$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: AakIlDht749jplzZfla77Lc6yTMv7v1dCJOXtKz2N6s= Subject key identifier: BB:88:DB:74:EE:24:F1:81:66:38:57:06:BE:43:5E:07:6A:D8:CD:32 Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 064B Signing time: Fri 18 Jul 2025 22:59:08 +0000 Manifest this update: Fri 18 Jul 2025 22:59:07 +0000 Manifest next update: Fri 25 Jul 2025 22:59:07 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: X/sN9mqLZpmdYU2iDlTJrzgOSgiIlOGlP6HBCfupN/4=) 2: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: P0BhZPNBq4fF0iWoLAGwiGCR4fuUazibBS/DViNXhlI=) 3: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: 6bWPYL9HlnXbgKm1pf8hjZDzf0KdOhZ+kEEuV8xvMnc=) 4: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: GSq2aTh4Ighs8Kd5WfNm9bR33IhLvfkn/9rz4nvZ37o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: Jul 18 22:59:07 2025 GMT Not After : Jul 25 22:59:07 2025 GMT Subject: CN=687ad1bb-f02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:03:fd:15:ad:74:fc:34:b7:f0:22:09:02: e6:07:b1:fe:75:27:e4:57:33:8b:18:59:7b:9c:e2: 0c:2c:3c:8b:10:5d:cc:de:bb:87:06:9a:25:f5:a7: 1b:1d:ac:8e:d2:1a:75:55:8c:e8:da:af:e2:aa:60: c6:df:36:79:f5:f3:b5:16:ba:a5:26:cf:49:1c:8c: 2d:bb:f8:39:f6:b7:d5:7a:0b:92:7f:30:b4:16:a7: d0:bc:f3:67:26:fe:a1:b9:0e:75:15:ee:ef:88:67: b7:c5:84:4a:f5:18:7d:0c:d4:ff:47:29:aa:cb:96: 98:3d:42:ae:cb:35:68:d1:c9:d7:33:0d:b1:5e:9b: 5c:2d:f9:d7:d3:04:d0:c1:01:c7:c4:21:a9:82:08: 0a:4d:ee:0f:97:e2:29:d7:8e:bd:eb:90:2e:46:84: c8:cb:9d:77:e4:f6:38:b3:48:6d:e1:57:ec:72:e2: 4a:b6:ce:64:d4:65:85:a6:b5:b4:76:72:a7:0f:a2: b5:ff:72:50:85:94:42:f3:db:3d:2e:b2:1f:a9:fc: cc:ba:f6:73:61:6c:84:53:12:b2:23:3f:0a:01:30: 90:05:a3:75:51:7c:6b:0e:57:49:c9:62:ff:7e:8b: 0b:bd:35:11:c1:69:01:40:9e:80:e4:d8:59:75:b2: 7c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:88:DB:74:EE:24:F1:81:66:38:57:06:BE:43:5E:07:6A:D8:CD:32 X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7c:23:33:dd:33:d7:66:6b:8d:e4:18:6c:af:d9:8c:1b:a9: 1e:a2:8c:3d:97:da:04:01:07:b4:89:37:d1:b8:40:29:05:4f: 09:68:cf:f3:17:77:1e:59:55:42:71:0f:e6:ee:2a:07:2b:11: 51:44:74:3b:8e:07:e9:52:32:fb:f4:9a:42:0a:73:56:99:76: 8a:3a:44:bd:5a:9e:4f:c3:60:30:63:a4:1f:83:bc:c4:0d:89: 90:b6:d1:34:fa:ef:66:7b:47:79:1a:13:82:13:fd:d3:2c:7c: 6f:78:b3:c9:8f:19:7b:d4:c2:f2:8e:26:68:44:76:0f:e1:2a: 3a:d6:9e:99:36:43:19:02:c0:a1:36:96:64:c9:ea:d7:bd:e0: a9:fb:3c:49:1c:b2:6a:6e:bd:67:24:bc:b9:6a:03:16:b4:81: c1:a6:50:be:b0:5b:1c:07:59:37:fe:45:62:c1:65:e4:de:8a: de:66:cb:ac:29:f8:a3:36:9b:c5:07:63:29:88:fd:56:e4:1b: 9f:8b:27:e6:2f:7f:e9:2f:fc:c6:f3:7b:5c:3f:23:95:d7:68: 4e:0c:79:07:6c:e7:2c:80:11:a5:34:85:34:b7:d4:27:30:70: d5:04:ac:f5:62:82:f9:ea:2a:96:2b:ad:45:16:6c:99:ae:05: bc:92:75:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjUwNzE4MjI1OTA3WhcNMjUwNzI1MjI1OTA3WjAYMRYwFAYD VQQDEw02ODdhZDFiYi1mMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1AD/RWtdPw0t/AiCQLmB7H+dSfkVzOLGFl7nOIMLDyLEF3M3ruHBpol9acb HayO0hp1VYzo2q/iqmDG3zZ59fO1FrqlJs9JHIwtu/g59rfVeguSfzC0FqfQvPNn Jv6huQ51Fe7viGe3xYRK9Rh9DNT/Rymqy5aYPUKuyzVo0cnXMw2xXptcLfnX0wTQ wQHHxCGpgggKTe4Pl+Ip146965AuRoTIy5135PY4s0ht4VfscuJKts5k1GWFprW0 dnKnD6K1/3JQhZRC89s9LrIfqfzMuvZzYWyEUxKyIz8KATCQBaN1UXxrDldJyWL/ fosLvTURwWkBQJ6A5NhZdbJ8RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuI23Tu JPGBZjhXBr5DXgdq2M0yMB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtfCMz3TPXZmuN5Bhsr9mMG6keoow9l9oEAQe0iTfRuEApBU8JaM/z F3ceWVVCcQ/m7ioHKxFRRHQ7jgfpUjL79JpCCnNWmXaKOkS9Wp5Pw2AwY6Qfg7zE DYmQttE0+u9me0d5GhOCE/3TLHxveLPJjxl71MLyjiZoRHYP4So61p6ZNkMZAsCh NpZkyerXveCp+zxJHLJqbr1nJLy5agMWtIHBplC+sFscB1k3/kViwWXk3oreZsus KfijNpvFB2MpiP1W5BufiyfmL3/pL/zG83tcPyOV12hODHkHbOcsgBGlNIU0t9Qn MHDVBKz1YoL56iqWK61FFmyZrgW8knWw -----END CERTIFICATE-----Generated at Sun Jul 20 06:10:07 2025 by rpki-client