$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: todccKzeBnQzLHTRPdtnM8HFG8+ZPTQizF3XT5YxQaI= Subject key identifier: 45:EA:C2:BE:2B:E2:5E:52:F8:27:55:3C:3C:68:41:1F:A7:F7:C1:FF Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: F9 Signing time: Sat 19 Jul 2025 05:28:26 +0000 Manifest this update: Sat 19 Jul 2025 05:28:26 +0000 Manifest next update: Sat 26 Jul 2025 05:28:26 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: OXWPqeZvIobfljO3AQOLVY0QE1sBxprZA0m4RRel0iU=) 2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G/0ezw6yoaaHjsn46sx4sKQROwS7T0PMQPxdtMKah+o=) 3: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: E9ObZNoyKAzjoiJfjRSwt1+kDOZ+xsFeoybdq6vQ22E=) 4: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: pdzJ5okYmWLfXDpKnMd4R/Lx/tQtmRyHcTZA/k863ZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Jul 19 05:28:26 2025 GMT Not After : Jul 26 05:28:26 2025 GMT Subject: CN=687b2cfa-d2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8c:2a:37:94:63:c7:82:63:23:95:7d:32:7c: 2c:64:c9:df:7f:99:ec:6c:0f:9c:a1:11:09:4d:02: d6:47:ad:69:a8:19:1e:95:ad:17:07:39:ce:e6:5d: f4:bd:e7:b9:ea:15:d2:96:3e:14:f6:10:2b:4f:31: 86:fc:66:19:fe:da:2e:86:6c:4c:52:f1:ad:58:f9: b7:8d:1e:cc:db:31:01:06:3f:79:53:93:6c:cd:78: 42:aa:cd:a6:3f:f6:a3:43:b8:44:e8:53:38:58:5e: eb:b5:70:d6:6d:51:21:41:82:50:cf:25:2f:ce:1b: aa:d6:e8:a8:ba:99:0d:2d:f2:d6:a7:e4:68:aa:85: 03:35:25:15:65:f5:a8:be:f9:aa:89:72:cf:8f:08: e2:e1:fc:de:4e:17:bd:8e:4b:42:08:b7:a2:e9:e7: e5:bd:a2:f7:2b:e6:cd:cf:e3:49:6f:c4:41:a6:57: 04:bd:2f:dc:ff:c8:6c:a0:59:a8:a7:31:e0:c8:a9: f6:1f:91:40:90:32:22:46:b3:8b:5c:c8:24:4f:8a: 28:15:43:c2:e8:d6:38:d5:fb:47:42:7a:9d:b3:cf: 33:c7:8b:14:a4:ba:05:60:4a:65:fb:18:a7:46:90: b7:75:31:ba:49:db:c0:53:5e:1b:f5:95:6f:e2:97: b9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EA:C2:BE:2B:E2:5E:52:F8:27:55:3C:3C:68:41:1F:A7:F7:C1:FF X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:24:15:4d:b0:f5:e5:f1:75:b7:02:f7:6f:96:83:de:7f:ac: b0:40:69:a5:58:47:66:6e:cc:36:e8:63:40:0b:3b:7a:42:12: 7d:47:c6:a0:0e:15:b0:4c:a4:63:fd:a2:b5:83:9b:ba:ab:23: 5e:a5:3b:32:93:6b:88:9a:6e:3d:b4:11:b2:b2:14:9c:bd:89: 8a:53:50:3f:9e:df:7c:b1:78:83:c8:26:de:15:b9:ff:f9:24: b8:f5:67:2d:41:a1:49:27:4e:23:07:cd:ce:8d:e2:48:0e:29: 13:8a:fb:3a:a5:21:90:c3:1f:9d:ab:ef:f3:a8:90:48:dc:c0: d9:30:36:f2:c2:85:9a:fb:65:90:85:b6:72:b0:02:5b:f2:df: 5f:8e:c4:1d:be:cc:36:14:07:ed:12:14:97:8d:08:a6:0a:a7: 05:a9:d1:35:7d:54:d3:b0:c0:75:ee:97:f8:15:45:a0:c4:ac: 91:d1:c5:f9:1f:03:c3:25:8b:88:61:73:a5:1a:35:7c:57:84: 69:68:13:65:c2:89:8f:4e:ad:21:ce:ae:2c:30:09:67:1a:97: 7e:7c:5b:6b:bc:8f:09:88:05:21:f4:87:72:c8:4b:04:d6:bd: 37:ed:ee:72:81:b4:b8:ff:99:87:06:36:d1:ce:28:8d:ae:00: 2e:ad:dc:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjUwNzE5MDUyODI2WhcNMjUwNzI2MDUyODI2WjAYMRYwFAYD VQQDEw02ODdiMmNmYS1kMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIwqN5Rjx4JjI5V9MnwsZMnff5nsbA+coREJTQLWR61pqBkela0XBznO5l30 vee56hXSlj4U9hArTzGG/GYZ/touhmxMUvGtWPm3jR7M2zEBBj95U5NszXhCqs2m P/ajQ7hE6FM4WF7rtXDWbVEhQYJQzyUvzhuq1uioupkNLfLWp+RoqoUDNSUVZfWo vvmqiXLPjwji4fzeThe9jktCCLei6eflvaL3K+bNz+NJb8RBplcEvS/c/8hsoFmo pzHgyKn2H5FAkDIiRrOLXMgkT4ooFUPC6NY41ftHQnqds88zx4sUpLoFYEpl+xin RpC3dTG6SdvAU14b9ZVv4pe5LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXqwr4r 4l5S+CdVPDxoQR+n98H/MB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtJBVNsPXl8XW3AvdvloPef6ywQGmlWEdmbsw26GNACzt6QhJ9R8ag DhWwTKRj/aK1g5u6qyNepTsyk2uImm49tBGyshScvYmKU1A/nt98sXiDyCbeFbn/ +SS49WctQaFJJ04jB83OjeJIDikTivs6pSGQwx+dq+/zqJBI3MDZMDbywoWa+2WQ hbZysAJb8t9fjsQdvsw2FAftEhSXjQimCqcFqdE1fVTTsMB17pf4FUWgxKyR0cX5 HwPDJYuIYXOlGjV8V4RpaBNlwomPTq0hzq4sMAlnGpd+fFtrvI8JiAUh9IdyyEsE 1r037e5ygbS4/5mHBjbRziiNrgAurdyl -----END CERTIFICATE-----Generated at Sun Jul 20 06:40:38 2025 by rpki-client