d1:a3:85:03:39:f9:d4:a9:f4:4c:2d:a4:bd:65:2f: dd:18:92:7a:57:9d:35:92:a4:c9:8e:0b:55:8a:82:93:e2:98: 56:37:df:5a:0f:91:4e:3d:5c:7e:61:fe:1a:fa:7d:ca:0e:2b: 66:d0:fd:22:6a:5f:03:34:e3:9e:db:3d:88:d7:08:9c:eb:a1: 33:a4:2f:91:f2:9c:3d:a1:38:8b:a4:44:a8:61:9c:9f:48:57: 6b:42:1b:59:72:02:59:c5:82:69:a0:72:1e:40:22:c7:57:e5: dd:8c:f4:ce:27:e5:30:ef:44:64:1b:78:b3:a9:fe:d6:40:1c: 29:be:7a:99:f9:4d:ea:91:73:c8:2a:cb:66:b8:6a:b5:57:85: 4d:db:2f:18:aa:8b:17:57:6f:0f:b0:5a:e0:e0:5b:39:10:e6: 89:e2:75:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZBNkU4NDIxRDQx NzdDODk0RjYwHhcNMjUwNzE5MDMzNzA2WhcNMjUwNzI2MDMzNzA2WjAYMRYwFAYD VQQDEw02ODdiMTJlMi02YTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEQUoTeGSaoWTM51oB+cjyJ+9TFIXhbtadBk+ligEnsGGsONj7qenclL/w/u isFbjI7Uek/I41SQj4m+peC69O6QIKQmKMeZkiyPZnCFKJRfvKxPldNrmjqC+Nat 1kAWJnNAd5GOf/3s3I88nwj1OyUAXyD0+0PUEkkYrkcgFNOVjm4PzqA90S3m1Nq0 fLbMTr1ABd2bpv55f52HD3nq9FH0sHHByFrn0c7h2AFUFhIbJ0oeGYE8etem6XTl RL1LYCm407rpNl0fEPLAT7hGtheVTpnOwRCDgMHvFzQKdEROG3fnSCCC5kHsLtBx thNwOa4GrvhuHR6lDxFz/EVh/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAADQeqE TJppHQlbgKOMf8U9JlBFMB8GA1UdIwQYMBaAFNuGkPZOf4Mqz8OmpuhCHUF3yJT2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZBQS9GRTEwMUNDQ0Y4 OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5clB3NmFtNkVJZFFYZkls UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI0YVE5azVfZ3lyUHc2YW02RUlkUVhmSWxQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5 clB3NmFtNkVJZFFYZklsUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDb8wvxg5PzzvZpqKuMSqxt6mF2KA9FOThsntfrZFb0CTBXeOq95OAM ChulWUhVeGFyAwmUU+dSyoPKjVMpjBmSV2UYqRoKDvZWl/7NIcWKenRtj0Y24MzJ lFZg0vTRo4UDOfnUqfRMLaS9ZS/dGJJ6V501kqTJjgtVioKT4phWN99aD5FOPVx+ Yf4a+n3KDitm0P0ial8DNOOe2z2I1wic66EzpC+R8pw9oTiLpESoYZyfSFdrQhtZ cgJZxYJpoHIeQCLHV+XdjPTOJ+Uw70RkG3izqf7WQBwpvnqZ+U3qkXPIKstmuGq1 V4VN2y8YqosXV28PsFrg4Fs5EOaJ4nVI -----END CERTIFICATE-----Generated at Sun Jul 20 07:25:14 2025 by rpki-client