$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft File: 91XB4Q_ErmiS0krLh4LX5cAEGLA.mft (raw, json) Hash identifier: TD6W5RTjumTrKKyY8xSvmAQDElMeZ80TZI58GTt91jE= Subject key identifier: 2D:17:0E:C1:8F:28:C6:44:39:19:63:2E:A9:26:AC:D5:5C:29:73:4F Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 Certificate issuer: /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft Manifest number: 02DA Signing time: Sat 23 Aug 2025 01:34:58 +0000 Manifest this update: Sat 23 Aug 2025 01:34:58 +0000 Manifest next update: Sat 30 Aug 2025 01:34:58 +0000 Files and hashes: 1: 91XB4Q_ErmiS0krLh4LX5cAEGLA.crl (hash: SCO5v2rRYkbbCcrg53J1JBX1gyDawRfsChPM8EVRWDU=) 2: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (hash: 4DnB0bL3NG78Ric1Q/fKLIMkj23xQICVd02+1wJapuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136F59, serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Validity Not Before: Aug 23 01:34:58 2025 GMT Not After : Aug 30 01:34:58 2025 GMT Subject: CN=68a91ac2-5aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:30:4b:9a:be:4c:4d:d1:c3:66:59:b1:ff:78: 31:0f:04:ca:8d:f3:29:02:f6:2e:43:70:d2:2a:ba: 41:6e:fb:fd:d6:14:d5:92:d5:b3:04:a5:82:1d:00: a0:1a:0a:a2:cc:dd:2d:52:38:1b:68:e2:9b:b4:57: 88:60:f5:b7:39:fd:89:e6:e2:fb:5c:64:e4:11:c2: 22:96:8f:94:d9:9b:c9:7e:2f:9e:5a:ec:ef:89:8c: 10:8d:66:77:8e:d5:52:40:81:1a:e3:30:d4:28:29: 38:77:61:15:ff:08:88:0d:24:f3:d2:31:7e:11:db: b2:c0:cb:82:fc:3f:9e:8e:23:e5:61:7b:5b:c4:52: 01:58:83:36:11:dc:8e:29:79:a4:b3:0d:8c:6d:14: 69:8f:e7:12:8c:38:68:0a:31:44:1c:cb:03:7d:f3: 04:58:93:f0:96:6a:57:18:54:08:a3:b4:00:06:c4: 19:51:14:75:12:bf:da:80:af:41:59:0b:1c:e0:70: 13:ef:60:93:95:d0:8a:c8:d5:f9:9c:ff:71:5a:34: 1e:55:34:52:54:56:03:7e:2e:c7:db:da:86:30:cb: 2a:93:41:cf:96:cc:cf:be:24:f8:a2:1b:34:a2:30: a5:f9:e3:20:0a:26:6d:43:af:e6:91:25:5a:91:52: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:17:0E:C1:8F:28:C6:44:39:19:63:2E:A9:26:AC:D5:5C:29:73:4F X509v3 Authority Key Identifier: keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:b8:4a:51:33:fe:da:50:e0:2e:c2:ed:a3:86:a6:d5:30:c0: 27:f0:f4:a4:16:6d:09:04:32:34:20:66:60:c8:27:54:1e:dd: 2d:b5:33:f4:57:5c:6b:4f:5f:00:51:b3:05:84:cc:b8:e5:a8: 86:2f:75:5f:b9:cc:7c:4a:09:80:f0:f4:1c:73:c6:05:8b:ab: 1f:ea:f9:3f:b4:fa:f3:64:c8:3c:27:1a:33:1c:dc:4c:8a:ce: 08:11:88:21:39:b9:3c:2b:80:2f:6c:35:5c:41:3f:c7:7e:f4: 38:d9:50:67:9b:8d:3f:8d:fc:c6:b5:82:09:a4:5e:23:20:36: 35:af:61:3c:f3:eb:40:34:cf:d7:04:36:a7:72:26:ae:dc:f4: d9:33:53:2d:a2:68:aa:f0:b4:32:43:d7:9e:e8:c5:64:18:e0: 8b:30:45:37:40:a3:4c:87:26:68:55:5a:7a:b0:a0:19:4c:73: d2:db:0c:b3:9a:2b:45:8d:13:24:90:10:1e:1c:11:af:c3:63: 08:f0:0d:d1:8f:83:89:a4:f9:d3:36:8a:ed:2e:c4:0b:cc:59: 5f:be:1e:7d:a2:6c:35:fd:08:de:5f:29:45:0c:b9:17:2b:fb: 8d:02:59:d2:98:99:76:f5:22:66:17:3a:ce:e1:cb:4d:d9:44: 0a:13:ff:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZGNTkxMTAvBgNVBAUTKEY3NTVDMUUxMEZDNEFFNjg5MkQyNEFDQjg3ODJEN0U1 QzAwNDE4QjAwHhcNMjUwODIzMDEzNDU4WhcNMjUwODMwMDEzNDU4WjAYMRYwFAYD VQQDEw02OGE5MWFjMi01YWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jBLmr5MTdHDZlmx/3gxDwTKjfMpAvYuQ3DSKrpBbvv91hTVktWzBKWCHQCg GgqizN0tUjgbaOKbtFeIYPW3Of2J5uL7XGTkEcIilo+U2ZvJfi+eWuzviYwQjWZ3 jtVSQIEa4zDUKCk4d2EV/wiIDSTz0jF+EduywMuC/D+ejiPlYXtbxFIBWIM2EdyO KXmksw2MbRRpj+cSjDhoCjFEHMsDffMEWJPwlmpXGFQIo7QABsQZURR1Er/agK9B WQsc4HAT72CTldCKyNX5nP9xWjQeVTRSVFYDfi7H29qGMMsqk0HPlszPviT4ohs0 ojCl+eMgCiZtQ6/mkSVakVKz4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0XDsGP KMZEORljLqkmrNVcKXNPMB8GA1UdIwQYMBaAFPdVweEPxK5oktJKy4eC1+XABBiw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkY1OS81NzcyQUZCRUY4 NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJtaVMwa3JMaDRMWDVjQUVH TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxWEI0UV9Fcm1pUzBrckxoNExYNWNBRUdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkY1OS81NzcyQUZCRUY4NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJt aVMwa3JMaDRMWDVjQUVHTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3uEpRM/7aUOAuwu2jhqbVMMAn8PSkFm0JBDI0IGZgyCdUHt0ttTP0 V1xrT18AUbMFhMy45aiGL3Vfucx8SgmA8PQcc8YFi6sf6vk/tPrzZMg8JxozHNxM is4IEYghObk8K4AvbDVcQT/HfvQ42VBnm40/jfzGtYIJpF4jIDY1r2E88+tANM/X BDanciau3PTZM1Mtomiq8LQyQ9ee6MVkGOCLMEU3QKNMhyZoVVp6sKAZTHPS2wyz mitFjRMkkBAeHBGvw2MI8A3Rj4OJpPnTNortLsQLzFlfvh59omw1/QjeXylFDLkX K/uNAlnSmJl29SJmFzrO4ctN2UQKE//D -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:13 2025 by rpki-client