$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft File: t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json) Hash identifier: PKSPD7dH3FXH610XaumHBZhrySakmpn2xgIbIB8mrJ8= Subject key identifier: 2F:51:3E:98:54:95:7D:1B:BB:63:3C:2C:80:2E:DA:BE:86:D8:27:C6 Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 Certificate issuer: /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Certificate serial: 094B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft Manifest number: 0945 Signing time: Mon 28 Jul 2025 20:36:28 +0000 Manifest this update: Mon 28 Jul 2025 20:36:28 +0000 Manifest next update: Mon 04 Aug 2025 20:36:28 +0000 Files and hashes: 1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: spi4lhmqu8KK2iJ5QxiLIwvvQcvLPgNEN75bEMVZ3xo=) 2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: CHvHnzrsNRtyF0f1bsjGZNNk/7bOq09fS+B9V5tsdBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 Aug 2025 20:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2379 (0x94b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FED7C, serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Validity Not Before: Jul 28 20:36:28 2025 GMT Not After : Aug 4 20:36:28 2025 GMT Subject: CN=6887df4c-059f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b5:fa:be:a7:7a:7b:8a:c4:86:2a:a0:84:e8: d2:a0:17:e4:f0:85:2e:c8:7e:57:91:3f:36:17:04: 02:d0:d9:ea:ae:45:b1:d0:41:2a:d9:05:d7:77:84: 9c:fe:fe:cc:be:2d:7c:59:a8:1e:ff:df:00:28:2b: 6c:74:62:37:11:d7:f2:4f:6a:79:5a:e2:8f:3b:2e: fc:08:a2:d9:a8:27:f5:94:17:6a:2b:56:2b:af:79: ac:91:c9:1b:3c:b9:45:c4:70:31:64:11:13:f5:3b: 88:d0:22:62:8a:04:34:92:23:ec:e9:6a:77:8e:fe: 06:76:bb:b2:a7:60:6a:95:87:4e:a9:ac:e5:3f:07: 04:97:b4:a4:18:a1:35:0e:b1:bb:f7:96:6a:e0:d5: 53:72:65:81:d6:58:ff:6a:e4:60:24:0d:11:5d:6a: 1a:e7:44:c7:c9:ea:66:2c:68:de:07:d1:84:28:55: 69:25:c3:ec:0e:d4:fc:08:bb:6f:a8:e6:14:c9:7c: e6:be:8b:46:1d:9b:d5:a7:d9:41:9b:75:44:d9:67: 0c:b8:d7:d8:85:20:01:66:79:c1:5a:94:88:ef:ec: c3:82:48:99:a0:94:56:a7:21:20:67:00:a1:79:88: 36:48:08:e5:6d:4e:4a:be:39:bd:84:e7:a7:2e:94: 98:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:51:3E:98:54:95:7D:1B:BB:63:3C:2C:80:2E:DA:BE:86:D8:27:C6 X509v3 Authority Key Identifier: keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:5c:a2:94:3e:f2:8a:38:65:ac:63:44:6b:26:26:a5:c1:6f: c7:76:b2:65:03:7a:7d:f4:ab:5b:d0:70:a7:88:1d:d0:4f:2b: f2:de:6c:c8:c1:4d:bd:b7:1e:93:75:a8:17:f5:ef:a4:b7:6e: eb:f3:13:ec:80:7c:8d:b2:7a:b5:61:4a:d4:7b:f8:09:ed:04: 7d:50:d1:30:f2:4c:5e:f1:ae:cb:77:c7:4d:4e:99:a3:b2:05: 4d:e6:51:14:90:36:ca:2b:4e:60:3a:71:07:55:16:43:7d:f4: 3d:6f:fc:34:5f:23:0d:a9:09:b3:3b:da:40:51:66:10:2f:4b: 4c:36:80:df:ad:00:29:3a:d5:4f:47:5e:13:d8:d9:e6:ac:fc: 97:f5:39:bd:7d:88:bb:a1:c7:43:28:a9:cc:57:21:b1:a3:44: c4:5a:62:d9:f9:37:22:60:e9:f6:c7:44:d4:3f:03:7f:35:20: 6d:f1:15:ff:9a:c1:db:c0:af:23:06:f2:46:31:0e:f5:37:31: e1:6b:2c:4b:6b:bb:3e:ff:ee:47:f2:60:f8:81:a5:b6:be:b4: 57:b7:f8:f1:6a:b5:dd:ec:85:44:ad:e8:44:10:ad:f3:58:b9: c1:d4:92:b6:88:0f:e3:26:4a:5c:af:0b:05:d9:55:37:01:a5: 01:90:56:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVEN0MxMTAvBgNVBAUTKEI3RDNFQjYxQ0MwMjhDMzhCRkQzRjdBMjgwRjM2OTA0 Njg2NTVCMDYwHhcNMjUwNzI4MjAzNjI4WhcNMjUwODA0MjAzNjI4WjAYMRYwFAYD VQQDEw02ODg3ZGY0Yy0wNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LX6vqd6e4rEhiqghOjSoBfk8IUuyH5XkT82FwQC0NnqrkWx0EEq2QXXd4Sc /v7Mvi18Wage/98AKCtsdGI3EdfyT2p5WuKPOy78CKLZqCf1lBdqK1Yrr3mskckb PLlFxHAxZBET9TuI0CJiigQ0kiPs6Wp3jv4Gdruyp2BqlYdOqazlPwcEl7SkGKE1 DrG795Zq4NVTcmWB1lj/auRgJA0RXWoa50THyepmLGjeB9GEKFVpJcPsDtT8CLtv qOYUyXzmvotGHZvVp9lBm3VE2WcMuNfYhSABZnnBWpSI7+zDgkiZoJRWpyEgZwCh eYg2SAjlbU5Kvjm9hOenLpSYJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9RPphU lX0bu2M8LIAu2r6G2CfGMB8GA1UdIwQYMBaAFLfT62HMAow4v9P3ooDzaQRoZVsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUQ3Qy9GRkQzQjNGRTlG RjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pEaV8wX2VpZ1BOcEJHaGxX d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5UHJZY3dDakRpXzBfZWlnUE5wQkdobFd3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUQ3Qy9GRkQzQjNGRTlGRjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pE aV8wX2VpZ1BOcEJHaGxXd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwXKKUPvKKOGWsY0RrJialwW/HdrJlA3p99Ktb0HCniB3QTyvy3mzI wU29tx6TdagX9e+kt27r8xPsgHyNsnq1YUrUe/gJ7QR9UNEw8kxe8a7Ld8dNTpmj sgVN5lEUkDbKK05gOnEHVRZDffQ9b/w0XyMNqQmzO9pAUWYQL0tMNoDfrQApOtVP R14T2NnmrPyX9Tm9fYi7ocdDKKnMVyGxo0TEWmLZ+TciYOn2x0TUPwN/NSBt8RX/ msHbwK8jBvJGMQ71NzHhayxLa7s+/+5H8mD4gaW2vrRXt/jxarXd7IVErehEEK3z WLnB1JK2iA/jJkpcrwsF2VU3AaUBkFa2 -----END CERTIFICATE-----Generated at Tue Jul 29 16:36:12 2025 by rpki-client