$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft File: VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json) Hash identifier: 5MJqmpiZDv0zKZpizESfFrVSXhCHreVO9FAB4oW0UNI= Subject key identifier: 39:D4:7B:CB:7E:93:2E:07:A5:21:48:A3:12:B4:CF:09:7A:2B:CB:76 Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Certificate serial: 09F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft Manifest number: 09EA Signing time: Wed 20 Aug 2025 19:59:15 +0000 Manifest this update: Wed 20 Aug 2025 19:59:15 +0000 Manifest next update: Wed 27 Aug 2025 19:59:15 +0000 Files and hashes: 1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: nSV02WskkZhNM3F2CSfR9/ADgxSWnqxyts1EbIq6eO0=) 2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: OT+54b9b887njSEqmuExUbEj0TJJUhjKtfKkhce9QUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2546 (0x9f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Validity Not Before: Aug 20 19:59:15 2025 GMT Not After : Aug 27 19:59:15 2025 GMT Subject: CN=68a62913-1fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:26:1f:7b:de:38:c3:e1:ce:f7:1e:06:23:66: c0:b4:59:15:4b:de:5c:34:35:10:73:d6:f0:8f:79: c3:bb:02:b4:f9:ac:e4:97:be:4a:28:62:a9:b0:d7: 9e:c4:16:e6:ee:80:4a:5e:58:33:fa:f6:fa:87:c3: c5:9a:e6:e2:f2:b4:80:91:39:72:39:42:c9:d4:54: 69:6a:87:bb:b3:89:36:61:d8:6d:ae:7f:f8:bd:0a: 34:b2:88:5c:e0:a3:39:e1:2b:d8:16:a8:6e:0c:44: fc:d2:fb:de:a9:42:da:ba:f6:f0:88:48:38:3e:d8: a4:be:23:b1:79:15:a5:24:d3:ba:f3:6f:4b:90:37: 98:74:a2:23:a1:70:1e:36:9a:54:96:b1:fe:6b:49: cb:9c:e3:b6:10:36:ae:02:90:24:c4:33:b0:bb:98: a0:f9:c8:b7:2b:22:1e:f6:a3:81:27:0e:85:da:ff: e7:a3:8c:15:4e:dc:31:66:e9:88:b6:6c:cf:4c:83: e1:c8:ec:95:36:76:17:60:61:e5:73:64:19:29:76: bc:6a:35:e8:0e:2e:e4:79:29:db:67:86:05:c9:87: 39:55:83:c6:25:be:f9:9c:a7:30:93:b9:ef:fd:b5: a6:34:80:26:83:b6:1f:a8:be:58:e9:a8:84:4b:f3: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D4:7B:CB:7E:93:2E:07:A5:21:48:A3:12:B4:CF:09:7A:2B:CB:76 X509v3 Authority Key Identifier: keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a7:78:5e:d5:55:37:76:b1:6e:31:a4:8e:32:57:af:ec:53: 9e:49:24:f8:6b:84:0a:29:ea:d8:1f:56:d0:61:e8:87:87:7f: 37:03:ca:d5:5e:39:e0:9d:f6:18:86:ee:35:80:e3:eb:ed:74: c2:60:43:dc:14:25:2b:cf:dd:05:91:ea:ec:14:97:5b:46:a2: 6a:5b:2c:0f:3c:87:b9:95:e4:d2:50:93:dc:2e:fb:96:3e:96: c8:a5:33:41:a6:06:5d:61:41:63:8f:d0:ad:7e:11:3a:bb:a8: 04:16:67:28:1e:c3:1d:bf:a3:8d:cf:c2:00:4e:f6:5d:7c:cc: a4:4f:d7:e9:f4:37:01:e0:d0:a5:49:c7:99:d3:00:5d:43:f0: 72:a5:0a:67:00:4b:b6:d3:84:53:4f:41:b7:2e:f5:ed:d7:55: 3e:a7:f5:43:52:34:31:1f:2b:62:d9:15:fe:b8:ac:28:bc:7f: 4e:06:b0:48:ad:bb:42:0c:cb:49:a2:94:04:c3:2f:d9:13:e6: bb:c1:9f:be:b3:d3:77:6e:a2:a0:67:d6:9a:b3:66:ea:44:a1: e8:23:56:0d:48:49:a4:b1:d7:bb:b7:dc:bf:f1:97:4e:0a:5b: 74:40:55:cc:1e:d2:df:1f:76:aa:60:f4:b3:e5:33:0e:0a:16: 38:52:63:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU0MDQ3RDI3Q0VGNzM0NkY0MTc1RUZBQzczNDQ5NEFE QkIwNTdCNTUwHhcNMjUwODIwMTk1OTE1WhcNMjUwODI3MTk1OTE1WjAYMRYwFAYD VQQDEw02OGE2MjkxMy0xZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SYfe944w+HO9x4GI2bAtFkVS95cNDUQc9bwj3nDuwK0+azkl75KKGKpsNee xBbm7oBKXlgz+vb6h8PFmubi8rSAkTlyOULJ1FRpaoe7s4k2Ydhtrn/4vQo0sohc 4KM54SvYFqhuDET80vveqULauvbwiEg4PtikviOxeRWlJNO6829LkDeYdKIjoXAe NppUlrH+a0nLnOO2EDauApAkxDOwu5ig+ci3KyIe9qOBJw6F2v/no4wVTtwxZumI tmzPTIPhyOyVNnYXYGHlc2QZKXa8ajXoDi7keSnbZ4YFyYc5VYPGJb75nKcwk7nv /bWmNIAmg7YfqL5Y6aiES/MiSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnUe8t+ ky4HpSFIoxK0zwl6K8t2MB8GA1UdIwQYMBaAFFQEfSfO9zRvQXXvrHNElK27BXtV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS81MzQ0NzJDQzgz QjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05HOUJkZS1zYzBTVXJic0Zl MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBUjlKODczTkc5QmRlLXNjMFNVcmJzRmUxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS81MzQ0NzJDQzgzQjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05H OUJkZS1zYzBTVXJic0ZlMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfp3he1VU3drFuMaSOMlev7FOeSST4a4QKKerYH1bQYeiHh383A8rV XjngnfYYhu41gOPr7XTCYEPcFCUrz90FkersFJdbRqJqWywPPIe5leTSUJPcLvuW PpbIpTNBpgZdYUFjj9CtfhE6u6gEFmcoHsMdv6ONz8IATvZdfMykT9fp9DcB4NCl SceZ0wBdQ/BypQpnAEu204RTT0G3LvXt11U+p/VDUjQxHyti2RX+uKwovH9OBrBI rbtCDMtJopQEwy/ZE+a7wZ++s9N3bqKgZ9aas2bqRKHoI1YNSEmksde7t9y/8ZdO Clt0QFXMHtLfH3aqYPSz5TMOChY4UmOB -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:15 2025 by rpki-client