$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json) Hash identifier: eKMlCHoByY6216A5xsamnDnrx4wV5r4FXPDV64vihXc= Subject key identifier: 28:4D:F0:E8:D6:A4:DF:CD:ED:82:82:B4:A6:1C:75:80:6F:EA:9D:3D Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Certificate serial: 0C7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft Manifest number: 0C5A Signing time: Fri 18 Jul 2025 18:44:12 +0000 Manifest this update: Fri 18 Jul 2025 18:44:12 +0000 Manifest next update: Fri 25 Jul 2025 18:44:12 +0000 Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: wIkay+RHmakjTZbdi2GYSFQEdIow5f6fSxOUn/lwgEg=) 2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: cegor5RnBc3HGGToc+6Lymvpp6wumcl5jw4jwYNABG8=) 3: E6C1F0003C7E11F08A874435C4F9AE02.roa (hash: HGkfh3dEEIqv+3vFhSnMi2VsaDRfK/TUjKt6kaMeksE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3195 (0xc7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Validity Not Before: Jul 18 18:44:12 2025 GMT Not After : Jul 25 18:44:12 2025 GMT Subject: CN=687a95fc-a8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:22:57:8c:02:ec:c1:93:c6:15:be:bf:eb:f9: c8:10:e4:ee:04:9d:24:c3:fb:4b:f8:de:66:4c:2a: 8b:9b:21:3b:f7:82:bd:bb:46:e9:4b:33:c5:fd:c4: 84:23:de:68:9e:94:17:6c:bc:00:1d:12:3a:69:ed: 85:22:73:e6:8f:8a:e0:77:84:bd:6b:fa:7a:e4:c7: b7:2b:79:0d:10:23:02:41:a2:dc:48:f2:64:34:fb: c9:05:9e:fd:14:02:01:d5:11:50:ab:c0:8d:11:50: 34:9b:ab:7e:6f:e6:fc:cf:c5:e8:11:36:6b:e1:b0: 7c:76:be:d9:40:63:7b:fd:8f:e7:d7:34:25:31:00: eb:3b:48:48:dd:e6:61:7d:31:0d:29:f6:bc:20:e7: 28:31:f7:60:82:44:e4:57:9d:4c:de:74:d7:fe:80: 09:4d:12:d9:1b:21:95:b1:74:6e:f4:13:13:87:26: ee:d9:af:31:d1:a0:50:d1:4c:28:84:ad:ff:11:ce: 6f:15:87:20:cf:44:c5:e4:cd:76:8a:b5:71:fd:2f: a0:9e:e5:03:e4:f1:72:e4:21:76:e4:ad:7d:51:72: 39:21:ce:40:a7:8b:6e:b0:ff:0b:a8:93:4d:f1:df: 70:f0:82:b4:55:25:d9:d2:0f:98:a9:d9:c4:76:43: 87:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4D:F0:E8:D6:A4:DF:CD:ED:82:82:B4:A6:1C:75:80:6F:EA:9D:3D X509v3 Authority Key Identifier: keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:15:30:b9:b5:de:f3:3b:7c:63:df:a7:65:79:fb:d5:2b:27: 38:26:88:6e:46:5f:1d:53:42:bf:94:ea:3f:63:97:bc:a9:17: 71:45:53:95:24:54:d2:cc:bf:02:7a:bf:13:45:05:7c:67:7b: 44:7c:c3:f1:1a:a0:5b:83:1f:06:a3:9f:10:5c:27:04:9d:4f: 11:3b:ca:ab:c6:46:bf:aa:2e:2b:70:be:02:07:ab:25:33:ef: f2:c7:af:81:4f:cd:90:10:25:65:1f:05:85:a1:f5:a9:ba:a6: f2:d4:45:87:12:12:79:8b:cd:76:c4:35:25:ba:ee:33:52:62: ed:d1:d6:1c:35:3d:ea:fa:df:ef:c5:f7:59:1b:03:3b:32:a8: 8a:03:37:dd:1f:f8:f3:1b:5f:3a:c5:5a:d4:9e:a9:2f:ac:94: 3c:ef:79:cd:12:b7:e2:67:e8:07:ca:53:13:69:43:0c:49:be: c0:6f:92:01:0d:84:c1:20:b1:10:3e:a2:35:9b:45:f1:d5:75: c7:b7:06:57:1b:17:81:10:aa:0c:3c:c2:e2:53:23:c0:f3:ec: 0b:af:9e:49:67:58:70:81:8d:ee:ff:89:44:53:4d:2d:55:39: 75:9f:f0:71:32:f5:5e:92:14:34:a3:82:01:e1:22:bd:41:f5: 0d:f0:16:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy NTNBQkQwMjYwHhcNMjUwNzE4MTg0NDEyWhcNMjUwNzI1MTg0NDEyWjAYMRYwFAYD VQQDEw02ODdhOTVmYy1hOGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyJXjALswZPGFb6/6/nIEOTuBJ0kw/tL+N5mTCqLmyE794K9u0bpSzPF/cSE I95onpQXbLwAHRI6ae2FInPmj4rgd4S9a/p65Me3K3kNECMCQaLcSPJkNPvJBZ79 FAIB1RFQq8CNEVA0m6t+b+b8z8XoETZr4bB8dr7ZQGN7/Y/n1zQlMQDrO0hI3eZh fTENKfa8IOcoMfdggkTkV51M3nTX/oAJTRLZGyGVsXRu9BMThybu2a8x0aBQ0Uwo hK3/Ec5vFYcgz0TF5M12irVx/S+gnuUD5PFy5CF25K19UXI5Ic5Ap4tusP8LqJNN 8d9w8IK0VSXZ0g+YqdnEdkOHYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChN8OjW pN/N7YKCtKYcdYBv6p09MB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODkyOC80REE3QkIyMDBCNUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNj MEg1UnN1U2xLMUlsT3IwQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8FTC5td7zO3xj36dlefvVKyc4JohuRl8dU0K/lOo/Y5e8qRdxRVOV JFTSzL8Cer8TRQV8Z3tEfMPxGqBbgx8Go58QXCcEnU8RO8qrxka/qi4rcL4CB6sl M+/yx6+BT82QECVlHwWFofWpuqby1EWHEhJ5i812xDUluu4zUmLt0dYcNT3q+t/v xfdZGwM7MqiKAzfdH/jzG186xVrUnqkvrJQ873nNErfiZ+gHylMTaUMMSb7Ab5IB DYTBILEQPqI1m0Xx1XXHtwZXGxeBEKoMPMLiUyPA8+wLr55JZ1hwgY3u/4lEU00t VTl1n/BxMvVekhQ0o4IB4SK9QfUN8BZX -----END CERTIFICATE-----Generated at Sun Jul 20 06:38:11 2025 by rpki-client