$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json) Hash identifier: jFcCGK+Hy4IueY+Xp6stu8hoa3lz3HzgAvo6+YKhVrk= Subject key identifier: 55:9A:35:EC:4C:46:E5:6A:F0:72:67:A1:26:B9:69:4C:6A:53:80:72 Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft Manifest number: 015A Signing time: Sat 19 Jul 2025 04:16:17 +0000 Manifest this update: Sat 19 Jul 2025 04:16:16 +0000 Manifest next update: Sat 26 Jul 2025 04:16:16 +0000 Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: zEczTNuPBx2ZWo/KQy6vHUfy8DfuTOCBZasyr+xCPH4=) 2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: vLaYuuYnarn+LGPGR9ZLrnHgOaNMvO/0VgOiG0azlng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Validity Not Before: Jul 19 04:16:16 2025 GMT Not After : Jul 26 04:16:16 2025 GMT Subject: CN=687b1c10-6cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:26:5a:e9:fc:87:7d:60:62:58:8b:57:91: b2:14:68:5c:46:a4:b8:75:0d:6d:f3:37:1c:0d:0c: 75:c2:55:03:47:db:35:37:11:c5:0e:6d:97:11:2f: 99:f9:10:8a:92:7c:dc:25:ab:be:49:9f:f8:53:65: f4:49:4f:53:fc:a9:1c:9b:5a:a4:11:06:a6:24:b3: 88:e6:6f:84:7c:29:87:58:6b:f1:07:ac:25:ce:88: 98:79:33:e7:09:e1:87:9e:59:49:46:cb:ed:0e:57: 49:4a:c2:64:01:78:c8:1e:ba:fc:c4:e1:aa:14:c6: c2:cb:34:1d:24:97:2a:e0:b0:86:c8:4b:aa:b4:d8: 0c:d2:f0:88:07:ed:54:80:fc:dd:81:24:8b:12:39: 89:6b:8f:d1:b4:c0:95:1a:92:9b:4c:c6:c8:3d:2c: bc:23:2d:9e:b5:52:3b:d2:c0:bf:e9:43:11:2e:45: 43:ec:2b:7f:96:8d:b6:f2:d6:61:34:c0:b6:25:79: c4:15:58:6d:c1:96:ec:cc:4d:55:3a:57:17:ef:02: a8:2b:ac:5e:1c:e5:8c:a8:8c:30:44:b3:26:e9:0d: 7d:b3:8c:46:8d:7d:44:5f:5b:0e:b8:41:82:ef:41: a8:ac:dd:3b:9d:dd:be:a5:28:bb:e5:cb:b1:3c:2c: e0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9A:35:EC:4C:46:E5:6A:F0:72:67:A1:26:B9:69:4C:6A:53:80:72 X509v3 Authority Key Identifier: keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:ca:72:f0:81:fe:e8:52:f1:a9:4c:12:ec:5d:49:9f:16:a2: 23:75:6b:cb:49:77:77:ed:69:28:07:49:9d:10:ad:4d:41:00: a9:c5:3c:ef:6f:76:0a:ac:b3:81:e4:9f:73:d9:e0:4b:95:19: 43:3f:80:0f:f7:af:4c:72:c6:4a:84:b9:1b:88:c0:0b:24:12: e8:0d:2a:98:2e:68:2a:b8:59:0f:2a:42:be:04:e6:c0:95:17: 19:9b:08:a0:54:25:37:f7:87:c3:b4:c6:b0:27:5d:4c:14:55: 48:bd:49:c9:3f:6f:78:e6:68:40:f0:8d:05:da:bc:f2:aa:cf: d7:a9:a4:08:bd:ee:d2:c0:85:60:af:9f:d5:a3:72:43:0f:5a: 80:7e:33:55:cc:81:d0:54:0d:0e:35:13:34:a3:bb:24:8e:56: 07:50:ab:dd:10:e4:f2:a0:65:45:6b:83:e3:5d:b4:c7:cf:03: 32:2c:93:dc:bd:be:1b:f3:b0:7e:3e:51:61:ec:70:3e:fe:e6: e7:17:fd:76:82:fd:9e:65:59:c9:97:ec:8f:55:06:a6:98:79: 87:12:32:38:21:42:3a:84:77:d9:fe:31:0f:97:4f:ea:ec:72: 0a:cb:71:9e:b9:ee:9e:26:bc:0b:6c:4e:00:fe:6d:6c:2f:4c: 7a:ae:93:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5 QTgwQkVBMDgwHhcNMjUwNzE5MDQxNjE2WhcNMjUwNzI2MDQxNjE2WjAYMRYwFAYD VQQDEw02ODdiMWMxMC02Y2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6smWun8h31gYliLV5GyFGhcRqS4dQ1t8zccDQx1wlUDR9s1NxHFDm2XES+Z +RCKknzcJau+SZ/4U2X0SU9T/Kkcm1qkEQamJLOI5m+EfCmHWGvxB6wlzoiYeTPn CeGHnllJRsvtDldJSsJkAXjIHrr8xOGqFMbCyzQdJJcq4LCGyEuqtNgM0vCIB+1U gPzdgSSLEjmJa4/RtMCVGpKbTMbIPSy8Iy2etVI70sC/6UMRLkVD7Ct/lo228tZh NMC2JXnEFVhtwZbszE1VOlcX7wKoK6xeHOWMqIwwRLMm6Q19s4xGjX1EX1sOuEGC 70GorN07nd2+pSi75cuxPCzgYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWaNexM RuVq8HJnoSa5aUxqU4ByMB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0 QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyQi9DNDYwODFGMjU0QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5 cXhoclF1VmtGSldhZ0w2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXynLwgf7oUvGpTBLsXUmfFqIjdWvLSXd37WkoB0mdEK1NQQCpxTzv b3YKrLOB5J9z2eBLlRlDP4AP969McsZKhLkbiMALJBLoDSqYLmgquFkPKkK+BObA lRcZmwigVCU394fDtMawJ11MFFVIvUnJP2945mhA8I0F2rzyqs/XqaQIve7SwIVg r5/Vo3JDD1qAfjNVzIHQVA0ONRM0o7skjlYHUKvdEOTyoGVFa4PjXbTHzwMyLJPc vb4b87B+PlFh7HA+/ubnF/12gv2eZVnJl+yPVQammHmHEjI4IUI6hHfZ/jEPl0/q 7HIKy3Geue6eJrwLbE4A/m1sL0x6rpPT -----END CERTIFICATE-----Generated at Sun Jul 20 02:05:41 2025 by rpki-client