$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft File: 09zhcUP5z134AE-MZZf7LIzMcEY.mft (raw, json) Hash identifier: WBT5ovwbKIJqqug29j4N0rN4AHemNV7j/vGtqiS6yC8= Subject key identifier: 7B:F2:97:99:9E:80:BA:86:A3:99:20:A0:20:30:21:26:E3:E9:A0:B0 Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 Certificate issuer: /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft Manifest number: AA Signing time: Sat 19 Jul 2025 06:25:20 +0000 Manifest this update: Sat 19 Jul 2025 06:25:19 +0000 Manifest next update: Sat 26 Jul 2025 06:25:19 +0000 Files and hashes: 1: 09zhcUP5z134AE-MZZf7LIzMcEY.crl (hash: wX9UxYae3YBfAnO6VCfjiNlHH8v8t1eviP+IdfRTK0E=) 2: 6A3FA88A693C11EF8B032237C4F9AE02.roa (hash: xlsUk+nBjbtHnwZ4MERgcwqdT/rxsOcTBiheef/VMVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D74, serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Validity Not Before: Jul 19 06:25:19 2025 GMT Not After : Jul 26 06:25:19 2025 GMT Subject: CN=687b3a50-59e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:12:6b:c2:9a:d2:cd:53:7f:ef:a9:5f:00:e0: 52:86:ee:de:5f:d9:cd:4b:8a:38:fd:34:25:67:00: 99:ef:45:43:9a:24:b0:ed:a0:73:09:df:da:e6:2c: 20:3f:ae:e8:d5:47:05:5d:30:e8:05:4f:57:95:8a: bc:9e:03:4a:38:46:96:62:49:a0:b3:22:c6:c0:59: cc:bd:63:d5:8e:7d:a1:a7:43:0a:6d:7a:46:93:67: 6e:43:ad:a7:38:51:42:9a:fd:33:b6:fc:74:d0:8c: 43:02:ed:12:a2:00:8a:9c:97:a6:2e:34:47:28:84: 50:e3:65:17:c7:98:cd:9e:17:d9:7c:d1:55:c7:20: 5d:98:c0:f2:a0:da:e4:91:6d:fb:4c:35:89:ad:96: 14:e0:43:d3:b0:1e:75:57:6a:d0:48:80:13:2d:4a: 20:9c:7b:80:99:77:17:1c:71:b2:e5:16:bf:3f:7d: f0:9a:ad:af:c6:ff:05:37:04:b8:3f:d8:f9:df:d0: cc:a7:56:84:dd:35:c0:89:cb:dc:e1:3a:12:f4:7c: 31:42:e0:b1:98:b7:d8:b9:1e:04:f2:7c:cc:07:d1: 4f:3c:4b:36:09:b5:00:7f:24:21:57:63:d1:01:ad: 8c:ad:99:93:70:f9:92:e8:8c:71:86:ca:65:ac:1e: 33:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F2:97:99:9E:80:BA:86:A3:99:20:A0:20:30:21:26:E3:E9:A0:B0 X509v3 Authority Key Identifier: keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:10:4f:0a:30:30:4d:ef:9e:13:b2:39:e1:7b:c7:77:8a:f9: 94:ec:5e:56:1b:06:27:69:f2:fa:90:b2:e5:aa:7e:55:08:a1: 50:82:36:42:90:cc:ee:b4:d5:5c:2a:d1:37:32:87:ab:81:61: f9:2c:15:c6:9c:bc:ef:f6:59:b6:61:c3:95:e5:c7:3c:ee:e7: e8:1d:ab:b5:ad:6c:46:e5:07:ea:fd:08:0a:d5:ad:b7:7f:9a: f8:1c:24:06:0a:1f:10:d8:d7:bf:e7:e5:02:c1:cc:59:29:96: fd:0c:c8:5e:d2:91:98:c9:de:1f:f1:ae:60:73:ef:fd:da:85: 4e:06:29:e9:84:9a:31:03:81:c2:89:5a:12:0c:50:2e:8c:c0: 14:6e:4e:2d:d4:55:c8:51:2e:2f:7a:b8:ef:3a:a1:7d:16:78: c4:fb:68:9a:4a:0c:e8:e2:2a:2f:4a:92:b2:f7:2b:42:ff:c3: 12:88:36:c1:51:f0:65:d3:96:c0:f0:a7:ca:a0:e2:70:fd:95: 38:5d:27:94:5d:b0:6b:c2:64:7b:e5:68:d2:b1:1e:09:44:78: 90:28:4b:78:3c:4c:d1:9d:e0:78:b4:72:d3:bc:ca:d7:74:4c: 57:0b:07:88:e4:25:67:d0:f5:91:2a:8f:9b:d3:e5:d9:83:58: d8:53:de:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENzQxMTAvBgNVBAUTKEQzRENFMTcxNDNGOUNGNURGODAwNEY4QzY1OTdGQjJD OENDQzcwNDYwHhcNMjUwNzE5MDYyNTE5WhcNMjUwNzI2MDYyNTE5WjAYMRYwFAYD VQQDEw02ODdiM2E1MC01OWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8xJrwprSzVN/76lfAOBShu7eX9nNS4o4/TQlZwCZ70VDmiSw7aBzCd/a5iwg P67o1UcFXTDoBU9XlYq8ngNKOEaWYkmgsyLGwFnMvWPVjn2hp0MKbXpGk2duQ62n OFFCmv0ztvx00IxDAu0SogCKnJemLjRHKIRQ42UXx5jNnhfZfNFVxyBdmMDyoNrk kW37TDWJrZYU4EPTsB51V2rQSIATLUognHuAmXcXHHGy5Ra/P33wmq2vxv8FNwS4 P9j539DMp1aE3TXAicvc4ToS9HwxQuCxmLfYuR4E8nzMB9FPPEs2CbUAfyQhV2PR Aa2MrZmTcPmS6IxxhsplrB4zvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvyl5me gLqGo5kgoCAwISbj6aCwMB8GA1UdIwQYMBaAFNPc4XFD+c9d+ABPjGWX+yyMzHBG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q3NC8zNzhEOUEwQTY5 MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXoxMzRBRS1NWlpmN0xJek1j RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5emhjVVA1ejEzNEFFLU1aWmY3TEl6TWNFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q3NC8zNzhEOUEwQTY5MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXox MzRBRS1NWlpmN0xJek1jRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnEE8KMDBN754Tsjnhe8d3ivmU7F5WGwYnafL6kLLlqn5VCKFQgjZC kMzutNVcKtE3MoergWH5LBXGnLzv9lm2YcOV5cc87ufoHau1rWxG5Qfq/QgK1a23 f5r4HCQGCh8Q2Ne/5+UCwcxZKZb9DMhe0pGYyd4f8a5gc+/92oVOBinphJoxA4HC iVoSDFAujMAUbk4t1FXIUS4verjvOqF9FnjE+2iaSgzo4iovSpKy9ytC/8MSiDbB UfBl05bA8KfKoOJw/ZU4XSeUXbBrwmR75WjSsR4JRHiQKEt4PEzRneB4tHLTvMrX dExXCweI5CVn0PWRKo+b0+XZg1jYU97k -----END CERTIFICATE-----Generated at Sun Jul 20 07:55:31 2025 by rpki-client