$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json) Hash identifier: gv5+l1dI47EWnqQeY5QQTWdMEU7GWxpzD63ymkyK4aA= Subject key identifier: E5:09:74:DC:E4:D9:57:71:EE:E3:26:4F:F2:DD:D9:7D:59:39:FB:0D Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Certificate serial: 086A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft Manifest number: 1A3F Signing time: Fri 18 Jul 2025 17:19:25 +0000 Manifest this update: Fri 18 Jul 2025 17:19:25 +0000 Manifest next update: Fri 25 Jul 2025 17:19:25 +0000 Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: r16Z9S7RAM25JKsLRmF2zvwaroV2Peo6o2/sb8kbkgs=) 2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: QQ2kSpkziq7c/OfdUjW7k6le4ABn54sNBVAUYS+VxSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2154 (0x86a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Validity Not Before: Jul 18 17:19:25 2025 GMT Not After : Jul 25 17:19:25 2025 GMT Subject: CN=687a821d-1ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:86:17:cb:ab:5b:3a:2f:95:ff:03:ec:b7:8b: e0:d9:0e:e2:47:91:9c:bf:d9:9f:13:a2:2e:e6:ac: 87:9f:4b:48:e9:52:b4:4f:bb:69:cc:f4:59:30:39: b9:35:53:b1:07:17:39:f3:25:d8:2a:c1:db:70:a9: 3e:76:34:8d:56:09:7f:27:9e:a8:f0:fe:72:ed:dd: 43:8f:d2:88:cc:7d:a2:1b:8a:9a:55:3c:6a:5d:9e: fd:59:d9:ce:01:d9:cb:fd:9a:e5:f6:fe:ad:75:f9: f6:82:98:17:75:9c:e8:b2:cd:47:6f:55:8b:a5:9e: b7:2b:36:98:34:eb:f2:01:a0:ef:58:c2:b3:15:8d: 77:d0:8b:ff:3d:bc:61:82:bd:3b:94:45:7d:f4:43: 5e:b9:1f:b0:30:43:1b:32:fe:97:7d:d6:c1:e7:7d: d3:64:78:f1:21:34:a3:3f:cb:37:55:e1:24:ca:16: 9b:94:82:00:9b:63:46:28:b9:7a:03:c1:b7:b1:2a: 23:6d:cc:8d:11:d8:2e:f4:1b:85:4a:c4:7d:1b:1f: 72:fb:06:43:26:ba:c9:3d:3e:bb:a4:66:ec:30:da: b7:c5:63:f9:08:c6:b1:6f:1d:d2:21:fb:ac:b1:f1: 42:f2:b8:6f:14:59:f3:a3:5e:d7:f5:2d:07:45:d1: f0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:09:74:DC:E4:D9:57:71:EE:E3:26:4F:F2:DD:D9:7D:59:39:FB:0D X509v3 Authority Key Identifier: keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5b:c0:8d:00:5e:9a:31:d9:7a:f5:12:72:c1:0f:b2:6b:96: b0:e4:87:dd:da:71:58:7f:66:96:b0:39:9a:6c:24:a5:99:97: 7d:e1:b3:c4:df:85:8d:1d:15:61:57:63:18:45:99:d9:e7:45: 54:40:a4:cd:a0:96:26:12:eb:3c:eb:4a:f2:1f:65:26:e5:82: 7a:f7:c3:bb:cc:e4:c7:07:ff:0e:71:c9:13:d2:f5:aa:c9:b0: 1b:be:ab:65:51:c2:06:d9:c1:f6:5a:67:f2:14:39:4b:03:19: 89:2d:64:d0:cd:19:84:1a:03:42:55:63:ce:ff:1b:b7:77:22: 65:5e:47:5e:2c:ef:70:14:1f:97:87:c2:7f:75:a2:7e:3b:00: 31:c9:a1:8c:91:57:76:7f:3f:15:b2:42:b8:94:e8:49:3e:38: 74:24:d0:ab:a5:7c:a2:df:45:a2:ff:c7:02:00:04:fc:66:ed: 4f:33:2b:11:3c:3b:0c:f9:68:c0:d1:72:bc:58:27:ac:06:20: b7:cf:c7:cd:79:ba:f8:c9:cc:04:31:43:ca:3e:d4:f2:06:68: 9f:b7:e9:fd:af:28:3a:a7:92:4c:f8:c6:d0:b7:a8:44:c7:f3: a0:3e:0b:fc:80:80:6e:e3:8e:32:89:40:97:2f:08:17:f7:2f: 59:ed:d3:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKEIzRDc5Mzc5MEUxMTRBQzhGOERDODJCQUUzM0MxRDky QkRCREI1RUIwHhcNMjUwNzE4MTcxOTI1WhcNMjUwNzI1MTcxOTI1WjAYMRYwFAYD VQQDEw02ODdhODIxZC0xYWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YYXy6tbOi+V/wPst4vg2Q7iR5Gcv9mfE6Iu5qyHn0tI6VK0T7tpzPRZMDm5 NVOxBxc58yXYKsHbcKk+djSNVgl/J56o8P5y7d1Dj9KIzH2iG4qaVTxqXZ79WdnO AdnL/Zrl9v6tdfn2gpgXdZzoss1Hb1WLpZ63KzaYNOvyAaDvWMKzFY130Iv/Pbxh gr07lEV99ENeuR+wMEMbMv6XfdbB533TZHjxITSjP8s3VeEkyhablIIAm2NGKLl6 A8G3sSojbcyNEdgu9BuFSsR9Gx9y+wZDJrrJPT67pGbsMNq3xWP5CMaxbx3SIfus sfFC8rhvFFnzo17X9S0HRdHwGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUJdNzk 2Vdx7uMmT/Ld2X1ZOfsNMB8GA1UdIwQYMBaAFLPXk3kOEUrI+NyCuuM8HZK9vbXr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNzajQzSUs2NHp3ZGtyMjl0 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M5ZVRlUTRSU3NqNDNJSzY0endka3IyOXRlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNz ajQzSUs2NHp3ZGtyMjl0ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOW8CNAF6aMdl69RJywQ+ya5aw5Ifd2nFYf2aWsDmabCSlmZd94bPE 34WNHRVhV2MYRZnZ50VUQKTNoJYmEus860ryH2Um5YJ698O7zOTHB/8OcckT0vWq ybAbvqtlUcIG2cH2WmfyFDlLAxmJLWTQzRmEGgNCVWPO/xu3dyJlXkdeLO9wFB+X h8J/daJ+OwAxyaGMkVd2fz8VskK4lOhJPjh0JNCrpXyi30Wi/8cCAAT8Zu1PMysR PDsM+WjA0XK8WCesBiC3z8fNebr4ycwEMUPKPtTyBmift+n9ryg6p5JM+MbQt6hE x/OgPgv8gIBu444yiUCXLwgX9y9Z7dMO -----END CERTIFICATE-----Generated at Sun Jul 20 02:18:31 2025 by rpki-client